$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json) Hash identifier: 7V0O4eA8jOjRnh9yivZLAKgTnsObJVoSAahe1zPMIF0= Subject key identifier: EA:2C:CE:B4:1E:AD:68:6A:03:2B:2E:A3:35:EF:52:C2:60:7B:18:80 Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 051B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft Manifest number: 0514 Signing time: Tue 05 Aug 2025 00:04:37 +0000 Manifest this update: Tue 05 Aug 2025 00:04:36 +0000 Manifest next update: Tue 12 Aug 2025 00:04:36 +0000 Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: tC6cqdCyfbGxtXuiqlZeniSyl2sa9rFmqY2LOBGtLSE=) 2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: c5J0KdHOLoi3ObVHZJngE8j6ijFOnrM4KMu8sfCJ1Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1307 (0x51b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Aug 5 00:04:36 2025 GMT Not After : Aug 12 00:04:36 2025 GMT Subject: CN=68914a94-3a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:26:37:a3:e0:46:be:18:03:79:3e:3b:ef:3f: a5:d3:7b:8e:cf:e7:ad:cb:50:5c:4f:43:5c:63:e2: 4e:b6:b1:07:aa:da:e5:76:f7:9a:d5:e2:69:df:e2: 2f:2a:8f:b7:5a:59:0e:18:34:99:da:b3:8b:c6:12: 0f:61:2e:e2:32:95:bd:4d:96:46:e6:65:51:c2:65: 7a:fd:a5:93:5f:97:0f:02:ab:04:b4:cb:e7:da:95: 2b:83:b2:78:92:8b:26:73:19:7e:8f:ac:33:61:c6: 25:13:a2:14:e9:4d:e9:3e:a8:a8:ab:f5:77:e3:8c: d7:69:fd:f4:23:8a:1d:fb:a3:79:d4:74:c8:da:f0: 0a:0e:6d:1a:98:ca:65:96:95:9f:7e:08:b3:09:63: 92:30:7f:b7:29:ca:98:db:b7:8a:83:51:b4:8d:c7: cb:56:dc:d7:de:54:52:2d:c8:73:64:21:76:8f:26: 4b:94:41:40:2f:ff:79:ed:ad:9c:d3:a1:c5:f3:a2: 8d:a9:24:73:2a:fe:10:d7:f9:41:cb:b6:bd:4a:ac: 52:70:e7:b1:6b:21:52:8a:cb:17:b1:6b:d8:63:2f: 2a:15:dd:da:58:20:70:17:57:8e:be:d0:b6:60:ff: c3:a3:a8:cf:65:e3:01:2f:10:d0:ef:9d:d2:f3:cf: 33:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2C:CE:B4:1E:AD:68:6A:03:2B:2E:A3:35:EF:52:C2:60:7B:18:80 X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:5a:3e:1f:74:5a:21:d5:4e:ed:04:6f:c6:21:b6:4c:aa:b8: d6:c9:bc:a9:ad:b1:22:c6:a4:8d:e8:da:2f:f3:1c:23:34:2e: 7e:fb:e3:5d:91:e3:34:24:e8:62:eb:e1:7a:b3:68:d3:e9:43: 5f:68:4d:8e:32:87:59:05:c1:a1:88:6d:98:fa:f7:c0:be:8d: d1:d8:df:56:91:b8:32:d5:51:61:5b:b3:9d:fd:e2:85:6e:b3: 5e:af:26:26:2b:7e:41:71:31:15:76:f0:60:ab:06:a4:87:00: d5:96:e3:d7:01:8f:71:c1:7f:26:c2:9c:86:90:c1:7d:9b:34: 3d:bc:85:83:f4:95:28:e8:69:f5:51:4c:27:d4:cb:85:74:ae: f9:0b:3f:0e:31:5c:d5:28:57:86:7f:12:9f:37:63:16:d4:05: c0:f0:a4:91:d5:a2:fb:83:a9:73:48:5a:93:8b:7e:91:8c:d0: 0a:76:d2:6c:06:56:52:21:71:9b:ca:f8:7b:06:4f:6b:65:2a: 4c:37:6d:cb:49:30:86:95:ba:61:e8:c6:1a:2e:1a:dd:2c:59: d1:92:4d:8f:68:f6:6d:c0:bb:46:e3:f5:cb:3f:70:f5:13:5e: 65:c8:e1:df:48:78:9c:cb:06:a8:81:75:a2:27:e0:89:31:c6: 5e:0c:8e:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjUwODA1MDAwNDM2WhcNMjUwODEyMDAwNDM2WjAYMRYwFAYD VQQDEw02ODkxNGE5NC0zYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8CY3o+BGvhgDeT477z+l03uOz+ety1BcT0NcY+JOtrEHqtrldvea1eJp3+Iv Ko+3WlkOGDSZ2rOLxhIPYS7iMpW9TZZG5mVRwmV6/aWTX5cPAqsEtMvn2pUrg7J4 kosmcxl+j6wzYcYlE6IU6U3pPqioq/V344zXaf30I4od+6N51HTI2vAKDm0amMpl lpWffgizCWOSMH+3KcqY27eKg1G0jcfLVtzX3lRSLchzZCF2jyZLlEFAL/957a2c 06HF86KNqSRzKv4Q1/lBy7a9SqxScOexayFSissXsWvYYy8qFd3aWCBwF1eOvtC2 YP/Do6jPZeMBLxDQ753S888zmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoszrQe rWhqAysuozXvUsJgexiAMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew dGZoaE55ZE5RbEVfTjFPa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFWj4fdFoh1U7tBG/GIbZMqrjWybyprbEixqSN6Nov8xwjNC5+++Nd keM0JOhi6+F6s2jT6UNfaE2OModZBcGhiG2Y+vfAvo3R2N9Wkbgy1VFhW7Od/eKF brNeryYmK35BcTEVdvBgqwakhwDVluPXAY9xwX8mwpyGkMF9mzQ9vIWD9JUo6Gn1 UUwn1MuFdK75Cz8OMVzVKFeGfxKfN2MW1AXA8KSR1aL7g6lzSFqTi36RjNAKdtJs BlZSIXGbyvh7Bk9rZSpMN23LSTCGlbph6MYaLhrdLFnRkk2PaPZtwLtG4/XLP3D1 E15lyOHfSHicywaogXWiJ+CJMcZeDI4u -----END CERTIFICATE-----Generated at Tue Aug 5 17:13:56 2025 by rpki-client