$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json) Hash identifier: 8+3ez/yheRqg3C+vTW08POFB/d1+hiwezasyQ/BJU0c= Subject key identifier: 7A:6C:26:3E:33:2A:B7:F1:5D:79:61:87:A2:2D:16:AA:EB:FE:C9:6D Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft Manifest number: D8 Signing time: Fri 22 Aug 2025 21:56:49 +0000 Manifest this update: Fri 22 Aug 2025 21:56:48 +0000 Manifest next update: Fri 29 Aug 2025 21:56:48 +0000 Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: v+8DnEUanziElWdMbScWlG3F7y4Z8Vt93n5nvl0muyU=) 2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: UWOq5fkDm5PGl0caT9Tr6ZlfhuDlbM6ptz9WKoZ9jFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Validity Not Before: Aug 22 21:56:48 2025 GMT Not After : Aug 29 21:56:48 2025 GMT Subject: CN=68a8e7a0-1ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:26:6e:c7:38:65:fa:b2:c2:43:5c:f4:67: ee:f3:e6:8a:f9:a3:d4:4b:50:d0:5c:15:01:c3:64: 4e:aa:ec:18:0e:28:4f:a7:46:30:4d:2b:02:b4:46: 12:f6:9c:ab:10:8b:4e:61:53:29:ef:3b:c8:aa:a2: ce:55:95:87:50:8a:76:a8:bd:1b:19:40:75:d7:0f: d2:eb:7a:b1:53:61:d6:da:5e:db:1c:99:85:4d:44: 85:f5:e7:3e:a8:58:de:0e:9b:5a:ad:a4:94:5c:dd: 09:91:73:e2:60:77:69:4d:f1:07:05:8c:ae:c9:c5: e9:f6:c2:9b:09:69:24:4e:d5:6c:5e:b4:d4:06:90: eb:1f:77:7e:8d:55:04:cc:28:47:eb:fb:41:46:36: 72:0c:4e:fc:39:99:9c:9b:cd:ba:b7:a1:90:f0:d0: bc:d8:30:0c:fb:0a:5d:08:b0:fc:37:ee:71:06:c1: 10:17:a2:72:b3:08:00:eb:6b:cf:9b:31:73:1d:ac: 0e:53:d2:f6:39:71:b5:36:fb:b4:b2:50:d1:24:bb: 69:e3:0f:10:79:d6:6d:29:76:59:c3:e4:62:44:ac: 6c:86:ac:1b:3a:87:5d:4a:a2:a5:14:60:58:77:d0: 83:5d:a2:e1:53:6b:29:cf:db:37:a2:9e:29:61:c7: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6C:26:3E:33:2A:B7:F1:5D:79:61:87:A2:2D:16:AA:EB:FE:C9:6D X509v3 Authority Key Identifier: keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:8f:83:aa:7a:48:92:dd:8f:9d:57:e8:77:18:cf:c1:8f:2e: a9:23:2c:f8:fd:7c:bb:bc:9a:c0:bf:e2:33:41:3e:36:75:33: 94:f9:d7:66:80:54:44:d3:98:bc:52:30:37:f1:bf:4f:aa:78: f2:e5:66:15:ba:eb:a6:92:57:f0:e9:ec:1c:80:ff:14:c9:21: 7c:d5:35:41:8c:f2:36:b4:cf:d0:f2:8a:6b:3a:6f:f1:a5:02: da:a2:b6:d5:fd:96:49:75:e8:dd:6a:14:e0:7d:2b:52:01:21: 00:4c:58:f8:83:73:79:97:fc:b6:14:41:c9:28:4c:d7:d8:23: 1e:f2:1a:01:61:81:30:ba:42:ed:b7:1e:5c:14:85:77:12:32: 5c:10:bb:ce:f9:b5:05:14:4a:0b:27:c3:b2:e1:f5:da:5c:fd: c9:9c:29:9d:51:77:8a:02:5c:72:d0:cd:b4:17:68:6e:58:24: 2b:9e:e0:50:87:ff:54:9e:95:12:03:d3:7c:22:99:9e:33:0e: ef:02:d3:b3:aa:fb:42:be:e2:f6:0b:5a:8c:36:80:10:ef:28: ff:dc:af:8e:12:68:db:2f:dc:32:4f:0c:f1:89:a0:98:96:fc: 3d:32:67:15:47:8e:9a:a9:fb:5c:80:25:e8:de:61:fa:25:7c: 2f:f6:0e:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKEE0RTZFRTJBMkJENEI2REYzQjM1M0JBRTZCQzQ4OTJB NkQzOEVGMjkwHhcNMjUwODIyMjE1NjQ4WhcNMjUwODI5MjE1NjQ4WjAYMRYwFAYD VQQDEw02OGE4ZTdhMC0xYWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwewmbsc4ZfqywkNc9Gfu8+aK+aPUS1DQXBUBw2ROquwYDihPp0YwTSsCtEYS 9pyrEItOYVMp7zvIqqLOVZWHUIp2qL0bGUB11w/S63qxU2HW2l7bHJmFTUSF9ec+ qFjeDptaraSUXN0JkXPiYHdpTfEHBYyuycXp9sKbCWkkTtVsXrTUBpDrH3d+jVUE zChH6/tBRjZyDE78OZmcm826t6GQ8NC82DAM+wpdCLD8N+5xBsEQF6JyswgA62vP mzFzHawOU9L2OXG1Nvu0slDRJLtp4w8QedZtKXZZw+RiRKxshqwbOoddSqKlFGBY d9CDXaLhU2spz9s3op4pYcd2oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpsJj4z KrfxXXlhh6ItFqrr/sltMB8GA1UdIwQYMBaAFKTm7ior1LbfOzU7rmvEiSptOO8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC84NjE5NjMxNjNE QTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0ODdOVHV1YThTSkttMDQ3 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC84NjE5NjMxNjNEQTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0 ODdOVHV1YThTSkttMDQ3eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWj4OqekiS3Y+dV+h3GM/Bjy6pIyz4/Xy7vJrAv+IzQT42dTOU+ddm gFRE05i8UjA38b9Pqnjy5WYVuuumklfw6ewcgP8UySF81TVBjPI2tM/Q8oprOm/x pQLaorbV/ZZJdejdahTgfStSASEATFj4g3N5l/y2FEHJKEzX2CMe8hoBYYEwukLt tx5cFIV3EjJcELvO+bUFFEoLJ8Oy4fXaXP3JnCmdUXeKAlxy0M20F2huWCQrnuBQ h/9UnpUSA9N8IpmeMw7vAtOzqvtCvuL2C1qMNoAQ7yj/3K+OEmjbL9wyTwzxiaCY lvw9MmcVR46aqftcgCXo3mH6JXwv9g6c -----END CERTIFICATE-----Generated at Sun Aug 24 03:40:06 2025 by rpki-client