$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: KwHw49yq2EiF0oszu2zrxMye98JPP+Ulj26PdpMKXo8= Subject key identifier: 51:7C:84:0C:19:95:37:A4:08:03:FA:64:2C:E9:13:FB:52:FA:1C:A4 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 179E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 158B Signing time: Fri 22 Aug 2025 17:17:42 +0000 Manifest this update: Fri 22 Aug 2025 17:17:42 +0000 Manifest next update: Fri 29 Aug 2025 17:17:42 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: 089b+UO9oXC3n1LJM5lP8fbsaYV3RikUZNCR40qT8do=) 2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: XdNJgDmkOAWh0JRm8SzUVD6J0pIjuQDztKGWx3vGffA=) 3: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=) 4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=) 5: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: 01GRE88klqRtpUQjt3HlR4NOfDaQxEKnYlzo//41TJA=) 6: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: Csfz+idg7gWjaTw7OLTkeC8VFPuolmbz/fjHtAT/2PU=) 7: 1C98071A68F211F095077372C4F9AE02.roa (hash: 09wc97TYB1Lszd9DIucum9QQ6zV8eaqrLXGIv7p7vjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6046 (0x179e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Aug 22 17:17:42 2025 GMT Not After : Aug 29 17:17:42 2025 GMT Subject: CN=68a8a636-0879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:7c:38:22:8f:ee:b3:43:2c:34:fc:96:1b: 19:2b:5a:9c:5a:8e:9e:8b:1a:7f:0c:33:26:c3:42: 6b:9c:a5:9b:2a:4a:b1:22:6d:dc:46:93:33:db:fd: 2b:2b:ef:11:43:70:96:88:3c:c5:13:5c:b1:da:ce: 6a:4f:0f:73:f0:5e:8d:1a:63:48:5d:81:df:16:a7: ce:1a:d0:aa:0a:17:04:8f:d6:74:e8:46:7b:fa:2a: c9:0e:06:45:fa:45:9f:f3:ef:92:b3:17:e3:f5:bf: c7:04:b6:c9:6c:8a:58:7f:4a:93:e6:e7:8d:5b:21: 52:c5:10:45:e7:d0:94:1d:ba:64:0e:77:b9:b7:96: ea:5a:74:f4:94:3f:e6:76:84:71:49:e0:86:fa:00: 62:95:fc:f9:d8:4a:17:53:5a:db:74:95:b4:79:c5: 55:cd:23:63:c0:fb:8f:8e:02:46:c9:7f:fc:0b:82: a2:01:d2:eb:ae:20:45:60:18:b2:79:c9:f8:f7:0c: 0d:e0:eb:e2:bf:2b:38:4a:fb:38:75:74:52:12:ff: bb:9c:65:3f:af:d5:1c:f7:7a:8a:28:6c:b2:5b:5e: 23:79:21:ff:92:1c:6b:0f:20:52:e9:3a:e6:ae:5c: 0c:89:bb:7d:0c:e2:60:aa:3c:56:bf:27:fc:14:60: 10:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7C:84:0C:19:95:37:A4:08:03:FA:64:2C:E9:13:FB:52:FA:1C:A4 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:a1:87:2e:29:da:05:03:ae:f7:b4:7e:5a:89:a3:1d:91:e5: 09:be:b9:5c:07:67:67:66:0a:a3:c2:cb:c1:d9:37:5f:ed:ba: 5c:ba:79:44:b4:0d:20:ef:77:f8:c5:f9:19:cf:ec:09:f0:7e: 73:61:44:60:2c:3f:77:d9:0e:38:ef:4b:b7:4d:cc:1b:8b:35: e5:ea:c2:9a:d2:fc:bd:ed:0a:02:67:ca:7e:86:62:c6:bb:4f: 3e:a0:65:42:d4:23:33:41:a4:73:1b:a3:45:5a:87:c9:b3:a4: 04:d1:31:b2:19:c8:e5:12:34:69:cd:c6:7d:1a:2d:fe:32:b4: 9f:90:7f:02:ca:5a:dc:fc:e0:83:91:89:9a:14:dc:3a:a7:e0: ca:85:0f:32:98:1e:87:65:8e:b1:2b:d8:b7:32:ef:5b:1f:42: 29:0f:a3:48:ce:03:43:b4:ed:a3:72:58:ff:d7:76:1d:c3:7d: 54:ab:9e:fd:e6:44:72:76:cd:37:8d:ec:47:a2:c7:d1:79:2a: 3b:0c:e9:cf:7d:bc:a7:6b:27:1c:20:b2:cb:38:4c:ea:79:a1: 6d:be:80:a9:73:d4:da:24:2e:b9:76:d6:b0:cf:fd:ce:f9:fe: 51:7b:e2:f9:56:f5:af:3f:0b:99:99:06:cf:88:74:50:e6:5b: f6:06:c0:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwODIyMTcxNzQyWhcNMjUwODI5MTcxNzQyWjAYMRYwFAYD VQQDEw02OGE4YTYzNi0wODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovp8OCKP7rNDLDT8lhsZK1qcWo6eixp/DDMmw0JrnKWbKkqxIm3cRpMz2/0r K+8RQ3CWiDzFE1yx2s5qTw9z8F6NGmNIXYHfFqfOGtCqChcEj9Z06EZ7+irJDgZF +kWf8++Ssxfj9b/HBLbJbIpYf0qT5ueNWyFSxRBF59CUHbpkDne5t5bqWnT0lD/m doRxSeCG+gBilfz52EoXU1rbdJW0ecVVzSNjwPuPjgJGyX/8C4KiAdLrriBFYBiy ecn49wwN4Ovivys4Svs4dXRSEv+7nGU/r9Uc93qKKGyyW14jeSH/khxrDyBS6Trm rlwMibt9DOJgqjxWvyf8FGAQMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF8hAwZ lTekCAP6ZCzpE/tS+hykMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNoYcuKdoFA673tH5aiaMdkeUJvrlcB2dnZgqjwsvB2Tdf7bpcunlE tA0g73f4xfkZz+wJ8H5zYURgLD932Q4470u3TcwbizXl6sKa0vy97QoCZ8p+hmLG u08+oGVC1CMzQaRzG6NFWofJs6QE0TGyGcjlEjRpzcZ9Gi3+MrSfkH8Cylrc/OCD kYmaFNw6p+DKhQ8ymB6HZY6xK9i3Mu9bH0IpD6NIzgNDtO2jclj/13Ydw31Uq579 5kRyds03jexHosfReSo7DOnPfbynayccILLLOEzqeaFtvoCpc9TaJC65dtawz/3O +f5Re+L5VvWvPwuZmQbPiHRQ5lv2BsA7 -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:42 2025 by rpki-client