$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: Mi81uG30CExx2sqUuG9w5Q7baW6ynoDwLG67m8KnQYw= Subject key identifier: 5A:E3:74:80:85:A7:0F:42:8B:AE:46:F9:C3:45:A9:C4:2E:6C:83:BD Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: 8E Signing time: Thu 03 Jul 2025 06:39:52 +0000 Manifest this update: Thu 03 Jul 2025 06:39:51 +0000 Manifest next update: Thu 10 Jul 2025 06:39:51 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: 5/3ai7lalBu/D7Vme4KL85+LWznrsVJHE2kAsiJ0vu0=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: YBs0kfZTY2sABIi/xaIJAg5Ddfxg9MhnEpmdNb3MBps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: Jul 3 06:39:51 2025 GMT Not After : Jul 10 06:39:51 2025 GMT Subject: CN=686625b8-bc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:f6:a2:06:9e:09:8f:e7:0e:36:c8:b0:34: 60:af:bd:b9:7d:bc:6e:74:3c:02:16:61:6a:1f:78: d0:0d:0a:2a:69:0b:ce:31:17:62:3b:c6:02:52:a8: 7e:72:c9:0a:a4:fa:50:60:a9:f3:88:b2:90:45:de: 2d:0c:c1:ad:4f:8e:fd:6b:c0:17:94:e6:f6:30:e8: 58:73:52:07:51:cb:6b:87:28:2c:25:fa:ff:56:b2: 57:5b:c7:31:69:a9:c4:26:97:af:42:91:a0:5d:6a: 96:53:0b:34:36:3f:bc:2d:8a:3b:b7:90:b1:1a:16: df:5f:16:58:7e:4c:57:0c:2b:c6:e1:b0:ba:ab:4f: 75:4d:ea:0c:5c:b0:2a:5f:74:b9:30:9a:3d:f8:4a: 3b:d0:0d:db:e2:59:0b:d9:87:36:d2:fc:20:e8:c7: 30:04:ea:5f:5a:88:8f:df:35:f7:b2:32:53:7f:6d: 4d:e9:3e:4d:11:01:7e:c3:de:4c:bc:15:b8:92:c1: 2b:5e:f9:5d:89:d6:30:9b:16:63:b9:0d:81:ec:b1: a8:b3:73:51:ea:46:22:9d:f2:9e:d3:08:6a:90:ab: f8:da:a7:b8:7b:16:c6:d8:22:46:68:68:27:61:99: b7:ac:3b:fb:ec:5b:98:a0:21:ad:06:19:ff:a2:e9: 68:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E3:74:80:85:A7:0F:42:8B:AE:46:F9:C3:45:A9:C4:2E:6C:83:BD X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e8:76:15:bc:61:7b:18:6d:77:d4:1f:f6:72:44:e4:25:d9: dc:fe:2f:8c:3d:5a:f0:37:11:0e:36:8b:6e:5b:94:cd:8c:a0: 7c:f0:e2:fb:87:a9:f4:5a:c4:b1:50:d3:ca:88:10:08:d1:72: 50:59:e2:33:a2:5b:09:ea:ed:c3:ef:59:b4:95:e7:af:0c:66: 33:d2:42:03:23:d6:be:0a:88:4f:e1:e6:c7:4f:c5:2b:fc:9a: 8b:02:3d:52:2d:a3:7e:6c:82:39:70:25:df:6a:90:c8:6b:28: 69:db:a1:df:7a:5d:cb:7e:f8:58:75:2d:a1:e4:08:d6:a2:08: 1b:4b:96:ec:46:9a:03:cf:9c:67:51:a5:91:84:c3:8f:9b:73: ff:42:85:94:a1:af:c5:c3:4d:94:ec:58:1e:49:f5:58:e0:1c: 0e:9f:f4:06:d5:49:50:9a:54:21:02:74:1d:d1:61:53:fa:b6: 53:90:9e:91:18:b1:2c:f1:b9:4d:c0:24:7e:a3:cd:05:31:85: 61:11:b8:b0:65:8b:24:7f:fd:a1:e6:09:8b:99:eb:e3:ef:06: 85:f2:bb:5b:ac:4f:67:a8:56:e6:22:37:ca:3d:95:84:4c:0f: 9f:ee:e1:6a:3a:58:d8:c2:9e:77:79:d1:53:65:7b:3a:ab:13: 11:42:61:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD MUQ1QjgzM0IwHhcNMjUwNzAzMDYzOTUxWhcNMjUwNzEwMDYzOTUxWjAYMRYwFAYD VQQDEw02ODY2MjViOC1iYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv172ogaeCY/nDjbIsDRgr725fbxudDwCFmFqH3jQDQoqaQvOMRdiO8YCUqh+ cskKpPpQYKnziLKQRd4tDMGtT479a8AXlOb2MOhYc1IHUctrhygsJfr/VrJXW8cx aanEJpevQpGgXWqWUws0Nj+8LYo7t5CxGhbfXxZYfkxXDCvG4bC6q091TeoMXLAq X3S5MJo9+Eo70A3b4lkL2Yc20vwg6McwBOpfWoiP3zX3sjJTf21N6T5NEQF+w95M vBW4ksErXvldidYwmxZjuQ2B7LGos3NR6kYinfKe0whqkKv42qe4exbG2CJGaGgn YZm3rDv77FuYoCGtBhn/oulomwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrjdICF pw9Ci65G+cNFqcQubIO9MB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF ZHNVeTZzR01LU2ZCMWJnenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA66HYVvGF7GG131B/2ckTkJdnc/i+MPVrwNxEONotuW5TNjKB88OL7 h6n0WsSxUNPKiBAI0XJQWeIzolsJ6u3D71m0leevDGYz0kIDI9a+CohP4ebHT8Ur /JqLAj1SLaN+bII5cCXfapDIayhp26Hfel3LfvhYdS2h5AjWoggbS5bsRpoDz5xn UaWRhMOPm3P/QoWUoa/Fw02U7FgeSfVY4BwOn/QG1UlQmlQhAnQd0WFT+rZTkJ6R GLEs8blNwCR+o80FMYVhEbiwZYskf/2h5gmLmevj7waF8rtbrE9nqFbmIjfKPZWE TA+f7uFqOljYwp53edFTZXs6qxMRQmFo -----END CERTIFICATE-----Generated at Fri Jul 4 20:28:28 2025 by rpki-client