$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json) Hash identifier: XkcpOtqLaVlGRKlvzTwI2BOwM1LnKUdXe4O5hG78aEM= Subject key identifier: 60:D5:DD:87:04:D9:4C:78:A5:20:6A:31:1A:C3:5F:80:AA:8F:4D:72 Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft Manifest number: 044D Signing time: Sat 19 Jul 2025 00:38:59 +0000 Manifest this update: Sat 19 Jul 2025 00:38:58 +0000 Manifest next update: Sat 26 Jul 2025 00:38:58 +0000 Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: 28QUX27VKw1oJ4zqcgAesJM2oq3gg1RkyJcYJokGt7Y=) 2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: bL21RN87VLUZ42gx2+jC72By39LghzvwcJOZaJQ9FMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Validity Not Before: Jul 19 00:38:58 2025 GMT Not After : Jul 26 00:38:58 2025 GMT Subject: CN=687ae922-1d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:8c:2a:9b:ef:07:78:a4:9a:02:3b:7f:56: 0a:58:5e:a4:49:ed:16:fb:9d:2d:ec:b3:a0:c8:75: 18:86:39:ab:2e:93:da:0b:5b:60:d5:8d:44:3f:90: 7c:9a:da:fe:95:0d:b6:d1:4f:cc:98:44:22:47:44: d2:e6:99:1b:7a:00:65:68:d9:61:14:ec:01:c6:2d: 29:1e:50:89:9d:42:c4:24:bf:c1:35:b2:d0:6d:bb: 28:86:69:d9:a4:70:7d:fe:d5:22:72:0a:af:af:1b: 6b:a8:e8:44:92:89:a6:a3:71:1d:49:aa:10:ab:ca: dc:a2:25:27:1b:a4:6b:64:98:5c:ce:ec:31:ec:3c: 51:b3:ea:b7:b9:52:36:9f:1c:23:d0:ea:48:64:d2: d4:23:12:6d:c4:1a:62:76:2e:d8:f1:b7:0f:01:77: af:69:af:53:67:ff:3c:33:4a:53:a6:a2:2b:95:45: e1:9f:7b:2b:5b:c8:8a:01:a8:5a:5a:89:9e:ec:c1: f2:ca:d9:50:7a:d0:5e:40:71:6c:04:66:67:5e:49: ed:73:54:b3:bd:71:32:61:0c:fd:57:1d:5f:92:bc: 41:52:d9:55:eb:62:13:71:7b:06:9f:44:06:4e:1d: 52:a4:fa:cf:30:93:ae:d1:5c:56:c9:25:89:26:68: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D5:DD:87:04:D9:4C:78:A5:20:6A:31:1A:C3:5F:80:AA:8F:4D:72 X509v3 Authority Key Identifier: keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:9f:64:9d:68:c5:b3:72:46:8b:a7:cd:3b:7e:3b:9a:21:fe: a1:d3:a0:69:d5:93:74:a5:a5:26:78:8a:db:5a:57:c1:90:ca: 24:11:7e:cf:29:51:cf:ce:fa:f4:98:a7:a6:4a:f4:c8:0d:29: 0f:e4:7f:3b:89:cd:42:dd:f7:57:fd:25:3c:25:72:0b:1d:67: 91:d7:3c:99:39:89:c7:54:cb:fe:ac:e4:d8:bd:09:a6:8a:74: 56:a2:a1:b1:a4:ab:3c:7f:4b:17:ea:cb:6e:63:89:5d:77:e2: bf:c5:90:19:90:47:02:39:d3:dd:1e:5c:a1:63:db:84:5c:56: be:09:d0:9c:bb:f4:4e:cd:e7:d5:94:1d:6a:cd:fd:b1:09:1f: 16:45:e3:61:6c:90:13:c0:be:2d:8b:ad:96:e6:e9:67:fc:0d: df:a6:1c:9a:64:11:db:c3:4f:85:d5:da:f8:70:ac:df:68:1d: 80:00:d9:ad:9b:e5:4d:b8:65:38:a4:99:ae:72:ff:02:f5:e4: 69:c4:1f:9e:79:65:14:90:58:4e:cf:cf:67:69:84:cd:9f:b1: dc:b1:de:f0:70:e2:3b:42:e5:cb:d3:1d:0a:49:b2:ac:b1:1c: c3:84:77:c2:dc:cc:34:61:03:d7:9c:2f:6a:ee:3e:9e:54:e7: d5:14:f1:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2 MDMwQzdERkQwHhcNMjUwNzE5MDAzODU4WhcNMjUwNzI2MDAzODU4WjAYMRYwFAYD VQQDEw02ODdhZTkyMi0xZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXeMKpvvB3ikmgI7f1YKWF6kSe0W+50t7LOgyHUYhjmrLpPaC1tg1Y1EP5B8 mtr+lQ220U/MmEQiR0TS5pkbegBlaNlhFOwBxi0pHlCJnULEJL/BNbLQbbsohmnZ pHB9/tUicgqvrxtrqOhEkommo3EdSaoQq8rcoiUnG6RrZJhczuwx7DxRs+q3uVI2 nxwj0OpIZNLUIxJtxBpidi7Y8bcPAXevaa9TZ/88M0pTpqIrlUXhn3srW8iKAaha Wome7MHyytlQetBeQHFsBGZnXkntc1SzvXEyYQz9Vx1fkrxBUtlV62ITcXsGn0QG Th1SpPrPMJOu0VxWySWJJmi8bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDV3YcE 2Ux4pSBqMRrDX4Cqj01yMB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi WmE2MEwyZko4X05nTU1mZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpn2SdaMWzckaLp807fjuaIf6h06Bp1ZN0paUmeIrbWlfBkMokEX7P KVHPzvr0mKemSvTIDSkP5H87ic1C3fdX/SU8JXILHWeR1zyZOYnHVMv+rOTYvQmm inRWoqGxpKs8f0sX6stuY4ldd+K/xZAZkEcCOdPdHlyhY9uEXFa+CdCcu/ROzefV lB1qzf2xCR8WReNhbJATwL4ti62W5uln/A3fphyaZBHbw0+F1dr4cKzfaB2AANmt m+VNuGU4pJmucv8C9eRpxB+eeWUUkFhOz89naYTNn7Hcsd7wcOI7QuXL0x0KSbKs sRzDhHfC3Mw0YQPXnC9q7j6eVOfVFPF8 -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:19 2025 by rpki-client