$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json) Hash identifier: dc3EcfVuYZpXO1YWdjldMAtZjvWMOU45gJSUZhyimaY= Subject key identifier: DF:F5:BD:F9:45:71:53:B3:51:FC:BA:5B:70:80:A9:B4:74:0F:F5:BF Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft Manifest number: 02CC Signing time: Sat 09 Aug 2025 01:55:39 +0000 Manifest this update: Sat 09 Aug 2025 01:55:38 +0000 Manifest next update: Sat 16 Aug 2025 01:55:38 +0000 Files and hashes: 1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: 14xx3UDXgd6jW4+Fbxywf75QhX9gFDr6b02pITslSwA=) 2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: KUkDUfBaYO7x5r7GKr4hhdrUQHUWyKfXeCnKjTowHew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15EA, serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Validity Not Before: Aug 9 01:55:38 2025 GMT Not After : Aug 16 01:55:38 2025 GMT Subject: CN=6896aa9a-1c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:06:08:dc:c4:3b:85:ca:6b:7e:4f:48:31: 9c:0f:16:65:36:dc:1a:36:1e:e4:10:ae:b2:d0:c8: a8:24:7b:04:6a:9b:2b:35:0e:18:fe:bf:14:9d:22: c6:de:9a:c2:3e:af:db:26:60:30:8f:7b:0d:28:c0: e5:1f:88:e9:db:29:8c:02:fb:b3:27:68:fb:2f:92: 9e:0e:c5:94:b9:10:60:29:6f:30:63:62:a0:51:5f: bc:21:ae:eb:07:93:f2:71:1b:05:b7:36:6e:af:8e: 7f:dc:29:ad:fd:30:3c:9f:08:d4:37:7d:52:02:ef: ef:00:ad:39:ec:5a:cf:f2:cd:2b:52:9f:61:0a:82: ff:9b:13:05:4f:4f:72:8e:4f:54:ef:0a:9a:67:40: 7b:49:4c:fc:81:3b:61:df:c6:e1:3f:6c:3f:65:e9: 0b:23:f0:87:99:b4:0f:02:2c:8c:71:86:dc:1c:5e: 51:5a:56:ed:8a:70:f3:54:19:41:09:29:fb:22:b1: 65:c0:2f:6f:55:fb:01:b2:1f:46:b1:40:d8:db:30: 3d:a6:3f:0b:f1:42:73:46:31:1a:bd:87:31:37:54: 6d:4c:4e:e7:67:1b:42:07:79:f3:7d:75:74:c2:74: a2:7f:fb:08:e4:8b:fa:68:29:7f:f6:d3:6a:0d:91: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F5:BD:F9:45:71:53:B3:51:FC:BA:5B:70:80:A9:B4:74:0F:F5:BF X509v3 Authority Key Identifier: keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0d:31:31:74:7d:21:3e:ac:7b:f1:7a:b1:ad:e0:73:3a:22: 89:1a:3c:17:29:42:f8:08:8e:4e:af:3d:de:06:d7:60:5a:e1: 99:1a:17:06:b5:b4:b4:eb:f2:21:7f:f9:f2:ac:ff:51:64:81: 65:dc:04:4b:b7:2c:0c:38:59:49:2e:d3:3f:ab:5a:95:f0:e3: 1c:f8:62:6c:a2:b3:59:82:24:5a:b2:62:88:36:15:d2:cd:7e: 0b:dc:de:56:d2:c6:2f:a0:3b:d7:20:be:ad:2a:6d:b9:f3:bf: 6f:44:9f:8a:03:42:5a:f1:c4:d5:0c:27:30:cb:d8:b7:4c:48: b6:8a:36:a8:6d:9d:1b:fa:e6:2b:31:9b:77:db:a8:a7:5b:dc: 30:ad:36:2a:f7:b1:6c:0c:95:96:ee:70:e4:2d:1e:70:be:2e: 80:31:67:0f:68:48:9a:2f:b7:5c:41:44:97:19:d3:9b:91:28: 88:1d:6e:9a:8f:9b:31:09:81:f1:83:b1:08:a7:cd:a0:99:4e: 27:44:0c:27:08:f0:78:dd:9d:24:bd:4b:a2:75:cf:f4:38:e2: c1:db:19:54:a1:4d:d4:b6:cb:c1:0e:f1:27:86:62:f4:97:4c: 0d:42:03:35:37:f2:e8:2f:40:c1:19:3f:1f:e8:cc:e7:36:f1: 3a:e4:e7:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlDMTRCQzg3QUJD RjhCNzc2MEUwHhcNMjUwODA5MDE1NTM4WhcNMjUwODE2MDE1NTM4WjAYMRYwFAYD VQQDEw02ODk2YWE5YS0xYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkUGCNzEO4XKa35PSDGcDxZlNtwaNh7kEK6y0MioJHsEapsrNQ4Y/r8UnSLG 3prCPq/bJmAwj3sNKMDlH4jp2ymMAvuzJ2j7L5KeDsWUuRBgKW8wY2KgUV+8Ia7r B5PycRsFtzZur45/3Cmt/TA8nwjUN31SAu/vAK057FrP8s0rUp9hCoL/mxMFT09y jk9U7wqaZ0B7SUz8gTth38bhP2w/ZekLI/CHmbQPAiyMcYbcHF5RWlbtinDzVBlB CSn7IrFlwC9vVfsBsh9GsUDY2zA9pj8L8UJzRjEavYcxN1RtTE7nZxtCB3nzfXV0 wnSif/sI5Iv6aCl/9tNqDZH/pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/1vflF cVOzUfy6W3CAqbR0D/W/MB8GA1UdIwQYMBaAFPfHq1VKvx3K+MF5wUvIerz4t3YO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVFQS9GMUE3RTJGNEZC ODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hjcjR3WG5CUzhoNnZQaTNk ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk4ZXJWVXFfSGNyNHdYbkJTOGg2dlBpM2RnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVFQS9GMUE3RTJGNEZCODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hj cjR3WG5CUzhoNnZQaTNkZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeDTExdH0hPqx78XqxreBzOiKJGjwXKUL4CI5Orz3eBtdgWuGZGhcG tbS06/Ihf/nyrP9RZIFl3ARLtywMOFlJLtM/q1qV8OMc+GJsorNZgiRasmKINhXS zX4L3N5W0sYvoDvXIL6tKm25879vRJ+KA0Ja8cTVDCcwy9i3TEi2ijaobZ0b+uYr MZt326inW9wwrTYq97FsDJWW7nDkLR5wvi6AMWcPaEiaL7dcQUSXGdObkSiIHW6a j5sxCYHxg7EIp82gmU4nRAwnCPB43Z0kvUuidc/0OOLB2xlUoU3UtsvBDvEnhmL0 l0wNQgM1N/LoL0DBGT8f6MznNvE65OeL -----END CERTIFICATE-----Generated at Sun Aug 10 03:51:08 2025 by rpki-client