$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: xMsyq3U4fHuRqee3l4PPEwPl6fhLfJeC+2r0dtLkcUE= Subject key identifier: 33:28:71:02:FA:DF:B6:FD:45:C9:19:E8:8F:AC:40:20:63:AC:04:B4 Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: C5 Signing time: Sun 19 Oct 2025 08:54:17 +0000 Manifest this update: Sun 19 Oct 2025 08:54:17 +0000 Manifest next update: Sun 26 Oct 2025 08:54:17 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: 7x4JigaWhfuEe8IkKfmNKeA+PNJ2K5K25kwEDeYsSZE=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: YBs0kfZTY2sABIi/xaIJAg5Ddfxg9MhnEpmdNb3MBps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: Oct 19 08:54:17 2025 GMT Not After : Oct 26 08:54:17 2025 GMT Subject: CN=68f4a739-14fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:77:f2:f1:0f:32:1c:ee:08:92:f4:04:20:2a: cb:7d:64:b9:26:49:30:ab:ba:ab:5c:15:84:9d:00: 51:01:be:0c:38:8c:71:0b:fa:6d:e5:b4:fa:07:ce: 96:c9:13:e4:87:af:8c:b4:1f:6f:e0:03:04:07:d4: 69:d2:fb:ea:bb:ca:2d:2a:62:8b:9b:29:ae:bf:3c: 60:76:e4:4e:73:69:01:05:20:a9:f9:90:ac:2a:9f: f8:0f:97:f2:4d:e2:c5:82:72:7c:82:79:21:73:20: ed:3f:73:31:2a:8b:89:9b:d2:43:41:ed:cb:25:42: 07:43:65:04:6b:bc:67:02:10:3e:89:01:e8:84:dc: ec:0e:24:c0:7f:cc:63:40:ee:4f:e5:8a:d0:a7:08: 66:40:b4:9e:02:d2:6e:e6:6e:3e:3f:c9:a5:a6:1b: 61:c8:f0:53:67:65:bc:68:a3:76:56:2c:f2:e6:3b: e3:7b:be:65:75:a9:5c:cd:d5:dc:d2:0c:5b:cc:85: 1b:d3:87:c5:00:bc:1a:a8:e6:b7:69:5c:c7:de:23: 3e:c9:86:1c:55:50:61:c5:14:ef:42:8d:1c:bf:b2: a1:45:7b:c8:ec:ea:28:a7:69:7e:2a:0b:ff:83:2e: 84:f8:b0:17:5c:d8:d6:a6:d0:07:9a:0f:8b:c7:c3: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:28:71:02:FA:DF:B6:FD:45:C9:19:E8:8F:AC:40:20:63:AC:04:B4 X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a8:05:f8:21:4a:04:1f:bd:1e:04:30:e9:39:4d:1c:7b:1f: a2:dc:c4:54:b7:75:2c:b2:89:21:86:2e:7f:09:05:be:9e:b8: 45:a6:dd:c7:28:44:96:f1:35:4f:70:7b:63:18:a7:bf:49:0b: 7f:66:ed:85:7c:4a:04:cd:db:c5:94:8e:c9:f6:41:a4:8b:45: c6:68:58:cd:7e:ca:28:a5:d5:28:ff:e6:de:39:eb:4a:c5:b1: 50:ed:01:43:64:3f:65:ef:7b:0d:f5:6a:04:e6:fe:8c:c9:2b: 8d:c5:93:b9:61:76:f2:d4:2d:12:e6:05:a4:ca:70:c0:37:8b: f0:2c:5b:c1:42:75:eb:f8:a9:68:e1:68:60:02:19:4f:ca:61: ab:9d:39:4e:ce:c7:ed:1d:a2:4c:18:fe:14:fc:f4:e3:e9:54: d6:30:65:e0:fd:c7:00:2d:e8:92:ac:21:86:01:ab:7e:29:49: 68:b0:40:67:b5:86:08:6e:d0:6b:2b:dd:6f:4a:48:da:ba:14: 73:2f:d9:99:fc:8f:13:89:4f:6d:b4:cd:a9:64:e7:ae:a2:2d: fa:43:22:51:04:b8:eb:d8:24:96:d6:c6:d3:72:ec:af:82:be: e2:9e:d6:d7:c0:a2:60:7f:22:3a:1c:92:88:e2:bc:90:4a:e1: 00:2d:18:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD MUQ1QjgzM0IwHhcNMjUxMDE5MDg1NDE3WhcNMjUxMDI2MDg1NDE3WjAYMRYwFAYD VQQDEw02OGY0YTczOS0xNGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03fy8Q8yHO4IkvQEICrLfWS5Jkkwq7qrXBWEnQBRAb4MOIxxC/pt5bT6B86W yRPkh6+MtB9v4AMEB9Rp0vvqu8otKmKLmymuvzxgduROc2kBBSCp+ZCsKp/4D5fy TeLFgnJ8gnkhcyDtP3MxKouJm9JDQe3LJUIHQ2UEa7xnAhA+iQHohNzsDiTAf8xj QO5P5YrQpwhmQLSeAtJu5m4+P8mlphthyPBTZ2W8aKN2Vizy5jvje75ldalczdXc 0gxbzIUb04fFALwaqOa3aVzH3iM+yYYcVVBhxRTvQo0cv7KhRXvI7Ooop2l+Kgv/ gy6E+LAXXNjWptAHmg+Lx8PTeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMocQL6 37b9RckZ6I+sQCBjrAS0MB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF ZHNVeTZzR01LU2ZCMWJnenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSqAX4IUoEH70eBDDpOU0cex+i3MRUt3Ussokhhi5/CQW+nrhFpt3H KESW8TVPcHtjGKe/SQt/Zu2FfEoEzdvFlI7J9kGki0XGaFjNfsoopdUo/+beOetK xbFQ7QFDZD9l73sN9WoE5v6MySuNxZO5YXby1C0S5gWkynDAN4vwLFvBQnXr+Klo 4WhgAhlPymGrnTlOzsftHaJMGP4U/PTj6VTWMGXg/ccALeiSrCGGAat+KUlosEBn tYYIbtBrK91vSkjauhRzL9mZ/I8TiU9ttM2pZOeuoi36QyJRBLjr2CSW1sbTcuyv gr7intbXwKJgfyI6HJKI4ryQSuEALRiY -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:17 2025 by rpki-client