$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json) Hash identifier: 4yVGcW5jOYjN/IiYroxHv8Z/J/aR010nP+HVdLq9eMw= Subject key identifier: 42:A3:8F:C7:4B:CB:24:EA:39:B8:DE:FB:A4:DE:4A:46:6F:BA:91:69 Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft Manifest number: 0297 Signing time: Fri 25 Apr 2025 01:18:34 +0000 Manifest this update: Fri 25 Apr 2025 01:18:33 +0000 Manifest next update: Fri 02 May 2025 01:18:33 +0000 Files and hashes: 1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: 7Z6OMldIbXL0S6h+hBXA9JcfHKKO3Y5D6AIxLZc23TU=) 2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: KUkDUfBaYO7x5r7GKr4hhdrUQHUWyKfXeCnKjTowHew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15EA, serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Validity Not Before: Apr 25 01:18:33 2025 GMT Not After : May 2 01:18:33 2025 GMT Subject: CN=680ae2e9-dfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:26:0f:5b:75:6c:fe:d4:f8:3d:30:55:05: 9f:04:cc:31:ce:c8:a0:ad:99:8b:d6:5c:27:68:28: e2:37:71:c3:8e:da:b5:9a:99:0f:0c:ec:ca:2e:dd: 88:a4:74:69:84:62:eb:44:c4:fc:ee:6a:41:34:a7: 00:a0:4d:5a:b8:a2:dd:45:b5:3d:2b:2a:b8:44:14: 39:46:f7:f1:ae:59:09:40:f4:bf:de:3d:27:51:fc: a4:da:b2:6b:6c:9e:80:bc:2b:1d:6d:8a:a8:a6:17: 58:8e:b0:5e:c6:dc:41:b4:fb:01:aa:d8:8f:a7:2a: 8a:6e:47:c8:92:45:07:23:90:bd:31:0f:8c:c7:60: 1b:20:2f:09:e8:a8:b1:2d:a1:35:2f:91:e0:fb:df: 32:e1:ed:d0:35:bf:ad:9e:df:d7:f8:04:b1:b8:07: c7:49:d8:e6:a4:87:d5:86:1d:df:37:95:c2:fc:b0: 16:6e:5c:35:dd:af:30:ac:f7:fa:08:8b:54:af:13: f8:46:03:5b:91:ef:ff:08:4f:85:33:87:0b:b1:c9: 68:1b:2c:b9:85:83:0e:fa:8d:ce:5f:83:57:10:f0: e1:dd:7f:94:f8:e5:3e:fe:45:5d:c5:38:46:ab:70: 1f:c4:08:50:5a:ec:b9:2b:77:14:01:b4:76:29:cd: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A3:8F:C7:4B:CB:24:EA:39:B8:DE:FB:A4:DE:4A:46:6F:BA:91:69 X509v3 Authority Key Identifier: keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:da:4a:c2:20:5c:a3:3b:0d:8d:62:4f:d8:5e:fa:6d:6e:06: fc:aa:a1:cb:84:b3:d8:c0:1d:6f:d1:74:6b:71:64:af:e7:20: b5:9f:44:2e:50:40:17:aa:50:fa:be:dc:4f:42:e5:ae:8f:69: a2:8c:4b:5f:8f:b7:6f:ff:11:3f:38:41:6a:39:a4:c1:6c:fd: f0:ec:66:06:3b:17:e9:9c:14:0a:ba:df:fc:0a:f3:1d:29:e5: 02:69:ae:ce:ca:bc:21:22:89:a9:55:68:5c:de:ce:5b:14:e3: 69:f7:8d:4b:8b:d8:5a:0c:15:30:bd:a8:61:40:91:31:03:24: 69:0b:a9:cb:14:d6:44:53:fc:52:65:c7:0f:ee:ff:ae:80:d8: 26:87:87:20:b0:51:0d:12:36:41:3c:7d:c4:7d:b4:df:3d:5a: 47:be:e9:18:a2:b8:21:7a:fb:47:65:2f:54:d9:d2:cc:4c:94: a8:40:53:c5:7f:67:77:6f:17:24:82:79:50:9f:0d:ba:cc:30: 06:85:48:82:23:2f:1e:b6:69:6d:01:1d:08:81:f6:02:9f:c0: 2d:d5:a1:cb:73:8d:ec:5d:12:82:c9:21:b5:03:d8:ec:fa:1d: 08:c8:10:ca:4a:f9:2f:b1:1e:cb:e8:38:df:06:7e:9d:92:8a: 02:bd:a7:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlDMTRCQzg3QUJD RjhCNzc2MEUwHhcNMjUwNDI1MDExODMzWhcNMjUwNTAyMDExODMzWjAYMRYwFAYD VQQDEw02ODBhZTJlOS1kZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvImD1t1bP7U+D0wVQWfBMwxzsigrZmL1lwnaCjiN3HDjtq1mpkPDOzKLt2I pHRphGLrRMT87mpBNKcAoE1auKLdRbU9Kyq4RBQ5RvfxrlkJQPS/3j0nUfyk2rJr bJ6AvCsdbYqophdYjrBextxBtPsBqtiPpyqKbkfIkkUHI5C9MQ+Mx2AbIC8J6Kix LaE1L5Hg+98y4e3QNb+tnt/X+ASxuAfHSdjmpIfVhh3fN5XC/LAWblw13a8wrPf6 CItUrxP4RgNbke//CE+FM4cLscloGyy5hYMO+o3OX4NXEPDh3X+U+OU+/kVdxThG q3AfxAhQWuy5K3cUAbR2Kc15LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKjj8dL yyTqObje+6TeSkZvupFpMB8GA1UdIwQYMBaAFPfHq1VKvx3K+MF5wUvIerz4t3YO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVFQS9GMUE3RTJGNEZC ODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hjcjR3WG5CUzhoNnZQaTNk ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk4ZXJWVXFfSGNyNHdYbkJTOGg2dlBpM2RnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVFQS9GMUE3RTJGNEZCODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hj cjR3WG5CUzhoNnZQaTNkZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE2krCIFyjOw2NYk/YXvptbgb8qqHLhLPYwB1v0XRrcWSv5yC1n0Qu UEAXqlD6vtxPQuWuj2mijEtfj7dv/xE/OEFqOaTBbP3w7GYGOxfpnBQKut/8CvMd KeUCaa7OyrwhIompVWhc3s5bFONp941Li9haDBUwvahhQJExAyRpC6nLFNZEU/xS ZccP7v+ugNgmh4cgsFENEjZBPH3EfbTfPVpHvukYorghevtHZS9U2dLMTJSoQFPF f2d3bxckgnlQnw26zDAGhUiCIy8etmltAR0IgfYCn8At1aHLc43sXRKCySG1A9js +h0IyBDKSvkvsR7L6DjfBn6dkooCvaeP -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:57 2025 by rpki-client