$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: dGhrFLEwQD6DyjebRUAsuVfjDmjUWWzqgmMZIPaDXw8= Subject key identifier: 98:1E:3F:D5:0D:91:6A:7C:84:E3:A3:05:A1:EF:21:63:5A:B7:B9:8C Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 17C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 15A7 Signing time: Mon 08 Sep 2025 20:26:26 +0000 Manifest this update: Mon 08 Sep 2025 20:26:25 +0000 Manifest next update: Mon 15 Sep 2025 20:26:25 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: TXERbt07euG6mK/RITYP41eh+wPhV/E57FdLJa9LLrc=) 2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: XdNJgDmkOAWh0JRm8SzUVD6J0pIjuQDztKGWx3vGffA=) 3: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=) 4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=) 5: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: 01GRE88klqRtpUQjt3HlR4NOfDaQxEKnYlzo//41TJA=) 6: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: WjT6gmrUAnJ46jOlZxfIXl9VLrOHrF8zjyqMql5K0gE=) 7: 1C98071A68F211F095077372C4F9AE02.roa (hash: hT8K/9tVmcg7OUT0Ys+h1M5/5ZVqDDRXa9y2azgLIB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6086 (0x17c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Sep 8 20:26:25 2025 GMT Not After : Sep 15 20:26:25 2025 GMT Subject: CN=68bf3bf2-f9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:db:56:ea:38:a4:37:d4:50:ad:fe:bd:c4: 1b:cc:6a:8d:31:b9:65:46:f7:1c:92:2b:2e:cb:cd: d7:22:5e:06:20:a2:22:a2:1a:5b:36:58:19:89:61: 46:0d:b9:e7:23:6c:22:e8:c6:de:ee:1f:85:6a:f4: 89:97:b2:a9:c3:59:5a:b5:bd:08:14:b0:3e:60:20: 95:5d:db:e8:cc:ec:af:d2:ed:11:c7:89:7b:24:7d: cd:5e:a2:8e:d6:53:44:25:fd:23:8a:ab:00:de:1e: a7:50:00:56:23:e6:e7:f8:19:17:f1:ab:f4:ed:a4: f8:9a:02:fb:9d:7c:36:f6:f6:3a:69:4e:2c:e7:0d: ec:e2:67:3e:ec:90:b2:01:53:4f:c6:d8:02:2d:28: fe:f3:0d:40:d3:68:a0:f5:04:11:d3:cb:1d:60:e5: 37:66:e9:ca:12:64:19:5b:a3:1c:44:a2:4e:c7:ba: 09:c0:a1:5f:b6:2b:b8:55:d2:78:2f:ee:2a:25:00: 8f:df:bb:17:2c:b1:5e:c5:66:67:ed:72:6b:62:91: d2:eb:7a:95:f2:dd:73:84:38:f2:90:62:9a:a6:26: 97:f0:f1:e2:cb:3e:27:c9:e6:58:18:04:b3:7a:67: e1:ed:71:00:23:74:54:32:f1:4a:67:03:29:c9:0c: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1E:3F:D5:0D:91:6A:7C:84:E3:A3:05:A1:EF:21:63:5A:B7:B9:8C X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ab:84:0b:6e:82:04:6d:50:36:33:b3:82:be:d5:d6:91:d9: 9a:59:d6:16:1d:99:0f:22:f6:04:1c:97:13:9f:ca:84:fb:bf: fc:4b:ae:04:52:50:30:df:d9:7b:6c:1f:fd:6b:f0:95:cd:11: 66:c2:2d:25:5b:7d:1e:6a:42:ca:44:df:26:9e:e6:ae:7f:c1: 45:52:f5:64:d5:e2:08:7b:73:ca:7d:9e:35:bb:83:28:ee:d3: 91:b5:7e:85:f7:82:1c:8b:ee:1a:cb:97:fc:e0:3b:97:06:94: 7b:bd:45:3d:76:09:f8:00:16:45:ff:44:ac:a9:c4:1e:fb:2e: 9f:2c:8f:95:f3:5c:ec:86:96:8d:9d:03:5a:f2:14:6f:33:d7: 7b:62:42:2b:e4:00:fb:09:51:40:61:44:a3:f4:0a:e3:3a:35: 0e:21:ef:49:46:43:41:65:c4:99:41:9d:ac:72:a3:b9:e5:d4: 31:7c:c7:ea:5f:51:f1:92:3e:55:cc:54:59:72:34:28:0b:83: e3:30:8b:e7:26:71:ca:36:0c:f8:75:9e:8e:36:b6:a6:f0:96: 33:b6:70:c0:87:e5:ad:11:0d:3f:80:ab:6a:a2:38:d7:8b:a3: c1:46:07:ab:f3:dd:75:b2:94:07:c9:48:96:09:3b:99:01:69: 5c:4a:a1:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwOTA4MjAyNjI1WhcNMjUwOTE1MjAyNjI1WjAYMRYwFAYD VQQDEw02OGJmM2JmMi1mOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDzbVuo4pDfUUK3+vcQbzGqNMbllRvcckisuy83XIl4GIKIiohpbNlgZiWFG DbnnI2wi6Mbe7h+FavSJl7Kpw1latb0IFLA+YCCVXdvozOyv0u0Rx4l7JH3NXqKO 1lNEJf0jiqsA3h6nUABWI+bn+BkX8av07aT4mgL7nXw29vY6aU4s5w3s4mc+7JCy AVNPxtgCLSj+8w1A02ig9QQR08sdYOU3ZunKEmQZW6McRKJOx7oJwKFftiu4VdJ4 L+4qJQCP37sXLLFexWZn7XJrYpHS63qV8t1zhDjykGKapiaX8PHiyz4nyeZYGASz emfh7XEAI3RUMvFKZwMpyQzZbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgeP9UN kWp8hOOjBaHvIWNat7mMMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsq4QLboIEbVA2M7OCvtXWkdmaWdYWHZkPIvYEHJcTn8qE+7/8S64E UlAw39l7bB/9a/CVzRFmwi0lW30eakLKRN8mnuauf8FFUvVk1eIIe3PKfZ41u4Mo 7tORtX6F94Ici+4ay5f84DuXBpR7vUU9dgn4ABZF/0SsqcQe+y6fLI+V81zshpaN nQNa8hRvM9d7YkIr5AD7CVFAYUSj9ArjOjUOIe9JRkNBZcSZQZ2scqO55dQxfMfq X1Hxkj5VzFRZcjQoC4PjMIvnJnHKNgz4dZ6ONram8JYztnDAh+WtEQ0/gKtqojjX i6PBRger8911spQHyUiWCTuZAWlcSqE5 -----END CERTIFICATE-----Generated at Tue Sep 9 01:43:41 2025 by rpki-client