$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json) Hash identifier: erT92ckO8VCOn4nG/IKs3CXOvesFbazpPbQBA+B84Vg= Subject key identifier: FE:71:96:E6:C3:C0:26:DE:16:32:35:41:41:63:8B:AC:08:BC:F3:D1 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0EC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft Manifest number: 0C8A Signing time: Wed 22 Oct 2025 20:35:52 +0000 Manifest this update: Wed 22 Oct 2025 20:35:51 +0000 Manifest next update: Wed 29 Oct 2025 20:35:51 +0000 Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: Op7j82jLO9foPVfJ9jr30iIJf5m4Si29DRDyhfatZZ4=) 2: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: s5N2TyQ76d6xMdXE61yLpof0IVsz9xlEvKQDUIYT3lc=) 3: 0BF08A149F8311F0A408C363C4F9AE02.roa (hash: RUhEIgZP33Il919uCgBWXbTJ8ssUQgqlgvLzN3g9JA4=) 4: 7316D720AB4011F088F0CE30C4F9AE02.roa (hash: j1D2LXrywK4KBLgXfVHzrKrqz//GdKARR+TTpuFTLmk=) 5: 20C856389F8311F089B0D463C4F9AE02.roa (hash: b3tA2TdLP1BkSFeIpGGEVgtBYC21TwBxlah/IIc3Izc=) 6: 2713F43471F211F0B2381940C4F9AE02.roa (hash: vNtqGcSLIxhNnMlqrjf+EIrzDbZQ7mAzqWSJQjKC/IU=) 7: DD7284DE9C6811F09C300140C4F9AE02.roa (hash: 5oUICFfPnTHSTwHUjjxj5Beaj/vKF9/PqerMw1qf/ls=) 8: 1D5C6E6CA0FA11F0B026D133C4F9AE02.roa (hash: C2XpgyfnYYZHApkuumNQPttPRBeBZUCBK2LL1AJJb7g=) 9: 4E2D252A699811F0B3E6984EC4F9AE02.roa (hash: 3gRwjLg8N4vvmv5NGiJ46Vac0E5K7yqz3DuORE8Lbh4=) 10: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: IULXHhlu5uT6Tg9jL/yk50UFaDGDqG8EJ1WnwAnbvbg=) 11: DDDB0ED29C6811F09C300140C4F9AE02.roa (hash: hMG8BeWAlOq8F9AY3K1GWzCocfxcFLG69eCgS4VLkeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3782 (0xec6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Oct 22 20:35:51 2025 GMT Not After : Oct 29 20:35:51 2025 GMT Subject: CN=68f94027-241a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:02:61:a2:10:d4:eb:c0:f3:1d:1c:44:8a: ff:94:a2:c6:b6:05:11:e3:94:61:41:fc:bc:eb:22: 49:c9:03:aa:26:11:a4:d5:f4:30:1b:6a:fa:29:13: 8e:df:ce:5b:cc:da:c6:b9:dd:bd:42:95:af:d2:d9: af:94:46:2b:7a:94:fc:c1:82:d9:7f:4a:e3:bd:57: a2:0c:f3:5a:9d:12:77:4d:5c:c1:d6:5e:99:61:76: 65:4a:17:fa:07:27:11:07:15:14:e8:a1:98:bc:45: d1:66:19:64:c6:42:83:73:86:f8:a7:1d:17:f9:06: b2:5c:e4:6e:06:64:de:10:03:a6:3e:9f:9a:64:67: 89:97:26:d6:22:c3:d2:4f:c1:a6:ad:33:6c:8a:ac: 41:b1:a9:67:02:cc:04:03:85:36:ba:29:6b:45:0b: 84:4a:fe:f2:c4:da:aa:a6:2a:1a:77:1c:5b:67:1c: 