$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json) Hash identifier: pu/rDJ9pIwULMqJj+3C6PpmPb+ztgzg7Tx/oA8YJjm0= Subject key identifier: AF:BD:6C:3B:22:08:C6:50:D0:13:D6:01:9D:E7:B2:0F:86:3F:11:08 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0D9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft Manifest number: 0BCF Signing time: Fri 18 Jul 2025 20:15:21 +0000 Manifest this update: Fri 18 Jul 2025 20:15:21 +0000 Manifest next update: Fri 25 Jul 2025 20:15:21 +0000 Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: jvnlGVT/XSg3hS0CRnN9RmJwclZr9eQ6gLnb+c+2EI0=) 2: F24431E6240411F0AE5EFB74C4F9AE02.roa (hash: MclepbIdsggLN8G2fPWVi4DUMCl7aEhSI7CqYD2fOt4=) 3: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: s5N2TyQ76d6xMdXE61yLpof0IVsz9xlEvKQDUIYT3lc=) 4: F0D4053EEDCC11EF8C545F54C4F9AE02.roa (hash: suzv4bR3Lim2RuNL9FDgV8qqWJGiJu2491cktYmaiSE=) 5: BC7FD008F9A511EF885CA76EC4F9AE02.roa (hash: lPVpkNcqA1Zp3+y3esHg1nxvS0NLk1wnjSpDKxnMq70=) 6: 96D29A2220E011F086D75E5CC4F9AE02.roa (hash: /26OTcYfxq7DOenn+q4eJrqzCpC7FcKEvdVGNMnS7bM=) 7: DF49649E502311F0B0E2C112C4F9AE02.roa (hash: 2nDf4kl+QCjYlm/6djp5GbC+THtT/PvBjM4VYtdyrHY=) 8: 95F1EC2A20E011F086D75E5CC4F9AE02.roa (hash: zZ01aBMJhxPRWYcBOSC9TVmwbp4jLZvzYb+hZ09VOg0=) 9: 0364F32650C311F0AD69A674C4F9AE02.roa (hash: ZjBcFYJsm9NqIE6kGl4wH5YAqgKmW/g41+UYExwZhmA=) 10: 7335D310574D11F0AAD7F54FC4F9AE02.roa (hash: xURVh+ChbrSR0lpzPQkCTnrBUDPfvUF8oOayADi2CXQ=) 11: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: IULXHhlu5uT6Tg9jL/yk50UFaDGDqG8EJ1WnwAnbvbg=) 12: F16CF7BC240411F0AE5EFB74C4F9AE02.roa (hash: dQ2dTj9Jkvl7Sy3fDkaXgviZuligzYFrRJ93k1VPhxM=) 13: 7D0D2FCA28CF11F0B4341346C4F9AE02.roa (hash: J6+YZVIdxcdeXA516YhulVP4h8ve3TIudqt5YSoDYSw=) 14: 712D274624BF11F0ADDD3D44C4F9AE02.roa (hash: 8IDSRMNBvXeXw2mu7llXxPcH6JNNmuLcKMRlH4jMi/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3482 (0xd9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Jul 18 20:15:21 2025 GMT Not After : Jul 25 20:15:21 2025 GMT Subject: CN=687aab59-16cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:36:d8:ff:2f:77:d9:82:7d:2d:5c:8c:d3: 85:af:c7:15:5f:74:40:4c:b9:42:97:23:56:bf:b5: 67:c1:6a:87:81:8b:d5:92:c2:4a:65:11:62:a8:1e: 3c:3e:a8:bd:9f:3a:8c:22:1d:a2:3d:4a:fe:d7:84: 8a:a4:0c:86:68:c9:f6:ae:17:c2:bd:b1:cf:f9:8b: a5:b4:a1:2a:c0:20:21:c4:83:eb:35:b4:b4:f1:5e: 51:93:49:4b:f5:94:a2:d8:10:3f:bb:58:d6:a1:0e: 71:62:d2:47:43:4e:9f:d3:44:51:d6:63:bb:d0:80: b8:3c:d7:c3:72:f9:8c:dd:c9:6a:cd:ea:03:d9:60: 