$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json) Hash identifier: QALVOiBijLhOhEIb8BETR34aWoXbuveQjz/RVeKt7+w= Subject key identifier: 5E:F7:7C:A7:4D:B7:99:3A:6E:45:A2:8E:C5:D3:74:30:A9:C5:CB:83 Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 0596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft Manifest number: 058D Signing time: Thu 26 Mar 2026 23:02:41 +0000 Manifest this update: Thu 26 Mar 2026 23:02:40 +0000 Manifest next update: Thu 02 Apr 2026 23:02:40 +0000 Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: pJQ9u9SoHUFsFNOq2tnozOCiF+f4IN4DsHoqx2nLiAI=) 2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: 0SaqMb330usfcrtRPgjBAgbasyEjNprf9GgoNQTfu2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1430 (0x596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Mar 26 23:02:40 2026 GMT Not After : Apr 2 23:02:40 2026 GMT Subject: CN=69c5bb10-53d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:c9:56:85:5a:e9:f1:4d:0a:2a:7e:64:b4: 54:90:ec:ae:d6:ab:a2:e7:fd:6e:84:4d:39:6a:ca: 34:ba:9b:09:77:16:98:09:e9:b7:35:4c:b4:1c:fe: 53:96:0a:e5:cb:e8:79:1b:c6:42:b8:04:97:a6:d5: 4b:04:b8:d1:be:c7:9d:cb:8a:40:ed:bf:df:e1:72: 34:78:27:52:70:17:3b:38:96:ec:a1:c5:21:cd:3a: 0b:58:e7:19:85:5c:34:fc:10:30:0e:28:79:86:b7: da:37:93:de:5c:47:46:8b:fe:a3:34:1a:25:e7:7b: a8:1d:72:2f:e2:ab:38:70:e3:bd:d1:22:f2:30:5d: 22:17:de:91:05:14:66:4c:6e:82:05:bb:31:a3:84: e6:b8:19:ba:11:b7:61:4e:31:6f:2b:ce:ac:e7:f7: 4d:72:5b:8d:2f:ff:e0:7f:0a:ff:0f:31:39:6a:8e: 0f:5b:71:88:0d:dc:30:ef:bb:94:27:ca:9d:47:74: b6:28:98:58:49:06:94:37:66:66:ad:43:fc:8f:9c: 1a:f1:67:64:3a:7a:ee:35:7f:3f:d2:32:83:fb:a8: ea:a1:96:b5:78:7d:34:42:a2:cd:60:24:3b:44:08: 85:8f:64:9c:4c:3d:3e:bd:c9:18:8b:59:b9:63:f8: 40:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F7:7C:A7:4D:B7:99:3A:6E:45:A2:8E:C5:D3:74:30:A9:C5:CB:83 X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:ae:ef:13:f6:a8:0e:24:b9:8d:2e:a5:8d:af:58:4c:28:ae: 64:4a:43:08:90:9c:38:62:87:70:14:9a:8a:95:96:b6:6d:2b: 02:f4:d3:23:db:88:b2:f7:4d:7b:f3:b8:ae:ba:15:5f:79:ab: 66:27:af:a5:08:c7:7b:e8:dd:9a:82:10:8c:b6:e0:c4:af:53: a3:0d:10:a8:50:91:04:1d:6f:57:84:36:93:5e:78:f6:94:29: 9b:b7:da:92:e9:47:a5:a4:bd:41:fc:8d:ce:85:07:6f:fd:63: 58:38:f1:dc:b3:dd:b9:2c:da:8b:8b:dd:5b:30:8d:ee:5f:4d: 62:ce:6b:21:08:c8:dc:94:3d:6f:18:94:5c:6b:3c:86:ab:6d: b7:6a:59:fd:16:5c:f2:20:d4:39:e8:ec:32:da:28:f1:60:e6: c6:0c:4b:51:8f:d4:72:2d:37:05:0a:d8:34:20:18:55:c7:b9: d7:a0:3f:a8:c8:c1:94:9d:da:16:8e:1f:4c:f5:22:1c:9c:c2: 9a:bb:04:d1:b0:e2:86:5f:b7:a4:f9:6b:a5:4f:ad:dd:8e:35: c5:58:2f:61:15:57:3b:9b:2d:65:fa:0b:fc:ac:86:e9:cb:59: 8f:70:88:37:3a:50:0c:6d:08:87:f4:43:cd:2d:8b:49:b8:78: 4f:82:54:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjYwMzI2MjMwMjQwWhcNMjYwNDAyMjMwMjQwWjAYMRYwFAYD VQQDEw02OWM1YmIxMC01M2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj07JVoVa6fFNCip+ZLRUkOyu1qui5/1uhE05aso0upsJdxaYCem3NUy0HP5T lgrly+h5G8ZCuASXptVLBLjRvsedy4pA7b/f4XI0eCdScBc7OJbsocUhzToLWOcZ hVw0/BAwDih5hrfaN5PeXEdGi/6jNBol53uoHXIv4qs4cOO90SLyMF0iF96RBRRm TG6CBbsxo4TmuBm6EbdhTjFvK86s5/dNcluNL//gfwr/DzE5ao4PW3GIDdww77uU J8qdR3S2KJhYSQaUN2ZmrUP8j5wa8WdkOnruNX8/0jKD+6jqoZa1eH00QqLNYCQ7 RAiFj2ScTD0+vckYi1m5Y/hA4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF73fKdN t5k6bkWijsXTdDCpxcuDMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew dGZoaE55ZE5RbEVfTjFPa2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu67vE/aoDiS5jS6lja9YTCiuZEpDCJCcOGKHcBSaipWWtm0rAvTTI9uIsvdN e/O4rroVX3mrZievpQjHe+jdmoIQjLbgxK9Tow0QqFCRBB1vV4Q2k1549pQpm7fa kulHpaS9QfyNzoUHb/1jWDjx3LPduSzai4vdWzCN7l9NYs5rIQjI3JQ9bxiUXGs8 hqttt2pZ/RZc8iDUOejsMtoo8WDmxgxLUY/Uci03BQrYNCAYVce516A/qMjBlJ3a Fo4fTPUiHJzCmrsE0bDihl+3pPlrpU+t3Y41xVgvYRVXO5stZfoL/KyG6ctZj3CI NzpQDG0Ih/RDzS2LSbh4T4JU5w== -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:52 2026 by rpki-client