$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json) Hash identifier: X5j/8vzImgUIVhaZpBTWglbwjvPW2fOSFOFme/c335g= Subject key identifier: 28:C5:08:28:23:77:C4:21:87:5C:B9:1E:8B:A2:A5:44:E9:93:5C:58 Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft Manifest number: 043C Signing time: Sun 15 Jun 2025 00:02:01 +0000 Manifest this update: Sun 15 Jun 2025 00:02:01 +0000 Manifest next update: Sun 22 Jun 2025 00:02:01 +0000 Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: 6ieKF6E9RCjXrLA6Uovl2S9wRVLkygP1jGexzKj5feE=) 2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: bL21RN87VLUZ42gx2+jC72By39LghzvwcJOZaJQ9FMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Validity Not Before: Jun 15 00:02:01 2025 GMT Not After : Jun 22 00:02:01 2025 GMT Subject: CN=684e0d79-0547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:55:1d:11:a9:34:9f:3a:68:fa:3b:4a:90: a3:9d:3a:3b:38:5a:45:2f:01:ac:94:39:22:28:22: c3:10:f2:e7:f9:04:ac:2b:ce:13:e0:cc:f9:e8:8f: e7:31:f6:ea:6f:2a:a2:99:7b:50:5b:2e:ba:57:1f: 44:fb:6f:92:bb:35:64:8e:c3:7a:d3:e3:6a:61:38: ce:55:03:5a:c3:8d:cc:cc:ed:62:43:de:ed:c3:dd: 29:df:2f:0b:2f:94:be:cc:1a:2d:a9:52:70:bf:2d: 67:29:3b:48:3b:7a:3e:44:3f:30:b7:9f:bc:e1:0f: 88:8c:cd:a7:a8:41:53:3a:61:28:c1:27:77:d5:56: 8d:59:56:8c:6a:27:6f:de:1d:4d:b2:89:02:35:9e: cb:b9:25:a5:c1:e6:94:79:35:e9:f9:87:88:b8:60: 3d:dc:e0:ee:6d:01:6a:c0:19:bd:ca:c3:d1:da:15: ca:8c:a3:42:9a:95:5c:3e:47:0e:8d:bc:5d:b0:32: 5c:ab:1c:60:63:d3:f6:31:56:5d:03:48:94:8c:2d: d2:1b:7a:07:7a:83:d5:20:5d:5c:e9:43:90:b3:48: b8:98:2c:42:3c:28:9d:c5:da:40:1f:0d:aa:1c:50: 9d:78:78:78:9e:5b:68:f1:6f:26:cd:65:15:c3:0f: c3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C5:08:28:23:77:C4:21:87:5C:B9:1E:8B:A2:A5:44:E9:93:5C:58 X509v3 Authority Key Identifier: keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f4:da:f8:07:c4:f1:f5:74:ac:47:dc:aa:41:7e:ed:4e:04: 5c:3f:e0:63:1c:4c:0f:b9:dc:68:5d:93:c6:dc:27:54:86:07: db:8b:2f:c2:cf:bc:b3:2f:31:ec:70:7e:f4:0a:7c:bd:ad:7b: bd:e1:f8:5c:7e:06:0a:4d:92:c1:89:4c:62:c0:98:6f:a8:a3: bb:ce:c2:fa:02:32:13:0c:e3:c7:53:43:80:66:f4:79:8d:8f: 93:36:a4:53:d9:ff:46:b1:ed:9c:d6:9e:f5:77:28:e6:33:44: dd:63:7e:b1:ac:d7:5b:da:87:d7:38:3f:54:7d:29:64:10:95: 3b:08:80:7f:60:3b:80:7a:a7:07:85:c3:5c:d0:9f:9a:15:2c: aa:dd:cc:e6:52:c9:61:85:5d:6e:bc:83:72:52:47:95:d1:f3: 4f:80:c0:e1:86:5d:20:67:2c:9e:27:74:4f:46:59:b4:d9:38: fc:0c:36:7f:60:58:f1:18:68:dc:4f:ad:60:1a:40:14:9d:47: cd:2d:03:29:34:ca:05:10:c1:c1:3e:28:52:05:c2:80:35:09: b2:a8:14:a8:c6:4c:33:00:09:2a:73:2b:6e:1f:1a:94:4d:c9: d6:06:c0:39:32:9b:6f:9d:30:f7:c8:91:51:b1:fc:77:6c:fb: 15:96:9a:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2 MDMwQzdERkQwHhcNMjUwNjE1MDAwMjAxWhcNMjUwNjIyMDAwMjAxWjAYMRYwFAYD VQQDEw02ODRlMGQ3OS0wNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwdVHRGpNJ86aPo7SpCjnTo7OFpFLwGslDkiKCLDEPLn+QSsK84T4Mz56I/n MfbqbyqimXtQWy66Vx9E+2+SuzVkjsN60+NqYTjOVQNaw43MzO1iQ97tw90p3y8L L5S+zBotqVJwvy1nKTtIO3o+RD8wt5+84Q+IjM2nqEFTOmEowSd31VaNWVaMaidv 3h1NsokCNZ7LuSWlweaUeTXp+YeIuGA93ODubQFqwBm9ysPR2hXKjKNCmpVcPkcO jbxdsDJcqxxgY9P2MVZdA0iUjC3SG3oHeoPVIF1c6UOQs0i4mCxCPCidxdpAHw2q HFCdeHh4nlto8W8mzWUVww/DxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjFCCgj d8Qhh1y5HouipUTpk1xYMB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi WmE2MEwyZko4X05nTU1mZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK9Nr4B8Tx9XSsR9yqQX7tTgRcP+BjHEwPudxoXZPG3CdUhgfbiy/C z7yzLzHscH70Cny9rXu94fhcfgYKTZLBiUxiwJhvqKO7zsL6AjITDOPHU0OAZvR5 jY+TNqRT2f9Gse2c1p71dyjmM0TdY36xrNdb2ofXOD9UfSlkEJU7CIB/YDuAeqcH hcNc0J+aFSyq3czmUslhhV1uvINyUkeV0fNPgMDhhl0gZyyeJ3RPRlm02Tj8DDZ/ YFjxGGjcT61gGkAUnUfNLQMpNMoFEMHBPihSBcKANQmyqBSoxkwzAAkqcytuHxqU TcnWBsA5MptvnTD3yJFRsfx3bPsVlppo -----END CERTIFICATE-----Generated at Sun Jun 15 06:03:06 2025 by rpki-client