$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: Y1lTOd8UIoiEvmdWpFTc2hCBymBvp9sB9eewnwri7Ug= Subject key identifier: 1D:84:8B:1E:8E:60:2A:AE:9B:1B:C8:4C:E4:6F:17:92:45:17:67:1C Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: A2 Signing time: Mon 11 Aug 2025 06:26:08 +0000 Manifest this update: Mon 11 Aug 2025 06:26:08 +0000 Manifest next update: Mon 18 Aug 2025 06:26:07 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: NplIqAXWeVuj7KsFR3bNpe6KjNOwb9oI+AYVXUTwrm4=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: YBs0kfZTY2sABIi/xaIJAg5Ddfxg9MhnEpmdNb3MBps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: Aug 11 06:26:08 2025 GMT Not After : Aug 18 06:26:07 2025 GMT Subject: CN=68998d00-4d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a3:6f:75:31:3c:39:53:ee:91:cd:45:1c:cb: 85:b3:b0:14:2a:8f:ae:a5:e8:4a:cf:fb:33:3f:77: 71:f9:a7:0e:2f:00:64:b5:03:ee:22:b3:d7:1d:30: 41:e8:14:31:13:fb:41:5e:ef:69:08:58:be:b3:bc: 98:80:f1:c1:d1:54:19:d2:2c:0f:87:6d:4e:f1:0a: f1:d6:74:43:56:bf:b1:2a:ab:6b:87:38:eb:21:0d: 43:60:6b:a4:1e:ef:03:e5:13:2d:d0:39:cd:5b:f8: 4b:a3:c9:eb:34:28:a7:ab:48:94:e9:b7:0f:9f:91: f0:cd:ad:45:43:fc:f6:24:32:fa:c3:c6:d9:a8:d7: af:64:52:33:ac:43:c6:6b:a6:0d:f8:8f:eb:09:02: cf:87:44:28:d0:52:fb:f2:00:07:b8:d5:a4:a1:d6: 16:c0:63:2f:ca:1d:c2:84:9b:62:ea:32:9c:25:e8: 72:70:29:e8:6c:35:da:17:ed:5c:3f:dc:6e:b7:6b: 5e:12:e3:52:33:4f:a9:2c:e6:7d:44:16:49:56:b6: 48:ad:7b:be:1a:13:e1:ce:6b:11:9f:be:88:d6:d4: 9a:23:00:58:24:30:de:d1:28:fa:18:d9:52:d3:6f: be:4c:1d:f1:b1:59:9a:b1:7b:e4:1f:70:8a:1c:db: f7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:84:8B:1E:8E:60:2A:AE:9B:1B:C8:4C:E4:6F:17:92:45:17:67:1C X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:1a:71:51:ce:2e:0b:50:f7:f1:b1:dc:1a:14:6f:2c:46:49: cb:9f:5d:a4:71:cc:8e:09:96:4d:46:04:1d:af:a6:a5:38:4b: b1:70:79:cf:58:84:a0:1a:7a:a9:cc:d2:2a:f9:39:a8:b8:c4: 6c:25:22:94:a4:4f:ca:6e:9a:af:3f:0b:f0:da:74:81:6c:c9: 18:03:c7:00:d0:57:44:63:dc:00:ee:1e:0d:b8:ec:de:8d:3e: 2b:81:c2:21:73:63:ab:3e:e4:16:eb:12:29:f4:01:04:10:5c: 57:1c:7f:75:21:8f:af:98:8d:38:e6:a3:4f:f9:d6:b0:89:d2: 73:5b:9f:87:e7:31:e5:92:94:b8:4c:fb:92:08:0e:3b:6b:79: 3b:1d:a2:ba:25:06:c4:f3:8c:20:6e:7e:0b:9e:09:cb:b8:80: d9:94:c0:f0:c6:dd:57:c3:ab:4b:f5:22:03:63:c4:2e:ce:bd: 0b:b8:49:3d:e4:6e:60:a5:43:ab:46:27:4d:d5:4a:28:3b:ce: 08:62:53:e2:36:27:44:98:cc:25:a0:e5:4c:a3:a4:a1:ef:9a: cb:50:a9:ba:80:9d:79:da:99:05:1c:62:31:79:76:c2:b2:c0: 1a:92:36:ac:2b:5c:5d:a4:04:f8:e2:8b:0b:e2:06:73:78:ed: 44:40:0f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD MUQ1QjgzM0IwHhcNMjUwODExMDYyNjA4WhcNMjUwODE4MDYyNjA3WjAYMRYwFAYD VQQDEw02ODk5OGQwMC00ZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7qNvdTE8OVPukc1FHMuFs7AUKo+upehKz/szP3dx+acOLwBktQPuIrPXHTBB 6BQxE/tBXu9pCFi+s7yYgPHB0VQZ0iwPh21O8Qrx1nRDVr+xKqtrhzjrIQ1DYGuk Hu8D5RMt0DnNW/hLo8nrNCinq0iU6bcPn5Hwza1FQ/z2JDL6w8bZqNevZFIzrEPG a6YN+I/rCQLPh0Qo0FL78gAHuNWkodYWwGMvyh3ChJti6jKcJehycCnobDXaF+1c P9xut2teEuNSM0+pLOZ9RBZJVrZIrXu+GhPhzmsRn76I1tSaIwBYJDDe0Sj6GNlS 02++TB3xsVmasXvkH3CKHNv3VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2Eix6O YCqumxvITORvF5JFF2ccMB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF ZHNVeTZzR01LU2ZCMWJnenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvGnFRzi4LUPfxsdwaFG8sRknLn12kccyOCZZNRgQdr6alOEuxcHnP WISgGnqpzNIq+TmouMRsJSKUpE/KbpqvPwvw2nSBbMkYA8cA0FdEY9wA7h4NuOze jT4rgcIhc2OrPuQW6xIp9AEEEFxXHH91IY+vmI045qNP+dawidJzW5+H5zHlkpS4 TPuSCA47a3k7HaK6JQbE84wgbn4LngnLuIDZlMDwxt1Xw6tL9SIDY8Quzr0LuEk9 5G5gpUOrRidN1UooO84IYlPiNidEmMwloOVMo6Sh75rLUKm6gJ152pkFHGIxeXbC ssAakjasK1xdpAT44osL4gZzeO1EQA/w -----END CERTIFICATE-----Generated at Mon Aug 11 13:08:36 2025 by rpki-client