3f:08:03:4a:d0:e3:b3:3e:4c:66:de:29:82:2c:c6: 34:32:8d:08:96:02:35:be:02:11:ad:72:fc:b7:0f: 5a:1a:90:ab:97:56:96:53:3a:0a:bb:66:78:6e:fd: 6b:1e:75:4c:8d:b9:e0:aa:6a:0f:f0:39:cc:92:c0: e5:cc:3e:78:ce:ad:3b:7b:09:14:cd:52:32:6e:8b: ea:15:5a:b4:aa:3d:7c:04:c2:e0:5c:d2:6a:a1:24: be:c2:60:7a:78:7e:cf:63:1a:f4:27:cc:bf:2e:c7: 15:ac:1e:fb:c6:ca:e1:21:a4:39:89:39:5b:b7:86: 38:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BD:6C:3B:22:08:C6:50:D0:13:D6:01:9D:E7:B2:0F:86:3F:11:08 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:4b:57:16:18:51:21:36:4a:2c:5e:f0:cd:c7:0f:5b:af:6e: 7a:a1:10:ab:22:48:bc:06:d7:69:ef:08:bd:7f:2e:35:51:93: 11:ef:ca:37:27:54:81:65:bc:43:6a:4c:aa:10:ad:55:7d:0d: 2f:e2:16:45:3e:f5:fd:40:b3:03:88:e4:a9:56:7d:a1:5f:03: 36:59:bb:b3:09:ac:1f:fc:2c:f1:66:8a:e5:08:82:75:cc:e6: 2a:00:a0:0b:9c:7b:3c:f1:96:95:8f:84:1c:b3:df:73:5a:63: 96:55:e0:43:3b:d3:e9:5b:e5:00:39:4a:ec:2e:98:e6:aa:9b: da:9a:05:6c:29:ff:de:b2:bc:74:fd:7b:2c:bb:2d:76:6a:21: a8:7b:e6:cc:65:16:92:36:90:34:29:f6:3c:7e:e9:a8:18:48: 6e:e9:a8:51:e2:9a:a6:95:a4:01:32:cc:40:33:76:06:27:0f: dc:56:05:5f:a3:9d:52:e2:2c:b5:41:45:cc:a9:9b:a1:3b:a3: 87:96:8d:3c:79:2c:62:f3:c8:40:31:02:53:b8:89:ef:0c:60: f8:c5:44:4c:92:9a:ba:27:b4:f0:c6:a6:ff:1c:73:46:19:dd: 71:dc:1b:ad:7c:31:54:90:ca:6f:8e:66:81:95:c6:23:07:bd: 5f:05:00:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwNzE4MjAxNTIxWhcNMjUwNzI1MjAxNTIxWjAYMRYwFAYD VQQDEw02ODdhYWI1OS0xNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3o22P8vd9mCfS1cjNOFr8cVX3RATLlClyNWv7VnwWqHgYvVksJKZRFiqB48 Pqi9nzqMIh2iPUr+14SKpAyGaMn2rhfCvbHP+YultKEqwCAhxIPrNbS08V5Rk0lL 9ZSi2BA/u1jWoQ5xYtJHQ06f00RR1mO70IC4PNfDcvmM3clqzeoD2WA/CANK0OOz Pkxm3imCLMY0Mo0IlgI1vgIRrXL8tw9aGpCrl1aWUzoKu2Z4bv1rHnVMjbngqmoP 8DnMksDlzD54zq07ewkUzVIybovqFVq0qj18BMLgXNJqoSS+wmB6eH7PYxr0J8y/ LscVrB77xsrhIaQ5iTlbt4Y4xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+9bDsi CMZQ0BPWAZ3nsg+GPxEIMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5 YVJqanA1LS1DQ1BHY3k0bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXS1cWGFEhNkosXvDNxw9br256oRCrIki8Btdp7wi9fy41UZMR78o3 J1SBZbxDakyqEK1VfQ0v4hZFPvX9QLMDiOSpVn2hXwM2WbuzCawf/CzxZorlCIJ1 zOYqAKALnHs88ZaVj4Qcs99zWmOWVeBDO9PpW+UAOUrsLpjmqpvamgVsKf/esrx0 /Xssuy12aiGoe+bMZRaSNpA0KfY8fumoGEhu6ahR4pqmlaQBMsxAM3YGJw/cVgVf o51S4iy1QUXMqZuhO6OHlo08eSxi88hAMQJTuInvDGD4xURMkpq6J7Twxqb/HHNG Gd1x3ButfDFUkMpvjmaBlcYjB71fBQCq -----END CERTIFICATE-----Generated at Sat Jul 19 18:35:45 2025 by rpki-client