$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json) Hash identifier: BJYsD3oHp0re4/tOBSwKItavMFoTGITTtcZksvgSaZg= Subject key identifier: 53:B6:25:8A:37:38:8E:7B:E6:85:BC:C3:CB:A5:94:86:75:DE:C7:5C Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft Manifest number: 02B0 Signing time: Sun 15 Jun 2025 01:10:44 +0000 Manifest this update: Sun 15 Jun 2025 01:10:44 +0000 Manifest next update: Sun 22 Jun 2025 01:10:44 +0000 Files and hashes: 1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: QLyuNc5Qpgzq8Fevle+D76kHRT+qwb7PFb3gYZtIM80=) 2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: KUkDUfBaYO7x5r7GKr4hhdrUQHUWyKfXeCnKjTowHew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15EA, serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Validity Not Before: Jun 15 01:10:44 2025 GMT Not After : Jun 22 01:10:44 2025 GMT Subject: CN=684e1d94-0b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:ba:ec:0c:9e:93:56:a2:c5:18:c9:bf:8c: c6:f9:23:0a:23:35:cb:b4:a0:47:e2:74:ec:0e:29: 17:21:bd:80:3b:b3:62:54:fd:32:2a:b7:42:b3:92: 44:18:4e:5e:0f:0b:bd:0d:73:68:5a:77:bb:e3:ee: f4:39:6e:e6:e6:b0:38:d3:bf:a9:0d:24:f1:c5:a6: d9:9a:55:8b:28:a7:ab:d1:3f:72:3d:a0:28:69:37: 4f:05:b6:99:32:a7:63:13:f3:2f:7f:3f:91:f5:f2: 87:42:ea:fc:c7:77:78:e7:77:1f:ef:fe:26:df:c5: 88:2c:bf:3d:fe:c0:b8:c3:1a:84:e7:f7:9c:b3:84: 2e:4a:17:04:90:64:c4:f7:2a:e4:e8:21:77:6b:54: ac:03:56:ff:a8:fa:5d:94:df:30:06:07:f5:8d:8f: 00:31:cd:1f:3b:d0:da:45:13:94:fc:7d:ae:eb:45: 6f:be:4f:ec:80:df:3b:66:21:11:75:c7:49:b5:98: 1e:18:8e:25:88:26:e3:aa:b5:1e:2d:bd:14:74:3d: 99:f2:fc:a6:01:af:6e:1c:8a:ff:a0:7c:90:fb:dd: 0a:5c:7b:5d:7c:8d:a3:44:d2:ea:1b:fc:9f:78:ab: 8a:46:7c:a9:a6:9b:36:bd:93:d7:11:52:d1:40:3a: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B6:25:8A:37:38:8E:7B:E6:85:BC:C3:CB:A5:94:86:75:DE:C7:5C X509v3 Authority Key Identifier: keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8f:da:8d:28:05:9e:8e:71:aa:cc:ef:5f:7c:f3:4f:51:29: e6:39:2c:7a:fa:28:20:cb:c3:d9:75:bb:b1:22:55:22:72:5d: 34:4d:62:0a:94:97:32:20:43:c9:cb:42:0e:01:f7:86:01:cc: 96:2c:c0:d0:db:7d:e0:5c:b8:47:c4:d2:f1:d2:b2:8e:80:2e: 50:30:dd:7c:a3:b4:8d:7d:72:69:6d:76:9b:4c:c0:e4:04:55: fb:83:08:49:e1:e6:dd:dc:70:d5:f1:39:43:7a:17:58:80:3d: 70:d5:07:b5:15:47:c0:2b:28:0b:55:72:4e:64:2a:fe:26:05: 00:7c:c3:9c:be:71:37:b6:db:b6:23:65:c5:cb:eb:d8:7e:11: 97:da:2c:f3:dd:4b:e4:79:ec:90:33:c9:60:4f:87:23:2f:43: e8:c0:39:6a:0e:c9:38:ce:25:3b:54:40:81:99:1c:11:7f:9a: 6f:06:71:73:0d:6e:48:c2:b2:12:0e:41:3d:08:27:06:4f:d8: b6:08:3a:53:78:10:76:8c:e4:a3:2f:b5:3b:62:ce:12:4d:e8: cf:30:b5:16:33:50:e4:37:cc:0f:3f:a7:63:81:ed:87:90:9b: 36:6e:d0:99:59:c5:7f:2f:62:76:74:47:99:cb:b4:96:f3:89: c6:2f:b9:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlDMTRCQzg3QUJD RjhCNzc2MEUwHhcNMjUwNjE1MDExMDQ0WhcNMjUwNjIyMDExMDQ0WjAYMRYwFAYD VQQDEw02ODRlMWQ5NC0wYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGW67Ayek1aixRjJv4zG+SMKIzXLtKBH4nTsDikXIb2AO7NiVP0yKrdCs5JE GE5eDwu9DXNoWne74+70OW7m5rA407+pDSTxxabZmlWLKKer0T9yPaAoaTdPBbaZ MqdjE/Mvfz+R9fKHQur8x3d453cf7/4m38WILL89/sC4wxqE5/ecs4QuShcEkGTE 9yrk6CF3a1SsA1b/qPpdlN8wBgf1jY8AMc0fO9DaRROU/H2u60Vvvk/sgN87ZiER dcdJtZgeGI4liCbjqrUeLb0UdD2Z8vymAa9uHIr/oHyQ+90KXHtdfI2jRNLqG/yf eKuKRnyppps2vZPXEVLRQDoD2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFO2JYo3 OI575oW8w8ullIZ13sdcMB8GA1UdIwQYMBaAFPfHq1VKvx3K+MF5wUvIerz4t3YO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVFQS9GMUE3RTJGNEZC ODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hjcjR3WG5CUzhoNnZQaTNk ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk4ZXJWVXFfSGNyNHdYbkJTOGg2dlBpM2RnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVFQS9GMUE3RTJGNEZCODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hj cjR3WG5CUzhoNnZQaTNkZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKj9qNKAWejnGqzO9ffPNPUSnmOSx6+iggy8PZdbuxIlUicl00TWIK lJcyIEPJy0IOAfeGAcyWLMDQ233gXLhHxNLx0rKOgC5QMN18o7SNfXJpbXabTMDk BFX7gwhJ4ebd3HDV8TlDehdYgD1w1Qe1FUfAKygLVXJOZCr+JgUAfMOcvnE3ttu2 I2XFy+vYfhGX2izz3UvkeeyQM8lgT4cjL0PowDlqDsk4ziU7VECBmRwRf5pvBnFz DW5IwrISDkE9CCcGT9i2CDpTeBB2jOSjL7U7Ys4STejPMLUWM1DkN8wPP6djge2H kJs2btCZWcV/L2J2dEeZy7SW84nGL7ku -----END CERTIFICATE-----Generated at Sun Jun 15 08:34:23 2025 by rpki-client