$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft File: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft (raw, json) Hash identifier: 1DxocHyPuf44Pq8BktatvyeScjz1khLgZ1LuBbkeJ2Y= Subject key identifier: 23:A7:C7:FB:53:45:57:CA:EC:5A:F8:E8:C0:08:FF:B4:9D:63:72:B7 Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41 Certificate issuer: /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541 Certificate serial: 2652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft Manifest number: 263B Signing time: Sat 06 Sep 2025 15:43:45 +0000 Manifest this update: Sat 06 Sep 2025 15:43:45 +0000 Manifest next update: Sat 13 Sep 2025 15:43:45 +0000 Files and hashes: 1: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl (hash: J9sa/j4/V+OtRqbwEBd2+Gn0t8g/33ShEqPJy/semg4=) 2: E54E5FF6632311ED8D313442C4F9AE02.roa (hash: 7EyyBL8Rx7RMK3LQ00F31NlGw9r2Oen41HdwTk/u8cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9810 (0x2652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC302, serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541 Validity Not Before: Sep 6 15:43:45 2025 GMT Not After : Sep 13 15:43:45 2025 GMT Subject: CN=68bc56b1-0175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:84:e3:ed:66:60:e2:a1:41:10:cb:93:82: 28:b8:28:bd:2b:91:57:c8:88:13:34:c7:8b:02:9e: 26:f4:0d:99:c7:e5:3c:d5:79:28:58:08:f5:c9:86: 53:df:55:ce:a1:c7:fe:c0:8f:51:8e:f3:fd:77:16: 3b:08:f2:9d:da:03:2b:79:ab:dd:11:ef:9e:fc:a3: 25:f2:e1:16:0b:79:77:64:bf:a3:a6:be:72:6c:b2: 47:05:5d:4c:54:38:7e:bb:36:89:67:17:ce:f4:26: d0:eb:65:ef:83:ed:d5:65:2c:dd:c1:af:41:06:20: 2d:0e:d0:b1:b2:a4:ce:05:2d:cf:be:74:28:f4:01: 10:5d:f4:58:cb:a3:e0:73:a2:b1:42:26:ab:30:25: b7:4d:27:1c:85:70:0f:d2:09:ee:2f:7d:a5:ea:7d: d5:15:d0:c1:ee:47:b2:c7:dd:2b:cb:62:65:ba:bc: a5:6a:49:ba:fb:e7:0c:6c:82:e9:d0:dd:3e:a2:d0: 4b:62:c2:2c:f2:81:be:c4:0c:28:64:f6:c6:3b:ee: 2c:6a:61:43:90:7b:55:51:02:93:13:b3:c8:aa:4f: 3e:4a:e7:5b:18:15:eb:43:1d:ed:d3:39:d0:58:5e: bb:6f:b0:dc:4d:0d:d8:d3:6f:77:4a:33:d6:f2:1f: e2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A7:C7:FB:53:45:57:CA:EC:5A:F8:E8:C0:08:FF:B4:9D:63:72:B7 X509v3 Authority Key Identifier: keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ae:0d:da:36:b9:7a:ff:a2:09:f4:d5:9d:96:dc:d8:19:ff: 3b:32:73:52:82:aa:ec:6d:05:49:b8:56:85:29:06:bd:a5:58: de:a2:85:88:b2:1e:b9:4e:80:df:da:c8:7e:46:26:39:4b:cf: 94:30:dc:4c:0f:20:67:d3:d6:ff:83:ce:85:30:3a:5e:ee:e1: 43:f3:fa:82:97:ba:0c:31:d4:50:56:0d:e7:43:ba:bd:a9:3f: bb:ab:f1:17:1b:4b:7c:b7:b7:c4:37:cf:69:4a:11:2b:59:3f: 97:10:0c:50:b6:f3:5f:64:1d:c7:59:f2:42:22:ad:3f:bf:a5: 55:6d:57:ed:e0:07:d3:ff:66:92:c2:4c:4c:9f:fd:e5:c5:35: 3d:c7:f2:d0:0a:c8:4c:02:2e:c6:95:bb:ea:7b:d2:ac:60:30: 94:a9:da:dd:0e:c0:c7:cd:6d:3f:c3:eb:08:91:6a:b9:f8:a9: dc:24:af:2c:40:bf:07:a6:2c:01:e9:5f:53:f9:df:35:34:dd: ac:a2:40:43:67:a0:60:4a:a1:50:00:a3:89:de:a1:34:48:d9: a2:b8:bb:54:61:bd:fe:3d:bd:e0:f0:0c:70:8b:58:b9:8a:ca: 39:0e:78:21:5f:5d:d3:89:ae:51:2e:21:c9:08:cf:08:e5:bf: d2:2d:ce:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMDIxMTAvBgNVBAUTKDM5QkY5Njk5NEFCNEM1NEM5ODNFRTBGNTEwMzY1RjRG RDk4NDE1NDEwHhcNMjUwOTA2MTU0MzQ1WhcNMjUwOTEzMTU0MzQ1WjAYMRYwFAYD VQQDEw02OGJjNTZiMS0wMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviCE4+1mYOKhQRDLk4IouCi9K5FXyIgTNMeLAp4m9A2Zx+U81XkoWAj1yYZT 31XOocf+wI9RjvP9dxY7CPKd2gMreavdEe+e/KMl8uEWC3l3ZL+jpr5ybLJHBV1M VDh+uzaJZxfO9CbQ62Xvg+3VZSzdwa9BBiAtDtCxsqTOBS3PvnQo9AEQXfRYy6Pg c6KxQiarMCW3TScchXAP0gnuL32l6n3VFdDB7keyx90ry2Jlurylakm6++cMbILp 0N0+otBLYsIs8oG+xAwoZPbGO+4samFDkHtVUQKTE7PIqk8+SudbGBXrQx3t0znQ WF67b7DcTQ3Y0293SjPW8h/irQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOnx/tT RVfK7Fr46MAI/7SdY3K3MB8GA1UdIwQYMBaAFDm/lplKtMVMmD7g9RA2X0/ZhBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMwMi80RUE0OEU4NEZC QTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhVeVlQdUQxRURaZlQ5bUVG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09iLVdtVXEweFV5WVB1RDFFRFpmVDltRUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMwMi80RUE0OEU4NEZCQTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhV eVlQdUQxRURaZlQ5bUVGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKrg3aNrl6/6IJ9NWdltzYGf87MnNSgqrsbQVJuFaFKQa9pVjeooWI sh65ToDf2sh+RiY5S8+UMNxMDyBn09b/g86FMDpe7uFD8/qCl7oMMdRQVg3nQ7q9 qT+7q/EXG0t8t7fEN89pShErWT+XEAxQtvNfZB3HWfJCIq0/v6VVbVft4AfT/2aS wkxMn/3lxTU9x/LQCshMAi7Glbvqe9KsYDCUqdrdDsDHzW0/w+sIkWq5+KncJK8s QL8HpiwB6V9T+d81NN2sokBDZ6BgSqFQAKOJ3qE0SNmiuLtUYb3+Pb3g8Axwi1i5 iso5DnghX13Tia5RLiHJCM8I5b/SLc7Q -----END CERTIFICATE-----Generated at Mon Sep 8 15:41:48 2025 by rpki-client