$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: VCD84ZvTidW4O9MQ7OmqCz4+wg0pYeBiU3sU+sfUIt0= Subject key identifier: F5:7F:28:20:FE:17:8D:13:FB:FA:DE:70:81:7D:97:5F:35:D6:62:87 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 183D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 15FC Signing time: Mon 20 Oct 2025 05:26:08 +0000 Manifest this update: Mon 20 Oct 2025 05:26:07 +0000 Manifest next update: Mon 27 Oct 2025 05:26:07 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: uKbRcCsJPXl1Zv8gPPhZi+zORzRkHoDzwLME2iMsn/w=) 2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: XdNJgDmkOAWh0JRm8SzUVD6J0pIjuQDztKGWx3vGffA=) 3: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=) 4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=) 5: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: 01GRE88klqRtpUQjt3HlR4NOfDaQxEKnYlzo//41TJA=) 6: 8580D066931A11F0BE28F434C4F9AE02.roa (hash: rRX5uSG2sIpe/U9o2ivtjMEz7IlssZMOn3EBX1Fgoh8=) 7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: Zu30hOGz4zGNA6TztQtai8I+9CCN9cSuQqxo2dpMFUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 05:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6205 (0x183d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Oct 20 05:26:07 2025 GMT Not After : Oct 27 05:26:07 2025 GMT Subject: CN=68f5c7ef-37b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b3:95:b1:03:9d:8e:48:7c:57:aa:66:a1:88: f2:f4:4d:d2:6d:3d:15:67:27:c2:40:e0:80:a6:ff: 5d:d0:1a:cd:28:bc:85:2b:b8:5d:07:07:9e:21:48: be:93:15:8d:be:b6:a1:96:1a:d9:50:5b:21:fc:33: 7c:99:3b:91:15:c7:d1:34:8e:e5:41:e9:82:2f:a8: ca:ce:e6:27:8c:3d:9d:0b:51:3f:90:c3:1c:d9:c3: 47:26:44:a1:df:d6:d0:50:20:72:8d:31:78:08:5f: 6b:c3:65:aa:e9:13:d8:5f:df:eb:8f:ae:22:c8:4d: ca:6d:9e:a2:bb:a0:dc:b3:03:4b:62:07:75:53:12: a0:30:7e:d3:04:03:46:f3:1e:28:27:eb:ea:48:c8: e8:84:2c:2c:8c:76:24:de:cb:1f:f1:03:af:d3:cf: e7:45:2d:03:57:f0:b3:9e:34:f2:2d:34:02:cf:d4: 2b:96:72:58:41:fb:a8:3d:49:87:57:38:c7:df:c9: 3b:a1:14:06:03:57:29:47:36:d6:36:12:7a:75:3c: d2:9a:93:11:7b:ba:6a:51:ab:11:fe:89:28:70:c4: 86:8e:33:e0:49:62:66:c8:94:8e:fa:64:96:8f:66: 4b:e3:9f:57:91:21:e5:c4:59:68:0b:c6:7f:64:a0: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7F:28:20:FE:17:8D:13:FB:FA:DE:70:81:7D:97:5F:35:D6:62:87 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:35:44:02:fd:0e:3f:3e:d7:32:1d:da:75:bb:31:b5:d2:4e: 16:f9:5a:aa:30:bd:37:30:37:1c:5e:13:71:d8:6e:76:d0:22: 44:10:bf:32:12:0d:35:4b:52:39:ff:bc:55:83:e2:be:59:12: c1:83:8a:94:ba:77:73:5f:b3:ac:21:6b:b0:eb:9b:94:ab:74: 4b:55:cf:cd:e3:4b:0f:14:10:03:3e:f7:24:f7:51:0f:72:b4: ba:47:3f:22:10:c8:04:ad:b2:d2:c2:8e:1d:9a:89:b3:c9:38: 1a:03:6b:cc:1a:c3:0d:ef:ee:48:ab:3e:79:ec:a0:7e:84:0a: fe:76:5f:c8:63:c9:28:1a:1e:52:ec:fa:3d:5b:97:98:1c:9a: 71:5e:1b:83:7f:59:fb:6a:98:4d:75:cc:c7:65:07:f2:11:85: 3b:dd:8a:6b:2b:8c:b4:14:0c:63:1f:0d:0c:e4:66:b9:93:18: 6e:e3:4f:8b:8f:2f:6d:6d:3f:1e:d4:d1:70:d7:2f:26:38:03: ae:5d:5e:7a:da:f9:2c:b0:9d:39:04:bb:23:49:44:8e:30:25: 2d:7a:eb:58:62:e5:87:93:a2:fb:7b:dc:a7:5e:47:ba:3a:d6: 95:f4:39:aa:6e:29:60:d0:54:c9:24:e2:43:fc:4d:a1:18:5a: 2d:8b:7f:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUxMDIwMDUyNjA3WhcNMjUxMDI3MDUyNjA3WjAYMRYwFAYD VQQDEw02OGY1YzdlZi0zN2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrOVsQOdjkh8V6pmoYjy9E3SbT0VZyfCQOCApv9d0BrNKLyFK7hdBweeIUi+ kxWNvrahlhrZUFsh/DN8mTuRFcfRNI7lQemCL6jKzuYnjD2dC1E/kMMc2cNHJkSh 39bQUCByjTF4CF9rw2Wq6RPYX9/rj64iyE3KbZ6iu6DcswNLYgd1UxKgMH7TBANG 8x4oJ+vqSMjohCwsjHYk3ssf8QOv08/nRS0DV/CznjTyLTQCz9QrlnJYQfuoPUmH VzjH38k7oRQGA1cpRzbWNhJ6dTzSmpMRe7pqUasR/okocMSGjjPgSWJmyJSO+mSW j2ZL459XkSHlxFloC8Z/ZKAKkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPV/KCD+ F40T+/recIF9l1811mKHMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADNUQC/Q4/PtcyHdp1uzG10k4W+VqqML03MDccXhNx2G520CJEEL8y Eg01S1I5/7xVg+K+WRLBg4qUundzX7OsIWuw65uUq3RLVc/N40sPFBADPvck91EP crS6Rz8iEMgErbLSwo4dmomzyTgaA2vMGsMN7+5Iqz557KB+hAr+dl/IY8koGh5S 7Po9W5eYHJpxXhuDf1n7aphNdczHZQfyEYU73YprK4y0FAxjHw0M5Ga5kxhu40+L jy9tbT8e1NFw1y8mOAOuXV562vkssJ05BLsjSUSOMCUteutYYuWHk6L7e9ynXke6 OtaV9Dmqbilg0FTJJOJD/E2hGFoti3/l -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:23 2025 by rpki-client