$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: CCpXy5B/hUggMu8vwWB1nJ6DF9RvByL3/05mHoZTJuY= Subject key identifier: FF:31:39:B0:96:B5:4A:0E:0E:64:A1:37:C0:9C:4B:0E:27:5C:DC:42 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 172F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1536 Signing time: Sat 14 Jun 2025 17:07:39 +0000 Manifest this update: Sat 14 Jun 2025 17:07:38 +0000 Manifest next update: Sat 21 Jun 2025 17:07:38 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: kPDQXaGk1EnTNXVDxR/+1A68dV9NUNb053ekynonDnM=) 2: 8D19F1388B3511EF99F24263C4F9AE02.roa (hash: gmhdCTeQDy7ZZhPDxEc09ZHO2AwhHmlSnWhDAjqEX90=) 3: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: vcJweEpuC7NNxaBhmTy2xwoTWrT/UiEQDd+Y5zN4QIc=) 4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=) 5: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=) 6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: 01GRE88klqRtpUQjt3HlR4NOfDaQxEKnYlzo//41TJA=) 7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: +tASM1DYkwX/+xUea6kyerySpW2PmjdXvmrb5qzV+gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5935 (0x172f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Jun 14 17:07:38 2025 GMT Not After : Jun 21 17:07:38 2025 GMT Subject: CN=684dac5b-9679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:88:ba:27:8f:4a:a8:94:1d:22:71:1a:6d:99: fc:6e:62:1c:65:c6:3c:01:11:84:af:11:4f:1a:cc: e6:14:98:4f:b8:a7:6d:20:1a:67:bc:4e:73:6b:0e: 54:7f:62:19:03:93:5c:fa:21:31:7a:b8:97:94:ba: e2:fd:ac:cb:74:f1:3a:13:42:48:96:98:55:9e:71: da:e2:c5:e0:66:c2:26:70:a3:f7:ac:ca:65:ec:28: 0a:61:88:d4:10:55:c7:c1:d0:6b:49:4a:e4:97:d9: f7:c0:54:6f:e0:13:54:1e:ac:b0:46:91:61:b0:b9: 91:37:f9:19:04:55:90:45:a8:5a:21:e7:69:73:d7: b1:8e:26:f2:6e:4f:4e:21:c4:c3:7f:c9:3e:2f:29: fe:b7:09:a6:19:24:d1:04:00:e7:13:d1:7a:6a:56: 94:45:6b:62:0b:d5:1a:db:83:b2:44:34:1d:81:3d: 17:87:63:d4:b7:a1:95:bc:cc:37:4c:fb:08:8f:18: 1b:bb:04:f8:af:b6:c4:d8:44:32:9a:87:fb:b6:3f: 2c:b9:bb:a9:60:2b:f2:43:80:19:4b:a9:f9:d4:b3: 65:91:e2:84:5a:a0:9d:68:a3:21:07:c5:15:39:35: 0d:d4:5f:0a:b6:d5:06:b8:71:57:7d:b3:7d:4c:ff: e4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:31:39:B0:96:B5:4A:0E:0E:64:A1:37:C0:9C:4B:0E:27:5C:DC:42 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:33:f7:05:df:b2:e5:97:02:3a:ba:18:cd:d9:ec:09:16:01: 55:f3:f0:35:b2:d6:94:94:a9:34:52:ba:ed:c7:e3:91:5c:38: de:35:1e:08:16:0d:12:54:c3:77:aa:82:3c:3f:0f:53:20:4f: 3e:33:4f:6b:04:e3:64:de:09:0f:6b:37:36:a8:e7:a7:e8:da: 5b:86:ea:f2:00:24:a4:5a:ab:ec:55:fd:c3:39:fd:78:9e:6b: d3:93:fa:a0:51:17:9f:80:2d:fd:bb:4b:8d:db:35:5e:84:3d: b2:fc:17:df:50:1e:82:17:c4:36:e8:63:31:3f:84:1f:21:6b: 2d:f6:29:9e:56:07:10:a6:34:b3:bf:da:af:86:0b:06:37:58: 15:19:30:18:03:5c:09:b3:4d:bb:b1:06:a1:7a:96:ab:2f:74: 45:da:12:3f:4a:00:0d:5e:6d:e9:bb:01:51:ad:e3:d2:82:94: 3f:60:37:d2:7b:ad:01:74:fb:d7:d2:c8:c5:1a:16:be:90:e7: 35:57:91:bf:92:22:58:ac:82:8a:6d:a9:83:77:54:31:e3:88: e5:84:ed:4f:98:35:81:48:f9:2c:80:c2:e0:98:48:4c:34:6e: 63:1f:a3:2e:1b:be:04:aa:2f:66:41:df:39:72:a4:64:c0:34: a2:13:9f:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwNjE0MTcwNzM4WhcNMjUwNjIxMTcwNzM4WjAYMRYwFAYD VQQDEw02ODRkYWM1Yi05Njc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoi6J49KqJQdInEabZn8bmIcZcY8ARGErxFPGszmFJhPuKdtIBpnvE5zaw5U f2IZA5Nc+iExeriXlLri/azLdPE6E0JIlphVnnHa4sXgZsImcKP3rMpl7CgKYYjU EFXHwdBrSUrkl9n3wFRv4BNUHqywRpFhsLmRN/kZBFWQRahaIedpc9exjibybk9O IcTDf8k+Lyn+twmmGSTRBADnE9F6alaURWtiC9Ua24OyRDQdgT0Xh2PUt6GVvMw3 TPsIjxgbuwT4r7bE2EQymof7tj8subupYCvyQ4AZS6n51LNlkeKEWqCdaKMhB8UV OTUN1F8KttUGuHFXfbN9TP/kZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8xObCW tUoODmShN8CcSw4nXNxCMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwM/cF37LllwI6uhjN2ewJFgFV8/A1staUlKk0Urrtx+ORXDjeNR4I Fg0SVMN3qoI8Pw9TIE8+M09rBONk3gkPazc2qOen6NpbhuryACSkWqvsVf3DOf14 nmvTk/qgURefgC39u0uN2zVehD2y/BffUB6CF8Q26GMxP4QfIWst9imeVgcQpjSz v9qvhgsGN1gVGTAYA1wJs027sQaheparL3RF2hI/SgANXm3puwFRrePSgpQ/YDfS e60BdPvX0sjFGha+kOc1V5G/kiJYrIKKbamDd1Qx44jlhO1PmDWBSPksgMLgmEhM NG5jH6MuG74Eqi9mQd85cqRkwDSiE58K -----END CERTIFICATE-----Generated at Sun Jun 15 09:38:25 2025 by rpki-client