$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json) Hash identifier: yTmE5gPQ74S+4Euo6eiutpEbO8zyOIbNluMktpfA0Qk= Subject key identifier: 61:95:E4:C7:19:6A:B9:F8:21:2F:0F:E6:54:02:37:03:75:0B:9C:FA Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Certificate serial: 0488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft Manifest number: 0483 Signing time: Mon 03 Nov 2025 00:03:49 +0000 Manifest this update: Mon 03 Nov 2025 00:03:49 +0000 Manifest next update: Mon 10 Nov 2025 00:03:49 +0000 Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: 8EwoFuOMTddkm/mtwC0MkyOJAUmOqyjxMZW1aBUjr3o=) 2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: bL21RN87VLUZ42gx2+jC72By39LghzvwcJOZaJQ9FMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Validity Not Before: Nov 3 00:03:49 2025 GMT Not After : Nov 10 00:03:49 2025 GMT Subject: CN=6907f165-f8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:60:75:9d:07:6a:44:ee:39:41:89:8d:e0: 3e:33:6e:68:70:18:3b:5e:81:44:ac:bf:db:db:da: d8:5b:af:d8:a5:5f:4b:8f:5a:f0:1e:7d:1e:fd:7b: b7:cd:8e:7f:53:0e:2a:ab:89:67:0e:e9:86:f1:fc: 2b:e0:d5:db:4b:83:79:fd:47:2f:ed:c8:0c:04:6c: 2f:bf:7e:5d:13:1d:87:aa:a4:82:29:10:28:e9:ca: ba:0c:36:13:41:70:12:70:a5:5e:1d:3d:e5:ad:0a: e3:e7:23:56:d4:37:59:2d:6e:d4:a5:d2:d7:b5:98: b4:1b:ec:c1:a3:4e:d5:42:23:16:e9:c6:e6:d1:2b: eb:6c:fc:20:a9:2e:92:cd:0c:88:ff:51:30:9e:96: 9e:21:97:92:0b:4a:3a:64:35:47:5d:85:22:f3:12: 0a:39:b2:65:f4:9d:5a:74:e2:66:5b:90:87:fa:b5: 3c:a8:3b:9f:2a:36:8f:04:22:d8:6c:ce:a1:d3:dd: 05:2e:b0:57:88:4e:3b:e1:94:ba:ba:34:48:6a:47: 80:7e:82:0e:d5:19:a4:8a:43:15:9f:6a:df:38:77: a0:0f:9c:b9:d4:b8:72:c2:78:f9:5f:11:7a:31:c3: 57:2b:a6:6f:99:ca:aa:fc:68:ed:1a:89:93:a2:4e: 07:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:95:E4:C7:19:6A:B9:F8:21:2F:0F:E6:54:02:37:03:75:0B:9C:FA X509v3 Authority Key Identifier: keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:d7:be:d2:44:64:d2:a5:7e:8a:48:bf:05:80:77:32:57:1e: 1f:e9:9a:5c:e8:58:2e:f1:f9:73:bf:51:3a:1c:cc:58:90:b5: c3:43:e2:ae:de:d9:7e:79:c3:58:8b:32:e3:e8:da:67:3e:60: dd:94:45:fc:c3:bc:cd:2d:6e:9d:b3:53:96:93:a9:b1:f4:98: 90:ca:50:f0:b9:64:20:d4:83:9b:38:f6:51:15:6e:4b:37:4c: 9f:89:1c:81:e6:9e:48:9b:44:28:02:f9:e6:2e:89:4e:eb:12: 35:e3:0c:55:47:c9:8c:9c:d5:df:57:e8:21:3e:47:10:d0:06: a3:22:f7:dc:17:3d:a1:78:0e:44:cf:bb:b8:1e:a9:bd:75:6e: 08:5c:85:d0:98:ea:4b:0e:5e:7f:7e:6a:66:fb:53:8a:ce:b5: 3e:ba:c1:9a:ea:86:22:87:70:c2:9f:1b:1d:02:cd:3c:d6:35: 59:2d:fa:b7:cc:65:ba:05:80:57:40:c2:e8:6f:61:90:ff:02: 1f:92:d5:2a:c2:db:a1:b0:c9:a2:80:0c:40:16:6c:65:e3:27: 54:96:58:a1:9b:0e:53:6e:d8:ef:75:fd:66:55:af:b3:a3:11: ba:d4:1c:f8:c7:ba:aa:33:21:f6:46:4b:8d:7e:9c:a1:45:10: 56:ae:82:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2 MDMwQzdERkQwHhcNMjUxMTAzMDAwMzQ5WhcNMjUxMTEwMDAwMzQ5WjAYMRYwFAYD VQQDEw02OTA3ZjE2NS1mOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42dgdZ0HakTuOUGJjeA+M25ocBg7XoFErL/b29rYW6/YpV9Lj1rwHn0e/Xu3 zY5/Uw4qq4lnDumG8fwr4NXbS4N5/Ucv7cgMBGwvv35dEx2HqqSCKRAo6cq6DDYT QXAScKVeHT3lrQrj5yNW1DdZLW7UpdLXtZi0G+zBo07VQiMW6cbm0SvrbPwgqS6S zQyI/1EwnpaeIZeSC0o6ZDVHXYUi8xIKObJl9J1adOJmW5CH+rU8qDufKjaPBCLY bM6h090FLrBXiE474ZS6ujRIakeAfoIO1RmkikMVn2rfOHegD5y51Lhywnj5XxF6 McNXK6Zvmcqq/GjtGomTok4HeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGV5McZ arn4IS8P5lQCNwN1C5z6MB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi WmE2MEwyZko4X05nTU1mZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY177SRGTSpX6KSL8FgHcyVx4f6Zpc6Fgu8flzv1E6HMxYkLXDQ+Ku 3tl+ecNYizLj6NpnPmDdlEX8w7zNLW6ds1OWk6mx9JiQylDwuWQg1IObOPZRFW5L N0yfiRyB5p5Im0QoAvnmLolO6xI14wxVR8mMnNXfV+ghPkcQ0AajIvfcFz2heA5E z7u4Hqm9dW4IXIXQmOpLDl5/fmpm+1OKzrU+usGa6oYih3DCnxsdAs081jVZLfq3 zGW6BYBXQMLob2GQ/wIfktUqwtuhsMmigAxAFmxl4ydUllihmw5Tbtjvdf1mVa+z oxG61Bz4x7qqMyH2RkuNfpyhRRBWroLk -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:45 2025 by rpki-client