$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: Lpv7H8Dzs8kyEisnvhpnaPQ51QQO/YGu88CYBGMaXGw= Subject key identifier: 5D:08:8B:96:2B:9F:E6:A5:AD:4D:DA:F9:B2:47:31:C8:E1:1A:B4:1D Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: B3 Signing time: Fri 05 Sep 2025 06:27:35 +0000 Manifest this update: Fri 05 Sep 2025 06:27:35 +0000 Manifest next update: Fri 12 Sep 2025 06:27:34 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: zTj6YR2OQVDSxcnJ5o4ppsmFvHOtbY4ZnG+NKzaU2uM=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Sep 5 06:27:35 2025 GMT Not After : Sep 12 06:27:34 2025 GMT Subject: CN=68ba82d7-12dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6b:e8:c9:0d:c1:97:91:c3:7f:84:c6:57:a5: 97:2d:cb:f9:0a:43:e3:fa:bf:ca:f2:6d:45:1a:88: fb:f7:4d:ae:5f:c5:e1:a0:05:c0:20:8c:52:c9:2d: a5:60:b2:fc:03:ed:31:e2:90:64:bd:d6:18:bd:51: 82:37:2f:d1:5c:77:44:f8:ef:40:78:9d:0e:22:32: 5b:ed:2d:53:17:f7:da:1e:3a:3b:cd:1d:a3:d5:ce: 0e:16:eb:c9:5d:9d:03:74:60:1f:55:31:1b:21:58: 0e:29:73:94:52:a6:3d:0c:35:44:36:50:40:77:dd: 06:78:c2:6a:ef:0b:11:61:1a:02:a3:34:8b:fe:47: 5f:33:1a:9e:8d:b8:e7:4b:53:34:a4:f6:26:88:b7: a8:db:fa:3c:a4:1f:9b:29:7b:5c:76:d0:af:71:9a: fb:7a:ee:1e:87:d7:a7:90:d0:23:c1:dd:29:85:bc: 76:72:3f:50:39:97:8f:32:a1:7c:01:c2:7d:95:b8: 61:09:d2:fd:67:56:fa:bb:53:8c:7e:8c:f9:15:07: 52:bb:2e:ab:1d:47:34:73:e3:51:dd:8d:d6:19:46: 55:06:86:9c:45:e3:1d:9d:f9:a9:c9:c8:ba:49:9b: 97:71:0e:a3:d3:21:7a:34:5d:5c:ce:80:bc:4c:fa: 6a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:08:8B:96:2B:9F:E6:A5:AD:4D:DA:F9:B2:47:31:C8:E1:1A:B4:1D X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:d4:f9:6d:84:58:94:1e:6d:3f:87:c3:9b:a1:dd:65:e3:4c: 5a:47:85:b8:19:6e:d0:1b:d2:2f:f6:b4:3c:30:84:0f:9f:47: 19:b1:59:61:c4:3b:f1:a1:a8:55:17:a9:50:ee:4f:ed:86:74: 80:e1:42:a7:60:0a:f7:bf:c8:1b:ca:b3:28:88:e1:7d:c5:38: 08:05:4c:d5:84:74:db:f9:43:d1:f8:9c:78:e8:c5:63:51:f7: dd:c3:07:a2:61:9b:2c:e9:f3:41:87:fa:46:15:36:06:5f:fe: 61:fb:71:a4:39:4e:0a:43:52:c7:fe:a1:f2:bf:c7:fc:a0:1f: 5a:eb:80:28:de:38:55:be:cb:a2:2b:0c:c9:42:42:43:d7:7f: 54:61:de:8b:64:13:a9:c8:63:69:d5:f5:ee:f9:b2:b4:86:30: 1c:81:be:36:a7:c8:1b:08:b1:79:3e:4a:20:63:e5:56:52:dd: 3d:7f:d5:1f:d5:99:ac:9b:8d:3a:19:75:48:85:73:b6:26:31: bc:77:e6:b4:5c:16:d1:05:d9:eb:ef:a9:31:65:68:3e:d1:db: 72:5d:7c:7d:dc:d0:dd:9e:8e:f7:15:31:c2:32:0b:94:b4:79: b1:44:c6:b7:0c:b0:2d:24:c1:a5:9d:04:87:7c:d2:16:79:46: 63:3e:59:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjUwOTA1MDYyNzM1WhcNMjUwOTEyMDYyNzM0WjAYMRYwFAYD VQQDEw02OGJhODJkNy0xMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mvoyQ3Bl5HDf4TGV6WXLcv5CkPj+r/K8m1FGoj7902uX8XhoAXAIIxSyS2l YLL8A+0x4pBkvdYYvVGCNy/RXHdE+O9AeJ0OIjJb7S1TF/faHjo7zR2j1c4OFuvJ XZ0DdGAfVTEbIVgOKXOUUqY9DDVENlBAd90GeMJq7wsRYRoCozSL/kdfMxqejbjn S1M0pPYmiLeo2/o8pB+bKXtcdtCvcZr7eu4eh9enkNAjwd0phbx2cj9QOZePMqF8 AcJ9lbhhCdL9Z1b6u1OMfoz5FQdSuy6rHUc0c+NR3Y3WGUZVBoacReMdnfmpyci6 SZuXcQ6j0yF6NF1czoC8TPpqiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0Ii5Yr n+alrU3a+bJHMcjhGrQdMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA1PlthFiUHm0/h8Obod1l40xaR4W4GW7QG9Iv9rQ8MIQPn0cZsVlh xDvxoahVF6lQ7k/thnSA4UKnYAr3v8gbyrMoiOF9xTgIBUzVhHTb+UPR+Jx46MVj UffdwweiYZss6fNBh/pGFTYGX/5h+3GkOU4KQ1LH/qHyv8f8oB9a64Ao3jhVvsui KwzJQkJD139UYd6LZBOpyGNp1fXu+bK0hjAcgb42p8gbCLF5PkogY+VWUt09f9Uf 1Zmsm406GXVIhXO2JjG8d+a0XBbRBdnr76kxZWg+0dtyXXx93NDdno73FTHCMguU tHmxRMa3DLAtJMGlnQSHfNIWeUZjPll7 -----END CERTIFICATE-----Generated at Sat Sep 6 13:25:09 2025 by rpki-client