$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json) Hash identifier: C8nBOVPEM812aQ7V11CfNLzcDHvJRFnlTzjocKOVyGE= Subject key identifier: DB:EB:E8:02:BA:A7:0A:A8:89:99:3E:EB:0D:9E:BD:18:F7:3A:A3:F0 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0E36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft Manifest number: 0C29 Signing time: Fri 08 Aug 2025 20:19:13 +0000 Manifest this update: Fri 08 Aug 2025 20:19:12 +0000 Manifest next update: Fri 15 Aug 2025 20:19:12 +0000 Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: hE2f5V+AvqeOh3PCBqvyJiCIzTs9zZsBzURgU1leE8w=) 2: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: s5N2TyQ76d6xMdXE61yLpof0IVsz9xlEvKQDUIYT3lc=) 3: 2713F43471F211F0B2381940C4F9AE02.roa (hash: vNtqGcSLIxhNnMlqrjf+EIrzDbZQ7mAzqWSJQjKC/IU=) 4: 826F7220690211F09A1AA882C4F9AE02.roa (hash: uPcB+snQeAMOy3uNn8k96BI4301OFchjsfbi0h1r2Ak=) 5: 81B16BEA690211F09A1AA882C4F9AE02.roa (hash: A52xK7s5SqKazRlH9eKsHKtWVTLBovqnRHY3H3+Og7E=) 6: 4E2D252A699811F0B3E6984EC4F9AE02.roa (hash: 3gRwjLg8N4vvmv5NGiJ46Vac0E5K7yqz3DuORE8Lbh4=) 7: 7335D310574D11F0AAD7F54FC4F9AE02.roa (hash: xURVh+ChbrSR0lpzPQkCTnrBUDPfvUF8oOayADi2CXQ=) 8: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: IULXHhlu5uT6Tg9jL/yk50UFaDGDqG8EJ1WnwAnbvbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3638 (0xe36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Aug 8 20:19:12 2025 GMT Not After : Aug 15 20:19:12 2025 GMT Subject: CN=68965bc1-2037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:db:81:db:5e:6e:96:3c:8f:b8:e8:f5:8d:7e: aa:07:d3:a7:bb:9a:1a:44:2d:d9:e7:3a:00:bc:4c: 61:13:30:c8:85:e6:e3:08:0d:6e:68:83:f8:e6:eb: 3d:dd:d7:92:53:61:4d:a6:5f:fe:f9:42:b8:4a:fd: d4:02:58:b1:46:58:e2:55:37:2e:85:eb:f9:77:7a: 2e:89:fd:ce:a9:32:c9:54:9c:de:09:d1:14:5f:f4: 65:44:be:90:ea:d4:f4:df:ec:b6:d1:af:4e:eb:55: c2:d3:72:40:cc:ff:ab:5a:6e:0e:49:aa:fc:cc:f3: 48:e1:04:44:36:d0:2b:e9:98:06:eb:5a:41:e8:76: b7:84:be:3d:06:aa:30:a3:5b:42:0c:10:3b:99:99: 18:81:b3:64:f8:e6:62:ad:9b:05:26:35:b1:b5:de: a3:58:bd:18:b3:2c:2a:3e:93:00:0e:42:5f:c5:da: b5:a2:b6:b0:7d:93:5c:6e:dc:07:54:e1:f4:b0:52: 30:ce:48:09:14:a2:9e:1f:1d:c0:05:d2:09:e5:59: 70:6e:2d:db:96:4e:05:ee:1a:fb:b4:c6:2f:41:cf: 83:39:56:72:89:2f:cb:39:5a:6b:32:eb:07:00:95: a1:c8:24:20:fb:a9:cc:ae:5b:5d:89:58:f4:55:f9: f6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EB:E8:02:BA:A7:0A:A8:89:99:3E:EB:0D:9E:BD:18:F7:3A:A3:F0 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:76:30:85:c6:af:1d:7c:ef:ca:0d:58:c4:d6:f6:1a:51:41: 6a:bd:32:93:53:bb:03:b7:43:c8:36:e4:0d:eb:64:35:ef:92: fd:65:30:b2:39:b9:0d:50:6b:ea:b1:71:e8:e5:96:5b:60:57: df:bc:45:80:d0:ad:dd:9e:73:ef:9f:81:43:6e:27:3d:b7:8f: 2a:49:6b:05:ae:65:bd:d3:38:88:3a:b6:51:a1:75:56:e6:aa: cc:3a:e1:dc:df:f3:b4:bc:ce:2d:85:56:1d:5b:b3:5c:4e:44: f2:2d:fc:b2:61:7a:94:6d:ed:a2:85:a1:e8:97:71:0d:2f:af: 8f:5d:50:73:23:44:70:ec:77:17:d5:ef:2f:29:95:68:b0:77: 68:64:f2:61:f2:27:53:46:b9:21:e4:76:ac:66:1f:ea:34:66: 36:34:ac:1c:41:c3:9a:6d:f6:58:cf:94:92:1b:94:6f:32:68: 53:70:c6:bb:db:9c:e3:a8:68:a6:66:29:9f:4c:ae:5d:07:3f: 89:1f:1d:4d:99:0d:ad:6d:12:10:4d:b5:67:64:91:bc:24:89: ce:1b:9f:3d:61:4d:d5:a2:a2:4b:33:64:2d:d4:15:dd:75:19: e7:89:e1:de:d1:00:b6:6a:74:8b:8d:c0:5e:67:14:2f:d3:af: ef:bb:a6:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwODA4MjAxOTEyWhcNMjUwODE1MjAxOTEyWjAYMRYwFAYD VQQDEw02ODk2NWJjMS0yMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkNuB215uljyPuOj1jX6qB9Onu5oaRC3Z5zoAvExhEzDIhebjCA1uaIP45us9 3deSU2FNpl/++UK4Sv3UAlixRljiVTcuhev5d3ouif3OqTLJVJzeCdEUX/RlRL6Q 6tT03+y20a9O61XC03JAzP+rWm4OSar8zPNI4QRENtAr6ZgG61pB6Ha3hL49Bqow o1tCDBA7mZkYgbNk+OZirZsFJjWxtd6jWL0YsywqPpMADkJfxdq1orawfZNcbtwH VOH0sFIwzkgJFKKeHx3ABdIJ5Vlwbi3blk4F7hr7tMYvQc+DOVZyiS/LOVprMusH AJWhyCQg+6nMrltdiVj0Vfn2OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvr6AK6 pwqoiZk+6w2evRj3OqPwMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5 YVJqanA1LS1DQ1BHY3k0bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5djCFxq8dfO/KDVjE1vYaUUFqvTKTU7sDt0PINuQN62Q175L9ZTCy ObkNUGvqsXHo5ZZbYFffvEWA0K3dnnPvn4FDbic9t48qSWsFrmW90ziIOrZRoXVW 5qrMOuHc3/O0vM4thVYdW7NcTkTyLfyyYXqUbe2ihaHol3ENL6+PXVBzI0Rw7HcX 1e8vKZVosHdoZPJh8idTRrkh5HasZh/qNGY2NKwcQcOabfZYz5SSG5RvMmhTcMa7 25zjqGimZimfTK5dBz+JHx1NmQ2tbRIQTbVnZJG8JInOG589YU3VoqJLM2Qt1BXd dRnnieHe0QC2anSLjcBeZxQv06/vu6bZ -----END CERTIFICATE-----Generated at Sun Aug 10 13:53:53 2025 by rpki-client