$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: nd+mnCIK222CcY0R5PyoSbGuFITm1VWwApebw8thQ80= Subject key identifier: 88:CD:C9:41:C5:A1:91:0A:02:C7:FD:51:7B:42:7E:77:B7:12:97:E1 Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: 97 Signing time: Mon 21 Jul 2025 06:31:47 +0000 Manifest this update: Mon 21 Jul 2025 06:31:46 +0000 Manifest next update: Mon 28 Jul 2025 06:31:46 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: 9scZ1Au43NcxMxJXPcej8Ue5q4fxdIOv2xKD+m+zVts=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: YBs0kfZTY2sABIi/xaIJAg5Ddfxg9MhnEpmdNb3MBps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: Jul 21 06:31:46 2025 GMT Not After : Jul 28 06:31:46 2025 GMT Subject: CN=687dded3-1e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:ec:73:51:7b:c7:91:d9:38:55:19:9e:c3: fd:22:a6:3f:05:ce:19:e8:cf:76:3a:f4:9f:67:d8: 29:38:fe:42:16:2c:e9:78:c6:67:7e:ce:21:2f:75: b3:e1:44:f9:b2:f1:ab:4e:7f:d4:7d:8c:24:51:e9: cd:d6:71:dc:5f:69:df:cc:bc:8d:dc:a8:ca:49:37: dd:5e:b7:31:af:ff:13:f9:7a:f6:e2:f1:ce:f1:43: 56:49:c2:b7:6a:da:86:fa:f0:d5:5b:aa:2d:77:a7: df:c5:99:8b:af:40:13:c9:f6:bd:9d:7e:26:6b:a7: 9b:cf:f3:88:e2:ff:38:d4:5f:b5:c8:43:52:0a:15: af:64:cd:d2:5b:4f:ad:31:d6:c6:15:cf:0f:75:38: b6:a3:5e:f6:e3:37:9b:95:cd:99:11:c0:23:bf:ca: c0:7a:ee:a4:7f:02:d3:e6:dd:21:f2:d3:04:53:cb: 27:32:69:d3:42:d1:bb:05:54:7e:5d:79:fb:95:18: fa:a7:a4:3a:2a:b2:0a:5f:98:f2:9f:c1:e5:5d:b8: 3c:44:84:5d:3d:56:3c:7c:c1:a9:6a:5f:94:a1:98: d7:28:4c:64:b7:2e:22:0a:3a:a5:19:bc:0c:23:6d: 73:a1:c5:95:15:2f:30:39:91:7f:96:81:2d:78:d9: 8a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CD:C9:41:C5:A1:91:0A:02:C7:FD:51:7B:42:7E:77:B7:12:97:E1 X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:68:91:34:51:e4:e0:51:3d:4f:14:5c:06:a8:c3:61:3c:73: 67:bf:89:04:e9:29:fa:d0:68:a4:f7:6c:46:a1:84:cc:73:af: 6d:ab:5a:93:49:80:3b:23:d6:c6:3e:ac:6a:98:c7:83:49:d2: 38:47:ed:e8:13:86:fb:71:2e:df:33:7b:01:a6:04:4c:44:48: f8:3d:0c:d0:70:0b:15:73:62:7b:13:c8:a6:b8:14:ed:7d:3e: 7b:13:31:18:2b:b8:e1:5c:eb:c1:98:fd:21:50:d7:95:bb:e5: 54:be:54:c4:81:53:e8:a2:82:ff:3f:89:75:3a:72:54:97:54: c8:46:47:ec:28:8f:38:8f:73:84:f4:ff:a4:6d:0f:0e:dd:df: 1a:53:e7:68:b8:93:a0:bd:d2:0f:68:9b:31:35:d4:a6:80:d7: 7b:9e:6a:f4:5b:41:77:80:fb:74:fe:45:aa:a6:94:34:d8:3c: 47:83:f0:78:1f:ad:8e:8d:75:c3:ac:7b:c4:df:cd:4f:d9:f3: 92:40:a4:bd:45:6d:d3:ea:e2:a8:21:ed:7c:91:f0:4c:7a:f3: 87:0f:bb:c7:e1:24:de:6a:28:a1:8e:68:77:5e:eb:fd:d6:d7: af:85:f2:d6:b4:b2:39:65:e5:cd:90:1c:ac:c4:5e:6a:0f:3c: 87:91:8b:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD MUQ1QjgzM0IwHhcNMjUwNzIxMDYzMTQ2WhcNMjUwNzI4MDYzMTQ2WjAYMRYwFAYD VQQDEw02ODdkZGVkMy0xZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqknsc1F7x5HZOFUZnsP9IqY/Bc4Z6M92OvSfZ9gpOP5CFizpeMZnfs4hL3Wz 4UT5svGrTn/UfYwkUenN1nHcX2nfzLyN3KjKSTfdXrcxr/8T+Xr24vHO8UNWScK3 atqG+vDVW6otd6ffxZmLr0ATyfa9nX4ma6ebz/OI4v841F+1yENSChWvZM3SW0+t MdbGFc8PdTi2o1724zeblc2ZEcAjv8rAeu6kfwLT5t0h8tMEU8snMmnTQtG7BVR+ XXn7lRj6p6Q6KrIKX5jyn8HlXbg8RIRdPVY8fMGpal+UoZjXKExkty4iCjqlGbwM I21zocWVFS8wOZF/loEteNmK2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjNyUHF oZEKAsf9UXtCfne3EpfhMB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF ZHNVeTZzR01LU2ZCMWJnenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHaJE0UeTgUT1PFFwGqMNhPHNnv4kE6Sn60Gik92xGoYTMc69tq1qT SYA7I9bGPqxqmMeDSdI4R+3oE4b7cS7fM3sBpgRMREj4PQzQcAsVc2J7E8imuBTt fT57EzEYK7jhXOvBmP0hUNeVu+VUvlTEgVPoooL/P4l1OnJUl1TIRkfsKI84j3OE 9P+kbQ8O3d8aU+douJOgvdIPaJsxNdSmgNd7nmr0W0F3gPt0/kWqppQ02DxHg/B4 H62OjXXDrHvE381P2fOSQKS9RW3T6uKoIe18kfBMevOHD7vH4STeaiihjmh3Xuv9 1tevhfLWtLI5ZeXNkBysxF5qDzyHkYvV -----END CERTIFICATE-----Generated at Tue Jul 22 06:09:51 2025 by rpki-client