$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json) Hash identifier: OKc5B5Ch53+OjoIV3h2iLU4Tpzz9roXg2cqVyBwsai4= Subject key identifier: CD:A8:F1:DD:31:BD:07:9D:17:AE:61:6C:43:B2:06:5B:C5:48:9D:C3 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0E55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft Manifest number: 0C3C Signing time: Fri 22 Aug 2025 20:07:01 +0000 Manifest this update: Fri 22 Aug 2025 20:07:01 +0000 Manifest next update: Fri 29 Aug 2025 20:07:01 +0000 Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: G67SjPu/aB1D36Is2lxukpcgorsGuvcrK+FAI0AxAe0=) 2: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: s5N2TyQ76d6xMdXE61yLpof0IVsz9xlEvKQDUIYT3lc=) 3: 826F7220690211F09A1AA882C4F9AE02.roa (hash: 9FwOpF+CEExhkrWPUtlIKPKg2Nt1EzmH0++EbV0x54s=) 4: 2713F43471F211F0B2381940C4F9AE02.roa (hash: vNtqGcSLIxhNnMlqrjf+EIrzDbZQ7mAzqWSJQjKC/IU=) 5: 81B16BEA690211F09A1AA882C4F9AE02.roa (hash: g27cRj4q0UCtWpn1HNSx1aPrLAidJ1tGq+D7ABQVSw0=) 6: 4E2D252A699811F0B3E6984EC4F9AE02.roa (hash: 3gRwjLg8N4vvmv5NGiJ46Vac0E5K7yqz3DuORE8Lbh4=) 7: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: IULXHhlu5uT6Tg9jL/yk50UFaDGDqG8EJ1WnwAnbvbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3669 (0xe55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Aug 22 20:07:01 2025 GMT Not After : Aug 29 20:07:01 2025 GMT Subject: CN=68a8cde5-9e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:db:05:fc:8d:d9:4f:6f:00:96:7c:3d:91: c0:87:7b:af:d4:58:ef:20:64:03:a8:a4:5b:6d:56: c2:1d:2d:25:3a:ec:71:c0:36:00:f3:53:c5:2e:fc: bb:ad:a8:1b:d6:94:f4:65:c9:d9:22:5c:6a:70:11: a8:53:8a:c2:c9:2b:26:28:08:a7:ab:8d:ad:e9:b6: 13:57:83:84:70:98:07:05:b5:3a:05:8e:50:d2:ea: ae:31:90:57:f1:df:67:69:24:3a:fe:ef:37:28:7a: 6f:d2:ed:25:b3:ba:51:5a:9b:9c:cf:93:74:e9:7b: 6f:0f:96:e4:9c:b9:75:d7:60:aa:ca:fa:1b:5b:cb: 14:14:bf:c3:7b:ec:5c:52:23:43:be:ae:46:a0:fd: 25:8a:ec:fe:44:4a:19:16:05:9e:d9:cf:f1:4f:1f: aa:a9:7c:47:6c:73:6b:c0:81:97:d2:61:c9:a3:ed: 4a:02:92:7d:93:15:86:71:55:1b:f7:c4:a8:5c:61: 2b:ff:9e:c0:5c:f6:4f:9d:91:9d:f2:8e:d3:c2:b8: 04:59:70:d2:e4:82:37:f9:ee:36:b2:28:f9:61:e0: 51:53:bc:26:91:df:e1:50:10:02:65:46:cd:92:c6: 8d:6c:6b:98:0f:fd:52:e8:81:0f:05:20:15:aa:04: bc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A8:F1:DD:31:BD:07:9D:17:AE:61:6C:43:B2:06:5B:C5:48:9D:C3 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:07:35:7f:8e:27:32:ca:75:87:70:63:4e:92:7d:08:2f:23: 6e:09:c4:be:b3:0d:35:74:92:04:ff:5f:b1:db:85:a7:f0:5a: f3:e2:9b:0a:fd:ec:cb:af:01:9e:3f:89:49:20:09:14:4a:93: 75:3a:9b:1b:bb:cb:38:4c:03:90:d8:ca:87:d7:3a:b2:68:01: c7:76:52:c5:22:48:b0:0d:76:37:4e:eb:60:a9:35:9d:df:6c: 4c:99:78:c5:25:17:a1:aa:58:66:da:5b:d7:ca:d3:64:65:41: 6d:bd:e7:73:39:f8:59:23:f3:eb:57:18:1c:3f:9e:16:1e:47: 6a:b5:ca:c2:8e:b0:ce:26:58:c1:d7:6b:e0:62:7f:ca:df:ca: 27:df:84:cf:32:dd:ca:59:27:09:4f:10:43:6e:f9:e5:00:60: 95:1a:62:d2:0a:9a:a3:cb:e2:0f:b2:c5:39:5b:9c:52:5c:79: f1:d3:24:25:33:08:44:f0:dd:fb:8c:a2:b1:eb:a7:98:76:3c: 62:c7:03:6b:4d:1d:8b:6b:fc:87:3e:b9:23:05:b8:7d:0c:b7: 9f:eb:cc:c2:36:7e:9b:e8:9b:cd:9e:fc:05:4f:68:3a:82:ef: 24:e6:2d:1d:5b:2c:0e:1a:7e:bb:d5:53:ad:66:eb:e0:9b:dd: bf:77:f4:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwODIyMjAwNzAxWhcNMjUwODI5MjAwNzAxWjAYMRYwFAYD VQQDEw02OGE4Y2RlNS05ZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZrbBfyN2U9vAJZ8PZHAh3uv1FjvIGQDqKRbbVbCHS0lOuxxwDYA81PFLvy7 ragb1pT0ZcnZIlxqcBGoU4rCySsmKAinq42t6bYTV4OEcJgHBbU6BY5Q0uquMZBX 8d9naSQ6/u83KHpv0u0ls7pRWpucz5N06XtvD5bknLl112CqyvobW8sUFL/De+xc UiNDvq5GoP0liuz+REoZFgWe2c/xTx+qqXxHbHNrwIGX0mHJo+1KApJ9kxWGcVUb 98SoXGEr/57AXPZPnZGd8o7TwrgEWXDS5II3+e42sij5YeBRU7wmkd/hUBACZUbN ksaNbGuYD/1S6IEPBSAVqgS8TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2o8d0x vQedF65hbEOyBlvFSJ3DMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5 YVJqanA1LS1DQ1BHY3k0bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfBzV/jicyynWHcGNOkn0ILyNuCcS+sw01dJIE/1+x24Wn8Frz4psK /ezLrwGeP4lJIAkUSpN1Opsbu8s4TAOQ2MqH1zqyaAHHdlLFIkiwDXY3TutgqTWd 32xMmXjFJRehqlhm2lvXytNkZUFtvedzOfhZI/PrVxgcP54WHkdqtcrCjrDOJljB 12vgYn/K38on34TPMt3KWScJTxBDbvnlAGCVGmLSCpqjy+IPssU5W5xSXHnx0yQl MwhE8N37jKKx66eYdjxixwNrTR2La/yHPrkjBbh9DLef68zCNn6b6JvNnvwFT2g6 gu8k5i0dWywOGn671VOtZuvgm92/d/Sk -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:53 2025 by rpki-client