$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json) Hash identifier: sOc4bCOtrQcdL4Eb3ZIBuMFezePgB+7AmpPP7GLR4aM= Subject key identifier: 23:83:62:AB:25:96:CC:D6:4C:74:C9:DE:93:76:85:AD:33:15:95:9D Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft Manifest number: F7 Signing time: Sat 18 Oct 2025 23:05:49 +0000 Manifest this update: Sat 18 Oct 2025 23:05:48 +0000 Manifest next update: Sat 25 Oct 2025 23:05:48 +0000 Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: XFjE6oIgsmL/+HxeqDXzKn1HTBdm2fc4C8X01msYxCM=) 2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: 7FmlPjs6RdFVVzx2SBNvcWPo4zfkd0/gp7rPFjcGA8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Validity Not Before: Oct 18 23:05:48 2025 GMT Not After : Oct 25 23:05:48 2025 GMT Subject: CN=68f41d4d-f525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:f4:e3:8f:91:88:bb:12:0d:58:40:92:89: 8f:0f:66:7a:68:92:46:ee:0f:34:72:fc:9f:e0:11: b6:8a:2b:ab:10:9f:95:86:d8:04:42:4c:82:4f:e4: 51:50:d2:36:3e:44:53:69:f5:1c:7b:0a:e0:49:6e: aa:2c:93:20:4d:93:49:93:d2:af:eb:80:ce:db:d5: 8c:89:09:c6:ed:a3:e6:7d:a8:50:43:5a:7d:79:ef: c2:31:1b:fb:32:43:c6:0e:4d:2b:9b:3e:fd:ed:51: b3:91:28:29:58:43:d7:10:f7:a6:3d:c1:9f:33:8c: 79:77:9a:ba:fd:0a:5a:ea:fd:61:a7:fe:58:b0:43: 99:8f:58:c9:9b:df:74:74:d2:49:41:dd:89:21:8f: 78:4b:22:8b:be:3f:98:3d:c8:b6:a9:74:47:db:92: c4:e0:98:99:37:a6:91:52:8c:24:43:74:cc:22:49: 1b:b4:09:c9:5c:69:9d:11:0b:4a:4b:a1:02:73:68: 55:01:0e:8f:73:2f:61:eb:50:3f:40:2b:d2:e3:be: 0d:22:5d:86:8e:31:7f:e1:37:96:ba:ea:39:a3:7b: 78:df:1f:b2:73:f0:ed:3b:eb:89:b1:37:47:cc:50: 88:0f:dd:15:22:68:3a:49:8b:01:5e:04:56:90:2e: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:83:62:AB:25:96:CC:D6:4C:74:C9:DE:93:76:85:AD:33:15:95:9D X509v3 Authority Key Identifier: keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a0:ab:af:8e:20:ea:9b:2a:f7:cc:9c:84:51:40:81:e7:7f: be:09:10:18:0c:74:88:1b:cd:15:25:ad:3c:17:45:eb:b0:89: 0d:b6:ed:e7:71:64:ba:fe:ff:ac:4d:9f:f5:98:c0:ef:f5:5d: 79:3f:bf:40:80:39:7e:3a:e3:97:a6:9e:ad:97:c2:0d:48:74: 5e:87:35:cd:03:1f:08:86:cf:6d:35:a9:47:29:c0:6e:3f:38: 8e:2c:f2:45:83:f7:c2:e1:2d:f6:a9:6c:9b:df:0c:11:fe:c5: 06:b7:a8:d4:89:59:c8:3c:e8:55:dc:33:25:5b:ca:b1:3f:94: 7f:e3:b9:12:b3:fc:1e:fc:ad:17:ef:67:60:27:40:fb:af:99: fc:2f:86:71:ca:43:ce:07:f7:51:cd:b2:ae:bc:96:36:73:2e: 0b:56:c4:86:72:f0:00:fa:eb:4d:6d:5b:3c:dc:3b:d5:91:c3: ed:60:60:b8:ae:83:51:92:62:41:7b:df:a6:97:c8:18:ea:0e: 32:04:20:b6:78:a1:6c:46:06:b6:3f:23:c8:21:6e:09:f0:bb: 37:7a:4e:bf:b5:d9:71:15:43:bc:8d:dc:cb:4c:ff:f0:60:6b: 67:c8:97:10:28:a1:7e:28:7a:76:7e:4f:03:35:bf:6f:fa:60: ab:03:a1:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKEE0RTZFRTJBMkJENEI2REYzQjM1M0JBRTZCQzQ4OTJB NkQzOEVGMjkwHhcNMjUxMDE4MjMwNTQ4WhcNMjUxMDI1MjMwNTQ4WjAYMRYwFAYD VQQDEw02OGY0MWQ0ZC1mNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdv044+RiLsSDVhAkomPD2Z6aJJG7g80cvyf4BG2iiurEJ+VhtgEQkyCT+RR UNI2PkRTafUcewrgSW6qLJMgTZNJk9Kv64DO29WMiQnG7aPmfahQQ1p9ee/CMRv7 MkPGDk0rmz797VGzkSgpWEPXEPemPcGfM4x5d5q6/Qpa6v1hp/5YsEOZj1jJm990 dNJJQd2JIY94SyKLvj+YPci2qXRH25LE4JiZN6aRUowkQ3TMIkkbtAnJXGmdEQtK S6ECc2hVAQ6Pcy9h61A/QCvS474NIl2GjjF/4TeWuuo5o3t43x+yc/DtO+uJsTdH zFCID90VImg6SYsBXgRWkC7WNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCODYqsl lszWTHTJ3pN2ha0zFZWdMB8GA1UdIwQYMBaAFKTm7ior1LbfOzU7rmvEiSptOO8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC84NjE5NjMxNjNE QTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0ODdOVHV1YThTSkttMDQ3 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC84NjE5NjMxNjNEQTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0 ODdOVHV1YThTSkttMDQ3eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcoKuvjiDqmyr3zJyEUUCB53++CRAYDHSIG80VJa08F0XrsIkNtu3n cWS6/v+sTZ/1mMDv9V15P79AgDl+OuOXpp6tl8INSHRehzXNAx8Ihs9tNalHKcBu PziOLPJFg/fC4S32qWyb3wwR/sUGt6jUiVnIPOhV3DMlW8qxP5R/47kSs/we/K0X 72dgJ0D7r5n8L4ZxykPOB/dRzbKuvJY2cy4LVsSGcvAA+utNbVs83DvVkcPtYGC4 roNRkmJBe9+ml8gY6g4yBCC2eKFsRga2PyPIIW4J8Ls3ek6/tdlxFUO8jdzLTP/w YGtnyJcQKKF+KHp2fk8DNb9v+mCrA6Eg -----END CERTIFICATE-----Generated at Mon Oct 20 21:59:41 2025 by rpki-client