$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json) Hash identifier: DAJ7iKlwSf3OYdNW0mTjVfrZdDUVML/MLfqoj5NecR4= Subject key identifier: 0B:7D:5E:18:FE:D4:93:72:2D:DF:FC:67:5C:30:20:51:0C:A2:66:2D Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 0549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft Manifest number: 0542 Signing time: Tue 04 Nov 2025 23:32:54 +0000 Manifest this update: Tue 04 Nov 2025 23:32:54 +0000 Manifest next update: Tue 11 Nov 2025 23:32:54 +0000 Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: /5tAxXPz/PJ0Un8O0U35Pv0XvaR5rQ+3+0LJfU94jUM=) 2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: c5J0KdHOLoi3ObVHZJngE8j6ijFOnrM4KMu8sfCJ1Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Nov 4 23:32:54 2025 GMT Not After : Nov 11 23:32:54 2025 GMT Subject: CN=690a8d26-a226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:6b:fc:e8:12:cd:a5:71:56:01:8a:a3:4b: b8:a6:ce:ef:cc:23:e5:d9:33:c2:b3:67:92:20:2a: ef:e1:e0:58:0d:98:e0:de:2a:05:15:f0:8a:2f:5c: b0:2d:ec:14:ec:c5:fd:d7:23:fe:d4:7c:5a:4e:e5: f1:8b:bc:1c:57:5d:09:1b:a1:90:56:61:70:a1:d9: f0:9f:74:4a:02:04:15:df:0c:03:8f:11:6a:98:9e: c3:58:5c:f9:2c:9c:40:8d:20:f7:40:68:98:2f:85: dc:5e:6e:76:5d:0d:93:48:e2:14:0a:f3:65:d4:43: 1e:4a:e1:b3:dc:58:c4:76:74:bc:ed:65:2d:e7:47: 2a:d2:1b:11:bf:51:43:4a:ba:c5:7d:58:ad:0a:0a: 34:ff:11:de:d7:ef:44:4b:75:a1:00:0d:23:5a:31: 39:1c:a7:75:98:55:e6:fb:76:a5:4c:3e:0a:1e:a8: f2:5d:60:ae:37:d3:02:21:7e:f0:c1:e2:9b:79:55: c6:7d:82:e0:24:fb:8b:13:ba:31:ef:62:e7:55:79: ec:03:33:3c:8d:dc:c5:f9:5d:bd:6e:ad:97:1d:0e: a4:f1:0e:b3:dd:d6:e2:7a:54:5f:8f:55:dd:84:09: c1:65:6d:7e:9f:b1:71:29:29:4b:89:4b:93:27:b8: c1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7D:5E:18:FE:D4:93:72:2D:DF:FC:67:5C:30:20:51:0C:A2:66:2D X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:1f:02:69:c9:f0:3e:8a:cb:de:98:c1:9b:a0:50:df:d8:18: d5:25:63:db:13:28:a8:95:b7:3e:0c:9b:48:5a:44:1f:03:7a: 98:0f:1f:5c:6a:56:55:af:0b:66:8e:c5:39:60:a9:6d:99:c5: f6:57:75:9e:d8:23:5a:e2:2b:fb:04:48:4e:f1:f6:0a:80:9e: c8:5d:14:47:cf:fe:c6:b2:e7:80:f4:fe:8b:66:65:4b:35:26: ea:45:21:c2:15:01:2c:55:00:ae:4d:6c:4f:e4:1c:a1:e6:d8: 94:a9:de:83:44:58:ab:a6:82:af:25:46:49:90:d8:50:a2:b4: 41:27:45:3b:d2:bc:15:08:27:ca:f7:e2:f9:f8:6b:4d:fc:95: 25:1b:21:18:3f:5b:a7:83:bc:46:96:ca:91:81:66:21:4a:02: 18:9f:74:a2:1f:0f:af:93:ab:2e:d5:17:40:74:c1:f4:29:f2: 1d:07:27:90:2d:fc:4d:79:d4:ca:12:fc:24:c0:b6:d3:c5:77: 0c:90:6f:30:8d:10:4a:f5:df:d9:0b:68:d0:7f:6c:a7:d2:af: 70:c1:0a:0b:43:1e:7d:58:60:f2:33:57:63:0e:58:e0:8c:fd: d9:e9:ea:01:f7:ca:cd:f2:c5:17:96:8c:d3:c1:4d:bf:35:de: 46:39:97:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjUxMTA0MjMzMjU0WhcNMjUxMTExMjMzMjU0WjAYMRYwFAYD VQQDEw02OTBhOGQyNi1hMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Zpr/OgSzaVxVgGKo0u4ps7vzCPl2TPCs2eSICrv4eBYDZjg3ioFFfCKL1yw LewU7MX91yP+1HxaTuXxi7wcV10JG6GQVmFwodnwn3RKAgQV3wwDjxFqmJ7DWFz5 LJxAjSD3QGiYL4XcXm52XQ2TSOIUCvNl1EMeSuGz3FjEdnS87WUt50cq0hsRv1FD SrrFfVitCgo0/xHe1+9ES3WhAA0jWjE5HKd1mFXm+3alTD4KHqjyXWCuN9MCIX7w weKbeVXGfYLgJPuLE7ox72LnVXnsAzM8jdzF+V29bq2XHQ6k8Q6z3dbielRfj1Xd hAnBZW1+n7FxKSlLiUuTJ7jBDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAt9Xhj+ 1JNyLd/8Z1wwIFEMomYtMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew dGZoaE55ZE5RbEVfTjFPa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVHwJpyfA+isvemMGboFDf2BjVJWPbEyiolbc+DJtIWkQfA3qYDx9c alZVrwtmjsU5YKltmcX2V3We2CNa4iv7BEhO8fYKgJ7IXRRHz/7GsueA9P6LZmVL NSbqRSHCFQEsVQCuTWxP5Byh5tiUqd6DRFirpoKvJUZJkNhQorRBJ0U70rwVCCfK 9+L5+GtN/JUlGyEYP1ung7xGlsqRgWYhSgIYn3SiHw+vk6su1RdAdMH0KfIdByeQ LfxNedTKEvwkwLbTxXcMkG8wjRBK9d/ZC2jQf2yn0q9wwQoLQx59WGDyM1djDljg jP3Z6eoB98rN8sUXlozTwU2/Nd5GOZc2 -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:55 2025 by rpki-client