$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft File: OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json) Hash identifier: YUBSrEpvHOXNmFNhgzXR7/BaE4cSC5T0Aw/g5QLQABc= Subject key identifier: 4A:AB:C9:76:E8:A4:00:FC:CB:0C:62:AE:81:70:13:4E:53:24:62:5B Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A Certificate issuer: /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Certificate serial: 0A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft Manifest number: 0A97 Signing time: Fri 08 Aug 2025 19:51:01 +0000 Manifest this update: Fri 08 Aug 2025 19:51:00 +0000 Manifest next update: Fri 15 Aug 2025 19:51:00 +0000 Files and hashes: 1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: 0UXLUjOvCIaEID0DjigJtqI1wvX0xiZnAPEFIDM42gI=) 2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: RsV1HG0sblH5nYeZVkL9f/OZ/ev49KnYKTaHyjLrK0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2718 (0xa9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Validity Not Before: Aug 8 19:51:00 2025 GMT Not After : Aug 15 19:51:00 2025 GMT Subject: CN=68965525-e4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:1d:2c:6d:77:4c:86:03:22:96:b5:61:6f: 88:c7:0d:01:38:71:93:2f:35:28:c8:6d:5a:55:65: 6f:2f:db:85:25:92:98:3d:ff:67:65:f5:26:90:1f: 3b:ec:5d:71:66:48:07:0e:f7:c6:e4:b0:7b:cb:24: 16:56:74:fe:4f:81:b4:78:f0:9e:d0:23:7f:f9:d7: 4c:af:1c:4d:be:dd:0b:b8:6b:bb:a9:5f:69:41:79: 1b:28:3c:be:7e:c9:2a:7d:8c:37:5e:e4:cc:2b:94: 15:35:73:33:37:eb:06:5b:49:c9:86:d3:85:ea:45: cf:62:6a:16:40:c6:1e:78:0d:ac:16:c5:66:0c:7f: 73:76:7f:da:83:81:4c:03:dc:e1:f6:f3:74:17:46: 5a:0a:46:e8:29:85:c4:86:f5:c2:a8:7d:ac:69:3f: a0:2f:3e:04:a3:65:a3:01:2f:37:e4:f0:4d:29:57: ba:b5:59:e9:aa:78:75:b6:8d:fe:25:9f:76:c7:da: d8:f8:fe:b7:bf:6c:33:f4:9d:46:82:29:a0:88:79: 15:44:67:ea:34:dc:a6:cf:53:bd:5a:ed:0c:43:20: e9:4b:03:bf:84:36:a3:b5:a6:40:59:fa:eb:99:3d: 89:ea:61:77:07:f0:72:9c:cf:51:44:8e:03:73:01: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AB:C9:76:E8:A4:00:FC:CB:0C:62:AE:81:70:13:4E:53:24:62:5B X509v3 Authority Key Identifier: keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:b8:db:02:bd:f4:49:1d:94:d0:95:ee:1b:df:ff:2f:2a:12: 08:da:04:27:89:97:67:a9:f4:3e:6c:38:09:d4:55:ac:5d:e2: ec:d4:52:e4:a9:94:86:24:ca:13:85:ba:8a:bb:db:4f:59:01: 89:53:0e:e7:37:f0:0c:1d:37:f5:d4:8b:2a:cf:6d:b0:ce:cd: 0c:6e:52:f0:b3:a2:3a:71:e2:c9:d2:57:5b:4d:64:ff:ce:99: 0d:19:67:82:ca:d8:f6:e5:b3:86:bb:0c:74:6e:4a:f9:78:4a: 44:3d:d1:32:69:dc:fb:b0:52:f3:b1:e2:37:cc:f0:f2:cc:29: 66:4a:fc:6f:9d:2e:97:64:14:47:2e:90:8b:4b:9e:9c:c5:0d: 49:eb:4d:dd:64:82:1f:ae:7b:f9:77:55:4f:21:85:92:c3:b0: 9c:ef:43:b1:8c:9a:f0:94:b9:56:6a:a6:11:16:2c:1d:4d:ff: 5f:75:6c:ca:cf:47:04:22:8b:c3:dc:3e:cb:1d:d8:5b:df:47: 29:e8:b9:fd:5f:7c:b0:a8:ca:bd:56:e1:41:1f:46:49:ec:15: f9:47:06:d8:b0:72:e1:cf:e1:04:74:57:39:99:38:9e:97:78: 13:f5:88:23:10:fe:70:9b:d4:06:ab:00:5f:aa:e5:98:2c:6f: f8:65:e3:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzIxMTAvBgNVBAUTKDM4MUU1MzQ4NTA0NkNCMzAyNzkxQzkwOUYyREJENjdE QUY4RDc4MUEwHhcNMjUwODA4MTk1MTAwWhcNMjUwODE1MTk1MTAwWjAYMRYwFAYD VQQDEw02ODk2NTUyNS1lNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunIdLG13TIYDIpa1YW+Ixw0BOHGTLzUoyG1aVWVvL9uFJZKYPf9nZfUmkB87 7F1xZkgHDvfG5LB7yyQWVnT+T4G0ePCe0CN/+ddMrxxNvt0LuGu7qV9pQXkbKDy+ fskqfYw3XuTMK5QVNXMzN+sGW0nJhtOF6kXPYmoWQMYeeA2sFsVmDH9zdn/ag4FM A9zh9vN0F0ZaCkboKYXEhvXCqH2saT+gLz4Eo2WjAS835PBNKVe6tVnpqnh1to3+ JZ92x9rY+P63v2wz9J1GgimgiHkVRGfqNNymz1O9Wu0MQyDpSwO/hDajtaZAWfrr mT2J6mF3B/BynM9RRI4DcwFHsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqryXbo pAD8ywxiroFwE05TJGJbMB8GA1UdIwQYMBaAFDgeU0hQRsswJ5HJCfLb1n2vjXga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMi9GRDg4MzgyMjVG NTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6QW5rY2tKOHR2V2ZhLU5l Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CNVRTRkJHeXpBbmtja0o4dHZXZmEtTmVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMi9GRDg4MzgyMjVGNTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6 QW5rY2tKOHR2V2ZhLU5lQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1uNsCvfRJHZTQle4b3/8vKhII2gQniZdnqfQ+bDgJ1FWsXeLs1FLk qZSGJMoThbqKu9tPWQGJUw7nN/AMHTf11Isqz22wzs0MblLws6I6ceLJ0ldbTWT/ zpkNGWeCytj25bOGuwx0bkr5eEpEPdEyadz7sFLzseI3zPDyzClmSvxvnS6XZBRH LpCLS56cxQ1J603dZIIfrnv5d1VPIYWSw7Cc70OxjJrwlLlWaqYRFiwdTf9fdWzK z0cEIovD3D7LHdhb30cp6Ln9X3ywqMq9VuFBH0ZJ7BX5RwbYsHLhz+EEdFc5mTie l3gT9YgjEP5wm9QGqwBfquWYLG/4ZeM/ -----END CERTIFICATE-----Generated at Sat Aug 9 10:50:46 2025 by rpki-client