$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft File: OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json) Hash identifier: X0rmOohO0kikQIidLIcWBzNRR7kRVXvxTih04StkTo4= Subject key identifier: 77:F1:89:B9:F5:45:F1:48:47:EE:C8:9C:89:0F:62:92:34:BB:85:2A Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A Certificate issuer: /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Certificate serial: 0AA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft Manifest number: 0A9E Signing time: Fri 22 Aug 2025 19:40:16 +0000 Manifest this update: Fri 22 Aug 2025 19:40:15 +0000 Manifest next update: Fri 29 Aug 2025 19:40:15 +0000 Files and hashes: 1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: Mk8niKZZw1Qj2kUb8qhWx37+MokN1X0DbczJPyKZ4zc=) 2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: RsV1HG0sblH5nYeZVkL9f/OZ/ev49KnYKTaHyjLrK0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2725 (0xaa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Validity Not Before: Aug 22 19:40:15 2025 GMT Not After : Aug 29 19:40:15 2025 GMT Subject: CN=68a8c79f-fde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:e2:98:f3:06:ce:1c:19:06:35:c0:2f:8a: 8b:bc:ec:49:9e:01:e5:46:47:e9:37:e4:2f:56:8e: 82:9d:11:a5:98:0c:dc:55:a2:d5:83:e2:0d:3b:58: b9:5e:64:e4:4c:42:81:42:8a:9d:23:da:35:aa:e7: 8d:14:b7:c4:a5:8b:72:63:e3:fa:49:c1:21:fb:ec: 24:81:b4:c3:7b:1e:bc:4a:4e:97:43:fa:95:b4:d8: 6e:60:83:e1:c3:07:0d:32:c5:24:11:7e:ee:c0:61: 67:31:45:c6:9f:de:cc:35:9b:2d:ef:02:42:8c:4c: a8:28:17:dc:7d:41:b6:04:2d:ba:17:19:15:a4:6a: 3e:fb:52:df:28:19:3b:15:c5:ed:cb:d5:8b:ce:df: 42:3c:e5:97:a7:38:d8:01:d9:25:e6:f3:02:5d:14: 86:9f:e4:36:fa:68:36:ef:f0:4c:c8:0b:f0:8d:d7: 3a:f2:ed:5b:7d:d0:41:ca:44:ea:38:cd:30:1a:cc: cc:cd:ba:e3:32:60:b1:36:52:f9:4d:57:5d:79:55: da:03:60:3a:30:00:99:b0:b6:e8:08:13:61:17:a3: 8d:c0:8f:d3:b7:24:06:3d:7c:18:b0:64:cd:0a:fc: 34:25:21:af:d2:9f:ee:9a:cc:31:ed:f6:dd:c9:3c: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F1:89:B9:F5:45:F1:48:47:EE:C8:9C:89:0F:62:92:34:BB:85:2A X509v3 Authority Key Identifier: keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3e:35:c4:7f:4f:81:06:98:11:e1:a4:89:f6:0b:0f:03:8f: 09:14:ad:d5:27:3e:6d:99:00:76:01:b8:58:56:9c:15:8e:9d: 19:50:76:89:16:3d:16:e8:f9:c5:e3:87:fa:1b:86:aa:a3:92: c7:9d:ee:db:15:7b:05:27:04:dd:45:a4:0e:2a:87:d4:0a:71: 46:13:c3:ef:67:cb:a1:65:38:2b:ec:9f:bb:6c:1d:57:1b:26: d5:0d:bf:4a:a2:13:da:b7:49:a5:b9:96:5f:e6:29:7c:95:45: e8:97:a7:9a:41:cd:01:43:09:bc:48:dd:93:9d:29:42:f7:5f: 1a:9f:71:fe:6e:17:82:b3:50:b9:8d:9c:e2:51:ec:ab:0e:35: 7e:5b:30:a3:7d:11:8a:ee:3d:90:86:83:7e:89:bc:1e:cb:a8: ef:c4:11:bc:27:db:fd:1c:ae:86:5b:63:fb:b1:b1:50:77:68: 64:fc:cb:0c:71:59:da:03:1f:95:5a:d9:2a:5f:de:19:b9:ce: 97:9c:5c:6d:5d:ee:3c:e0:e3:21:59:3e:f2:fb:b7:6c:bc:55: bf:07:73:71:cc:91:69:fd:64:b6:d1:e6:bb:46:06:61:b8:1e: 90:7b:e7:30:3d:41:87:5f:f0:16:75:16:8f:4a:fe:a0:86:52: 51:ea:26:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzIxMTAvBgNVBAUTKDM4MUU1MzQ4NTA0NkNCMzAyNzkxQzkwOUYyREJENjdE QUY4RDc4MUEwHhcNMjUwODIyMTk0MDE1WhcNMjUwODI5MTk0MDE1WjAYMRYwFAYD VQQDEw02OGE4Yzc5Zi1mZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRTimPMGzhwZBjXAL4qLvOxJngHlRkfpN+QvVo6CnRGlmAzcVaLVg+INO1i5 XmTkTEKBQoqdI9o1queNFLfEpYtyY+P6ScEh++wkgbTDex68Sk6XQ/qVtNhuYIPh wwcNMsUkEX7uwGFnMUXGn97MNZst7wJCjEyoKBfcfUG2BC26FxkVpGo++1LfKBk7 FcXty9WLzt9CPOWXpzjYAdkl5vMCXRSGn+Q2+mg27/BMyAvwjdc68u1bfdBBykTq OM0wGszMzbrjMmCxNlL5TVddeVXaA2A6MACZsLboCBNhF6ONwI/TtyQGPXwYsGTN Cvw0JSGv0p/umswx7fbdyTzXxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfxibn1 RfFIR+7InIkPYpI0u4UqMB8GA1UdIwQYMBaAFDgeU0hQRsswJ5HJCfLb1n2vjXga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMi9GRDg4MzgyMjVG NTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6QW5rY2tKOHR2V2ZhLU5l Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CNVRTRkJHeXpBbmtja0o4dHZXZmEtTmVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMi9GRDg4MzgyMjVGNTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6 QW5rY2tKOHR2V2ZhLU5lQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsPjXEf0+BBpgR4aSJ9gsPA48JFK3VJz5tmQB2AbhYVpwVjp0ZUHaJ Fj0W6PnF44f6G4aqo5LHne7bFXsFJwTdRaQOKofUCnFGE8PvZ8uhZTgr7J+7bB1X GybVDb9KohPat0mluZZf5il8lUXol6eaQc0BQwm8SN2TnSlC918an3H+bheCs1C5 jZziUeyrDjV+WzCjfRGK7j2QhoN+ibwey6jvxBG8J9v9HK6GW2P7sbFQd2hk/MsM cVnaAx+VWtkqX94Zuc6XnFxtXe484OMhWT7y+7dsvFW/B3NxzJFp/WS20ea7RgZh uB6Qe+cwPUGHX/AWdRaPSv6ghlJR6iYf -----END CERTIFICATE-----Generated at Sun Aug 24 03:03:03 2025 by rpki-client