$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json) Hash identifier: PhPC2oh/UHQGrCrG1SWxLoBBm0+lRlYCrz92gX3NEiI= Subject key identifier: E0:61:1F:A5:DA:24:34:09:D9:8F:EA:2C:08:1B:53:4B:CC:DB:A7:5D Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft Manifest number: 0444 Signing time: Tue 01 Jul 2025 00:49:59 +0000 Manifest this update: Tue 01 Jul 2025 00:49:58 +0000 Manifest next update: Tue 08 Jul 2025 00:49:58 +0000 Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: D3BFVDKX5x8XEaDjVhJab0U7VmzXLnhRQ01QCqOxzfE=) 2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: bL21RN87VLUZ42gx2+jC72By39LghzvwcJOZaJQ9FMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Validity Not Before: Jul 1 00:49:58 2025 GMT Not After : Jul 8 00:49:58 2025 GMT Subject: CN=686330b6-5efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:10:32:18:d2:c3:6e:07:b5:86:c7:2d:f7: d2:be:1d:f4:9a:7a:31:b7:e9:ef:93:0f:6f:62:d0: c3:35:19:5b:cc:7a:c8:ca:e2:ea:d5:e1:96:a9:8c: 10:ac:26:ac:bc:0d:7e:0a:99:f4:79:b9:82:29:28: 81:59:66:3f:cc:67:17:9a:43:30:0d:f4:a7:ae:3b: 96:2f:48:b4:4d:0b:a6:2a:5d:b2:a6:e1:91:7c:2a: fc:40:cc:cf:62:98:17:6a:e9:97:69:be:69:59:0a: 49:16:f5:55:94:a9:80:9c:92:16:06:a3:8f:e4:19: ec:e7:36:54:aa:4b:3c:d9:0b:f9:12:42:62:6f:45: 48:bd:a7:0d:c3:3e:f0:a1:a3:b5:b5:a6:4a:30:14: b1:d8:03:24:e9:31:d9:e6:33:01:d4:88:3a:23:c0: af:ae:cf:7e:cd:aa:c5:03:04:54:35:84:25:bd:09: a9:7c:ea:fa:dc:4a:13:82:f3:c7:07:f4:66:2b:83: 8e:97:06:6c:83:e7:fd:8e:98:62:5a:03:c4:c6:0f: cd:f6:a7:1d:64:13:77:f8:e8:31:25:04:4c:2d:8d: ec:5f:64:65:17:df:dc:79:67:5d:26:78:af:78:47: a8:33:21:e3:54:3e:36:65:a3:5f:b8:e8:f3:64:95: e3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:61:1F:A5:DA:24:34:09:D9:8F:EA:2C:08:1B:53:4B:CC:DB:A7:5D X509v3 Authority Key Identifier: keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:19:88:31:5b:d5:06:55:9a:63:6b:98:10:28:dc:96:ff:b0: 0f:3f:cc:97:82:65:18:63:51:92:1f:33:51:ac:91:7e:2b:de: 0e:bb:af:7e:09:a3:80:11:19:f4:b0:89:01:5c:7c:e6:9f:f3: c1:ee:d6:cb:b7:dc:e1:9a:cd:90:07:9b:0f:52:7b:03:d6:7d: 70:12:14:23:46:b7:0d:47:85:fd:c3:9f:d8:31:5b:32:c3:10: ad:72:51:68:97:d2:b8:4c:f9:bf:06:ad:66:bc:92:23:d0:eb: f0:ec:69:ed:36:3b:e8:fd:4a:dc:06:95:24:39:7f:b6:ed:14: 5f:5a:a6:da:5f:a2:08:92:24:1d:a0:53:a5:e0:23:30:4a:b2: 1f:22:45:ef:22:db:bd:5b:b6:b3:a7:81:8f:f4:33:90:64:f4: 70:3f:83:85:9d:d3:35:99:31:2b:9d:c8:44:ae:91:bf:b7:f9: 0a:da:67:b7:dd:2d:b9:b0:0b:91:9b:3f:06:34:4d:3a:04:44: 3c:52:92:5e:35:f4:a4:d8:e1:0c:1e:4b:48:39:c4:e0:31:8c: 63:36:fa:38:0a:0a:a7:96:a1:4f:4e:7c:e3:2b:f9:72:d8:aa: 69:ab:34:08:4b:92:e5:ad:62:32:30:bd:74:02:ae:2e:21:7a: 97:73:05:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2 MDMwQzdERkQwHhcNMjUwNzAxMDA0OTU4WhcNMjUwNzA4MDA0OTU4WjAYMRYwFAYD VQQDEw02ODYzMzBiNi01ZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWwQMhjSw24HtYbHLffSvh30mnoxt+nvkw9vYtDDNRlbzHrIyuLq1eGWqYwQ rCasvA1+Cpn0ebmCKSiBWWY/zGcXmkMwDfSnrjuWL0i0TQumKl2ypuGRfCr8QMzP YpgXaumXab5pWQpJFvVVlKmAnJIWBqOP5Bns5zZUqks82Qv5EkJib0VIvacNwz7w oaO1taZKMBSx2AMk6THZ5jMB1Ig6I8Cvrs9+zarFAwRUNYQlvQmpfOr63EoTgvPH B/RmK4OOlwZsg+f9jphiWgPExg/N9qcdZBN3+OgxJQRMLY3sX2RlF9/ceWddJniv eEeoMyHjVD42ZaNfuOjzZJXj4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBhH6Xa JDQJ2Y/qLAgbU0vM26ddMB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi WmE2MEwyZko4X05nTU1mZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTGYgxW9UGVZpja5gQKNyW/7APP8yXgmUYY1GSHzNRrJF+K94Ou69+ CaOAERn0sIkBXHzmn/PB7tbLt9zhms2QB5sPUnsD1n1wEhQjRrcNR4X9w5/YMVsy wxCtclFol9K4TPm/Bq1mvJIj0Ovw7GntNjvo/UrcBpUkOX+27RRfWqbaX6IIkiQd oFOl4CMwSrIfIkXvItu9W7azp4GP9DOQZPRwP4OFndM1mTErnchErpG/t/kK2me3 3S25sAuRmz8GNE06BEQ8UpJeNfSk2OEMHktIOcTgMYxjNvo4CgqnlqFPTnzjK/ly 2KppqzQIS5LlrWIyML10Aq4uIXqXcwUs -----END CERTIFICATE-----Generated at Tue Jul 1 10:27:47 2025 by rpki-client