$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json) Hash identifier: DJB/WvMFILqBdARWf6BHhjXdLKbBiRi84AdFMAfb2ZQ= Subject key identifier: 5C:9E:11:C6:68:E5:8A:E6:FD:4D:B7:0B:44:D4:15:04:F8:1D:44:4C Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft Manifest number: 02B9 Signing time: Thu 03 Jul 2025 01:50:17 +0000 Manifest this update: Thu 03 Jul 2025 01:50:17 +0000 Manifest next update: Thu 10 Jul 2025 01:50:17 +0000 Files and hashes: 1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: HucPqgdpGJzQn6WT543NG11MU2dqUIO+XRgfkTpkEiM=) 2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: KUkDUfBaYO7x5r7GKr4hhdrUQHUWyKfXeCnKjTowHew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15EA, serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Validity Not Before: Jul 3 01:50:17 2025 GMT Not After : Jul 10 01:50:17 2025 GMT Subject: CN=6865e1d9-b497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:9e:f5:26:79:8a:78:65:7a:d6:cd:b2:26: ff:1f:a5:e6:97:44:9c:d2:b3:f3:73:cc:6b:77:ad: d2:d0:32:b0:29:af:9e:02:ba:a6:d6:f4:85:b4:c2: 4d:cd:e0:b8:e7:d2:b0:d5:d3:76:0b:95:54:23:b8: 53:57:47:82:ad:47:46:3d:34:df:25:60:79:77:05: 4e:f4:41:e4:5a:d1:4b:9f:1a:7f:d5:30:64:95:94: 81:1a:cd:9b:de:38:0f:c8:a0:23:ec:f8:d2:07:7b: 2d:c5:3e:7d:2f:00:ee:a8:06:07:4a:ae:2c:f1:70: 0c:ce:dc:88:f6:ce:26:09:cb:9c:02:e0:ef:e4:3a: f1:e8:38:6a:4d:13:96:ea:00:01:05:1a:54:7a:04: 9e:f7:d3:47:90:33:1d:c0:5a:c9:dc:ef:43:80:52: 9c:9a:bf:42:6c:e9:e6:8a:12:79:a0:38:cb:45:9d: 2b:8c:94:6c:86:b6:58:8e:4e:d7:ee:1b:5a:53:de: 72:c9:52:45:e3:23:ce:94:4c:34:60:64:8b:91:af: 60:4a:c6:89:b8:70:3e:35:a9:c6:ae:17:de:a0:09: c3:1e:b7:d4:d5:6e:c8:9f:9f:77:0d:e9:0f:0a:bc: 98:27:90:b9:c8:2a:22:24:ec:1d:fd:7b:c5:d6:32: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9E:11:C6:68:E5:8A:E6:FD:4D:B7:0B:44:D4:15:04:F8:1D:44:4C X509v3 Authority Key Identifier: keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:0a:79:5a:d3:c7:0a:b3:cf:13:a1:4b:5e:6c:d5:de:fd:b5: 4c:a1:91:63:99:ab:a8:1c:74:1c:44:64:74:0d:97:a2:45:ee: 11:37:7e:a8:56:90:cd:b7:55:59:f5:e5:9d:37:36:ef:1c:83: 45:de:2e:c4:2c:d7:db:7f:fa:9f:c0:d3:24:ab:10:c3:c3:01: 15:20:ee:32:e2:24:50:f4:6b:08:83:1e:8e:a4:f5:97:92:c3: cb:d5:80:5f:08:f8:96:b0:6e:b1:7c:14:31:75:7e:c2:85:5a: 82:ca:7c:15:df:e0:67:a3:96:42:b6:cf:3b:ed:69:34:01:8e: bf:73:99:ef:1a:0d:3a:4e:2e:2f:33:c6:f8:c7:f8:23:f0:07: 25:2f:b8:c6:de:3a:01:2c:a8:ad:42:3e:c6:ff:e5:53:00:11: e3:5d:60:5c:2b:58:b3:18:b3:59:ed:96:48:05:0b:82:14:b8: 93:73:aa:ba:39:46:61:96:a4:4d:17:52:43:d3:d2:7c:67:49: 42:ad:3e:c2:e9:c9:df:54:70:97:29:2a:fd:31:fc:9c:ec:e1: f5:e0:27:b0:20:84:fa:da:bd:3c:7a:59:e6:95:99:b6:ec:99: dd:58:93:bc:51:7e:1f:57:af:be:4c:7e:c4:17:8e:55:5b:7c: 82:36:ba:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlDMTRCQzg3QUJD RjhCNzc2MEUwHhcNMjUwNzAzMDE1MDE3WhcNMjUwNzEwMDE1MDE3WjAYMRYwFAYD VQQDEw02ODY1ZTFkOS1iNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZye9SZ5inhletbNsib/H6Xml0Sc0rPzc8xrd63S0DKwKa+eArqm1vSFtMJN zeC459Kw1dN2C5VUI7hTV0eCrUdGPTTfJWB5dwVO9EHkWtFLnxp/1TBklZSBGs2b 3jgPyKAj7PjSB3stxT59LwDuqAYHSq4s8XAMztyI9s4mCcucAuDv5Drx6DhqTROW 6gABBRpUegSe99NHkDMdwFrJ3O9DgFKcmr9CbOnmihJ5oDjLRZ0rjJRshrZYjk7X 7htaU95yyVJF4yPOlEw0YGSLka9gSsaJuHA+NanGrhfeoAnDHrfU1W7In593DekP CryYJ5C5yCoiJOwd/XvF1jL4ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyeEcZo 5Yrm/U23C0TUFQT4HURMMB8GA1UdIwQYMBaAFPfHq1VKvx3K+MF5wUvIerz4t3YO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVFQS9GMUE3RTJGNEZC ODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hjcjR3WG5CUzhoNnZQaTNk ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk4ZXJWVXFfSGNyNHdYbkJTOGg2dlBpM2RnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVFQS9GMUE3RTJGNEZCODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hj cjR3WG5CUzhoNnZQaTNkZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCECnla08cKs88ToUtebNXe/bVMoZFjmauoHHQcRGR0DZeiRe4RN36o VpDNt1VZ9eWdNzbvHINF3i7ELNfbf/qfwNMkqxDDwwEVIO4y4iRQ9GsIgx6OpPWX ksPL1YBfCPiWsG6xfBQxdX7ChVqCynwV3+Bno5ZCts877Wk0AY6/c5nvGg06Ti4v M8b4x/gj8AclL7jG3joBLKitQj7G/+VTABHjXWBcK1izGLNZ7ZZIBQuCFLiTc6q6 OUZhlqRNF1JD09J8Z0lCrT7C6cnfVHCXKSr9Mfyc7OH14CewIIT62r08elnmlZm2 7JndWJO8UX4fV6++TH7EF45VW3yCNrqe -----END CERTIFICATE-----Generated at Fri Jul 4 14:05:08 2025 by rpki-client