$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json) Hash identifier: 9SK8vt12bJbaj8e+7o9FHwFSWSM/ESVLZFZNexweDuk= Subject key identifier: BD:D9:98:E3:E0:00:F6:CF:54:43:4C:C4:BE:B2:3F:76:83:43:7A:BE Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft Manifest number: FF Signing time: Tue 04 Nov 2025 21:46:50 +0000 Manifest this update: Tue 04 Nov 2025 21:46:50 +0000 Manifest next update: Tue 11 Nov 2025 21:46:50 +0000 Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: nGVHfsr6InS5yKfa63gpeE0oLaZbM2/8BFA/TIpEW5E=) 2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: 7FmlPjs6RdFVVzx2SBNvcWPo4zfkd0/gp7rPFjcGA8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Validity Not Before: Nov 4 21:46:50 2025 GMT Not After : Nov 11 21:46:50 2025 GMT Subject: CN=690a744a-42a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:82:2e:96:d1:bb:a8:76:44:70:95:ff:9c: 34:42:18:68:0f:30:8f:85:36:c6:c9:9c:64:b0:59: 13:b6:e2:28:45:4b:74:b0:38:14:3b:0b:08:76:9c: 9c:70:1b:75:59:ba:2a:2d:9e:b7:86:69:68:77:fc: e7:54:60:bd:47:2b:f9:36:00:cd:24:38:04:07:00: 30:c2:0d:8e:2e:c5:d9:64:99:ea:1b:fb:ac:ee:e7: 68:99:6b:ab:71:f7:2d:e2:00:0e:44:87:aa:8c:61: d7:15:50:63:03:70:69:16:98:7e:2f:d3:b1:87:1d: a7:d2:7b:8a:f6:54:06:b4:24:f7:33:e0:b4:e4:8b: 12:12:27:76:ad:9a:8f:6f:42:a2:f5:8a:c6:be:5d: eb:89:3b:69:e9:81:9a:ae:c1:55:97:b6:32:e7:b9: 2d:65:d5:13:cc:0c:e7:a0:a7:73:9e:9f:58:70:7c: 10:58:9c:ec:95:33:0c:56:58:69:6b:25:7b:51:19: 96:d5:8a:bb:e1:ce:5c:19:52:f7:e0:3f:e1:4f:95: 24:4c:2d:27:b3:0f:db:bb:db:56:48:60:e1:70:d5: a9:c5:47:a6:f0:51:95:bb:1f:ca:37:15:c4:24:70: b4:fc:1f:9c:09:96:eb:41:0f:16:c6:73:1e:ab:ee: 7d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D9:98:E3:E0:00:F6:CF:54:43:4C:C4:BE:B2:3F:76:83:43:7A:BE X509v3 Authority Key Identifier: keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c9:ef:f3:da:e4:0c:9a:a5:40:9a:5e:05:9f:96:d9:f7:05: 7d:fc:3b:26:35:ba:5a:0f:70:80:1f:cc:0a:81:e6:3d:d1:d5: ee:98:08:f4:ec:9d:7e:79:15:fe:ca:a4:9d:cc:93:0b:35:c0: 1a:a2:dd:f9:eb:10:47:56:f6:68:4a:06:a8:c9:d5:27:61:45: fa:1f:aa:ef:14:85:4b:42:a2:65:10:d1:ff:15:95:3d:91:9c: 83:ff:f0:48:38:82:8c:74:1c:43:10:d5:3c:ae:9b:3c:ce:cc: 90:c4:2c:11:57:43:67:a1:db:5e:f9:a3:6e:d2:a7:49:f5:37: 4d:36:9c:a4:c2:71:9a:09:46:ca:22:e0:e4:00:63:ac:a1:95: b2:a4:8e:28:82:f4:ec:44:0f:35:9e:9b:06:52:9f:90:7f:d2: 77:e1:f8:ca:00:70:66:1f:3b:4b:c4:f1:79:cb:49:bd:2b:ad: 56:b2:bc:19:8e:d5:41:3c:cb:c6:02:d1:fd:49:13:a5:08:26: 5e:a4:da:bf:c4:9f:19:45:67:7d:93:09:c4:c3:34:ae:55:f7: bf:e2:9f:2c:53:d8:54:77:1f:1a:2f:f2:7e:91:0d:10:1f:65: d1:05:81:78:89:63:a2:2c:2b:be:68:dc:97:69:36:ad:a2:de: 87:7a:bd:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKEE0RTZFRTJBMkJENEI2REYzQjM1M0JBRTZCQzQ4OTJB NkQzOEVGMjkwHhcNMjUxMTA0MjE0NjUwWhcNMjUxMTExMjE0NjUwWjAYMRYwFAYD VQQDEw02OTBhNzQ0YS00MmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAui6CLpbRu6h2RHCV/5w0QhhoDzCPhTbGyZxksFkTtuIoRUt0sDgUOwsIdpyc cBt1WboqLZ63hmlod/znVGC9Ryv5NgDNJDgEBwAwwg2OLsXZZJnqG/us7udomWur cfct4gAORIeqjGHXFVBjA3BpFph+L9Oxhx2n0nuK9lQGtCT3M+C05IsSEid2rZqP b0Ki9YrGvl3riTtp6YGarsFVl7Yy57ktZdUTzAznoKdznp9YcHwQWJzslTMMVlhp ayV7URmW1Yq74c5cGVL34D/hT5UkTC0nsw/bu9tWSGDhcNWpxUem8FGVux/KNxXE JHC0/B+cCZbrQQ8WxnMeq+59IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3ZmOPg APbPVENMxL6yP3aDQ3q+MB8GA1UdIwQYMBaAFKTm7ior1LbfOzU7rmvEiSptOO8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC84NjE5NjMxNjNE QTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0ODdOVHV1YThTSkttMDQ3 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC84NjE5NjMxNjNEQTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0 ODdOVHV1YThTSkttMDQ3eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcye/z2uQMmqVAml4Fn5bZ9wV9/DsmNbpaD3CAH8wKgeY90dXumAj0 7J1+eRX+yqSdzJMLNcAaot356xBHVvZoSgaoydUnYUX6H6rvFIVLQqJlENH/FZU9 kZyD//BIOIKMdBxDENU8rps8zsyQxCwRV0Nnodte+aNu0qdJ9TdNNpykwnGaCUbK IuDkAGOsoZWypI4ogvTsRA81npsGUp+Qf9J34fjKAHBmHztLxPF5y0m9K61WsrwZ jtVBPMvGAtH9SROlCCZepNq/xJ8ZRWd9kwnEwzSuVfe/4p8sU9hUdx8aL/J+kQ0Q H2XRBYF4iWOiLCu+aNyXaTatot6Her0k -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:16 2025 by rpki-client