$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: OmSqTp4V+WeA6NNEY+8WIu2uxD2mlgfCJ1I6XJ0f4dg= Subject key identifier: FD:6E:81:6C:C1:37:F3:7B:2C:8B:80:D2:9F:45:59:94:33:59:B3:23 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 9B Signing time: Mon 21 Jul 2025 06:29:08 +0000 Manifest this update: Mon 21 Jul 2025 06:29:07 +0000 Manifest next update: Mon 28 Jul 2025 06:29:07 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: 5qbIE9rVHV3z72Y6S2tL/HNpFMfJbMP3dKs5NnsjiNw=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Jul 21 06:29:07 2025 GMT Not After : Jul 28 06:29:07 2025 GMT Subject: CN=687dde33-5f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8f:66:9e:ba:ac:49:c6:b5:e5:a8:08:41:34: eb:69:92:68:29:98:a2:aa:0b:8e:9f:ae:93:a1:48: 0f:d8:f5:c1:e3:61:78:73:1a:62:90:48:44:25:ee: d8:c4:30:38:c1:e8:85:96:2b:e0:4b:93:78:54:3f: 20:e8:69:23:29:02:4a:56:89:9d:e7:20:bb:b5:e8: 8d:18:51:76:0d:a1:e2:91:2f:f7:48:09:62:16:b9: b5:f9:5a:f0:ee:b4:81:11:57:79:61:5b:66:48:d8: 3d:b2:f1:cc:5e:e1:04:be:41:c7:0e:45:03:16:9c: 3b:2f:8c:32:2f:6e:e6:99:d5:0f:fd:63:c3:9a:07: 64:85:21:6e:96:63:ba:0f:1a:71:48:12:01:db:52: fc:a1:23:6b:2d:b2:26:02:a0:05:8e:cb:b2:a9:5f: 7b:9e:a6:ad:2d:70:14:94:49:1d:c5:af:33:9e:a2: c0:55:a3:ea:11:0e:b7:c0:28:41:39:09:bf:08:e3: 73:52:32:bb:ff:c6:2d:5e:5e:be:b1:d8:e7:37:01: 39:18:cb:4e:d8:54:75:09:95:ab:9d:f6:55:a3:82: fa:95:36:59:dd:95:80:eb:07:94:4b:6a:42:6e:03: c0:cd:48:34:57:8e:83:d7:57:bf:b7:76:8d:92:79: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6E:81:6C:C1:37:F3:7B:2C:8B:80:D2:9F:45:59:94:33:59:B3:23 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d1:53:88:8c:f9:64:8e:75:08:b8:fe:b3:27:01:88:64:59: 6c:30:a9:fb:51:db:4a:3f:67:f0:37:75:10:12:52:be:e7:81: 1c:18:0a:b6:a6:4f:40:32:55:95:ea:16:87:42:a1:89:ba:a7: 57:6f:6e:73:56:6f:e1:e4:c8:69:0e:75:0f:e8:08:02:2f:dc: f5:db:75:89:e9:75:c9:81:a8:1c:1c:39:00:ff:1a:16:bc:9a: ad:d3:75:28:5b:98:2d:5b:62:df:56:22:69:4e:d4:7a:ca:92: 65:da:b7:85:ab:d0:98:f2:4c:fb:af:65:5a:15:8a:54:32:68: a9:63:a1:d9:40:9f:9c:6e:61:63:20:a6:28:c5:ca:05:b9:fd: fc:41:a3:b6:6e:a0:26:56:3f:37:22:7a:dd:37:c4:f2:d7:62: 93:db:0b:1b:b7:61:e8:56:eb:92:36:f3:c0:b6:6c:7d:fc:3a: 43:50:8d:96:17:26:cc:c9:ec:15:fe:10:87:76:a0:a8:94:96: bd:5c:6e:3d:8d:21:34:9f:8d:72:93:a0:e0:51:74:b6:42:f4: d5:53:e1:25:32:02:c9:fe:29:65:0d:d2:f0:9f:a6:e9:2e:65: cd:ad:1e:a0:ec:19:5c:c7:91:5f:66:cc:01:c6:e0:76:38:b5: f5:90:55:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjUwNzIxMDYyOTA3WhcNMjUwNzI4MDYyOTA3WjAYMRYwFAYD VQQDEw02ODdkZGUzMy01Zjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Y9mnrqsSca15agIQTTraZJoKZiiqguOn66ToUgP2PXB42F4cxpikEhEJe7Y xDA4weiFlivgS5N4VD8g6GkjKQJKVomd5yC7teiNGFF2DaHikS/3SAliFrm1+Vrw 7rSBEVd5YVtmSNg9svHMXuEEvkHHDkUDFpw7L4wyL27mmdUP/WPDmgdkhSFulmO6 DxpxSBIB21L8oSNrLbImAqAFjsuyqV97nqatLXAUlEkdxa8znqLAVaPqEQ63wChB OQm/CONzUjK7/8YtXl6+sdjnNwE5GMtO2FR1CZWrnfZVo4L6lTZZ3ZWA6weUS2pC bgPAzUg0V46D11e/t3aNknljrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1ugWzB N/N7LIuA0p9FWZQzWbMjMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX0VOIjPlkjnUIuP6zJwGIZFlsMKn7UdtKP2fwN3UQElK+54EcGAq2 pk9AMlWV6haHQqGJuqdXb25zVm/h5MhpDnUP6AgCL9z123WJ6XXJgagcHDkA/xoW vJqt03UoW5gtW2LfViJpTtR6ypJl2reFq9CY8kz7r2VaFYpUMmipY6HZQJ+cbmFj IKYoxcoFuf38QaO2bqAmVj83InrdN8Ty12KT2wsbt2HoVuuSNvPAtmx9/DpDUI2W FybMyewV/hCHdqColJa9XG49jSE0n41yk6DgUXS2QvTVU+ElMgLJ/illDdLwn6bp LmXNrR6g7Blcx5FfZswBxuB2OLX1kFWd -----END CERTIFICATE-----Generated at Mon Jul 21 12:23:28 2025 by rpki-client