$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json) Hash identifier: Uqz7+1+IO99tBjzf0kIyWF9N+CUWvbiSEHllunv55es= Subject key identifier: 42:1F:FC:9B:D6:8E:E5:E0:5B:AC:40:16:FA:CE:EF:C4:D3:30:E9:28 Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft Manifest number: 046B Signing time: Mon 15 Sep 2025 00:30:27 +0000 Manifest this update: Mon 15 Sep 2025 00:30:27 +0000 Manifest next update: Mon 22 Sep 2025 00:30:27 +0000 Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: U3CGbJ+yCpnS49sj8eDDSc6j3pEXTY+LbonvnIQdSJA=) 2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: bL21RN87VLUZ42gx2+jC72By39LghzvwcJOZaJQ9FMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 00:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Validity Not Before: Sep 15 00:30:27 2025 GMT Not After : Sep 22 00:30:27 2025 GMT Subject: CN=68c75e23-3f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1a:e8:c2:58:d4:99:e5:3f:85:aa:4d:ad:cd: bd:e5:84:b5:33:d0:09:a0:e2:52:ea:78:26:51:1b: d5:de:c8:4b:83:4b:af:1c:f4:d4:65:b1:b3:c7:8f: 81:86:2b:df:e5:b2:77:0b:30:d3:69:c1:15:57:d9: a6:27:a3:f7:6e:9d:f6:7e:6e:4e:c5:9e:11:f2:0e: 21:ce:97:ca:72:f1:b7:ba:e1:63:c3:b8:1a:fd:15: c5:38:d0:bf:79:18:9e:0e:85:56:f6:ed:61:03:63: 71:57:75:52:92:1e:3a:74:7d:ca:bd:1f:2f:6f:a0: e9:85:ba:ec:b0:11:c9:b0:93:4e:53:51:76:c6:58: ee:30:e3:a6:39:98:f5:0c:c4:67:da:52:a3:b9:1a: 11:5d:89:eb:da:7e:29:ee:39:57:82:f8:33:15:ee: 37:cf:eb:94:10:6c:4c:da:a0:76:a5:36:22:37:51: e0:fd:47:28:e0:31:ec:f2:8f:d9:8f:0a:05:54:5e: 50:63:f4:dc:58:d1:f4:b5:ca:0f:bf:44:e2:27:b8: b9:a0:76:09:36:f9:4d:13:0a:a3:d4:54:88:b3:da: 4c:7c:c5:c4:41:b8:f9:57:65:67:7e:d2:e3:a4:65: d3:d1:20:32:19:10:8f:5c:65:d1:16:53:6b:35:4e: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1F:FC:9B:D6:8E:E5:E0:5B:AC:40:16:FA:CE:EF:C4:D3:30:E9:28 X509v3 Authority Key Identifier: keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d0:6c:11:16:a9:85:aa:ae:da:d4:07:04:a5:11:5e:fd:8b: ee:3a:37:77:bc:8d:d3:fc:64:59:06:9f:11:16:1d:0b:9b:f6: c1:b2:78:48:29:c7:33:d7:4e:5a:9f:aa:29:78:24:dd:16:38: 09:42:b3:52:f9:83:b8:32:e8:e5:aa:59:c5:82:5c:77:fe:f0: be:38:3d:67:f0:94:80:f8:3e:6d:fc:c3:3b:80:d8:b5:c8:6f: dd:9d:f3:1b:64:f0:18:8b:f7:09:14:7f:5c:da:9d:bd:51:8f: 04:2c:22:85:36:a8:43:bd:c1:66:bd:7c:81:b8:ac:54:de:d3: bb:94:0d:9f:ea:53:cc:78:d0:0e:7f:44:65:46:bd:f4:5f:ec: da:7b:1e:e2:6b:01:45:6c:a2:6b:40:77:20:8b:0f:43:d1:0a: ab:c6:85:5d:d3:87:3f:39:47:50:33:7d:f4:e5:a9:c8:87:a5: 71:c3:f5:4e:80:d0:f1:37:47:cc:3e:99:6b:62:ca:f3:71:9c: 8e:18:c7:83:1c:24:28:86:bb:54:1f:ed:fb:80:8d:26:f1:0e: df:77:04:5a:79:29:4c:1a:ef:8f:fd:1c:74:b6:00:f9:2f:6c: 0c:40:2e:af:29:e5:c2:d5:d9:51:c0:7b:32:d3:1b:15:71:ce: 08:1b:07:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2 MDMwQzdERkQwHhcNMjUwOTE1MDAzMDI3WhcNMjUwOTIyMDAzMDI3WjAYMRYwFAYD VQQDEw02OGM3NWUyMy0zZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhrowljUmeU/hapNrc295YS1M9AJoOJS6ngmURvV3shLg0uvHPTUZbGzx4+B hivf5bJ3CzDTacEVV9mmJ6P3bp32fm5OxZ4R8g4hzpfKcvG3uuFjw7ga/RXFONC/ eRieDoVW9u1hA2NxV3VSkh46dH3KvR8vb6DphbrssBHJsJNOU1F2xljuMOOmOZj1 DMRn2lKjuRoRXYnr2n4p7jlXgvgzFe43z+uUEGxM2qB2pTYiN1Hg/Uco4DHs8o/Z jwoFVF5QY/TcWNH0tcoPv0TiJ7i5oHYJNvlNEwqj1FSIs9pMfMXEQbj5V2VnftLj pGXT0SAyGRCPXGXRFlNrNU7ZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIf/JvW juXgW6xAFvrO78TTMOkoMB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi WmE2MEwyZko4X05nTU1mZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD0GwRFqmFqq7a1AcEpRFe/YvuOjd3vI3T/GRZBp8RFh0Lm/bBsnhI Kccz105an6opeCTdFjgJQrNS+YO4MujlqlnFglx3/vC+OD1n8JSA+D5t/MM7gNi1 yG/dnfMbZPAYi/cJFH9c2p29UY8ELCKFNqhDvcFmvXyBuKxU3tO7lA2f6lPMeNAO f0RlRr30X+zaex7iawFFbKJrQHcgiw9D0QqrxoVd04c/OUdQM3305anIh6Vxw/VO gNDxN0fMPplrYsrzcZyOGMeDHCQohrtUH+37gI0m8Q7fdwRaeSlMGu+P/Rx0tgD5 L2wMQC6vKeXC1dlRwHsy0xsVcc4IGwcN -----END CERTIFICATE-----Generated at Mon Sep 15 23:34:10 2025 by rpki-client