$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: dIj5nRDZ/HsYsPLuLRTeylW7OL5o+r3wRrVJnuELVM4= Subject key identifier: A0:CE:A9:44:DB:57:28:8D:38:4E:12:02:36:1B:50:EF:AF:A3:97:A5 Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 02AE Signing time: Wed 17 Sep 2025 02:01:37 +0000 Manifest this update: Wed 17 Sep 2025 02:01:37 +0000 Manifest next update: Wed 24 Sep 2025 02:01:37 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: XxwwVkCRNvMzWubwo1Piqm5HQXmbXwBYd5Vl7IjGGEE=) 2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: ev+YjLUEFuV9synNnilJkgFER39S40N1zyX1CzULmag=) 3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: Ia6tlVbLIeqz/TCnxF60wA233bLpbVn+2ya+t4NGuKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: Sep 17 02:01:37 2025 GMT Not After : Sep 24 02:01:37 2025 GMT Subject: CN=68ca1681-edbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:ce:27:ea:b8:ff:35:3e:b9:01:96:76:cc: 41:2a:40:4a:8a:74:2d:5b:f6:c2:07:00:e8:21:e8: c5:55:9c:91:cf:3a:e7:c6:16:5e:b6:ea:93:b1:01: 9f:ff:e7:7c:91:47:bd:3b:91:9e:be:b4:78:09:d9: 0e:97:14:55:a5:f8:de:ac:1b:99:cc:72:86:95:91: fb:33:e2:09:9e:7d:17:f1:e5:8f:61:11:6d:74:8a: d1:42:ee:46:e4:31:74:66:e5:0d:43:d0:93:08:09: c0:32:b8:7f:14:26:8b:06:05:04:91:aa:e0:71:e8: 5e:1f:93:dd:4e:48:c2:a7:83:66:ee:de:17:a1:14: 5b:77:eb:d9:f2:4b:f2:51:bf:c5:4f:6e:a7:02:30: 3c:49:56:3e:ca:40:56:c4:16:b2:ff:9d:fa:d0:01: 8f:4d:a6:58:cf:da:42:e2:a6:e2:22:db:57:13:2e: 1f:b9:9e:78:20:97:80:8e:30:68:b9:2a:f8:97:cd: 7c:53:bc:2a:6a:23:b7:a5:ca:0a:94:4d:0c:aa:04: 64:ad:12:82:35:81:b5:63:47:43:61:dc:ea:b8:56: 5d:b9:e8:a2:e8:4e:11:07:71:6b:27:45:f5:92:8c: 4b:0c:f2:a9:3c:cc:81:a9:ec:48:85:38:f3:31:19: 8f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CE:A9:44:DB:57:28:8D:38:4E:12:02:36:1B:50:EF:AF:A3:97:A5 X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c3:02:fb:d1:73:bc:e3:01:d8:1d:67:15:83:9c:df:3a:f8: 47:ca:ad:25:66:9d:7e:b1:61:90:3f:40:fe:df:24:3f:3f:0b: 9a:a7:f1:f6:fc:e4:d7:20:54:d4:96:5c:70:fb:84:70:a3:21: e3:8f:d1:26:d6:d8:ac:ea:c3:49:1f:7e:69:1d:87:26:ff:cb: 31:bc:49:96:7d:88:27:b7:fb:33:50:d2:f8:98:1f:e8:5d:e6: 58:d3:0e:68:e1:81:83:5b:63:be:ad:cb:ff:20:ee:bd:ee:88: 30:59:f2:20:68:7d:c0:ee:8c:ad:40:4b:10:81:25:60:d9:ac: ce:1e:7f:a4:48:b8:85:4e:4d:f1:ce:94:07:40:c3:03:0a:0a: fd:93:5d:cf:47:e8:a2:10:ce:d9:64:37:6e:67:b6:22:66:cd: f1:ca:cb:a2:7a:59:52:bd:1d:71:1f:49:7c:d6:08:4f:71:28: 7c:a3:dd:6c:76:8d:73:60:73:8c:d7:25:3c:30:46:2b:2b:5d: 16:6d:00:da:e0:ae:f9:37:98:0a:1e:a7:c0:90:71:af:27:b9: de:ce:03:0b:6a:77:a2:17:d6:77:0a:51:ef:ec:67:e0:73:e9: 56:9a:5a:c7:d1:bb:61:0a:a6:24:68:8c:bc:e3:a3:7f:04:d2: c7:b6:76:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjUwOTE3MDIwMTM3WhcNMjUwOTI0MDIwMTM3WjAYMRYwFAYD VQQDEw02OGNhMTY4MS1lZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvLOJ+q4/zU+uQGWdsxBKkBKinQtW/bCBwDoIejFVZyRzzrnxhZetuqTsQGf /+d8kUe9O5GevrR4CdkOlxRVpfjerBuZzHKGlZH7M+IJnn0X8eWPYRFtdIrRQu5G 5DF0ZuUNQ9CTCAnAMrh/FCaLBgUEkargceheH5PdTkjCp4Nm7t4XoRRbd+vZ8kvy Ub/FT26nAjA8SVY+ykBWxBay/5360AGPTaZYz9pC4qbiIttXEy4fuZ54IJeAjjBo uSr4l818U7wqaiO3pcoKlE0MqgRkrRKCNYG1Y0dDYdzquFZdueii6E4RB3FrJ0X1 koxLDPKpPMyBqexIhTjzMRmPGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDOqUTb VyiNOE4SAjYbUO+vo5elMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzwwL70XO84wHYHWcVg5zfOvhHyq0lZp1+sWGQP0D+3yQ/Pwuap/H2 /OTXIFTUllxw+4RwoyHjj9Em1tis6sNJH35pHYcm/8sxvEmWfYgnt/szUNL4mB/o XeZY0w5o4YGDW2O+rcv/IO697ogwWfIgaH3A7oytQEsQgSVg2azOHn+kSLiFTk3x zpQHQMMDCgr9k13PR+iiEM7ZZDduZ7YiZs3xysuiellSvR1xH0l81ghPcSh8o91s do1zYHOM1yU8MEYrK10WbQDa4K75N5gKHqfAkHGvJ7nezgMLaneiF9Z3ClHv7Gfg c+lWmlrH0bthCqYkaIy846N/BNLHtnb2 -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:06 2025 by rpki-client