$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json) Hash identifier: 0BtoJKbARItgyrChKLP3ocskJr2PgSKA67z3yxIrCWs= Subject key identifier: C7:73:36:D3:6C:9A:E5:06:AF:5C:4F:35:D9:40:19:5F:2F:E4:B2:4B Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft Manifest number: 04C2 Signing time: Mon 02 Mar 2026 00:20:43 +0000 Manifest this update: Mon 02 Mar 2026 00:20:40 +0000 Manifest next update: Mon 09 Mar 2026 00:20:40 +0000 Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: TDBHJncDeyZ5Hdq7IcVFkHnAfGsGCCCHuOYeFB/QLk4=) 2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: 3aUq+4eZ5x7ZiH9oh0Xt34CXF6YQPCZXOEPkKr7X/Tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Validity Not Before: Mar 2 00:20:40 2026 GMT Not After : Mar 9 00:20:40 2026 GMT Subject: CN=69a4d7db-b4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:bd:eb:7a:be:fe:bf:67:40:c6:91:af:a9: b3:92:85:74:e2:62:85:74:e5:2a:65:19:9a:1c:4a: ec:ad:f0:c7:68:4b:cf:64:9a:26:71:16:3e:9f:b7: ec:3b:46:5e:f7:d4:b1:93:dc:3a:b2:a3:29:0e:9e: f2:b1:d7:55:bb:62:30:33:77:68:d7:bc:dd:35:88: bd:f0:30:ea:3c:bd:6e:f3:e4:6c:f6:75:71:af:44: 7f:a5:d7:87:61:ad:97:57:58:d9:9a:90:a5:25:74: e3:52:56:84:bb:f6:82:32:be:85:ae:25:88:81:df: 99:31:00:5e:ef:3f:e2:74:6b:db:e9:e8:28:a6:9b: 1d:fc:eb:c8:a5:39:71:5b:ee:68:ac:59:17:88:b5: 62:c2:67:90:53:25:8f:b8:b0:6d:f7:4b:a2:cd:52: fa:52:8c:92:e0:0e:e6:10:4a:5e:04:c3:67:59:42: 7f:d6:80:2c:3b:90:c3:f3:96:0f:05:2e:db:76:0e: 58:78:9e:81:87:76:eb:dc:b7:69:8d:6a:a5:0f:17: 65:d0:c0:60:c7:e5:65:5b:36:99:c7:b1:03:75:47: 4e:50:05:03:1e:c0:b7:bd:8b:81:a4:86:1b:98:fe: 51:7e:9a:22:a0:67:e6:a4:e2:53:2f:f1:ef:77:c0: 59:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:73:36:D3:6C:9A:E5:06:AF:5C:4F:35:D9:40:19:5F:2F:E4:B2:4B X509v3 Authority Key Identifier: keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a6:3e:59:a2:db:45:e1:fd:20:79:4e:de:c9:68:fe:78:f8: 8d:c6:ab:61:8a:c0:23:42:79:26:ca:86:7f:4c:17:e2:75:69: 8f:42:84:2b:40:2e:d5:9e:cb:4e:4c:12:2e:bb:34:74:c7:f6: 22:b6:ab:d6:d3:60:92:f9:49:bc:e9:76:ec:ff:dc:03:78:91: a1:41:cc:d6:82:d0:c0:40:cd:ae:cf:41:2a:10:ef:1f:10:5c: 90:2a:46:00:2a:0b:ba:95:fa:d6:04:ec:42:5a:59:79:57:50: 50:be:d1:78:09:aa:27:ae:80:7f:3b:f4:36:1b:14:41:78:f4: 65:c2:23:60:3f:46:bc:bb:01:36:f6:61:62:25:ef:d1:a1:6e: 73:80:b2:7d:bc:e2:b8:c1:be:63:93:5c:14:73:95:19:a8:99: 71:53:fb:e6:b0:05:d7:a6:19:ab:0f:31:0e:e8:f3:4c:3d:28: d1:1c:fd:05:76:12:06:44:aa:30:61:61:4e:ba:88:66:a7:07: 68:3e:51:93:70:96:ff:91:54:70:c0:10:d4:67:6a:19:36:ef: 58:cc:9b:31:08:13:21:63:8b:98:a6:16:d3:ee:aa:e4:0a:fe: d0:2b:42:d4:7a:20:a5:f0:a3:e8:10:8c:f0:50:83:a7:3f:17: a4:e2:d8:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2 MDMwQzdERkQwHhcNMjYwMzAyMDAyMDQwWhcNMjYwMzA5MDAyMDQwWjAYMRYwFAYD VQQDEw02OWE0ZDdkYi1iNGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCy963q+/r9nQMaRr6mzkoV04mKFdOUqZRmaHErsrfDHaEvPZJomcRY+n7fs O0Ze99Sxk9w6sqMpDp7ysddVu2IwM3do17zdNYi98DDqPL1u8+Rs9nVxr0R/pdeH Ya2XV1jZmpClJXTjUlaEu/aCMr6FriWIgd+ZMQBe7z/idGvb6egoppsd/OvIpTlx W+5orFkXiLViwmeQUyWPuLBt90uizVL6UoyS4A7mEEpeBMNnWUJ/1oAsO5DD85YP BS7bdg5YeJ6Bh3br3LdpjWqlDxdl0MBgx+VlWzaZx7EDdUdOUAUDHsC3vYuBpIYb mP5RfpoioGfmpOJTL/Hvd8BZLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdzNtNs muUGr1xPNdlAGV8v5LJLMB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi WmE2MEwyZko4X05nTU1mZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZqY+WaLbReH9IHlO3slo/nj4jcarYYrAI0J5JsqGf0wX4nVpj0KEK0Au1Z7L TkwSLrs0dMf2Irar1tNgkvlJvOl27P/cA3iRoUHM1oLQwEDNrs9BKhDvHxBckCpG ACoLupX61gTsQlpZeVdQUL7ReAmqJ66Afzv0NhsUQXj0ZcIjYD9GvLsBNvZhYiXv 0aFuc4CyfbziuMG+Y5NcFHOVGaiZcVP75rAF16YZqw8xDujzTD0o0Rz9BXYSBkSq MGFhTrqIZqcHaD5Rk3CW/5FUcMAQ1GdqGTbvWMybMQgTIWOLmKYW0+6q5Ar+0CtC 1HogpfCj6BCM8FCDpz8XpOLY1g== -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:13 2026 by rpki-client