$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json) Hash identifier: UewFfJ1w+p3AtuX6qRLyglAeZN/38yLvasD3s8GzqU8= Subject key identifier: FD:EA:40:74:79:8C:F5:42:CA:96:05:9F:0A:D7:DB:62:EC:2E:13:9B Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft Manifest number: 02A0 Signing time: Tue 13 May 2025 01:19:14 +0000 Manifest this update: Tue 13 May 2025 01:19:13 +0000 Manifest next update: Tue 20 May 2025 01:19:13 +0000 Files and hashes: 1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: dvWtOyD1DkMaEN9LTAQkP95vcIm6OFSGjDOFe7pIKDo=) 2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: KUkDUfBaYO7x5r7GKr4hhdrUQHUWyKfXeCnKjTowHew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15EA, serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Validity Not Before: May 13 01:19:13 2025 GMT Not After : May 20 01:19:13 2025 GMT Subject: CN=68229e12-8a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:77:33:d3:29:f9:51:c3:80:b5:9f:86:42: fa:db:a0:2c:c6:b1:ac:f5:a6:7e:aa:99:dc:94:27: 1a:47:1e:15:1d:d4:69:58:fc:7c:bb:44:e6:48:97: 8c:8d:4b:b2:6c:30:11:50:80:b4:7e:c6:20:69:66: 7b:5c:47:ca:88:fd:5a:3e:47:68:ed:30:55:4e:47: 1f:87:2b:db:d7:7f:92:8d:dc:8d:20:5c:92:d4:fc: 22:25:cd:ee:0e:cf:b3:74:78:b3:25:c3:3d:a4:4a: cb:6f:fa:94:ec:23:62:c4:1e:c1:97:69:73:0c:9b: f4:40:a0:e5:ec:8b:5d:05:92:08:a6:12:0c:ae:a8: 07:cf:5f:5b:de:bf:4f:b0:61:9a:fa:f0:d7:8a:77: 53:56:e2:51:5e:dc:34:da:f0:0a:19:8a:a5:9a:03: 6a:00:7e:87:64:6f:11:cb:bb:9f:9d:f1:b7:5b:17: e6:8c:8e:45:b0:36:b4:ce:db:c6:93:7d:dd:6d:67: 3b:3f:57:0c:8b:21:94:83:e9:54:e9:c6:ea:15:20: 87:0c:b3:4b:4a:cc:56:e7:83:f2:a9:58:eb:f0:e2: 34:22:b0:99:90:1d:af:7e:c2:0f:d8:07:c0:0e:2c: 82:b1:72:5e:3e:d7:85:af:bd:8f:3e:e4:db:21:21: 7f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EA:40:74:79:8C:F5:42:CA:96:05:9F:0A:D7:DB:62:EC:2E:13:9B X509v3 Authority Key Identifier: keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:87:b2:05:d8:61:27:71:90:df:f3:9a:4c:57:43:6f:66:24: cf:6d:94:76:1e:1e:e3:57:cb:25:b9:09:61:a3:d7:79:d2:32: 07:1c:63:fb:4c:6d:66:5d:4b:8e:90:e7:59:da:3f:38:37:83: a3:01:c4:4b:f1:16:7b:4d:3b:2c:e0:b8:07:f6:e0:11:9f:ce: b3:74:ca:2f:e6:cb:8d:87:b4:fd:56:54:c4:83:ba:b3:85:1b: ea:53:8a:69:83:34:73:ff:d6:32:82:98:21:44:6a:4c:3e:4f: 9b:14:12:8f:6d:89:54:ff:9e:4a:19:fa:58:3b:45:ed:d9:78: 3c:e5:7c:96:d3:33:e9:bb:0f:6d:cb:29:2a:88:2b:48:50:e1: 0a:5f:32:fd:ea:83:19:c5:ab:96:8a:99:ec:9f:2b:6b:71:20: 54:01:a6:8b:e1:a7:b6:10:30:90:cd:e2:cc:22:a6:70:9e:7e: 19:56:67:86:4f:ba:8f:13:4a:03:f2:11:5f:0a:aa:45:ed:ee: 1c:6a:51:2f:5e:4e:2d:3b:f7:6c:78:c2:20:84:b6:5b:21:3e: 50:47:cc:3a:8b:08:b3:1e:0b:74:34:fe:e1:6f:d2:7b:cb:45: ca:2f:98:b0:f0:73:d6:79:4e:95:60:c4:9f:5c:36:b5:d2:4e: b8:5e:10:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlDMTRCQzg3QUJD RjhCNzc2MEUwHhcNMjUwNTEzMDExOTEzWhcNMjUwNTIwMDExOTEzWjAYMRYwFAYD VQQDEw02ODIyOWUxMi04YTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDN3M9Mp+VHDgLWfhkL626AsxrGs9aZ+qpnclCcaRx4VHdRpWPx8u0TmSJeM jUuybDARUIC0fsYgaWZ7XEfKiP1aPkdo7TBVTkcfhyvb13+SjdyNIFyS1PwiJc3u Ds+zdHizJcM9pErLb/qU7CNixB7Bl2lzDJv0QKDl7ItdBZIIphIMrqgHz19b3r9P sGGa+vDXindTVuJRXtw02vAKGYqlmgNqAH6HZG8Ry7ufnfG3WxfmjI5FsDa0ztvG k33dbWc7P1cMiyGUg+lU6cbqFSCHDLNLSsxW54PyqVjr8OI0IrCZkB2vfsIP2AfA DiyCsXJePteFr72PPuTbISF/PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3qQHR5 jPVCypYFnwrX22LsLhObMB8GA1UdIwQYMBaAFPfHq1VKvx3K+MF5wUvIerz4t3YO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVFQS9GMUE3RTJGNEZC ODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hjcjR3WG5CUzhoNnZQaTNk ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk4ZXJWVXFfSGNyNHdYbkJTOGg2dlBpM2RnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVFQS9GMUE3RTJGNEZCODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hj cjR3WG5CUzhoNnZQaTNkZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkh7IF2GEncZDf85pMV0NvZiTPbZR2Hh7jV8sluQlho9d50jIHHGP7 TG1mXUuOkOdZ2j84N4OjAcRL8RZ7TTss4LgH9uARn86zdMov5suNh7T9VlTEg7qz hRvqU4ppgzRz/9YygpghRGpMPk+bFBKPbYlU/55KGfpYO0Xt2Xg85XyW0zPpuw9t yykqiCtIUOEKXzL96oMZxauWipnsnytrcSBUAaaL4ae2EDCQzeLMIqZwnn4ZVmeG T7qPE0oD8hFfCqpF7e4calEvXk4tO/dseMIghLZbIT5QR8w6iwizHgt0NP7hb9J7 y0XKL5iw8HPWeU6VYMSfXDa10k64XhBx -----END CERTIFICATE-----Generated at Tue May 13 18:39:42 2025 by rpki-client