$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json) Hash identifier: /1RA1f2VF8XKZeJm1I7kKy/DCOuYNutwZTWGkb1bFYQ= Subject key identifier: FB:5C:38:E6:76:3B:32:75:70:97:29:7F:6A:6D:28:75:A9:F8:F6:44 Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 0506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft Manifest number: 0500 Signing time: Tue 01 Jul 2025 00:06:31 +0000 Manifest this update: Tue 01 Jul 2025 00:06:30 +0000 Manifest next update: Tue 08 Jul 2025 00:06:30 +0000 Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: Fhna/z2yG/VJ5iOAne13HoXL+nwJQ1xJKukJjyczlAo=) 2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: fYltceYUoBqgTTGDszHZ6k9POl5N1iPgLRw9G0J0Rws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1286 (0x506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Jul 1 00:06:30 2025 GMT Not After : Jul 8 00:06:30 2025 GMT Subject: CN=68632687-8eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:62:ec:42:68:88:d6:c6:20:6f:46:ea:32: b9:03:5d:42:55:26:66:de:b1:f6:b3:05:05:7d:95: 03:40:2a:34:d3:b2:4e:64:24:a0:6c:46:44:90:e9: e1:29:29:54:05:a8:46:fd:53:4a:64:44:83:8d:e3: c3:d5:91:94:cb:5b:2d:c9:1d:4c:a8:6e:24:55:35: f5:5d:f1:b2:b3:c6:0b:98:01:8b:28:ab:c7:50:37: 02:6c:4a:05:01:d0:1a:a2:9c:3c:5d:15:f4:3d:a5: 36:29:31:fe:eb:be:87:1c:e2:c9:71:1f:93:f3:2d: 23:d7:02:70:d0:3e:d0:43:89:90:5c:14:d7:57:8a: 4c:4a:80:b1:00:1a:44:ab:c5:4c:e3:b7:d1:15:fd: c8:67:d2:f8:20:03:7b:d5:23:e9:eb:25:13:93:5f: 38:71:a6:f8:57:d6:17:96:70:22:46:46:bd:e1:a2: c2:5d:39:3f:2b:ae:1e:b0:10:55:a1:02:e2:f4:8e: 75:b1:d5:aa:10:40:f7:e8:ab:21:cd:7c:ad:89:96: cb:92:ae:b3:fb:f1:8d:6e:32:4b:0d:7e:ac:51:89: cb:66:17:fe:5f:79:53:2f:09:be:31:e7:41:8d:a3: 53:27:c9:da:70:98:3a:7f:00:c0:27:31:99:64:ac: 02:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5C:38:E6:76:3B:32:75:70:97:29:7F:6A:6D:28:75:A9:F8:F6:44 X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d5:5f:65:2d:14:46:21:e8:ed:03:e8:ba:76:47:a5:8a:98: 98:5c:7f:78:61:b2:2a:a7:1a:2b:c9:7a:6e:c6:c2:65:0f:ae: db:89:50:a7:3d:d1:22:21:35:32:7d:42:7f:dd:66:03:3c:50: fb:ba:50:3b:41:16:cb:11:12:52:7c:1a:6a:b6:c3:41:08:3a: 52:07:c2:db:03:a8:49:62:51:76:c5:3f:9a:2f:2f:1a:4f:b9: 54:ac:3d:1a:da:75:a6:b9:bb:0c:00:f1:20:99:16:52:77:3c: 0b:8a:62:a7:fb:9d:55:0d:66:12:91:a0:15:a7:d3:f9:ce:f0: dd:90:e0:c1:7b:e8:55:09:23:d3:c1:6a:c2:3d:b3:05:71:ff: 82:59:11:77:c6:06:6a:11:48:5b:d0:fe:30:f8:7a:bb:a9:0d: a2:2e:d6:b4:cf:37:f3:7a:fd:d6:2e:7d:e3:f3:f7:7d:94:28: d2:cb:b7:83:f9:19:32:e6:2e:b2:3a:cc:8e:bd:aa:4f:63:f3: 3a:c9:2a:62:8f:bd:60:b0:6e:d0:34:8a:0b:4f:57:73:41:98: e4:4f:55:de:8b:27:a4:24:58:8e:98:92:be:c1:9e:5e:f2:aa: f6:3a:ca:da:d3:12:8b:2c:c8:2e:7e:73:93:1c:c9:ce:69:3f: 55:68:0c:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjUwNzAxMDAwNjMwWhcNMjUwNzA4MDAwNjMwWjAYMRYwFAYD VQQDEw02ODYzMjY4Ny04ZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu25i7EJoiNbGIG9G6jK5A11CVSZm3rH2swUFfZUDQCo007JOZCSgbEZEkOnh KSlUBahG/VNKZESDjePD1ZGUy1styR1MqG4kVTX1XfGys8YLmAGLKKvHUDcCbEoF AdAaopw8XRX0PaU2KTH+676HHOLJcR+T8y0j1wJw0D7QQ4mQXBTXV4pMSoCxABpE q8VM47fRFf3IZ9L4IAN71SPp6yUTk184cab4V9YXlnAiRka94aLCXTk/K64esBBV oQLi9I51sdWqEED36KshzXytiZbLkq6z+/GNbjJLDX6sUYnLZhf+X3lTLwm+MedB jaNTJ8nacJg6fwDAJzGZZKwCEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtcOOZ2 OzJ1cJcpf2ptKHWp+PZEMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew dGZoaE55ZE5RbEVfTjFPa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL1V9lLRRGIejtA+i6dkelipiYXH94YbIqpxoryXpuxsJlD67biVCn PdEiITUyfUJ/3WYDPFD7ulA7QRbLERJSfBpqtsNBCDpSB8LbA6hJYlF2xT+aLy8a T7lUrD0a2nWmubsMAPEgmRZSdzwLimKn+51VDWYSkaAVp9P5zvDdkODBe+hVCSPT wWrCPbMFcf+CWRF3xgZqEUhb0P4w+Hq7qQ2iLta0zzfzev3WLn3j8/d9lCjSy7eD +Rky5i6yOsyOvapPY/M6ySpij71gsG7QNIoLT1dzQZjkT1XeiyekJFiOmJK+wZ5e 8qr2Osra0xKLLMgufnOTHMnOaT9VaAxv -----END CERTIFICATE-----Generated at Tue Jul 1 23:26:42 2025 by rpki-client