$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json) Hash identifier: K92B2LzLE6y8HhemyxbrcCKr/QNxk10IGRcZkBFcb2s= Subject key identifier: CA:BE:78:1C:AB:BD:BA:9C:72:84:F9:59:06:BC:55:2A:DE:37:F3:80 Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft Manifest number: 03F8 Signing time: Sun 19 Oct 2025 02:27:42 +0000 Manifest this update: Sun 19 Oct 2025 02:27:42 +0000 Manifest next update: Sun 26 Oct 2025 02:27:42 +0000 Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: 3+8xjGius9iXWJb6K3jKvukKXzlIih3tT3bQb2wmg6M=) 2: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: PFHGyRpc2XbCpMP3oZwcoRFS7cS4eDGCTFH+DmvXr+c=) 3: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: dmwskcX+7K87R4MLVSKhbA64Ib5h40ZpO651aHbL2xA=) 4: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: 8Wa5zRD8JBVDnPrtDrMM10W+ePzBdP7fVD0dPyvthC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Validity Not Before: Oct 19 02:27:42 2025 GMT Not After : Oct 26 02:27:42 2025 GMT Subject: CN=68f44c9e-ec39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:3c:e5:cc:3b:65:2c:86:64:6f:9b:b8:a0: 12:d3:6b:37:e8:5c:8f:02:70:d0:34:10:26:2f:be: 27:5c:95:e3:35:fc:de:7d:7f:20:8b:63:a8:7a:b5: 53:87:ca:6e:fe:2c:72:c1:27:44:f2:bd:58:bf:f5: c2:49:7d:47:61:26:4c:ba:a7:63:e0:16:a5:c8:54: 10:39:11:f4:ce:83:1c:8b:6f:bf:98:58:f9:ee:5a: 8d:e4:dc:9e:ad:97:cc:5d:20:7b:8d:f4:2d:99:a8: f2:91:b0:32:71:4a:6f:19:5b:6f:81:65:87:68:df: 0f:04:7b:d8:1a:c9:85:14:8c:28:ee:bb:ac:03:b3: 6c:bb:f7:bd:07:aa:d3:15:9a:c9:be:7b:a7:a6:25: a5:7b:de:8d:8d:62:c3:41:ad:97:55:18:b4:46:a6: ca:3a:8c:e0:1e:56:42:c6:0a:c6:8e:f9:8d:c4:c0: 56:ee:53:b8:4e:9c:07:8e:af:cd:62:70:de:7c:fd: 4b:24:35:ec:b7:31:e5:bf:b3:ae:bb:65:8d:ec:4e: 6e:05:b4:0b:86:fa:13:75:cd:46:90:68:c7:ca:34: 0e:5f:9e:63:ed:11:05:83:28:0d:19:8f:6f:0f:06: 01:10:4d:38:db:55:9e:aa:f4:23:92:ec:00:23:c6: 40:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BE:78:1C:AB:BD:BA:9C:72:84:F9:59:06:BC:55:2A:DE:37:F3:80 X509v3 Authority Key Identifier: keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:27:b8:74:d8:2a:2b:a3:97:00:de:3c:5f:f0:9e:c1:f4:f9: 3d:f7:b0:4c:8d:49:70:a9:34:d2:e4:ea:18:2d:e9:fc:09:9f: eb:48:db:d7:11:56:e8:18:cc:d4:cc:56:29:db:2f:b3:ee:f6: 49:d2:a0:31:c8:6b:ed:15:95:03:d3:68:8a:aa:41:53:e6:c5: 52:08:0b:8e:de:b7:0c:06:9f:09:ca:88:75:94:71:74:01:80: 73:30:54:2f:52:02:1b:e2:d1:f9:63:d9:78:b1:29:a0:6a:92: fc:38:52:60:f4:58:c5:55:cc:15:3e:73:58:e7:a6:65:c9:9b: f4:51:ee:58:08:6f:7b:20:a2:78:ef:1b:e6:84:61:2c:62:97: 07:d4:9d:a8:1e:11:d0:71:d6:f4:a1:5e:77:b8:b8:dd:71:9e: 6f:12:53:65:c9:8a:8b:5f:10:ff:af:d9:ec:81:9e:5d:fc:bb: d4:06:4e:89:39:03:9b:4a:4d:01:af:8c:87:c9:71:6b:66:9c: 50:c7:7e:29:29:f6:17:03:bf:c3:3c:22:6a:51:be:0f:e5:fb: 66:77:ec:7f:9e:82:bb:88:02:18:c5:39:0f:4b:dd:f7:52:ab: 14:97:28:8f:3e:b9:e7:5a:46:b3:b0:69:0b:a2:ba:98:82:1e: f8:a0:91:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVGMkQxMTAvBgNVBAUTKEEwMTNCMTM4OEEzOTMzQkUxMDZCRUFFRERGRTlGM0I4 MzQ2RDM3NDgwHhcNMjUxMDE5MDIyNzQyWhcNMjUxMDI2MDIyNzQyWjAYMRYwFAYD VQQDEw02OGY0NGM5ZS1lYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSA85cw7ZSyGZG+buKAS02s36FyPAnDQNBAmL74nXJXjNfzefX8gi2OoerVT h8pu/ixywSdE8r1Yv/XCSX1HYSZMuqdj4BalyFQQORH0zoMci2+/mFj57lqN5Nye rZfMXSB7jfQtmajykbAycUpvGVtvgWWHaN8PBHvYGsmFFIwo7rusA7Nsu/e9B6rT FZrJvnunpiWle96NjWLDQa2XVRi0RqbKOozgHlZCxgrGjvmNxMBW7lO4TpwHjq/N YnDefP1LJDXstzHlv7Ouu2WN7E5uBbQLhvoTdc1GkGjHyjQOX55j7REFgygNGY9v DwYBEE0421WeqvQjkuwAI8ZAJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMq+eByr vbqccoT5WQa8VSreN/OAMB8GA1UdIwQYMBaAFKATsTiKOTO+EGvq7d/p87g0bTdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUYyRC9DRDZENkU1Njk4 OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03NFFhLXJ0My1uenVEUnRO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CT3hPSW81TTc0UWEtcnQzLW56dURSdE4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUYyRC9DRDZENkU1Njk4OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03 NFFhLXJ0My1uenVEUnROMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQJ7h02Coro5cA3jxf8J7B9Pk997BMjUlwqTTS5OoYLen8CZ/rSNvX EVboGMzUzFYp2y+z7vZJ0qAxyGvtFZUD02iKqkFT5sVSCAuO3rcMBp8Jyoh1lHF0 AYBzMFQvUgIb4tH5Y9l4sSmgapL8OFJg9FjFVcwVPnNY56ZlyZv0Ue5YCG97IKJ4 7xvmhGEsYpcH1J2oHhHQcdb0oV53uLjdcZ5vElNlyYqLXxD/r9nsgZ5d/LvUBk6J OQObSk0Br4yHyXFrZpxQx34pKfYXA7/DPCJqUb4P5ftmd+x/noK7iAIYxTkPS933 UqsUlyiPPrnnWkazsGkLorqYgh74oJHD -----END CERTIFICATE-----Generated at Mon Oct 20 10:41:43 2025 by rpki-client