$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json) Hash identifier: NTbJOt+/4RBnyzrGSB5t5towMqTlECYXdVucqhaHxUg= Subject key identifier: 8C:B4:7D:94:83:0F:14:7F:64:AD:BE:9D:9A:C4:80:A4:D5:42:F9:66 Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 0585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft Manifest number: 057E Signing time: Sat 28 Feb 2026 23:52:19 +0000 Manifest this update: Sat 28 Feb 2026 23:52:18 +0000 Manifest next update: Sat 07 Mar 2026 23:52:18 +0000 Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: ETF+jbFFXT/r0eWorMy1Dim1j03SKbG9/kg3AqryPh0=) 2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: c5J0KdHOLoi3ObVHZJngE8j6ijFOnrM4KMu8sfCJ1Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Feb 28 23:52:18 2026 GMT Not After : Mar 7 23:52:18 2026 GMT Subject: CN=69a37fb2-f078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:ba:b1:de:50:11:29:ee:30:7a:26:d1:a8: a7:05:cb:4c:82:7c:83:2f:78:eb:6a:b1:9d:cb:1c: c7:91:f6:80:0b:7f:92:fd:55:8a:6e:37:3b:32:78: df:74:1c:46:a6:2d:0e:59:d7:04:57:e8:5a:95:3e: 81:c2:cb:71:57:cc:5c:36:40:1d:a8:13:e4:23:a6: 77:63:12:ed:4e:17:de:cd:6e:de:df:c7:73:73:1f: 40:69:89:43:9b:f7:3c:ca:c1:e1:1b:3a:77:5b:3e: be:d9:65:f6:08:05:77:cf:8d:6f:bc:19:17:6b:ac: 60:fb:ac:cf:c5:f0:fa:47:76:2d:22:a7:0e:77:c2: be:2e:6d:b7:c5:25:21:be:ed:c0:fb:24:dd:60:4c: 7f:71:fe:cd:9b:8e:75:4b:13:75:7b:6c:36:c0:dc: da:5f:13:b4:bd:60:e0:fe:e0:9c:e7:ca:dd:18:c2: 3d:a0:a7:1e:16:1d:a0:e7:5c:bb:dd:b8:11:6e:e3: 44:fb:75:60:67:17:66:d3:e4:49:5a:c0:e2:6f:7c: 0e:7c:4b:94:88:20:b2:43:20:af:32:33:58:29:13: 61:41:cb:ee:79:bb:6b:02:87:12:ce:79:0e:51:d8: 43:3e:ee:f7:f8:fc:aa:5b:21:96:83:2d:ca:ec:4a: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B4:7D:94:83:0F:14:7F:64:AD:BE:9D:9A:C4:80:A4:D5:42:F9:66 X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:20:e2:52:4b:a1:f6:95:23:aa:99:81:48:b3:b6:9e:01:01: f3:25:16:29:42:da:c4:fd:a0:b4:73:ab:65:71:9c:b9:fb:7a: e6:4e:b2:0f:b0:a2:06:50:01:bd:f5:b4:3c:9c:3f:f1:ef:1f: 4c:b8:04:e1:6f:3f:63:e5:7d:ed:ba:4c:1c:b3:50:68:7e:66: 21:6c:66:33:17:2c:3d:50:e0:d6:23:dc:6c:af:00:3e:0b:1e: 00:80:bb:a9:d7:7a:bf:04:a2:ae:01:47:b2:a1:46:37:45:04: c4:28:92:1e:65:7f:19:4a:46:a0:9f:fd:d1:49:c0:8c:a7:49: 42:44:f0:01:e2:85:11:53:73:b9:dc:cb:d6:e6:2d:e0:6f:9f: 80:44:51:62:9f:5a:69:4e:f9:75:cf:ad:e0:8d:f8:fb:dc:02: af:ff:be:4a:07:b5:d3:8b:83:93:95:80:10:eb:01:ee:8f:a1: c2:44:c1:33:57:78:5b:38:08:e5:6f:2e:ee:45:aa:96:23:fc: d6:7d:64:78:a0:8a:b3:a2:cc:0b:d0:82:de:07:6d:37:b6:3b: 66:32:5a:09:1a:10:09:ec:53:70:67:96:ab:d3:ce:9a:2c:ad: c2:e7:b8:9d:f8:ff:b4:c9:cc:f1:4a:52:b7:e5:fb:6b:01:ac: 03:1c:f1:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjYwMjI4MjM1MjE4WhcNMjYwMzA3MjM1MjE4WjAYMRYwFAYD VQQDDA02OWEzN2ZiMi1mMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9O6sd5QESnuMHom0ainBctMgnyDL3jrarGdyxzHkfaAC3+S/VWKbjc7Mnjf dBxGpi0OWdcEV+halT6BwstxV8xcNkAdqBPkI6Z3YxLtThfezW7e38dzcx9AaYlD m/c8ysHhGzp3Wz6+2WX2CAV3z41vvBkXa6xg+6zPxfD6R3YtIqcOd8K+Lm23xSUh vu3A+yTdYEx/cf7Nm451SxN1e2w2wNzaXxO0vWDg/uCc58rdGMI9oKceFh2g51y7 3bgRbuNE+3VgZxdm0+RJWsDib3wOfEuUiCCyQyCvMjNYKRNhQcvuebtrAocSznkO UdhDPu73+PyqWyGWgy3K7EqUtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIy0fZSD DxR/ZK2+nZrEgKTVQvlmMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew dGZoaE55ZE5RbEVfTjFPa2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqSDiUkuh9pUjqpmBSLO2ngEB8yUWKULaxP2gtHOrZXGcuft65k6yD7CiBlAB vfW0PJw/8e8fTLgE4W8/Y+V97bpMHLNQaH5mIWxmMxcsPVDg1iPcbK8APgseAIC7 qdd6vwSirgFHsqFGN0UExCiSHmV/GUpGoJ/90UnAjKdJQkTwAeKFEVNzudzL1uYt 4G+fgERRYp9aaU75dc+t4I34+9wCr/++Sge104uDk5WAEOsB7o+hwkTBM1d4WzgI 5W8u7kWqliP81n1keKCKs6LMC9CC3gdtN7Y7ZjJaCRoQCexTcGeWq9POmiytwue4 nfj/tMnM8UpSt+X7awGsAxzxUQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:22:34 2026 by rpki-client