$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: I63OR2SZEWz7NqMZ1QV/fXPMjzro+KuxqVq6kx7sJeA= Subject key identifier: 5E:85:40:55:B5:52:AE:49:46:5C:34:EF:3D:D8:85:57:D6:FE:9E:CD Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 177D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1572 Signing time: Sat 02 Aug 2025 17:19:37 +0000 Manifest this update: Sat 02 Aug 2025 17:19:36 +0000 Manifest next update: Sat 09 Aug 2025 17:19:36 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: nv2zlDhNNX2S4qxTrkxrpFikKY4KF8U/fHexIPV51dM=) 2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: XdNJgDmkOAWh0JRm8SzUVD6J0pIjuQDztKGWx3vGffA=) 3: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=) 4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=) 5: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: 01GRE88klqRtpUQjt3HlR4NOfDaQxEKnYlzo//41TJA=) 6: 1C98071A68F211F095077372C4F9AE02.roa (hash: zes1myCecfpscY9UBslMnDPhWkdz2XgBP29Qw05z9+c=) 7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: ntAra/tsV/tC6exdTOheJ8SCbtnxtVzna1hDeembiXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6013 (0x177d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Aug 2 17:19:36 2025 GMT Not After : Aug 9 17:19:36 2025 GMT Subject: CN=688e48a9-eca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1c:53:c5:a1:f9:1e:94:be:c3:e2:d3:0a:a1: 09:86:33:4d:49:00:57:05:4a:30:e7:c8:e7:69:f7: 51:8e:39:3b:61:f3:26:ab:ff:6f:17:a0:c6:8e:cf: 7c:59:6f:a4:fe:38:7f:a6:d4:80:61:53:6f:70:65: 92:d8:80:a5:62:f3:9f:c0:ad:eb:37:5e:54:c8:f6: bf:40:85:d6:8b:ac:11:45:e5:9b:6f:4b:4b:cc:3e: da:57:57:ac:d0:f4:98:81:f4:13:69:6b:98:c0:22: 38:3f:3d:df:52:11:48:6d:71:0f:29:a3:23:e8:f4: 09:08:0c:5c:92:a4:2b:27:c5:b6:35:9f:7f:0b:2f: 69:6b:b2:06:8f:ee:6a:a3:f6:1d:d1:02:18:50:d1: 70:bd:47:ac:ab:1b:43:30:82:a0:9c:92:7c:59:d6: 87:d7:f8:23:26:c7:19:63:93:e4:ca:77:b1:94:8b: 42:bb:e4:1c:d2:e8:c7:1e:d8:6b:b8:a0:0b:59:25: e3:1d:ff:7a:95:df:7c:75:cf:93:26:90:5c:bb:90: d4:5d:5d:d9:aa:39:a2:da:f0:34:ba:14:fb:49:aa: f1:2e:96:45:d7:63:54:17:a2:1c:04:fa:31:f5:fa: b4:95:78:af:74:5a:88:5d:93:10:29:50:6c:09:9d: 1e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:85:40:55:B5:52:AE:49:46:5C:34:EF:3D:D8:85:57:D6:FE:9E:CD X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:6d:c0:54:01:d8:0f:18:87:05:34:b8:83:99:ab:e7:cb:5e: e7:8e:92:a0:e3:cc:5e:7d:38:95:d7:87:2d:20:2c:b1:58:3a: d8:dd:7a:64:da:9e:c9:d7:73:ea:21:e5:25:e1:7f:ca:0f:84: bb:f9:a7:4c:cc:94:e7:70:fb:44:b7:c2:a1:ff:c1:9b:d1:b0: 62:17:6c:d5:de:62:aa:73:9a:9b:b2:a1:fa:d8:e4:99:7f:fd: ea:f6:d5:8c:2c:04:71:4b:e0:1f:9c:ae:15:1f:6b:d6:43:63: e6:70:99:33:d3:fb:cb:cf:86:5b:69:58:82:00:19:29:2f:cf: 35:ba:e1:96:62:9c:05:8e:f9:5c:e2:7e:11:ef:20:94:23:c5: 11:b7:08:76:74:0c:0d:ad:52:63:64:cf:29:b9:d6:7e:54:6b: 7e:63:6f:fd:26:04:c0:63:0f:8c:33:a9:e4:24:dd:c3:51:19: 93:44:b1:5c:81:a0:23:26:ce:b4:fd:23:b1:3d:94:50:7b:47: 19:6a:d4:4c:85:e1:c4:e7:40:eb:74:42:da:7a:b8:24:80:37: 45:20:0e:20:8c:2a:e0:5b:6a:9c:5d:5c:9f:00:9c:83:09:7c: 8d:07:33:1b:e7:45:5e:1c:a3:d3:48:c4:5f:37:1a:bc:75:b4: 47:b3:6b:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwODAyMTcxOTM2WhcNMjUwODA5MTcxOTM2WjAYMRYwFAYD VQQDEw02ODhlNDhhOS1lY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RxTxaH5HpS+w+LTCqEJhjNNSQBXBUow58jnafdRjjk7YfMmq/9vF6DGjs98 WW+k/jh/ptSAYVNvcGWS2IClYvOfwK3rN15UyPa/QIXWi6wRReWbb0tLzD7aV1es 0PSYgfQTaWuYwCI4Pz3fUhFIbXEPKaMj6PQJCAxckqQrJ8W2NZ9/Cy9pa7IGj+5q o/Yd0QIYUNFwvUesqxtDMIKgnJJ8WdaH1/gjJscZY5PkynexlItCu+Qc0ujHHthr uKALWSXjHf96ld98dc+TJpBcu5DUXV3Zqjmi2vA0uhT7SarxLpZF12NUF6IcBPox 9fq0lXivdFqIXZMQKVBsCZ0eaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6FQFW1 Uq5JRlw07z3YhVfW/p7NMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhbcBUAdgPGIcFNLiDmavny17njpKg48xefTiV14ctICyxWDrY3Xpk 2p7J13PqIeUl4X/KD4S7+adMzJTncPtEt8Kh/8Gb0bBiF2zV3mKqc5qbsqH62OSZ f/3q9tWMLARxS+AfnK4VH2vWQ2PmcJkz0/vLz4ZbaViCABkpL881uuGWYpwFjvlc 4n4R7yCUI8URtwh2dAwNrVJjZM8pudZ+VGt+Y2/9JgTAYw+MM6nkJN3DURmTRLFc gaAjJs60/SOxPZRQe0cZatRMheHE50DrdELaergkgDdFIA4gjCrgW2qcXVyfAJyD CXyNBzMb50VeHKPTSMRfNxq8dbRHs2so -----END CERTIFICATE-----Generated at Mon Aug 4 04:08:21 2025 by rpki-client