$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json) Hash identifier: 7bPwJnOSUiMqQVRdtibDw47JMoO8UJbJaAh3hmD2fmA= Subject key identifier: 5B:D3:3B:CC:EF:12:8C:17:6A:BE:F6:36:1A:BE:A7:C7:9C:64:0D:8A Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft Manifest number: 028D Signing time: Sat 05 Apr 2025 01:43:31 +0000 Manifest this update: Sat 05 Apr 2025 01:43:30 +0000 Manifest next update: Sat 12 Apr 2025 01:43:30 +0000 Files and hashes: 1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: SpTz71X5RvykrherFQ0JwL6Phry7XjlVPXIB0BMCXE8=) 2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: KUkDUfBaYO7x5r7GKr4hhdrUQHUWyKfXeCnKjTowHew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15EA Validity Not Before: Apr 5 01:43:30 2025 GMT Not After : Apr 12 01:43:30 2025 GMT Subject: CN=67f08ac2-d3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1b:eb:ab:a4:da:df:fb:a4:06:5d:19:20:88: 89:16:34:eb:b2:52:52:fd:ba:2c:c3:a7:9f:ea:7e: 67:e9:8f:76:42:1d:b4:5c:e8:7e:53:50:e6:2f:56: ae:7f:0b:08:1a:41:26:f1:9c:81:a4:85:db:9d:39: 84:6f:57:91:e6:d0:88:c5:ad:74:00:0b:64:7a:ba: eb:93:86:cd:49:9a:3b:50:d4:02:56:f8:b2:e0:76: b3:e1:96:ab:36:ec:bc:43:52:c9:77:38:41:aa:b8: 1a:0f:a9:06:68:6c:32:6d:1c:20:eb:22:06:e3:bb: 70:81:cc:75:7f:98:9b:7e:7f:66:6d:1c:3b:97:97: 6d:1e:49:df:79:51:25:c7:f2:ac:74:58:86:12:cc: 97:79:3e:d6:bf:67:0b:ff:5b:7f:f5:93:22:be:70: 96:50:5c:ac:5b:f5:88:bd:84:84:f0:4c:3d:5e:da: ee:94:a2:50:64:ce:b3:06:fb:d5:d4:94:14:1c:fb: 89:fe:7f:42:11:97:3e:3b:7a:51:a6:4b:fd:4a:fe: 8e:97:b0:1a:af:9c:3f:69:ae:7b:08:35:83:8d:6e: 62:46:32:74:9b:b1:f7:4b:39:26:f8:39:9f:fe:8b: c6:94:e1:84:fa:c4:4f:70:37:82:d9:90:15:0e:cc: db:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D3:3B:CC:EF:12:8C:17:6A:BE:F6:36:1A:BE:A7:C7:9C:64:0D:8A X509v3 Authority Key Identifier: keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:38:07:f3:ed:59:8e:90:51:4a:59:e4:5b:1d:38:41:09:7b: 2e:91:8a:fa:b4:f3:ea:8a:e6:17:f7:45:e0:fb:2b:8b:bd:d9: 89:f0:d5:ec:83:97:b0:10:a3:ca:52:e8:f7:b3:aa:1e:fb:51: 62:59:63:61:1d:27:8c:12:71:40:46:da:23:a1:53:bf:7d:fc: d6:fe:86:44:4d:82:1b:cf:3a:32:f4:c0:b3:8f:b4:95:a3:ac: 5c:f1:b7:d7:62:dc:0a:24:4d:97:2c:02:33:57:64:56:b3:7d: dd:8d:88:48:6f:71:55:fc:fc:2e:69:33:0d:ac:ec:49:db:0b: 8a:11:dc:bc:1f:ea:7d:ec:65:69:cb:28:e8:2b:06:cf:ea:cb: ff:97:95:5e:9e:4c:12:cc:d2:2f:f0:15:45:40:8d:6a:34:45: 22:0a:3b:c1:a7:7c:5d:3e:f5:30:b2:88:8f:17:85:2e:53:3f: cc:eb:cb:a2:8b:f7:19:f2:a3:df:fd:18:3d:39:a9:2c:c9:31: 13:37:12:8b:54:4e:0b:57:70:89:12:6d:25:2f:bd:69:55:1d: e4:7b:a2:69:c2:5b:3f:e1:e4:58:5f:60:83:48:75:4a:19:7f: b0:df:85:7a:ff:bb:bd:26:28:4b:89:9d:8f:dd:2c:4f:46:33: 1e:e6:91:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlDMTRCQzg3QUJD RjhCNzc2MEUwHhcNMjUwNDA1MDE0MzMwWhcNMjUwNDEyMDE0MzMwWjAYMRYwFAYD VQQDEw02N2YwOGFjMi1kM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xvrq6Ta3/ukBl0ZIIiJFjTrslJS/bosw6ef6n5n6Y92Qh20XOh+U1DmL1au fwsIGkEm8ZyBpIXbnTmEb1eR5tCIxa10AAtkerrrk4bNSZo7UNQCVviy4Haz4Zar Nuy8Q1LJdzhBqrgaD6kGaGwybRwg6yIG47twgcx1f5ibfn9mbRw7l5dtHknfeVEl x/KsdFiGEsyXeT7Wv2cL/1t/9ZMivnCWUFysW/WIvYSE8Ew9XtrulKJQZM6zBvvV 1JQUHPuJ/n9CEZc+O3pRpkv9Sv6Ol7Aar5w/aa57CDWDjW5iRjJ0m7H3Szkm+Dmf /ovGlOGE+sRPcDeC2ZAVDszbiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvTO8zv EowXar72Nhq+p8ecZA2KMB8GA1UdIwQYMBaAFPfHq1VKvx3K+MF5wUvIerz4t3YO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVFQS9GMUE3RTJGNEZC ODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hjcjR3WG5CUzhoNnZQaTNk ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk4ZXJWVXFfSGNyNHdYbkJTOGg2dlBpM2RnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVFQS9GMUE3RTJGNEZCODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hj cjR3WG5CUzhoNnZQaTNkZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkOAfz7VmOkFFKWeRbHThBCXsukYr6tPPqiuYX90Xg+yuLvdmJ8NXs g5ewEKPKUuj3s6oe+1FiWWNhHSeMEnFARtojoVO/ffzW/oZETYIbzzoy9MCzj7SV o6xc8bfXYtwKJE2XLAIzV2RWs33djYhIb3FV/PwuaTMNrOxJ2wuKEdy8H+p97GVp yyjoKwbP6sv/l5VenkwSzNIv8BVFQI1qNEUiCjvBp3xdPvUwsoiPF4UuUz/M68ui i/cZ8qPf/Rg9OaksyTETNxKLVE4LV3CJEm0lL71pVR3ke6Jpwls/4eRYX2CDSHVK GX+w34V6/7u9JihLiZ2P3SxPRjMe5pEg -----END CERTIFICATE-----Generated at Sat Apr 5 22:50:38 2025 by rpki-client