$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json) Hash identifier: 5jS7grl51MlJZVpAMoLuAxg1R6icGTlJNdVVmHtUvlQ= Subject key identifier: 9C:DC:FA:CA:37:6B:C3:9A:62:AC:9E:4E:53:FF:1F:16:AA:62:35:67 Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft Manifest number: 04DF Signing time: Thu 24 Apr 2025 23:33:26 +0000 Manifest this update: Thu 24 Apr 2025 23:33:26 +0000 Manifest next update: Thu 01 May 2025 23:33:26 +0000 Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: HtpyKMsdHXBgAeJzc/i2FM6eYZAnm3sLmZIDGiV4Zik=) 2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: fYltceYUoBqgTTGDszHZ6k9POl5N1iPgLRw9G0J0Rws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Apr 24 23:33:26 2025 GMT Not After : May 1 23:33:26 2025 GMT Subject: CN=680aca46-7367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:2b:9e:d3:c0:36:0c:ec:40:e6:50:3e:76: 6e:74:20:a5:c9:9b:94:3f:5c:ae:5c:22:26:cb:1c: cf:4b:5e:5d:3e:7b:61:25:ea:08:4a:f9:bb:88:f4: 66:97:71:2c:3a:e8:0f:af:d2:cd:b3:21:0a:12:21: 83:8b:3f:7d:23:e6:12:7f:af:3a:fb:74:04:17:35: 29:e4:ed:0f:8d:e5:df:fb:ed:cb:4e:39:8a:6f:f7: 15:d7:bc:69:ab:f0:9b:3d:71:0c:66:01:8f:34:98: 2e:3d:d2:7f:0e:64:06:87:a6:60:12:20:8f:98:93: 34:c9:2d:3a:fa:c7:6b:8c:fc:73:05:72:22:38:89: 65:dd:1a:6d:fd:35:2c:95:b9:3f:39:99:fa:bf:17: 5d:20:6d:cc:61:5a:c1:a8:e2:b9:a6:1e:0b:26:a1: d8:d3:ac:07:47:3b:fe:7a:7f:ff:ef:c3:d2:79:49: 4e:f2:0c:35:d3:c6:f3:01:ea:c8:50:9a:3d:d7:d7: 7c:cc:34:b8:85:92:6c:d0:f4:4b:33:70:cc:84:10: db:d5:6c:06:fb:02:44:ed:92:c3:c8:2d:ac:cb:b9: 67:64:09:4b:e2:c3:4b:22:1f:f3:ec:ba:7d:83:89: 52:5d:19:5a:bd:db:a3:fd:30:76:e6:d3:6f:53:62: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DC:FA:CA:37:6B:C3:9A:62:AC:9E:4E:53:FF:1F:16:AA:62:35:67 X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:70:09:4f:8a:a0:55:71:13:c2:ef:97:e0:62:6e:02:6f:66: d3:82:9d:5a:8c:af:a5:e8:16:af:d5:06:80:5e:55:32:a7:7c: 29:29:c1:9a:af:db:81:2f:67:9d:3a:4e:2d:31:d5:61:fb:a9: 3e:2b:5b:38:e3:66:88:3f:e2:ae:b2:9d:4f:2f:c4:db:4d:e4: d8:6c:6f:40:f7:76:67:d1:76:f0:b3:7e:2a:f9:4e:c6:3b:4a: a7:b6:fc:1f:38:01:4c:ad:aa:5c:df:dc:cb:59:dd:44:6a:73: 0f:0b:85:82:2b:3e:b8:2f:95:e3:12:28:ae:2c:ea:a7:4c:3a: a6:f2:da:bd:f2:10:2f:c6:c0:ab:d1:5f:0e:69:fa:dd:50:bf: 8f:fa:34:6f:ab:28:6c:75:51:e1:50:fa:ec:ab:b0:ce:e5:fa: 24:b3:a8:97:e6:0f:48:12:e9:0f:08:e3:9f:05:b2:cd:d4:1c: 70:dc:1c:11:55:77:24:25:3b:41:27:9e:4d:e2:50:b3:11:01: fd:57:19:e0:cd:a7:4a:2d:dc:5f:7a:92:08:d1:d2:74:cd:29: 4d:43:58:d2:9a:ec:0c:19:74:d4:73:2a:8b:45:43:b6:79:e3: c5:e9:88:50:4e:1e:dc:6f:d1:2b:85:e7:c8:83:1f:44:f0:b4: 44:42:23:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjUwNDI0MjMzMzI2WhcNMjUwNTAxMjMzMzI2WjAYMRYwFAYD VQQDEw02ODBhY2E0Ni03MzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7wrntPANgzsQOZQPnZudCClyZuUP1yuXCImyxzPS15dPnthJeoISvm7iPRm l3EsOugPr9LNsyEKEiGDiz99I+YSf686+3QEFzUp5O0PjeXf++3LTjmKb/cV17xp q/CbPXEMZgGPNJguPdJ/DmQGh6ZgEiCPmJM0yS06+sdrjPxzBXIiOIll3Rpt/TUs lbk/OZn6vxddIG3MYVrBqOK5ph4LJqHY06wHRzv+en//78PSeUlO8gw108bzAerI UJo919d8zDS4hZJs0PRLM3DMhBDb1WwG+wJE7ZLDyC2sy7lnZAlL4sNLIh/z7Lp9 g4lSXRlavduj/TB25tNvU2IOXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzc+so3 a8OaYqyeTlP/HxaqYjVnMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew dGZoaE55ZE5RbEVfTjFPa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtcAlPiqBVcRPC75fgYm4Cb2bTgp1ajK+l6Bav1QaAXlUyp3wpKcGa r9uBL2edOk4tMdVh+6k+K1s442aIP+Kusp1PL8TbTeTYbG9A93Zn0Xbws34q+U7G O0qntvwfOAFMrapc39zLWd1EanMPC4WCKz64L5XjEiiuLOqnTDqm8tq98hAvxsCr 0V8OafrdUL+P+jRvqyhsdVHhUPrsq7DO5foks6iX5g9IEukPCOOfBbLN1Bxw3BwR VXckJTtBJ55N4lCzEQH9VxngzadKLdxfepII0dJ0zSlNQ1jSmuwMGXTUcyqLRUO2 eePF6YhQTh7cb9ErhefIgx9E8LREQiPc -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:46 2025 by rpki-client