$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: JOaIXz0Fxpfn6qnfYiG/Xh7quDXfigkxsc6+hNbmUAA= Subject key identifier: 8C:E3:46:8F:12:32:BD:53:15:C6:76:35:AD:C9:93:75:02:26:2A:51 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 176B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1564 Signing time: Sun 20 Jul 2025 17:12:08 +0000 Manifest this update: Sun 20 Jul 2025 17:12:08 +0000 Manifest next update: Sun 27 Jul 2025 17:12:08 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: vRmzWoNrT3KCKi6OsWiZjTzqhG1vHI2R6AM6Frvhf9s=) 2: 8D19F1388B3511EF99F24263C4F9AE02.roa (hash: 1u+9UnDaFFlAcnogy1pAheynyyDzOeqVjx4nF4GMPVY=) 3: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: XdNJgDmkOAWh0JRm8SzUVD6J0pIjuQDztKGWx3vGffA=) 4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=) 5: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=) 6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: 01GRE88klqRtpUQjt3HlR4NOfDaQxEKnYlzo//41TJA=) 7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: +tASM1DYkwX/+xUea6kyerySpW2PmjdXvmrb5qzV+gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5995 (0x176b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Jul 20 17:12:08 2025 GMT Not After : Jul 27 17:12:08 2025 GMT Subject: CN=687d2368-e3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:3c:86:27:0a:30:2a:67:df:c6:de:7d:10: 9a:fb:d6:17:64:5f:90:41:1c:6e:09:4c:62:16:b0: 0f:77:52:29:25:f8:7d:bd:45:67:fd:21:ea:e8:85: f6:aa:f4:c6:a1:e9:97:55:67:09:c0:b4:ed:ff:58: a0:a0:c4:f6:68:d4:d4:5f:3a:9b:7b:fe:5e:53:25: 2b:49:54:1d:ec:46:39:a4:55:10:24:56:ef:88:c9: 4e:bd:7e:37:0e:f1:5a:d1:0f:cf:d9:df:95:05:31: 22:88:f0:89:14:53:4a:d2:72:67:d0:af:68:93:d3: e7:60:f3:2f:9f:63:a9:ab:f7:24:68:c1:6c:62:ae: 77:d0:2d:a2:f9:f0:4a:2b:38:9f:cd:ed:89:57:e4: 93:ab:4f:74:9c:75:45:b9:55:48:c1:88:53:f1:cd: 7e:ae:94:de:60:e5:1f:05:a3:2a:1a:41:2a:b6:95: 80:c9:ea:f0:57:ce:f0:4f:62:bc:ed:a2:55:92:e3: f0:40:67:7a:79:b4:2c:c5:e6:1b:2e:20:8d:1a:e4: 97:29:4c:a6:69:fb:a2:e5:50:65:71:fa:5d:f8:d1: 5c:06:77:7e:17:fd:c5:79:77:5a:57:71:1b:de:33: c4:c6:79:a2:a7:c2:c4:50:f5:63:05:55:46:6d:80: 2b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E3:46:8F:12:32:BD:53:15:C6:76:35:AD:C9:93:75:02:26:2A:51 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:7b:a8:31:5c:16:14:48:72:75:23:1b:50:0f:15:d1:9b:0c: 68:51:85:78:2f:83:ed:8e:d7:82:08:50:14:30:82:37:c1:54: 96:3b:38:0a:b0:2e:0d:13:20:f1:b5:c4:61:9d:f3:6a:34:ef: ae:21:fd:de:a8:7e:70:dd:94:65:f4:fb:8d:0f:24:6b:9a:0a: 1f:44:83:3d:00:ff:57:3b:d8:4f:1f:1c:ef:9d:8c:e5:cf:e7: 8c:fd:71:e3:44:cf:c1:bc:83:7e:6b:c2:94:ed:1f:5f:de:24: 45:fd:77:50:c2:7a:cb:46:f6:b7:03:63:55:92:d1:eb:35:23: 9f:26:bd:c9:20:de:3b:76:96:a2:e8:15:c0:d0:13:6f:c5:99: 0b:7b:2e:79:b9:cf:31:39:23:0f:6f:23:63:5b:7e:00:0a:18: f0:e6:2d:09:77:4f:7e:02:80:2d:47:f4:cd:e1:ef:b6:11:10: 5e:63:3f:93:e4:cb:4f:0a:fa:f8:8b:3a:da:57:29:66:82:eb: 63:18:2d:3c:27:cc:28:18:3a:0c:5b:e8:16:6e:f3:b1:be:da: a0:3f:11:cc:b2:91:8c:b1:87:df:b0:e1:5d:be:50:c5:a0:a2: a5:dc:ba:f9:fa:09:43:cf:2f:93:95:42:ec:da:8d:cb:5e:11: 55:a3:14:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwNzIwMTcxMjA4WhcNMjUwNzI3MTcxMjA4WjAYMRYwFAYD VQQDEw02ODdkMjM2OC1lM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuow8hicKMCpn38befRCa+9YXZF+QQRxuCUxiFrAPd1IpJfh9vUVn/SHq6IX2 qvTGoemXVWcJwLTt/1igoMT2aNTUXzqbe/5eUyUrSVQd7EY5pFUQJFbviMlOvX43 DvFa0Q/P2d+VBTEiiPCJFFNK0nJn0K9ok9PnYPMvn2Opq/ckaMFsYq530C2i+fBK Kzifze2JV+STq090nHVFuVVIwYhT8c1+rpTeYOUfBaMqGkEqtpWAyerwV87wT2K8 7aJVkuPwQGd6ebQsxeYbLiCNGuSXKUymafui5VBlcfpd+NFcBnd+F/3FeXdaV3Eb 3jPExnmip8LEUPVjBVVGbYArLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzjRo8S Mr1TFcZ2Na3Jk3UCJipRMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAye6gxXBYUSHJ1IxtQDxXRmwxoUYV4L4PtjteCCFAUMII3wVSWOzgK sC4NEyDxtcRhnfNqNO+uIf3eqH5w3ZRl9PuNDyRrmgofRIM9AP9XO9hPHxzvnYzl z+eM/XHjRM/BvIN+a8KU7R9f3iRF/XdQwnrLRva3A2NVktHrNSOfJr3JIN47dpai 6BXA0BNvxZkLey55uc8xOSMPbyNjW34AChjw5i0Jd09+AoAtR/TN4e+2ERBeYz+T 5MtPCvr4izraVylmgutjGC08J8woGDoMW+gWbvOxvtqgPxHMspGMsYffsOFdvlDF oKKl3Lr5+glDzy+TlULs2o3LXhFVoxQk -----END CERTIFICATE-----Generated at Mon Jul 21 00:28:24 2025 by rpki-client