$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json) Hash identifier: yCbP942RzPkmRQmiqs/mrVTJFtZqVnv3eVK5qzmna44= Subject key identifier: 07:03:E2:A5:81:CB:FD:99:72:B7:C5:5A:98:55:96:9F:89:5B:4A:C4 Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft Manifest number: B8 Signing time: Fri 20 Jun 2025 21:43:06 +0000 Manifest this update: Fri 20 Jun 2025 21:43:05 +0000 Manifest next update: Fri 27 Jun 2025 21:43:05 +0000 Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: R8F+WmAbv6tkLOtSsYXh9SsrhJqU4lNStE9JRrS5zlQ=) 2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: UWOq5fkDm5PGl0caT9Tr6ZlfhuDlbM6ptz9WKoZ9jFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 21:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Validity Not Before: Jun 20 21:43:05 2025 GMT Not After : Jun 27 21:43:05 2025 GMT Subject: CN=6855d5ea-2c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:1a:a8:03:7f:ac:da:50:fb:f6:f5:57:d0: b5:34:0a:f8:43:2a:46:be:0c:dd:2e:ed:67:29:4c: 0a:5a:15:1c:2e:cf:9b:b2:a4:93:3d:e5:18:29:69: dd:05:f6:d4:7d:be:ae:a0:b9:06:6f:2a:7b:ea:d6: 2c:96:8c:9c:9d:6d:6d:06:61:be:e3:f2:c4:63:23: 76:1a:f1:28:53:e3:68:21:f5:0a:78:bd:0d:c8:d2: 1b:c5:4a:21:b6:7e:5d:42:6d:bd:ce:da:bd:00:07: b0:c1:a2:93:a1:33:d7:33:28:f2:75:57:c9:d6:02: 21:61:7c:6b:50:dd:54:25:11:ab:96:a1:55:e7:1a: 84:58:d6:c1:7f:95:d5:d4:1c:ae:e4:f1:f8:26:7f: 18:b7:eb:41:72:e4:89:0e:f6:97:8d:22:49:aa:6e: 22:18:8c:b7:64:40:85:56:4a:ac:b8:d4:05:b1:7e: 18:4b:f4:a2:3c:99:10:00:3f:ed:67:13:1f:06:ce: b4:ec:d6:87:2f:46:35:5a:78:ac:96:59:a1:a1:dc: 6e:b6:47:fe:f3:d2:1d:a9:87:d9:60:f7:2d:9a:df: ae:75:ee:82:f4:45:61:73:37:c7:89:41:4c:05:4e: e0:cc:bf:49:a1:47:e8:17:0f:ad:be:a7:44:e4:95: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:03:E2:A5:81:CB:FD:99:72:B7:C5:5A:98:55:96:9F:89:5B:4A:C4 X509v3 Authority Key Identifier: keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:12:a8:5a:a6:82:37:87:4d:73:e5:02:30:87:41:d2:93:ff: d5:39:e1:73:29:c0:fb:87:ba:fe:fc:2b:49:d1:bf:1c:af:47: fd:30:89:7f:e3:9a:a3:7b:57:84:91:14:71:11:93:6e:5c:4b: 78:35:bd:a5:77:bf:18:52:55:ce:7f:df:7c:ad:18:81:99:a8: 2f:31:8d:62:03:e8:28:db:dd:80:f5:50:29:ee:ef:10:60:88: f9:db:04:ed:05:88:a0:02:f3:48:17:4d:60:73:21:c0:00:06: 04:4a:28:ed:5d:81:45:9e:ac:16:31:2d:df:d6:df:ce:17:76: a1:07:17:5b:e4:d3:9e:0d:57:f5:d9:81:0b:de:f4:4d:99:9d: 02:a4:76:fe:fb:e3:d0:f3:ef:57:28:48:b5:e2:fd:5d:6b:dc: cb:a6:33:16:cd:44:e2:7e:2c:ec:b9:f0:bf:0e:36:f1:ce:44: 71:d6:a5:70:2a:41:94:7b:63:7f:33:93:93:bb:e6:26:aa:c8: 67:4d:4f:bb:72:42:c7:08:e1:27:17:06:c8:9d:07:6d:28:6b: a0:7b:b5:01:8e:a0:92:43:46:09:94:de:8b:b9:a7:74:57:ec: 4f:6f:d1:08:53:4f:b5:b9:b9:55:08:08:8e:b1:20:dd:59:83: db:41:5b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKEE0RTZFRTJBMkJENEI2REYzQjM1M0JBRTZCQzQ4OTJB NkQzOEVGMjkwHhcNMjUwNjIwMjE0MzA1WhcNMjUwNjI3MjE0MzA1WjAYMRYwFAYD VQQDEw02ODU1ZDVlYS0yYzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBQaqAN/rNpQ+/b1V9C1NAr4QypGvgzdLu1nKUwKWhUcLs+bsqSTPeUYKWnd BfbUfb6uoLkGbyp76tYsloycnW1tBmG+4/LEYyN2GvEoU+NoIfUKeL0NyNIbxUoh tn5dQm29ztq9AAewwaKToTPXMyjydVfJ1gIhYXxrUN1UJRGrlqFV5xqEWNbBf5XV 1Byu5PH4Jn8Yt+tBcuSJDvaXjSJJqm4iGIy3ZECFVkqsuNQFsX4YS/SiPJkQAD/t ZxMfBs607NaHL0Y1Wnisllmhodxutkf+89IdqYfZYPctmt+ude6C9EVhczfHiUFM BU7gzL9JoUfoFw+tvqdE5JW/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcD4qWB y/2ZcrfFWphVlp+JW0rEMB8GA1UdIwQYMBaAFKTm7ior1LbfOzU7rmvEiSptOO8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC84NjE5NjMxNjNE QTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0ODdOVHV1YThTSkttMDQ3 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC84NjE5NjMxNjNEQTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0 ODdOVHV1YThTSkttMDQ3eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9EqhapoI3h01z5QIwh0HSk//VOeFzKcD7h7r+/CtJ0b8cr0f9MIl/ 45qje1eEkRRxEZNuXEt4Nb2ld78YUlXOf998rRiBmagvMY1iA+go292A9VAp7u8Q YIj52wTtBYigAvNIF01gcyHAAAYESijtXYFFnqwWMS3f1t/OF3ahBxdb5NOeDVf1 2YEL3vRNmZ0CpHb+++PQ8+9XKEi14v1da9zLpjMWzUTifizsufC/DjbxzkRx1qVw KkGUe2N/M5OTu+YmqshnTU+7ckLHCOEnFwbInQdtKGuge7UBjqCSQ0YJlN6Luad0 V+xPb9EIU0+1ublVCAiOsSDdWYPbQVvQ -----END CERTIFICATE-----Generated at Sat Jun 21 21:18:27 2025 by rpki-client