$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json) Hash identifier: RW8IHxuvUgrL7nQyMtF3ZqbrB9qdsJoT2e0ymDiZ2+A= Subject key identifier: 1B:58:EB:FB:ED:16:97:A0:0F:3A:99:0E:BE:3F:FD:15:3B:44:0E:99 Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft Manifest number: D2 Signing time: Sun 10 Aug 2025 21:52:00 +0000 Manifest this update: Sun 10 Aug 2025 21:52:00 +0000 Manifest next update: Sun 17 Aug 2025 21:52:00 +0000 Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: GYp2EHgXCySDFcYahY5pwgcg0x6JJ4IlO5krw9qNscY=) 2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: UWOq5fkDm5PGl0caT9Tr6ZlfhuDlbM6ptz9WKoZ9jFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Validity Not Before: Aug 10 21:52:00 2025 GMT Not After : Aug 17 21:52:00 2025 GMT Subject: CN=68991480-0763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:ab:1d:e8:1f:49:e3:1f:84:96:26:48:71: ba:7b:93:67:e2:57:dc:1a:ff:b1:28:d0:c1:6f:d6: 14:9a:46:a2:90:cb:24:82:fa:d8:74:1b:01:45:94: 30:de:c4:2e:1d:57:72:5a:2d:6a:58:72:eb:f4:97: c6:02:eb:45:c6:15:85:ff:fc:9e:e7:ef:b2:b0:c1: 55:5f:be:4c:25:04:23:64:29:58:7f:c7:c2:00:a1: 83:77:95:67:95:66:ba:ee:cd:f7:51:58:0f:31:66: 74:4e:e8:2c:57:70:9a:43:1f:1c:8d:ab:7c:fb:77: 61:4e:06:67:5c:63:8c:bf:47:b3:e6:ba:9f:7c:54: 5e:72:ae:93:ad:14:79:85:7f:40:7e:12:d5:fa:ac: 74:af:40:5b:80:39:05:f3:25:d4:77:d4:f0:03:a4: b4:ab:a5:f3:0f:d3:06:e4:4c:f8:1c:16:44:ac:e9: 53:81:a8:04:ad:b5:3c:5c:3a:64:c8:dd:2b:0a:9c: ea:ed:21:d2:f9:33:f3:6f:92:40:b9:31:cf:69:9f: f6:d4:cf:04:56:a8:ce:bc:f7:06:87:3c:f8:8a:64: 37:46:1c:78:4f:e1:06:4e:71:b7:ac:92:0d:61:46: 90:f0:38:21:2a:8c:b8:88:b5:76:73:5f:63:a1:d6: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:58:EB:FB:ED:16:97:A0:0F:3A:99:0E:BE:3F:FD:15:3B:44:0E:99 X509v3 Authority Key Identifier: keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:24:e1:13:79:5d:af:ed:76:32:42:3a:d9:01:08:b1:6e:73: 0a:40:04:04:0e:e6:e2:05:ac:37:83:01:45:7b:27:81:66:36: 5f:6f:a7:3c:9d:1f:9b:2a:a3:7a:5f:e6:30:f5:9c:4f:8f:8a: eb:0e:49:8d:23:43:47:80:55:6e:27:63:79:dc:5e:5c:53:45: c7:f6:7a:ed:5d:4d:34:b1:a1:86:8c:83:0e:79:82:af:fd:53: b4:37:84:47:a8:e0:ef:71:f9:6d:0f:b0:a6:14:12:ce:d3:02: 10:49:50:a4:d9:69:87:d8:ca:7b:83:d9:03:30:51:81:08:bb: 14:1a:d8:f5:7d:90:40:cd:d2:1f:6f:66:b1:60:af:a0:4b:88: 78:f1:68:84:e4:f1:27:37:47:98:bf:82:3f:98:1e:cb:5d:45: df:f9:70:67:08:59:da:a8:d2:2e:0f:be:1b:f5:b3:9f:53:81: 43:44:30:e8:d1:85:f0:0f:8d:27:37:ac:77:a2:92:43:18:21: f3:e7:ed:56:93:23:4a:aa:99:f5:85:e2:f7:b3:4d:a1:dc:44: 2e:55:fa:13:af:fc:6b:00:18:7c:bc:49:72:25:bd:0c:98:0d: a4:0c:19:9d:73:a1:a8:da:43:4e:e6:90:c8:52:eb:fa:74:92: 29:5e:1a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKEE0RTZFRTJBMkJENEI2REYzQjM1M0JBRTZCQzQ4OTJB NkQzOEVGMjkwHhcNMjUwODEwMjE1MjAwWhcNMjUwODE3MjE1MjAwWjAYMRYwFAYD VQQDEw02ODk5MTQ4MC0wNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rarHegfSeMfhJYmSHG6e5Nn4lfcGv+xKNDBb9YUmkaikMskgvrYdBsBRZQw 3sQuHVdyWi1qWHLr9JfGAutFxhWF//ye5++ysMFVX75MJQQjZClYf8fCAKGDd5Vn lWa67s33UVgPMWZ0TugsV3CaQx8cjat8+3dhTgZnXGOMv0ez5rqffFRecq6TrRR5 hX9AfhLV+qx0r0BbgDkF8yXUd9TwA6S0q6XzD9MG5Ez4HBZErOlTgagErbU8XDpk yN0rCpzq7SHS+TPzb5JAuTHPaZ/21M8EVqjOvPcGhzz4imQ3Rhx4T+EGTnG3rJIN YUaQ8DghKoy4iLV2c19jodaNewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtY6/vt FpegDzqZDr4//RU7RA6ZMB8GA1UdIwQYMBaAFKTm7ior1LbfOzU7rmvEiSptOO8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC84NjE5NjMxNjNE QTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0ODdOVHV1YThTSkttMDQ3 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC84NjE5NjMxNjNEQTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0 ODdOVHV1YThTSkttMDQ3eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBJOETeV2v7XYyQjrZAQixbnMKQAQEDubiBaw3gwFFeyeBZjZfb6c8 nR+bKqN6X+Yw9ZxPj4rrDkmNI0NHgFVuJ2N53F5cU0XH9nrtXU00saGGjIMOeYKv /VO0N4RHqODvcfltD7CmFBLO0wIQSVCk2WmH2Mp7g9kDMFGBCLsUGtj1fZBAzdIf b2axYK+gS4h48WiE5PEnN0eYv4I/mB7LXUXf+XBnCFnaqNIuD74b9bOfU4FDRDDo 0YXwD40nN6x3opJDGCHz5+1WkyNKqpn1heL3s02h3EQuVfoTr/xrABh8vElyJb0M mA2kDBmdc6Go2kNO5pDIUuv6dJIpXhoT -----END CERTIFICATE-----Generated at Mon Aug 11 13:05:11 2025 by rpki-client