$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft File: OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json) Hash identifier: bAJhFH8UH7pbWgqVCYhpPl9AFwTjDnsqiQm7M7gEqjc= Subject key identifier: AD:B0:11:BD:12:83:88:94:0B:F5:B4:1A:BF:27:41:54:8D:A8:6A:B6 Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A Certificate issuer: /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Certificate serial: 0AC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft Manifest number: 0ABB Signing time: Sat 18 Oct 2025 20:25:27 +0000 Manifest this update: Sat 18 Oct 2025 20:25:26 +0000 Manifest next update: Sat 25 Oct 2025 20:25:26 +0000 Files and hashes: 1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: Mvk16yx26t0/p7QYvrk2PBvqSPsmh/4JEDsaMKkRwBc=) 2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: RsV1HG0sblH5nYeZVkL9f/OZ/ev49KnYKTaHyjLrK0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2754 (0xac2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Validity Not Before: Oct 18 20:25:26 2025 GMT Not After : Oct 25 20:25:26 2025 GMT Subject: CN=68f3f7b7-f62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:9c:24:b3:bb:68:b3:44:cb:2b:25:52:72: 87:0d:93:76:d7:8d:c6:99:b9:a2:d4:d5:28:8f:96: 86:5b:65:d6:57:e3:80:95:a2:38:b3:20:90:70:89: 5a:50:4c:08:ea:04:0c:ec:f6:1a:8e:2b:e5:92:3a: a7:06:6f:e3:1d:1c:91:97:c5:2b:41:23:d5:24:e4: ca:3c:87:0a:70:f4:27:b5:7b:e3:71:1c:6c:2f:b7: a6:20:7f:a5:83:6b:83:73:4c:7a:2f:8d:4f:5e:d5: 1d:e7:a6:b4:8a:17:8f:75:bb:d5:b6:ef:df:f1:08: bd:2a:6a:c7:d9:4e:42:b3:99:b4:0c:91:b6:f1:7a: 51:2d:e4:e7:99:51:d3:13:bf:83:c0:b8:0a:bf:b8: 13:52:56:4f:78:10:53:06:58:ce:d2:2c:13:d3:bc: 6a:23:6a:c1:9c:15:e1:b3:65:08:d0:14:03:4b:2f: 0d:f9:15:1c:67:ef:8d:f5:f3:72:ce:73:6e:64:4c: 81:32:5b:eb:03:21:ca:98:82:74:72:e2:17:63:01: be:6e:f8:03:39:53:c7:7e:5b:ab:ea:df:1f:48:2e: f6:a8:4f:97:66:47:7e:3a:05:ef:04:7c:26:56:14: d2:ce:e1:84:1a:7a:96:4c:80:5a:31:f3:30:a9:dc: fd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B0:11:BD:12:83:88:94:0B:F5:B4:1A:BF:27:41:54:8D:A8:6A:B6 X509v3 Authority Key Identifier: keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:bf:9a:14:db:40:41:a5:44:ec:9c:ad:86:e4:5e:84:b3:4e: cb:1e:a2:b6:a0:e3:4b:8a:26:42:18:d8:b2:25:d2:e7:73:c0: 0b:83:85:91:54:5c:0c:3d:aa:26:fd:96:74:90:b9:8b:17:11: e3:ed:cf:07:4d:27:19:2f:2f:cf:d0:a6:d6:d1:26:92:e9:c9: ba:6b:15:af:8d:62:5f:38:35:70:aa:fa:5d:93:12:0d:e4:f5: 6a:03:7f:88:f9:cf:a2:d4:cf:f9:d6:7f:21:3b:fe:fe:af:58: bb:7e:fd:bb:4f:8c:40:e3:8c:5f:d2:2d:b2:19:86:dc:9f:24: b7:59:d7:e2:7e:cd:a3:fd:cc:b3:20:e0:3e:b2:fb:27:43:a5: 07:00:72:41:c2:7e:00:a3:3d:3e:89:fa:a4:c2:7f:4e:db:23: a1:99:4d:0a:b1:62:26:36:da:cb:db:b0:d3:86:d0:ce:b6:d1: 10:e9:29:20:dc:23:b7:62:0e:d0:f3:d8:8c:27:c7:1a:e5:73: 89:6f:2a:36:12:5c:77:13:87:17:81:42:bd:c0:ac:a0:1a:ef: 5d:31:7f:24:56:3e:50:99:d7:b8:52:bf:03:2e:a9:c6:d5:7e: 78:4f:bc:93:57:a7:bf:c2:83:c8:6b:e3:95:0c:f7:eb:a6:87: a3:02:08:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzIxMTAvBgNVBAUTKDM4MUU1MzQ4NTA0NkNCMzAyNzkxQzkwOUYyREJENjdE QUY4RDc4MUEwHhcNMjUxMDE4MjAyNTI2WhcNMjUxMDI1MjAyNTI2WjAYMRYwFAYD VQQDEw02OGYzZjdiNy1mNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4KcJLO7aLNEyyslUnKHDZN2143Gmbmi1NUoj5aGW2XWV+OAlaI4syCQcIla UEwI6gQM7PYajivlkjqnBm/jHRyRl8UrQSPVJOTKPIcKcPQntXvjcRxsL7emIH+l g2uDc0x6L41PXtUd56a0ihePdbvVtu/f8Qi9KmrH2U5Cs5m0DJG28XpRLeTnmVHT E7+DwLgKv7gTUlZPeBBTBljO0iwT07xqI2rBnBXhs2UI0BQDSy8N+RUcZ++N9fNy znNuZEyBMlvrAyHKmIJ0cuIXYwG+bvgDOVPHflur6t8fSC72qE+XZkd+OgXvBHwm VhTSzuGEGnqWTIBaMfMwqdz94QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2wEb0S g4iUC/W0Gr8nQVSNqGq2MB8GA1UdIwQYMBaAFDgeU0hQRsswJ5HJCfLb1n2vjXga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMi9GRDg4MzgyMjVG NTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6QW5rY2tKOHR2V2ZhLU5l Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CNVRTRkJHeXpBbmtja0o4dHZXZmEtTmVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMi9GRDg4MzgyMjVGNTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6 QW5rY2tKOHR2V2ZhLU5lQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWv5oU20BBpUTsnK2G5F6Es07LHqK2oONLiiZCGNiyJdLnc8ALg4WR VFwMPaom/ZZ0kLmLFxHj7c8HTScZLy/P0KbW0SaS6cm6axWvjWJfODVwqvpdkxIN 5PVqA3+I+c+i1M/51n8hO/7+r1i7fv27T4xA44xf0i2yGYbcnyS3Wdfifs2j/cyz IOA+svsnQ6UHAHJBwn4Aoz0+ifqkwn9O2yOhmU0KsWImNtrL27DThtDOttEQ6Skg 3CO3Yg7Q89iMJ8ca5XOJbyo2Elx3E4cXgUK9wKygGu9dMX8kVj5Qmde4Ur8DLqnG 1X54T7yTV6e/woPIa+OVDPfrpoejAgjt -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:19 2025 by rpki-client