$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: gqa1wB1rUTNoFmDt8gfLmHv3a7NHhC4JtPmrOwK9DCk= Subject key identifier: 1A:AC:99:E9:76:B9:94:E7:31:A9:39:FC:77:D6:2C:ED:8D:20:D1:D7 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: AC Signing time: Sat 23 Aug 2025 06:20:10 +0000 Manifest this update: Sat 23 Aug 2025 06:20:10 +0000 Manifest next update: Sat 30 Aug 2025 06:20:10 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: Gnk/O93kG1NOFXqB/8nFWKGwWkM0SLXSX4Romgmmx1w=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Aug 23 06:20:10 2025 GMT Not After : Aug 30 06:20:10 2025 GMT Subject: CN=68a95d9a-8167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:9e:f0:84:72:5c:31:ae:44:75:67:55:8f: cf:c5:80:24:fb:d0:7c:6c:a3:90:f6:5a:a3:78:9a: 1d:a4:77:90:3b:54:61:e5:b7:c5:99:52:12:4e:e6: 0e:d7:18:77:7c:93:a6:0d:36:0f:ee:2e:70:af:80: 6f:8f:54:56:e1:d8:14:fe:c3:25:b2:8c:74:e0:a5: 85:ae:2c:0c:f4:70:f9:4e:0a:eb:5b:20:95:42:70: a4:37:56:a1:e4:28:c6:bb:13:09:3d:2b:85:a5:61: 71:f8:f0:5e:d7:e8:d5:a9:0d:a6:76:6a:65:49:27: fc:aa:d2:05:27:e4:19:ab:ea:35:c8:7c:66:e7:04: 94:fa:bf:c4:43:26:3d:65:02:e4:e1:ce:55:cf:da: c1:58:fe:16:77:69:74:e3:9c:22:87:8c:6c:ad:f4: 28:40:0a:a2:d5:d0:ab:dc:34:53:ef:75:76:c3:6c: 92:0e:c5:0a:f2:f7:1f:30:f3:4c:89:3a:c0:94:e7: 18:f8:bb:14:b0:e2:4c:fc:c1:8e:cd:eb:5b:55:69: bc:79:20:61:20:b8:c2:ec:cb:40:0f:7e:33:39:5b: df:ab:8d:42:96:40:0d:f0:21:ac:53:eb:33:90:4b: 52:2e:43:5a:ab:1e:db:e0:cf:98:c7:04:c1:29:7b: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AC:99:E9:76:B9:94:E7:31:A9:39:FC:77:D6:2C:ED:8D:20:D1:D7 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:98:29:25:2a:91:b7:70:95:d8:1c:bc:54:7c:ce:b9:ad:15: 75:6e:06:3e:9e:de:6d:43:b6:b4:b7:33:73:a1:16:46:26:b0: 7d:a6:13:b3:fa:9d:1f:ec:00:ce:86:c1:b0:97:26:42:f3:f7: d6:2d:9e:6f:1a:95:51:f1:62:4f:ea:18:ef:f1:18:0f:4a:14: 8f:2c:fc:73:9b:db:83:cc:80:d7:6e:65:b1:ac:ea:0e:ef:98: d0:0a:04:d5:95:e5:2d:ec:56:e7:76:1b:d5:d8:75:40:4d:f9: 8a:0f:4b:b5:c2:98:c3:bd:71:b8:40:2e:87:eb:22:e3:be:99: e9:e3:29:4f:3c:41:c3:02:fa:dc:c3:cc:fb:3a:e1:a4:f6:24: 10:7d:0f:7a:0f:e0:3d:59:d3:08:b9:35:1d:64:ce:79:22:fa: 0e:43:37:8a:77:f0:ee:c2:21:71:71:3f:57:3d:cb:af:67:18: 2d:ad:d4:d2:96:96:4c:35:46:ea:76:03:48:06:ca:87:2e:f7: 65:da:3b:47:94:70:24:b2:67:38:2b:13:16:e7:48:b5:b2:84: 05:58:e0:6d:e4:cd:30:de:0f:76:3e:18:0d:f5:5c:4d:e8:91: f9:e9:70:ef:b5:1b:b5:71:84:d7:4d:04:18:c2:a9:49:13:23: 21:49:6e:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjUwODIzMDYyMDEwWhcNMjUwODMwMDYyMDEwWjAYMRYwFAYD VQQDEw02OGE5NWQ5YS04MTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMue8IRyXDGuRHVnVY/PxYAk+9B8bKOQ9lqjeJodpHeQO1Rh5bfFmVISTuYO 1xh3fJOmDTYP7i5wr4Bvj1RW4dgU/sMlsox04KWFriwM9HD5TgrrWyCVQnCkN1ah 5CjGuxMJPSuFpWFx+PBe1+jVqQ2mdmplSSf8qtIFJ+QZq+o1yHxm5wSU+r/EQyY9 ZQLk4c5Vz9rBWP4Wd2l045wih4xsrfQoQAqi1dCr3DRT73V2w2ySDsUK8vcfMPNM iTrAlOcY+LsUsOJM/MGOzetbVWm8eSBhILjC7MtAD34zOVvfq41ClkAN8CGsU+sz kEtSLkNaqx7b4M+YxwTBKXs7BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqsmel2 uZTnMak5/HfWLO2NINHXMB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBymCklKpG3cJXYHLxUfM65rRV1bgY+nt5tQ7a0tzNzoRZGJrB9phOz +p0f7ADOhsGwlyZC8/fWLZ5vGpVR8WJP6hjv8RgPShSPLPxzm9uDzIDXbmWxrOoO 75jQCgTVleUt7FbndhvV2HVATfmKD0u1wpjDvXG4QC6H6yLjvpnp4ylPPEHDAvrc w8z7OuGk9iQQfQ96D+A9WdMIuTUdZM55IvoOQzeKd/DuwiFxcT9XPcuvZxgtrdTS lpZMNUbqdgNIBsqHLvdl2jtHlHAksmc4KxMW50i1soQFWOBt5M0w3g92PhgN9VxN 6JH56XDvtRu1cYTXTQQYwqlJEyMhSW6z -----END CERTIFICATE-----Generated at Sat Aug 23 16:19:31 2025 by rpki-client