$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: hUBPGqCK8lB1OnFRgoo95OG1GZOgyPlsammQ4RAq58A= Subject key identifier: E0:74:4D:78:08:70:7E:4A:8F:42:BB:16:3E:AB:31:EF:18:E0:A9:88 Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: AF Signing time: Fri 05 Sep 2025 06:30:11 +0000 Manifest this update: Fri 05 Sep 2025 06:30:10 +0000 Manifest next update: Fri 12 Sep 2025 06:30:10 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: K0GIOwDwwOlL5L9EA30eGyKmRmv/cqY1G7RnLhLieWQ=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: YBs0kfZTY2sABIi/xaIJAg5Ddfxg9MhnEpmdNb3MBps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: Sep 5 06:30:10 2025 GMT Not After : Sep 12 06:30:10 2025 GMT Subject: CN=68ba8373-ff3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:c4:7c:2e:25:0a:e4:9f:8c:44:00:0b:e2: e4:d0:ab:f8:c1:c1:50:f0:0e:6c:ee:17:e7:3b:55: f3:5a:75:4b:ad:1a:12:80:81:8d:1d:62:f1:1a:25: b3:cb:ed:08:f5:68:6f:c9:e3:ab:f6:ee:f9:4f:0e: bf:14:d9:2b:64:7b:16:9d:dd:34:97:31:bb:26:86: a3:78:51:57:9b:0f:85:7c:53:8b:88:3a:72:3a:34: 20:f2:af:db:d4:2d:29:82:17:d8:e5:32:ce:08:81: 5e:33:11:82:38:13:b0:df:eb:55:ef:49:7b:33:b9: f3:f0:62:db:33:0e:07:61:65:d6:da:fa:a6:8b:7b: 6e:59:0d:45:b8:8a:1d:e7:f2:24:f1:fd:44:f7:97: c4:2c:85:ba:05:2a:4c:1a:42:12:6a:b9:d3:67:d2: 8b:18:fd:f1:5a:fe:8f:3d:32:29:59:65:f0:ed:1f: e6:a8:fb:6a:0a:70:23:bc:db:51:69:73:92:10:c2: b7:3e:5f:bc:60:bf:07:f5:9c:98:f6:98:fd:a5:90: 2f:32:f7:3e:75:e7:4b:79:82:18:f9:4d:24:d9:4f: 34:e4:9d:88:10:04:88:bb:3e:a5:50:ee:94:9a:7d: ec:36:ac:01:8d:a8:fb:14:7a:4b:cd:a8:15:52:a1: 3f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:74:4D:78:08:70:7E:4A:8F:42:BB:16:3E:AB:31:EF:18:E0:A9:88 X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:f4:b8:a9:02:7e:af:64:34:c8:87:8d:6c:6f:ef:8b:89:66: 23:ca:cc:5c:83:b1:ec:5d:98:d8:67:cf:3b:d6:37:6c:bc:cc: 0b:20:15:c2:a4:61:23:bd:f2:eb:16:be:a4:ab:b7:3e:e6:d4: 83:c3:8c:df:21:0e:fe:7e:1f:c7:18:07:0f:7e:0f:b2:15:94: 19:ca:86:20:39:3f:78:7e:f1:5f:6e:19:51:ba:ea:d7:0a:ca: a4:f6:7b:a5:b8:bf:6c:f3:44:0a:52:15:78:35:20:6c:ba:f0: 60:dd:c3:44:3c:18:b7:d4:5d:ba:6e:d6:68:97:5c:f9:1d:a8: c2:63:8f:fb:3c:b9:aa:d9:0c:a4:68:83:84:24:7e:32:93:4a: 01:14:7c:84:c0:a4:1e:ee:bf:c6:48:b1:5e:7c:b5:e1:b6:da: 34:68:a0:79:df:aa:eb:f1:2d:36:62:5c:da:0f:a4:4b:d2:13: cf:25:09:e9:64:48:5c:4e:32:f9:99:08:c6:32:a3:15:3b:3a: b3:2d:de:25:12:d6:10:c7:8f:1c:92:4c:7a:d0:16:f0:34:ce: a6:e9:22:9b:6d:6c:01:d5:b9:bb:38:0c:c7:56:89:2c:13:3b: 0a:29:eb:f0:5d:07:c7:cc:31:39:3e:0b:d4:12:5a:67:fa:7b: 03:de:55:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD MUQ1QjgzM0IwHhcNMjUwOTA1MDYzMDEwWhcNMjUwOTEyMDYzMDEwWjAYMRYwFAYD VQQDEw02OGJhODM3My1mZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5zEfC4lCuSfjEQAC+Lk0Kv4wcFQ8A5s7hfnO1XzWnVLrRoSgIGNHWLxGiWz y+0I9WhvyeOr9u75Tw6/FNkrZHsWnd00lzG7JoajeFFXmw+FfFOLiDpyOjQg8q/b 1C0pghfY5TLOCIFeMxGCOBOw3+tV70l7M7nz8GLbMw4HYWXW2vqmi3tuWQ1FuIod 5/Ik8f1E95fELIW6BSpMGkISarnTZ9KLGP3xWv6PPTIpWWXw7R/mqPtqCnAjvNtR aXOSEMK3Pl+8YL8H9ZyY9pj9pZAvMvc+dedLeYIY+U0k2U805J2IEASIuz6lUO6U mn3sNqwBjaj7FHpLzagVUqE/CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOB0TXgI cH5Kj0K7Fj6rMe8Y4KmIMB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF ZHNVeTZzR01LU2ZCMWJnenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS9LipAn6vZDTIh41sb++LiWYjysxcg7HsXZjYZ8871jdsvMwLIBXC pGEjvfLrFr6kq7c+5tSDw4zfIQ7+fh/HGAcPfg+yFZQZyoYgOT94fvFfbhlRuurX Csqk9nuluL9s80QKUhV4NSBsuvBg3cNEPBi31F26btZol1z5HajCY4/7PLmq2Qyk aIOEJH4yk0oBFHyEwKQe7r/GSLFefLXhtto0aKB536rr8S02YlzaD6RL0hPPJQnp ZEhcTjL5mQjGMqMVOzqzLd4lEtYQx48ckkx60BbwNM6m6SKbbWwB1bm7OAzHVoks EzsKKevwXQfHzDE5PgvUElpn+nsD3lWz -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:55 2025 by rpki-client