
$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json)
Hash identifier: 6b6OdFp9UtmcUnwC89jT0NCVeg+7yzlEsVO/sqAWlu4=
Subject key identifier: 04:14:2F:D4:8B:38:C3:D5:D8:B5:4F:2E:33:45:24:75:6A:04:D6:D7
Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47
Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47
Certificate serial: 05D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
Manifest number: 05CD
Signing time: Sun 26 Jul 2026 23:57:42 +0000
Manifest this update: Sun 26 Jul 2026 23:57:42 +0000
Manifest next update: Sun 02 Aug 2026 23:57:42 +0000
Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: kGwtimOp8hiLHWJ2xQ7rTt5frYfKe5zGpMOzzORd6kU=)
2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: 0gXBEALTKiAZV/3PwvwooAb07fvGjb4W70kWE3ZaJgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl
rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1495 (0x5d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47
Validity
Not Before: Jul 26 23:57:42 2026 GMT
Not After : Aug 2 23:57:42 2026 GMT
Subject: CN=6a669ef6-25a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:e4:62:83:fb:3c:3d:83:d8:16:68:8d:f1:
6c:c3:4d:03:ce:66:f2:32:b1:f1:b2:f7:a7:73:31:
94:f0:c2:79:88:df:3c:16:82:ba:f7:96:f1:0b:d2:
0c:72:3d:80:a1:be:7e:01:f0:a6:d7:2d:7a:4e:e3:
6b:82:dc:30:b4:a0:b0:c2:02:ab:15:3f:47:cb:ff:
7d:96:62:5c:a8:93:d7:05:d1:4d:72:37:5d:92:0e:
bb:81:49:ee:b8:b3:02:02:5b:14:60:fa:fd:ba:ca:
0d:48:8a:11:dc:dc:6e:62:76:2e:3a:b5:fb:16:7a:
6f:c4:7c:b7:b1:8b:36:b4:23:22:d8:65:b6:98:44:
59:5d:96:a5:02:7a:79:93:2f:de:07:60:dd:3e:85:
fd:8e:95:80:f1:f6:63:a7:3d:21:c4:3d:b5:61:c0:
f3:1d:80:5b:2d:1d:21:ee:ed:8f:db:ca:0f:b0:9a:
4e:e7:34:f9:2d:3f:fc:74:70:fc:8b:f3:cf:9b:a4:
29:e7:77:9a:a9:a6:55:96:1b:68:04:5c:af:8b:cb:
22:4e:6b:c2:14:c1:3c:8c:0a:df:40:d5:7c:29:8e:
69:37:5f:44:68:c7:a1:a2:c8:51:3d:97:6e:4b:f4:
ef:3e:0d:d6:8e:b0:24:e6:ee:88:25:04:db:6e:af:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:14:2F:D4:8B:38:C3:D5:D8:B5:4F:2E:33:45:24:75:6A:04:D6:D7
X509v3 Authority Key Identifier:
keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:51:eb:8d:81:d2:f6:f5:18:ea:6b:1b:57:45:56:b0:46:b8:
63:4c:5b:91:b9:dd:c9:94:c8:ad:cc:a6:d8:a4:29:b6:72:f2:
68:4d:7b:e3:80:8c:08:44:15:d9:13:eb:05:0b:0f:50:1a:61:
cf:f3:de:40:1d:ba:2d:c6:ac:a0:3d:9b:5d:74:25:09:cc:8c:
7e:2f:c8:2a:6c:fe:53:6b:da:13:4c:c8:c4:ff:e6:82:c7:ff:
65:81:4f:02:1b:c9:11:38:e4:82:92:4d:f8:0c:26:a5:45:fa:
fd:1f:8d:96:e2:04:97:38:7b:8e:bf:57:db:9b:a5:d8:d4:23:
9c:3b:2d:d3:04:b1:cf:7f:24:c9:a5:6f:83:96:83:42:f8:22:
20:d8:72:54:1a:cb:3f:cb:d3:5c:1f:09:82:31:e7:56:df:b9:
67:b8:43:cb:03:e7:5e:38:d9:8f:5f:8d:00:fa:cd:5a:48:84:
a7:c7:44:dc:d0:0e:7a:05:5b:b9:b4:b9:55:cc:8d:4f:0c:03:
fb:af:60:61:09:72:c4:2b:88:8e:5d:56:ce:00:3f:33:52:1d:
85:44:e4:e5:77:4a:c1:c6:5d:e0:b4:75:4a:8d:27:18:d1:bf:
3c:a2:1a:4e:a9:fb:80:55:a7:28:63:8b:f9:1d:5e:60:63:3d:
4a:88:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:28 2026 by rpki-client