$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json) Hash identifier: vzaT7bdOlkH+RNLA3x7b2EbSL4b7VtDjttM37VxFcSQ= Subject key identifier: AE:1B:0B:77:B0:8B:EE:DF:AF:58:97:8F:A4:FA:D6:DE:EF:B2:38:DD Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0ED3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft Manifest number: 0C94 Signing time: Tue 04 Nov 2025 19:59:22 +0000 Manifest this update: Tue 04 Nov 2025 19:59:21 +0000 Manifest next update: Tue 11 Nov 2025 19:59:21 +0000 Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: /8+oJOHIyTju5ng52WM2he1Lu3ZPChFE1xVh7pV/JAA=) 2: 8FF3B806B0D411F0955C2A4DC4F9AE02.roa (hash: rpUhoGdIDBVafKl8qBkBhc3QB9uFh7VuBkjsoTkTb4Y=) 3: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: s5N2TyQ76d6xMdXE61yLpof0IVsz9xlEvKQDUIYT3lc=) 4: 0BF08A149F8311F0A408C363C4F9AE02.roa (hash: RUhEIgZP33Il919uCgBWXbTJ8ssUQgqlgvLzN3g9JA4=) 5: CE96CCA2B6FF11F09F680173C4F9AE02.roa (hash: JPZwvu48lIAxJOJKfpYhYpdb2ERT3qaWoGBCnLQXsJI=) 6: 7316D720AB4011F088F0CE30C4F9AE02.roa (hash: j1D2LXrywK4KBLgXfVHzrKrqz//GdKARR+TTpuFTLmk=) 7: 20C856389F8311F089B0D463C4F9AE02.roa (hash: b3tA2TdLP1BkSFeIpGGEVgtBYC21TwBxlah/IIc3Izc=) 8: DD7284DE9C6811F09C300140C4F9AE02.roa (hash: 5oUICFfPnTHSTwHUjjxj5Beaj/vKF9/PqerMw1qf/ls=) 9: 1D5C6E6CA0FA11F0B026D133C4F9AE02.roa (hash: C2XpgyfnYYZHApkuumNQPttPRBeBZUCBK2LL1AJJb7g=) 10: 4E2D252A699811F0B3E6984EC4F9AE02.roa (hash: QSoFsbrgjFW6Q9mEy4RafdhOrYTNfIv5s2+VFrUWtlk=) 11: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: IULXHhlu5uT6Tg9jL/yk50UFaDGDqG8EJ1WnwAnbvbg=) 12: DDDB0ED29C6811F09C300140C4F9AE02.roa (hash: hMG8BeWAlOq8F9AY3K1GWzCocfxcFLG69eCgS4VLkeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3795 (0xed3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Nov 4 19:59:21 2025 GMT Not After : Nov 11 19:59:21 2025 GMT Subject: CN=690a5b19-8dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:cd:6f:46:38:3e:b7:27:72:af:5b:c1:0c: 96:a2:7d:fa:99:ac:6d:12:74:e5:df:d0:61:10:1b: fa:97:82:17:97:c0:02:19:01:b1:4c:a5:e6:b3:0d: e0:99:a4:b4:c6:92:19:e1:4a:db:b6:7c:c3:40:96: d8:78:6a:70:f1:78:ee:e9:5b:5b:d2:57:9e:ac:f4: 7a:d0:11:db:da:b1:8b:7d:34:dc:91:ef:42:f0:59: 05:87:77:65:d6:99:84:ee:43:60:90:1d:0f:b9:c0: d8:1a:e8:f4:10:cf:69:cb:b8:82:bf:fe:a9:14:f2: 94:9a:63:85:77:1f:c1:f5:2b:2e:ea:2b:ea:85:9d: 6a:d0:46:ff:4d:2e:5a:b9:27:05:30:bd:3b:74:a6: 95:36:bb:db:ec:67:5a:fe:ac:05:50:06:2c:a7:43: 