$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: n2Z+KJUmVpoFUnig3Fb4ek8LBxhj8iu2wr+3+Qwf1+w= Subject key identifier: 0D:06:A2:D0:C1:DA:0F:0B:90:4E:F1:8C:43:29:2B:F0:06:88:46:AB Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 160F Signing time: Mon 27 Oct 2025 20:05:34 +0000 Manifest this update: Mon 27 Oct 2025 20:05:34 +0000 Manifest next update: Mon 03 Nov 2025 20:05:34 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: 9W8FzsewP6dCisxHm7dKj6mLWY5axMgvRce83C3/mFQ=) 2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: XdNJgDmkOAWh0JRm8SzUVD6J0pIjuQDztKGWx3vGffA=) 3: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=) 4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=) 5: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: dKYtICER5+Vrv6r3o9V0PfpxWh5ROGS5ONF+u9Xmzy4=) 6: 8580D066931A11F0BE28F434C4F9AE02.roa (hash: IoZLXlPShkZFj+ijnIy5+XFNCQQApnfTUEhtxYT0U2Y=) 7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: kdH4V91NpamzknXIO97+04RUQcXUYgdCRyJDZwm3yo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 20:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6232 (0x1858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Oct 27 20:05:34 2025 GMT Not After : Nov 3 20:05:34 2025 GMT Subject: CN=68ffd08e-e75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:50:f3:e9:b6:ce:d3:5f:c2:dd:25:c4:76: 1f:78:1b:63:a1:ab:f6:1b:67:c4:77:c3:5d:95:76: cb:3e:99:74:da:93:5c:45:e0:62:74:39:cb:02:eb: 0e:46:6c:62:67:53:30:c2:1b:26:bb:46:d3:13:15: 0d:df:37:2b:b6:2a:35:83:df:73:1a:df:01:d8:67: db:e4:9d:b5:af:07:52:5a:33:1c:84:e6:7e:42:83: 5f:25:fb:9f:45:3c:dd:f1:91:ef:ac:e4:83:25:4c: f8:11:2f:44:22:0f:b4:fd:c7:60:d2:77:78:01:47: 2f:fd:14:cb:0d:06:29:3a:62:46:a6:ee:f1:a0:02: a9:53:cb:b3:94:77:a8:1d:5e:be:33:7d:26:ae:50: 63:35:da:63:3a:7b:25:d9:04:ef:59:49:f4:06:87: 4f:2f:05:97:a7:91:9e:0f:d0:9b:1d:ae:d2:ab:66: af:37:43:18:4c:d5:d4:bf:72:06:72:b5:2c:da:d2: 1e:9d:26:74:f4:5e:4e:84:59:88:25:81:ec:eb:29: b5:e4:6a:ac:96:9d:67:7f:5d:2b:56:bc:c0:8e:f9: 9d:5f:b6:0a:e8:68:89:7e:15:4d:a4:cb:37:7f:f7: ae:ac:46:0b:03:75:91:eb:78:60:0d:fd:fb:d8:c3: ef:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:06:A2:D0:C1:DA:0F:0B:90:4E:F1:8C:43:29:2B:F0:06:88:46:AB X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:24:a7:d4:2f:ec:29:ba:33:45:08:58:b0:76:6b:29:82:84: 3b:33:cb:90:3a:3f:49:cb:80:f6:e4:5a:8c:d2:cc:55:1b:ee: 73:fb:69:e4:d9:45:dc:8f:a0:06:7c:23:43:94:f6:48:0c:f9: cf:69:41:ed:79:c7:28:1c:c0:70:20:10:72:3e:32:af:5a:50: 87:a7:4b:3a:c5:5f:5a:60:3b:d0:7c:5d:2b:17:28:ff:49:93: e9:e1:9c:8c:44:55:69:ff:90:2d:38:56:29:a4:21:f9:21:6e: 24:56:80:ef:bc:06:07:a3:cf:f9:15:cc:c7:38:22:c0:85:a7: 66:03:87:b5:e6:de:bf:b5:1c:1d:0a:10:59:65:ff:af:51:58: 06:ce:6e:99:ea:11:db:6b:60:37:26:85:bf:e5:13:d7:d7:12: 6f:a4:77:3f:9f:c8:b3:b7:4c:ee:e5:fa:d3:bc:f3:74:d8:8f: 4a:c9:42:8a:6d:95:a3:eb:dc:ff:3e:f9:42:70:c9:43:7f:01: 51:1c:88:50:0c:7a:57:72:f1:c9:3a:82:1d:3c:51:6c:fc:0e: 4e:13:3b:3a:85:2e:09:45:85:39:4b:9d:59:d2:4d:35:5e:ce: f2:60:2d:06:75:19:87:2d:c9:35:44:39:1d:b1:b8:2a:c4:8e: a3:9a:40:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUxMDI3MjAwNTM0WhcNMjUxMTAzMjAwNTM0WjAYMRYwFAYD VQQDEw02OGZmZDA4ZS1lNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYhQ8+m2ztNfwt0lxHYfeBtjoav2G2fEd8NdlXbLPpl02pNcReBidDnLAusO RmxiZ1Mwwhsmu0bTExUN3zcrtio1g99zGt8B2Gfb5J21rwdSWjMchOZ+QoNfJfuf RTzd8ZHvrOSDJUz4ES9EIg+0/cdg0nd4AUcv/RTLDQYpOmJGpu7xoAKpU8uzlHeo HV6+M30mrlBjNdpjOnsl2QTvWUn0BodPLwWXp5GeD9CbHa7Sq2avN0MYTNXUv3IG crUs2tIenSZ09F5OhFmIJYHs6ym15Gqslp1nf10rVrzAjvmdX7YK6GiJfhVNpMs3 f/eurEYLA3WR63hgDf372MPvEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0GotDB 2g8LkE7xjEMpK/AGiEarMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhJKfUL+wpujNFCFiwdmspgoQ7M8uQOj9Jy4D25FqM0sxVG+5z+2nk 2UXcj6AGfCNDlPZIDPnPaUHteccoHMBwIBByPjKvWlCHp0s6xV9aYDvQfF0rFyj/ SZPp4ZyMRFVp/5AtOFYppCH5IW4kVoDvvAYHo8/5FczHOCLAhadmA4e15t6/tRwd ChBZZf+vUVgGzm6Z6hHba2A3JoW/5RPX1xJvpHc/n8izt0zu5frTvPN02I9KyUKK bZWj69z/PvlCcMlDfwFRHIhQDHpXcvHJOoIdPFFs/A5OEzs6hS4JRYU5S51Z0k01 Xs7yYC0GdRmHLck1RDkdsbgqxI6jmkC3 -----END CERTIFICATE-----Generated at Tue Oct 28 16:43:17 2025 by rpki-client