$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft File: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft (raw, json) Hash identifier: tFhEE5zL6clf+OvTLRHAQEL+pX3cvjRs15rOjeNRyXs= Subject key identifier: 5F:2C:0B:D9:3B:81:A5:A7:CE:8B:12:F8:B6:DA:97:96:93:71:13:97 Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41 Certificate issuer: /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541 Certificate serial: 2679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft Manifest number: 265C Signing time: Tue 28 Oct 2025 15:40:31 +0000 Manifest this update: Tue 28 Oct 2025 15:40:31 +0000 Manifest next update: Tue 04 Nov 2025 15:40:31 +0000 Files and hashes: 1: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl (hash: l9E9XyhWp8rM/VTUknpxm2LcOXCW6P/RtPYLoRxLDe4=) 2: E54E5FF6632311ED8D313442C4F9AE02.roa (hash: juVS2WdVoEjnoooIFlUN1TcwOWE6yqS4du37XkdB8V8=) 3: BA61C87692D911F083913E3DC4F9AE02.roa (hash: EKR2JpxoTtOKBdOLpKLtMGV12OxD/NRUd9Y6lPYeylI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 15:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9849 (0x2679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC302, serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541 Validity Not Before: Oct 28 15:40:31 2025 GMT Not After : Nov 4 15:40:31 2025 GMT Subject: CN=6900e3ef-2247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:30:67:ce:de:9a:2f:ad:bb:b0:8d:0b:85: 0b:d1:e2:9e:4f:55:38:ec:7b:49:6f:bf:71:dc:20: e0:76:37:4c:45:41:66:d5:a1:21:c6:33:32:f4:75: 1e:64:8a:54:c1:c2:d8:92:13:1b:49:bf:00:cf:0d: 42:c7:5d:7c:c9:65:89:96:7a:f1:c5:30:bf:99:7f: 48:79:6f:03:3b:37:d8:c1:96:19:fd:b5:3a:68:e1: 30:fc:9c:fb:ae:dd:5d:44:6b:de:f5:a8:e5:a4:58: 4c:e3:aa:2a:cf:ce:80:c3:68:a2:54:08:54:fd:cb: 63:34:7e:8f:6f:7d:16:86:ca:66:9c:a0:7b:8c:fb: 8b:84:27:08:e6:8c:e2:ef:82:96:34:74:14:56:97: ee:b4:bd:92:94:d8:01:b4:55:7f:ff:51:57:78:a6: 19:32:f2:7d:c8:1c:65:9b:eb:0a:33:07:48:c0:1c: 56:09:40:9e:2c:03:7f:77:0f:82:e3:cf:e7:be:be: 01:1e:cd:7a:fa:15:fa:48:81:76:ce:e9:fd:40:fd: 96:aa:3c:cd:e7:0b:4d:b7:1d:5d:b2:5c:93:7d:bb: a6:d1:52:e4:89:94:86:77:bd:04:25:80:e1:8e:16: 17:85:11:e5:66:60:0e:92:cb:c1:eb:25:3e:9b:db: 35:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2C:0B:D9:3B:81:A5:A7:CE:8B:12:F8:B6:DA:97:96:93:71:13:97 X509v3 Authority Key Identifier: keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e8:6c:a7:e4:1b:e9:46:33:fc:22:a3:aa:75:a6:ff:68:fd: db:f8:95:97:45:2c:00:57:c5:b5:24:ec:13:f8:a0:b7:4b:dc: be:21:97:61:51:49:76:4e:0a:23:4b:e8:a9:e3:91:c8:3e:51: 86:4e:b8:0b:72:f7:00:2e:af:81:79:cb:82:5f:92:e5:0b:c5: ce:41:c0:b7:f1:0a:05:aa:44:92:0e:cb:1b:cc:c8:45:96:e1: 21:d6:b2:a0:7c:4c:a7:a6:b3:80:42:ef:a8:aa:ce:c3:31:9a: d6:22:9c:c8:e1:ce:07:91:c7:68:36:2d:6e:c3:f0:af:38:70: 6d:ed:0d:da:54:99:c0:04:fe:c3:4a:7c:c8:79:22:d5:a7:29: fd:8f:33:4e:f9:d2:de:35:fc:97:5f:d4:ed:58:4c:ae:e2:14: f7:0e:c2:0a:66:a7:03:10:f4:4b:cc:e9:20:8b:8c:6d:1d:be: 43:a4:ed:8c:6b:1d:15:89:16:c9:de:5f:e7:76:44:26:f1:4b: ad:a4:28:d2:c1:67:82:85:72:02:76:bd:b4:fc:59:e4:c8:2d: 46:f5:37:63:b2:03:bf:ad:37:26:8a:14:0f:27:bb:f0:64:a6: b3:c3:dc:c7:22:7f:63:62:4b:75:ff:9d:bb:38:82:31:23:cb: b7:a6:a9:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMDIxMTAvBgNVBAUTKDM5QkY5Njk5NEFCNEM1NEM5ODNFRTBGNTEwMzY1RjRG RDk4NDE1NDEwHhcNMjUxMDI4MTU0MDMxWhcNMjUxMTA0MTU0MDMxWjAYMRYwFAYD VQQDEw02OTAwZTNlZi0yMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEYwZ87emi+tu7CNC4UL0eKeT1U47HtJb79x3CDgdjdMRUFm1aEhxjMy9HUe ZIpUwcLYkhMbSb8Azw1Cx118yWWJlnrxxTC/mX9IeW8DOzfYwZYZ/bU6aOEw/Jz7 rt1dRGve9ajlpFhM46oqz86Aw2iiVAhU/ctjNH6Pb30WhspmnKB7jPuLhCcI5ozi 74KWNHQUVpfutL2SlNgBtFV//1FXeKYZMvJ9yBxlm+sKMwdIwBxWCUCeLAN/dw+C 48/nvr4BHs16+hX6SIF2zun9QP2WqjzN5wtNtx1dslyTfbum0VLkiZSGd70EJYDh jhYXhRHlZmAOksvB6yU+m9s1cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8sC9k7 gaWnzosS+Lbal5aTcROXMB8GA1UdIwQYMBaAFDm/lplKtMVMmD7g9RA2X0/ZhBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMwMi80RUE0OEU4NEZC QTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhVeVlQdUQxRURaZlQ5bUVG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09iLVdtVXEweFV5WVB1RDFFRFpmVDltRUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMwMi80RUE0OEU4NEZCQTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhV eVlQdUQxRURaZlQ5bUVGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm6Gyn5BvpRjP8IqOqdab/aP3b+JWXRSwAV8W1JOwT+KC3S9y+IZdh UUl2TgojS+ip45HIPlGGTrgLcvcALq+BecuCX5LlC8XOQcC38QoFqkSSDssbzMhF luEh1rKgfEynprOAQu+oqs7DMZrWIpzI4c4HkcdoNi1uw/CvOHBt7Q3aVJnABP7D SnzIeSLVpyn9jzNO+dLeNfyXX9TtWEyu4hT3DsIKZqcDEPRLzOkgi4xtHb5DpO2M ax0ViRbJ3l/ndkQm8UutpCjSwWeChXICdr20/FnkyC1G9TdjsgO/rTcmihQPJ7vw ZKazw9zHIn9jYkt1/527OIIxI8u3pqmq -----END CERTIFICATE-----Generated at Wed Oct 29 11:05:36 2025 by rpki-client