$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: VLGI+GVQ1ZQX2Baktm9gwJXswgrjHO2nj9/hgjBaRK4= Subject key identifier: AF:5A:DF:51:37:30:A2:1C:F1:E3:EE:DF:3D:62:1F:AF:2D:B0:59:E5 Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: A8 Signing time: Sat 23 Aug 2025 06:22:41 +0000 Manifest this update: Sat 23 Aug 2025 06:22:40 +0000 Manifest next update: Sat 30 Aug 2025 06:22:40 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: zijekXXaQzNRVM+cndsGlHfwcC0cOOXaSXW3QF+zEnk=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: YBs0kfZTY2sABIi/xaIJAg5Ddfxg9MhnEpmdNb3MBps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: Aug 23 06:22:40 2025 GMT Not After : Aug 30 06:22:40 2025 GMT Subject: CN=68a95e31-4919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6f:ec:4d:a6:f2:81:58:88:96:92:0c:5e:48: 7c:2e:78:b8:5a:2c:ee:45:6a:7d:bb:e8:74:ac:c8: 3b:a0:7e:17:c2:58:08:ce:d5:43:29:f1:4b:d7:18: 11:3a:2c:df:dd:95:c9:d7:4c:72:da:de:82:50:79: 4b:c9:fb:2d:26:40:4f:5d:e7:af:b3:f0:68:fd:63: 71:ae:cc:71:86:b7:66:b5:7b:21:30:6b:52:d3:16: 68:53:62:04:49:fd:da:11:42:48:27:7e:7a:91:6a: 23:de:48:ab:20:ca:19:6c:54:e3:07:3d:37:68:16: d3:4f:54:c1:90:f2:13:28:22:ce:6c:98:46:3b:b8: bc:8a:f2:cc:2c:94:a6:c0:d9:d5:0e:ae:83:97:8b: 77:ef:41:c1:51:e4:f3:d7:63:0d:92:c0:56:55:67: 74:62:cc:fe:94:0a:a5:4b:c3:ae:27:e6:6f:e9:77: bd:57:b7:8d:8b:65:f7:a6:bf:ac:ea:ab:5f:61:2a: f7:37:b9:0e:52:d7:72:7d:24:21:f3:b2:c6:e4:ee: ab:ec:90:b5:e1:d3:30:e5:81:0f:f7:c7:5e:d8:4a: b8:3e:a6:ef:fb:40:b7:97:19:c2:3c:80:75:13:29: c0:f8:8a:ff:c6:42:76:1e:aa:92:69:b2:84:b2:58: 1c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5A:DF:51:37:30:A2:1C:F1:E3:EE:DF:3D:62:1F:AF:2D:B0:59:E5 X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e0:6a:ef:fb:7b:90:60:e0:6e:d8:20:51:89:e0:d1:d2:db: f0:03:aa:d3:58:b4:bd:40:1b:ab:89:fb:1e:f6:52:df:14:61: 0d:46:98:b0:7d:4a:0f:73:30:17:95:58:84:13:66:a3:c2:21: c3:2c:43:96:a8:f4:21:a2:a5:79:f6:d9:1c:2e:4e:78:03:67: a4:84:95:e9:fd:1f:c0:d2:1b:cc:e6:d0:a0:85:b7:37:bc:55: 2b:8a:36:ed:c3:d9:f9:6f:08:52:70:c8:94:73:ee:a2:8f:5a: c1:36:cf:c6:8f:96:e1:32:bd:16:4a:fa:13:e8:bf:27:de:a3: 60:d6:52:b1:48:a5:1d:11:2b:e7:c8:bf:11:46:1b:85:c7:ad: 6d:8d:91:9e:f7:8f:ec:44:f3:40:06:de:34:63:bb:ee:e3:e2: dc:a5:11:92:b1:12:8e:eb:78:5b:d3:61:1a:06:f6:6b:58:21: 04:13:0f:11:9d:ab:62:22:e9:bc:60:fb:41:a2:32:57:4e:77: 37:d4:1b:07:9d:41:78:b3:00:89:81:1b:f6:11:c6:63:b4:00: e0:ac:fb:a6:44:82:6a:0d:4c:ca:57:6d:8c:4d:92:50:b3:e0: 73:fd:47:2f:57:35:65:66:41:c1:b3:1c:2d:19:7d:ce:b6:a0: bb:c2:79:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD MUQ1QjgzM0IwHhcNMjUwODIzMDYyMjQwWhcNMjUwODMwMDYyMjQwWjAYMRYwFAYD VQQDEw02OGE5NWUzMS00OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6W/sTabygViIlpIMXkh8Lni4WizuRWp9u+h0rMg7oH4XwlgIztVDKfFL1xgR Oizf3ZXJ10xy2t6CUHlLyfstJkBPXeevs/Bo/WNxrsxxhrdmtXshMGtS0xZoU2IE Sf3aEUJIJ356kWoj3kirIMoZbFTjBz03aBbTT1TBkPITKCLObJhGO7i8ivLMLJSm wNnVDq6Dl4t370HBUeTz12MNksBWVWd0Ysz+lAqlS8OuJ+Zv6Xe9V7eNi2X3pr+s 6qtfYSr3N7kOUtdyfSQh87LG5O6r7JC14dMw5YEP98de2Eq4Pqbv+0C3lxnCPIB1 EynA+Ir/xkJ2HqqSabKEslgcuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9a31E3 MKIc8ePu3z1iH68tsFnlMB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF ZHNVeTZzR01LU2ZCMWJnenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF4Grv+3uQYOBu2CBRieDR0tvwA6rTWLS9QBurifse9lLfFGENRpiw fUoPczAXlViEE2ajwiHDLEOWqPQhoqV59tkcLk54A2ekhJXp/R/A0hvM5tCghbc3 vFUrijbtw9n5bwhScMiUc+6ij1rBNs/Gj5bhMr0WSvoT6L8n3qNg1lKxSKUdESvn yL8RRhuFx61tjZGe94/sRPNABt40Y7vu4+LcpRGSsRKO63hb02EaBvZrWCEEEw8R natiIum8YPtBojJXTnc31BsHnUF4swCJgRv2EcZjtADgrPumRIJqDUzKV22MTZJQ s+Bz/UcvVzVlZkHBsxwtGX3OtqC7wnld -----END CERTIFICATE-----Generated at Sat Aug 23 22:28:14 2025 by rpki-client