$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json) Hash identifier: Y5ba6o3798ZyA1dxTL3WnfTT0cm+fsg65Pj8zpnSTwk= Subject key identifier: 73:6C:76:ED:F2:2B:8B:6C:B2:17:FD:1C:6B:98:B4:AE:AF:11:6D:24 Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft Manifest number: 051D Signing time: Fri 22 Aug 2025 23:47:27 +0000 Manifest this update: Fri 22 Aug 2025 23:47:27 +0000 Manifest next update: Fri 29 Aug 2025 23:47:27 +0000 Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: Gva32e288zsDxfMAF9CTCTyW9YfRsclvF910NVE6ze8=) 2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: c5J0KdHOLoi3ObVHZJngE8j6ijFOnrM4KMu8sfCJ1Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Aug 22 23:47:27 2025 GMT Not After : Aug 29 23:47:27 2025 GMT Subject: CN=68a9018f-4c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:a9:08:52:5e:f5:4e:16:03:e7:9b:24:63: 0d:ee:d0:20:4a:49:ae:3d:6a:4e:66:36:35:e9:b2: 9f:7a:81:fb:ee:8a:e1:7a:37:2f:9d:7e:31:97:06: 09:91:ee:a2:a0:c3:69:9a:20:8e:38:80:c0:0e:61: 04:10:4a:88:13:ba:ab:0b:23:3d:63:e5:68:d7:1e: 8d:91:80:1b:fd:9f:a7:38:50:0a:8b:f8:2c:1c:db: 0b:0c:86:fd:b5:c4:b7:12:e2:95:31:a9:e8:f3:9d: 6e:f5:3c:a7:e3:db:0a:e0:ce:dc:d5:c8:c9:e8:18: 09:03:3c:34:9e:a8:b1:b2:96:01:7d:54:97:6e:fe: f3:6f:51:d6:af:19:37:d8:9f:0a:10:05:43:8a:2e: 0c:09:2e:5e:02:47:5f:10:8d:68:eb:ae:ce:56:96: 26:32:d8:55:91:c0:ee:78:6d:bd:d2:b2:47:02:bf: 04:1a:02:0b:c8:28:56:46:b8:94:25:f3:77:3e:b1: 69:34:93:59:d5:b5:2c:09:eb:5f:2d:07:fa:e1:6a: 10:34:cc:0a:b7:77:86:c5:e3:f1:5f:d2:6d:5b:c3: fb:74:20:0b:bd:30:df:e1:37:81:a5:2e:93:eb:29: 08:5f:af:d7:7f:cb:d3:59:44:12:30:95:2d:db:7f: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6C:76:ED:F2:2B:8B:6C:B2:17:FD:1C:6B:98:B4:AE:AF:11:6D:24 X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:00:0b:cb:eb:6c:83:62:77:04:4e:3b:ac:fb:44:5c:6b:39: 72:6d:a2:38:df:35:a0:51:2d:2f:ac:bf:00:ba:c0:af:f2:a6: e4:4e:b6:67:40:c4:7b:e3:d4:22:95:50:f3:02:be:ac:32:64: 57:18:f7:d7:83:2b:d3:3b:58:24:54:4b:c5:c3:e6:f4:ce:ee: f2:f8:c2:c9:28:eb:43:08:c8:de:ed:8e:f1:ca:dd:c1:bf:1c: 66:91:e1:2a:37:7b:e8:3d:e3:ce:7e:65:78:24:9c:4b:11:d0: 04:58:f6:a1:76:8e:db:bb:b2:ae:f7:d8:d2:ae:25:b8:84:96: 1b:9c:72:b0:ac:df:f8:b7:c2:17:10:f9:2a:62:fe:99:2b:97: bd:88:e9:6a:ff:af:23:48:e3:82:1e:f0:32:2f:0e:9c:c4:fc: 17:90:a3:18:a2:73:0f:16:17:c9:c5:c2:59:72:43:19:c9:e7: 9e:f2:5d:4c:15:3c:82:5a:fc:fa:a0:92:67:8e:55:99:ec:f8: 5e:04:09:00:f1:90:0a:9c:e6:06:f0:51:ac:2f:63:26:5e:00: 61:d6:fa:3c:39:0d:3b:71:11:1a:7f:9b:74:ea:9d:d9:b6:01: a4:2c:ba:ff:aa:2d:5e:7b:96:8f:6b:ec:e1:f9:c1:53:e0:fa: 03:94:86:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjUwODIyMjM0NzI3WhcNMjUwODI5MjM0NzI3WjAYMRYwFAYD VQQDEw02OGE5MDE4Zi00YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8SpCFJe9U4WA+ebJGMN7tAgSkmuPWpOZjY16bKfeoH77orhejcvnX4xlwYJ ke6ioMNpmiCOOIDADmEEEEqIE7qrCyM9Y+Vo1x6NkYAb/Z+nOFAKi/gsHNsLDIb9 tcS3EuKVMano851u9Tyn49sK4M7c1cjJ6BgJAzw0nqixspYBfVSXbv7zb1HWrxk3 2J8KEAVDii4MCS5eAkdfEI1o667OVpYmMthVkcDueG290rJHAr8EGgILyChWRriU JfN3PrFpNJNZ1bUsCetfLQf64WoQNMwKt3eGxePxX9JtW8P7dCALvTDf4TeBpS6T 6ykIX6/Xf8vTWUQSMJUt23/slQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNsdu3y K4tsshf9HGuYtK6vEW0kMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew dGZoaE55ZE5RbEVfTjFPa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfAAvL62yDYncETjus+0RcazlybaI43zWgUS0vrL8AusCv8qbkTrZn QMR749QilVDzAr6sMmRXGPfXgyvTO1gkVEvFw+b0zu7y+MLJKOtDCMje7Y7xyt3B vxxmkeEqN3voPePOfmV4JJxLEdAEWPahdo7bu7Ku99jSriW4hJYbnHKwrN/4t8IX EPkqYv6ZK5e9iOlq/68jSOOCHvAyLw6cxPwXkKMYonMPFhfJxcJZckMZyeee8l1M FTyCWvz6oJJnjlWZ7PheBAkA8ZAKnOYG8FGsL2MmXgBh1vo8OQ07cREaf5t06p3Z tgGkLLr/qi1ee5aPa+zh+cFT4PoDlIbx -----END CERTIFICATE-----Generated at Sat Aug 23 13:36:24 2025 by rpki-client