$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json) Hash identifier: YecB0//vhq5ccfZKb6hsUC4uuqTI1nbb3ucQV/sEWOA= Subject key identifier: 2A:7E:A5:12:36:30:35:6C:F7:67:09:C0:00:3E:98:8C:F2:64:D6:0F Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft Manifest number: 053A Signing time: Sun 19 Oct 2025 01:14:34 +0000 Manifest this update: Sun 19 Oct 2025 01:14:33 +0000 Manifest next update: Sun 26 Oct 2025 01:14:33 +0000 Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: cmRDG8701zdkE0PDcZmMWmEDLEzEldp4sOaP/nBL+ew=) 2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: c5J0KdHOLoi3ObVHZJngE8j6ijFOnrM4KMu8sfCJ1Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Oct 19 01:14:33 2025 GMT Not After : Oct 26 01:14:33 2025 GMT Subject: CN=68f43b79-843b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:d4:e9:e4:b3:95:bf:70:e1:45:ef:eb:aa: a1:27:cb:36:96:0e:98:7d:63:90:75:0b:1a:b7:4f: 45:72:b1:73:19:2c:47:45:fd:61:31:ba:66:38:9f: ce:da:24:ad:fd:d3:6c:80:d3:3d:11:a8:28:d7:0f: d3:7c:24:01:44:e0:00:88:b4:df:30:55:4a:ca:f7: 1e:c4:3d:10:e0:dd:15:49:46:d5:5a:cb:32:bc:d9: ec:88:20:33:46:41:ee:af:15:ee:7d:4a:07:79:10: 6b:06:17:89:0a:8e:15:79:46:5b:6c:a7:e9:64:2d: 39:33:e7:59:40:2d:6d:37:e8:4b:3f:91:b2:cd:0b: fd:94:bf:d2:d8:7c:45:8c:6c:11:a4:82:9d:70:20: ee:23:ca:18:29:5a:c6:19:01:da:fa:f8:df:4c:9f: 06:a1:0a:14:66:f0:8b:0a:e8:fc:60:a1:c0:1c:73: 30:b6:93:18:b8:78:13:59:83:fe:ae:ba:a2:92:41: 69:c2:58:53:d2:85:2b:f2:a3:8a:5b:c3:a7:36:e7: 8a:ba:00:ae:84:09:d9:60:bd:a4:5c:5b:0b:be:14: a6:e9:b0:fd:91:af:48:25:8b:4f:53:1b:e4:e7:82: 91:d0:2a:e9:9f:d8:f2:05:70:44:c8:4f:69:11:ff: 52:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7E:A5:12:36:30:35:6C:F7:67:09:C0:00:3E:98:8C:F2:64:D6:0F X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:4d:c4:20:fb:e2:bc:35:38:0b:1b:ce:a2:b3:1a:c6:24:c0: a2:12:d9:1f:e0:52:95:00:99:9d:92:a5:09:af:c2:be:26:4d: 86:59:0e:f2:7f:d9:5f:08:79:d4:2a:39:26:59:dc:54:83:0f: 5e:3f:c9:f0:7e:27:f6:70:a9:22:e9:c0:87:32:15:c1:ef:a7: 71:f4:a8:4a:48:8a:aa:b8:43:92:b9:bd:40:ce:a5:42:0f:aa: fe:ae:88:4a:59:c1:87:31:79:d2:23:d4:48:45:00:9d:13:2a: d6:3c:b8:c9:1e:d9:fc:c0:dc:ae:2f:1f:2d:2e:1e:f7:26:34: df:ba:b9:3c:9e:6c:92:a2:7a:d0:96:44:cb:49:f7:cf:c5:4b: 67:7a:24:f1:fb:50:b5:cd:69:b1:fe:bd:54:6c:78:ac:32:b6: 48:81:21:d4:e4:9d:bb:c6:d8:29:3d:67:01:fb:e2:03:fd:15: 2a:63:5b:bc:98:12:ef:82:b5:4e:4c:76:19:3c:1f:ba:3b:33: 27:12:5f:c1:3f:77:95:3e:d0:20:2d:59:7b:7f:45:88:71:37: 49:1e:37:fa:e3:79:9c:22:4e:c3:60:33:59:04:4a:d5:99:8f: 09:7f:2d:fc:5f:55:04:ae:69:99:4a:40:f1:db:4a:58:57:14: 56:bb:85:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjUxMDE5MDExNDMzWhcNMjUxMDI2MDExNDMzWjAYMRYwFAYD VQQDEw02OGY0M2I3OS04NDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx97U6eSzlb9w4UXv66qhJ8s2lg6YfWOQdQsat09FcrFzGSxHRf1hMbpmOJ/O 2iSt/dNsgNM9Eago1w/TfCQBROAAiLTfMFVKyvcexD0Q4N0VSUbVWssyvNnsiCAz RkHurxXufUoHeRBrBheJCo4VeUZbbKfpZC05M+dZQC1tN+hLP5GyzQv9lL/S2HxF jGwRpIKdcCDuI8oYKVrGGQHa+vjfTJ8GoQoUZvCLCuj8YKHAHHMwtpMYuHgTWYP+ rrqikkFpwlhT0oUr8qOKW8OnNueKugCuhAnZYL2kXFsLvhSm6bD9ka9IJYtPUxvk 54KR0Crpn9jyBXBEyE9pEf9S1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCp+pRI2 MDVs92cJwAA+mIzyZNYPMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew dGZoaE55ZE5RbEVfTjFPa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhTcQg++K8NTgLG86isxrGJMCiEtkf4FKVAJmdkqUJr8K+Jk2GWQ7y f9lfCHnUKjkmWdxUgw9eP8nwfif2cKki6cCHMhXB76dx9KhKSIqquEOSub1AzqVC D6r+rohKWcGHMXnSI9RIRQCdEyrWPLjJHtn8wNyuLx8tLh73JjTfurk8nmySonrQ lkTLSffPxUtneiTx+1C1zWmx/r1UbHisMrZIgSHU5J27xtgpPWcB++ID/RUqY1u8 mBLvgrVOTHYZPB+6OzMnEl/BP3eVPtAgLVl7f0WIcTdJHjf643mcIk7DYDNZBErV mY8Jfy38X1UErmmZSkDx20pYVxRWu4UL -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:54 2025 by rpki-client