5b:48:7e:aa:80:1a:f0:6e:0f:a7:2c:b9:ef:87:f8: 4b:e4:22:4d:87:09:12:0d:5a:ec:08:c0:63:87:2c: 74:ab:d0:45:26:17:4b:2e:c5:84:9d:04:44:ae:e7: f9:d1:f1:66:e4:a8:ce:1a:2a:ce:eb:47:44:a8:67: 91:e2:0d:78:fb:c1:49:9e:71:f6:53:4b:51:45:db: 8f:16:39:6a:a5:55:e5:94:c0:e1:f7:51:f7:b7:ea: 88:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1B:0B:77:B0:8B:EE:DF:AF:58:97:8F:A4:FA:D6:DE:EF:B2:38:DD X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c7:00:e2:64:d3:0c:59:1b:8e:38:42:29:ed:49:f6:84:05: b0:3e:3c:5f:08:59:c3:d3:b5:bc:d1:01:aa:ff:35:b5:2e:25: 4a:73:32:b5:d5:53:41:2a:13:b4:db:72:9d:d8:5a:b5:b8:31: cd:66:0d:f3:7c:39:f4:6b:ff:f3:b3:22:93:77:62:36:9e:8c: 61:dc:59:91:81:53:bd:24:88:26:12:88:06:16:6c:4c:2f:31: 24:d0:6b:6d:37:1f:14:7b:9d:cd:d6:b1:55:34:b6:53:cf:f6: 5d:d8:3a:2c:d0:f2:be:9e:01:5c:b3:23:4c:27:e1:ac:be:75: 79:09:26:33:7d:57:bb:99:9c:1d:e0:f9:51:f5:67:9d:27:90: 21:94:98:2a:ca:8e:fb:65:e9:f2:e0:d3:ca:f6:40:ad:35:eb: 7f:41:37:3f:55:f9:30:35:a5:eb:a3:b5:cd:9f:89:87:00:5c: de:d2:d8:ac:dd:f4:24:4d:6f:bf:73:28:5a:4c:a4:72:f0:ed: 59:1b:7a:d5:2b:e7:76:10:15:97:3d:ac:31:aa:2c:0d:5d:1b: 5e:06:d5:b3:d5:a5:be:44:44:fd:d7:2a:36:63:13:02:83:12: 53:5f:77:d6:80:68:9e:0a:f4:56:fa:27:87:b2:7c:94:c5:a9: b9:e0:6f:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUxMTA0MTk1OTIxWhcNMjUxMTExMTk1OTIxWjAYMRYwFAYD VQQDEw02OTBhNWIxOS04ZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEjNb0Y4Prcncq9bwQyWon36maxtEnTl39BhEBv6l4IXl8ACGQGxTKXmsw3g maS0xpIZ4UrbtnzDQJbYeGpw8Xju6Vtb0leerPR60BHb2rGLfTTcke9C8FkFh3dl 1pmE7kNgkB0PucDYGuj0EM9py7iCv/6pFPKUmmOFdx/B9Ssu6ivqhZ1q0Eb/TS5a uScFML07dKaVNrvb7Gda/qwFUAYsp0NbSH6qgBrwbg+nLLnvh/hL5CJNhwkSDVrs CMBjhyx0q9BFJhdLLsWEnQREruf50fFm5KjOGirO60dEqGeR4g14+8FJnnH2U0tR RduPFjlqpVXllMDh91H3t+qIPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4bC3ew i+7fr1iXj6T61t7vsjjdMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5 YVJqanA1LS1DQ1BHY3k0bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWxwDiZNMMWRuOOEIp7Un2hAWwPjxfCFnD07W80QGq/zW1LiVKczK1 1VNBKhO023Kd2Fq1uDHNZg3zfDn0a//zsyKTd2I2noxh3FmRgVO9JIgmEogGFmxM LzEk0GttNx8Ue53N1rFVNLZTz/Zd2Dos0PK+ngFcsyNMJ+GsvnV5CSYzfVe7mZwd 4PlR9WedJ5AhlJgqyo77Zeny4NPK9kCtNet/QTc/VfkwNaXro7XNn4mHAFze0tis 3fQkTW+/cyhaTKRy8O1ZG3rVK+d2EBWXPawxqiwNXRteBtWz1aW+RET91yo2YxMC gxJTX3fWgGieCvRW+ieHsnyUxam54G+N -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:27 2025 by rpki-client