$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json) Hash identifier: o7ugqqXHouo+kGuamNS1GClBxkEpPj0p+CbH2WuGYeQ= Subject key identifier: 0A:42:37:27:00:C9:88:A8:49:F6:83:BB:12:B7:85:DA:F5:98:7E:05 Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft Manifest number: 02D3 Signing time: Sat 23 Aug 2025 01:36:49 +0000 Manifest this update: Sat 23 Aug 2025 01:36:48 +0000 Manifest next update: Sat 30 Aug 2025 01:36:48 +0000 Files and hashes: 1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: 0eGLsw3/pJ8ayuCR85LDwg1PN01nIy0jYo7TZdIv6Y8=) 2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: KUkDUfBaYO7x5r7GKr4hhdrUQHUWyKfXeCnKjTowHew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15EA, serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Validity Not Before: Aug 23 01:36:48 2025 GMT Not After : Aug 30 01:36:48 2025 GMT Subject: CN=68a91b30-b04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:f1:a2:c9:90:86:b1:c3:53:43:64:02:71: 3f:5a:da:f8:a9:e3:06:89:e5:6d:98:05:54:55:8b: 96:e0:31:09:00:4a:ac:de:aa:ad:52:10:0e:f4:89: 1e:a1:cd:b0:b1:02:48:dd:29:16:87:18:2b:71:7c: e3:60:8a:65:a9:f9:eb:87:97:de:95:38:b7:b2:a7: fb:a1:41:af:a7:72:bf:db:c3:0f:27:75:9f:c5:58: b9:6b:f9:ef:cf:0b:ec:6f:75:a3:69:e0:95:f7:90: 8e:02:65:9c:b1:82:38:c8:cf:fe:e2:1b:4f:79:34: 55:11:ff:f9:35:d7:be:76:96:b1:a9:ea:b6:78:49: 51:e5:f1:29:6b:44:7b:ca:76:45:8b:ec:40:db:db: c1:ec:96:7c:76:34:8d:e7:3c:d2:70:d1:8d:23:f1: 05:37:45:36:58:b7:26:43:e9:73:29:b4:2f:55:c3: 29:8f:bf:ac:4b:85:56:3b:cb:6f:fc:61:bf:c0:97: 12:9c:ed:aa:8e:47:08:51:14:bd:c0:2c:89:99:02: 82:53:20:f9:4d:f7:59:4b:fc:73:cd:49:c0:fc:bf: 8c:11:a0:a5:6d:bc:bf:13:54:43:c2:db:17:a5:4c: da:38:fe:f4:cc:8c:72:e2:59:8b:1d:ff:e4:96:2f: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:42:37:27:00:C9:88:A8:49:F6:83:BB:12:B7:85:DA:F5:98:7E:05 X509v3 Authority Key Identifier: keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ca:1f:99:7c:28:22:77:33:04:a5:27:6e:1c:78:b9:6c:95: e2:b4:06:d6:71:e4:b5:c5:3c:73:7e:2a:e2:cf:d9:68:11:d0: 70:5b:97:79:82:2f:93:c8:b7:25:3c:8e:23:e4:11:b0:5c:bb: 6d:08:a9:f8:06:f4:0a:8d:d0:56:6c:53:4e:28:35:29:96:4f: 8b:2c:8e:52:8b:2a:87:4f:96:e4:4d:ad:2f:2e:65:44:67:15: 15:4e:81:77:f6:7c:f6:61:5d:23:4b:c3:b2:2e:a4:8c:1c:5c: 53:65:4e:ed:df:a4:6d:4b:73:07:72:0f:94:5d:67:78:7a:ee: 9e:d6:f9:cb:84:3a:62:5d:6e:f7:10:ba:c5:b3:cc:6e:37:13: 73:68:b3:87:40:a9:9d:fd:8e:b4:d5:01:c6:db:8a:93:80:f2: bf:8d:05:dd:57:b2:53:7e:39:4f:91:29:2a:0c:77:31:6e:c8: 90:23:a4:37:c7:34:c1:e1:10:69:e4:af:3b:86:63:78:7f:62: 26:25:26:48:de:79:e6:39:a5:ab:a3:eb:d7:97:d4:f1:51:36: 15:46:d8:0b:7b:02:ca:c0:80:96:66:c0:e3:aa:3b:90:ed:3d: a2:34:40:95:da:91:08:6c:7d:18:d0:68:3d:ab:65:8d:65:8e: 9e:93:1d:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlDMTRCQzg3QUJD RjhCNzc2MEUwHhcNMjUwODIzMDEzNjQ4WhcNMjUwODMwMDEzNjQ4WjAYMRYwFAYD VQQDEw02OGE5MWIzMC1iMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmHxosmQhrHDU0NkAnE/Wtr4qeMGieVtmAVUVYuW4DEJAEqs3qqtUhAO9Ike oc2wsQJI3SkWhxgrcXzjYIplqfnrh5felTi3sqf7oUGvp3K/28MPJ3WfxVi5a/nv zwvsb3WjaeCV95COAmWcsYI4yM/+4htPeTRVEf/5Nde+dpaxqeq2eElR5fEpa0R7 ynZFi+xA29vB7JZ8djSN5zzScNGNI/EFN0U2WLcmQ+lzKbQvVcMpj7+sS4VWO8tv /GG/wJcSnO2qjkcIURS9wCyJmQKCUyD5TfdZS/xzzUnA/L+MEaClbby/E1RDwtsX pUzaOP70zIxy4lmLHf/kli8mfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApCNycA yYioSfaDuxK3hdr1mH4FMB8GA1UdIwQYMBaAFPfHq1VKvx3K+MF5wUvIerz4t3YO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVFQS9GMUE3RTJGNEZC ODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hjcjR3WG5CUzhoNnZQaTNk ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk4ZXJWVXFfSGNyNHdYbkJTOGg2dlBpM2RnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVFQS9GMUE3RTJGNEZCODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hj cjR3WG5CUzhoNnZQaTNkZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzyh+ZfCgidzMEpSduHHi5bJXitAbWceS1xTxzfiriz9loEdBwW5d5 gi+TyLclPI4j5BGwXLttCKn4BvQKjdBWbFNOKDUplk+LLI5SiyqHT5bkTa0vLmVE ZxUVToF39nz2YV0jS8OyLqSMHFxTZU7t36RtS3MHcg+UXWd4eu6e1vnLhDpiXW73 ELrFs8xuNxNzaLOHQKmd/Y601QHG24qTgPK/jQXdV7JTfjlPkSkqDHcxbsiQI6Q3 xzTB4RBp5K87hmN4f2ImJSZI3nnmOaWro+vXl9TxUTYVRtgLewLKwICWZsDjqjuQ 7T2iNECV2pEIbH0Y0Gg9q2WNZY6ekx0X -----END CERTIFICATE-----Generated at Sat Aug 23 21:28:05 2025 by rpki-client