$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json) Hash identifier: ERDg03RzXZ3TVZjLyfsehdQLJozXCfTOMbIhIs2gOqg= Subject key identifier: E4:9E:EB:F9:EF:BC:16:1D:62:62:5F:B3:DE:28:12:B9:31:77:55:AC Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 04FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft Manifest number: 04F7 Signing time: Thu 12 Jun 2025 23:17:49 +0000 Manifest this update: Thu 12 Jun 2025 23:17:48 +0000 Manifest next update: Thu 19 Jun 2025 23:17:48 +0000 Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: cJdPjMu6pECrV4L/RDFFF8xhdiOJyz9ig68tkHGm5GY=) 2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: fYltceYUoBqgTTGDszHZ6k9POl5N1iPgLRw9G0J0Rws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1277 (0x4fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Jun 12 23:17:48 2025 GMT Not After : Jun 19 23:17:48 2025 GMT Subject: CN=684b601d-06ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:43:08:36:f0:88:7a:07:0e:60:50:07:76: f8:1b:39:60:c9:6b:86:d3:c5:29:32:fd:21:93:a3: bd:7a:ff:3d:f5:ae:7a:6b:1a:2d:53:87:43:36:3a: 80:d4:c1:59:a2:1c:ff:99:c1:7e:08:b0:d8:93:aa: 4d:e3:7c:17:50:6b:96:fa:1a:5c:e6:a1:07:70:fe: af:66:1f:75:06:10:b8:33:f3:54:9d:2d:5f:d4:fc: 85:cf:6c:98:e5:c4:64:a9:f7:7f:2c:1c:55:61:af: 74:70:a8:53:18:c4:6c:2a:4b:ae:06:13:51:e2:0d: 07:7f:6d:ad:44:a0:17:88:61:ab:62:d1:b0:51:58: cf:4e:56:d4:01:ef:0b:bf:e8:51:ea:3d:63:38:a0: 0a:18:3b:bb:33:ff:d4:79:82:1d:85:ac:9d:9a:68: 5f:32:5d:49:23:74:37:6a:a7:ca:05:c8:88:03:43: 66:f2:15:6d:bc:4c:78:3e:eb:88:90:b4:55:9e:14: c4:35:26:b4:c1:b2:b4:68:bc:45:8e:68:10:d6:40: ae:9b:52:83:39:bf:4e:72:6d:b4:83:2e:ff:de:9e: 67:54:5b:33:c8:96:cb:3c:9b:24:0c:c3:6c:5a:38: 0d:a5:2a:9d:9b:8b:a3:83:f3:c4:d0:43:53:9d:90: 97:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9E:EB:F9:EF:BC:16:1D:62:62:5F:B3:DE:28:12:B9:31:77:55:AC X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3a:08:a7:60:80:c2:2c:1d:af:70:00:05:21:06:69:95:56: 60:74:d0:91:af:36:5f:04:90:4d:e7:db:e1:53:1f:a5:94:76: 15:57:43:a5:38:6e:5a:83:21:e8:d4:d6:66:b8:a1:4d:7e:f2: 68:b7:85:a3:c8:4f:92:48:26:26:79:15:a2:08:3b:54:bf:30: c3:39:79:40:a6:27:94:d7:77:73:7e:ba:f3:13:8e:0b:f3:9f: c9:f4:fd:be:7c:fd:91:f1:03:06:07:84:b6:98:71:88:cb:2f: 38:8f:d5:00:96:55:ec:61:7a:14:03:7a:61:eb:a3:7b:d1:9a: df:bf:3a:ef:ec:39:2b:d3:29:14:05:d4:4b:d3:01:6b:4f:24: 45:fc:e7:0d:15:c0:ed:fe:60:a8:50:fa:2a:98:af:4f:dd:05: 2a:55:ae:17:05:6a:99:56:fe:67:5b:69:91:d9:db:06:d9:a0: be:d1:99:8b:fb:1f:52:db:5e:02:4e:66:40:00:c4:ef:c4:ae: 97:98:7a:de:6d:06:bf:3b:35:da:5d:31:5e:c7:bf:ac:b5:b0: d9:72:b9:5a:82:57:a8:59:b8:ec:67:24:59:85:55:bd:4c:dc: 94:c9:3f:ad:49:61:ab:b9:5e:d4:b9:b3:4a:11:85:f2:ed:2a: 66:c1:1b:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjUwNjEyMjMxNzQ4WhcNMjUwNjE5MjMxNzQ4WjAYMRYwFAYD VQQDEw02ODRiNjAxZC0wNmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cJDCDbwiHoHDmBQB3b4GzlgyWuG08UpMv0hk6O9ev899a56axotU4dDNjqA 1MFZohz/mcF+CLDYk6pN43wXUGuW+hpc5qEHcP6vZh91BhC4M/NUnS1f1PyFz2yY 5cRkqfd/LBxVYa90cKhTGMRsKkuuBhNR4g0Hf22tRKAXiGGrYtGwUVjPTlbUAe8L v+hR6j1jOKAKGDu7M//UeYIdhaydmmhfMl1JI3Q3aqfKBciIA0Nm8hVtvEx4PuuI kLRVnhTENSa0wbK0aLxFjmgQ1kCum1KDOb9Ocm20gy7/3p5nVFszyJbLPJskDMNs WjgNpSqdm4ujg/PE0ENTnZCXdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSe6/nv vBYdYmJfs94oErkxd1WsMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew dGZoaE55ZE5RbEVfTjFPa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqOginYIDCLB2vcAAFIQZplVZgdNCRrzZfBJBN59vhUx+llHYVV0Ol OG5agyHo1NZmuKFNfvJot4WjyE+SSCYmeRWiCDtUvzDDOXlApieU13dzfrrzE44L 85/J9P2+fP2R8QMGB4S2mHGIyy84j9UAllXsYXoUA3ph66N70Zrfvzrv7Dkr0ykU BdRL0wFrTyRF/OcNFcDt/mCoUPoqmK9P3QUqVa4XBWqZVv5nW2mR2dsG2aC+0ZmL +x9S214CTmZAAMTvxK6XmHrebQa/OzXaXTFex7+stbDZcrlagleoWbjsZyRZhVW9 TNyUyT+tSWGruV7UubNKEYXy7SpmwRvr -----END CERTIFICATE-----Generated at Sat Jun 14 18:42:31 2025 by rpki-client