06:a3:af:c5:da:fd:a3:ba:12:f0:a1:6d:11:4d:35: d4:ed:22:1d:41:e8:f2:1e:ce:b0:4a:3d:c1:fa:22: 83:82:e0:68:71:17:5a:7e:2a:b3:0a:a5:e0:f4:09: 4a:8d:b8:83:85:aa:f9:98:75:1b:58:b4:1e:57:72: 6c:c6:9b:53:f6:99:ae:38:c1:99:1d:c4:e6:c2:4d: e0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:71:96:E6:C3:C0:26:DE:16:32:35:41:41:63:8B:AC:08:BC:F3:D1 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:3a:e2:4f:e5:86:ef:0b:1d:14:1d:68:cd:30:57:8e:41:29: ce:d4:d8:9b:20:04:bf:41:40:15:f7:ab:9e:41:94:b3:9b:d6: 80:49:5a:34:e5:32:93:bb:33:d9:08:85:0d:74:f7:2a:b3:fa: 9d:f8:a0:f7:2d:e3:2b:52:b2:bb:10:b1:21:4d:49:3e:d5:7b: e5:69:53:4d:a0:71:90:f3:cf:f1:99:fd:7b:5c:50:20:98:b6: 50:e4:6a:c3:61:54:2f:f5:bb:7b:72:ae:6f:4a:d9:1e:5b:8c: 21:a9:6c:29:55:b2:cd:c4:48:a0:8c:1c:17:9f:5c:3b:0b:f8: 0a:50:b8:77:de:f1:e0:c1:7e:9a:78:a3:6d:59:fd:3d:d4:4a: e4:b0:0d:71:59:87:ad:c9:c5:28:25:61:ee:42:59:75:51:1f: 90:12:23:49:46:61:b6:a1:df:47:52:6d:e7:d0:81:8e:3a:b8: db:15:d2:fe:35:b9:34:b3:08:51:3c:0a:dc:d9:d6:16:c0:92: b7:16:40:3d:77:f8:8f:0a:aa:62:77:4c:5e:6a:f1:8b:ed:8f: a6:90:2e:09:47:7c:85:76:c4:1d:2b:a8:ee:9c:0e:fb:83:83: a0:e6:5b:6f:31:bf:eb:72:27:cc:e6:c0:0a:2a:87:06:bf:a5: c4:c5:0f:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUxMDIyMjAzNTUxWhcNMjUxMDI5MjAzNTUxWjAYMRYwFAYD VQQDEw02OGY5NDAyNy0yNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2cCYaIQ1OvA8x0cRIr/lKLGtgUR45RhQfy86yJJyQOqJhGk1fQwG2r6KROO 385bzNrGud29QpWv0tmvlEYrepT8wYLZf0rjvVeiDPNanRJ3TVzB1l6ZYXZlShf6 BycRBxUU6KGYvEXRZhlkxkKDc4b4px0X+QayXORuBmTeEAOmPp+aZGeJlybWIsPS T8GmrTNsiqxBsalnAswEA4U2uilrRQuESv7yxNqqpioadxxbZxwGo6/F2v2juhLw oW0RTTXU7SIdQejyHs6wSj3B+iKDguBocRdafiqzCqXg9AlKjbiDhar5mHUbWLQe V3JsxptT9pmuOMGZHcTmwk3gMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5xlubD wCbeFjI1QUFji6wIvPPRMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5 YVJqanA1LS1DQ1BHY3k0bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmOuJP5YbvCx0UHWjNMFeOQSnO1NibIAS/QUAV96ueQZSzm9aASVo0 5TKTuzPZCIUNdPcqs/qd+KD3LeMrUrK7ELEhTUk+1XvlaVNNoHGQ88/xmf17XFAg mLZQ5GrDYVQv9bt7cq5vStkeW4whqWwpVbLNxEigjBwXn1w7C/gKULh33vHgwX6a eKNtWf091ErksA1xWYetycUoJWHuQll1UR+QEiNJRmG2od9HUm3n0IGOOrjbFdL+ Nbk0swhRPArc2dYWwJK3FkA9d/iPCqpid0xeavGL7Y+mkC4JR3yFdsQdK6junA77 g4Og5ltvMb/rcifM5sAKKocGv6XExQ9a -----END CERTIFICATE-----Generated at Thu Oct 23 11:00:05 2025 by rpki-client