$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json) Hash identifier: K4wJUZdkf28QlgpMU6JEerdqJvFkGKfsCAKKUB6CCjs= Subject key identifier: 88:04:AD:E9:CD:5D:C9:54:89:D0:A0:91:BD:40:34:AE:E7:D5:4E:98 Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Certificate serial: 0577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft Manifest number: 0569 Signing time: Wed 02 Jul 2025 23:41:05 +0000 Manifest this update: Wed 02 Jul 2025 23:41:05 +0000 Manifest next update: Wed 09 Jul 2025 23:41:05 +0000 Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: hWVgEHigAFh4QQZamq1EAsm62achD6dKGZaHzff/3Us=) 2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: ZDchGQlVuJ+QjHKNA7YoG+7MDRY2/kTvBgBCNq57J7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Validity Not Before: Jul 2 23:41:05 2025 GMT Not After : Jul 9 23:41:05 2025 GMT Subject: CN=6865c391-7bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:a0:c3:60:2f:7e:12:b1:6f:58:c6:a5:24: 73:c6:5b:a5:3f:b2:56:77:20:68:1d:ae:fa:38:8e: 97:7d:16:38:2e:8c:49:f9:d3:63:3b:fd:56:3c:77: 16:21:ba:50:5f:94:65:8e:23:5b:e5:aa:f6:89:e1: 4d:7d:1a:70:35:02:77:a9:54:46:55:0d:0d:47:24: df:5b:1b:90:a7:63:9f:db:17:66:9f:63:c2:83:dc: 26:a3:8a:b1:85:44:09:5c:bb:ca:80:88:92:79:f7: ad:bc:0c:f7:09:ec:2a:ed:39:18:c7:d3:73:fc:4d: 62:2f:59:63:cc:da:a0:85:64:b5:fc:27:01:39:e3: ba:7e:c5:c5:15:47:f5:01:38:6c:23:9f:35:f7:02: b2:9f:a6:26:14:8b:68:75:82:24:98:c7:05:cd:99: 80:2d:2b:0e:ca:b8:28:8e:c0:ab:1d:71:bc:32:7a: a2:9d:7e:d7:41:d9:af:fc:ea:47:95:3f:c6:95:cc: 25:1a:3f:62:2f:23:84:13:c8:5f:ce:fc:18:72:ac: 79:19:9e:bd:c9:c6:ee:52:41:59:27:25:11:3b:12: d8:e8:0d:54:f8:e7:a6:e8:7a:94:44:14:1b:99:81: 5d:d8:65:c5:6c:aa:b4:00:c2:80:59:59:02:be:6b: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:04:AD:E9:CD:5D:C9:54:89:D0:A0:91:BD:40:34:AE:E7:D5:4E:98 X509v3 Authority Key Identifier: keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4a:b6:26:2d:c8:e1:e0:fe:85:3e:b6:7a:50:0e:29:2d:af: 5c:26:9e:f3:36:91:ca:bd:a4:ea:b9:6f:90:d8:ea:d3:4f:7d: 2a:0b:1a:99:24:56:81:e1:39:1c:5b:d2:15:d4:25:ee:1a:83: c8:1f:bf:e6:3e:df:0b:c6:8a:a2:73:f7:42:1a:45:87:ee:54: 57:9b:04:b2:8f:18:0d:3c:33:2e:0f:2f:a7:30:37:b3:6e:5f: fc:ee:a4:04:59:47:0b:06:47:3e:ed:83:81:e0:a8:d1:42:a2: 76:f9:2f:33:ba:da:ec:66:41:10:0f:cb:9a:71:c9:17:b4:53: a7:4e:e0:95:ca:e6:69:71:59:3d:07:6d:ce:8c:d8:cd:f2:d2: 74:36:9d:1e:17:bd:9d:a6:89:be:24:0a:63:4d:38:82:a5:a0: fd:1f:30:9f:c8:3d:c9:2e:38:84:b2:a5:70:53:6b:01:1e:82: a3:bd:33:6a:02:9a:11:95:fa:4c:f9:c6:13:bb:72:a3:1d:a8: 2b:6e:d8:97:9f:b1:e2:0f:5f:ae:0b:22:24:c7:00:33:8c:76: b4:c1:0e:ca:55:30:90:22:ec:36:d5:aa:07:e7:50:5c:ae:28: 72:82:7f:82:8c:9a:98:10:b7:e8:97:2e:28:d4:6e:2b:23:41: 45:cb:36:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyMzQxMTAvBgNVBAUTKEMzREVDN0ZEREQ0NUM5NTE3MjYwODY0RkE5RUVCQ0ZF N0I4QkNGNTcwHhcNMjUwNzAyMjM0MTA1WhcNMjUwNzA5MjM0MTA1WjAYMRYwFAYD VQQDEw02ODY1YzM5MS03YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYWgw2AvfhKxb1jGpSRzxlulP7JWdyBoHa76OI6XfRY4LoxJ+dNjO/1WPHcW IbpQX5RljiNb5ar2ieFNfRpwNQJ3qVRGVQ0NRyTfWxuQp2Of2xdmn2PCg9wmo4qx hUQJXLvKgIiSefetvAz3Cewq7TkYx9Nz/E1iL1ljzNqghWS1/CcBOeO6fsXFFUf1 AThsI5819wKyn6YmFItodYIkmMcFzZmALSsOyrgojsCrHXG8MnqinX7XQdmv/OpH lT/GlcwlGj9iLyOEE8hfzvwYcqx5GZ69ycbuUkFZJyUROxLY6A1U+Oem6HqURBQb mYFd2GXFbKq0AMKAWVkCvms/8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgErenN XclUidCgkb1ANK7n1U6YMB8GA1UdIwQYMBaAFMPex/3dRclRcmCGT6nuvP57i89X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTIzNC82QThFMDBFQUVG OEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlWRnlZSVpQcWU2OF9udUx6 MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5N0hfZDFGeVZGeVlJWlBxZTY4X251THoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTIzNC82QThFMDBFQUVGOEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlW RnlZSVpQcWU2OF9udUx6MWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMSrYmLcjh4P6FPrZ6UA4pLa9cJp7zNpHKvaTquW+Q2OrTT30qCxqZ JFaB4TkcW9IV1CXuGoPIH7/mPt8Lxoqic/dCGkWH7lRXmwSyjxgNPDMuDy+nMDez bl/87qQEWUcLBkc+7YOB4KjRQqJ2+S8zutrsZkEQD8uacckXtFOnTuCVyuZpcVk9 B23OjNjN8tJ0Np0eF72dpom+JApjTTiCpaD9HzCfyD3JLjiEsqVwU2sBHoKjvTNq ApoRlfpM+cYTu3KjHagrbtiXn7HiD1+uCyIkxwAzjHa0wQ7KVTCQIuw21aoH51Bc rihygn+CjJqYELfoly4o1G4rI0FFyzZg -----END CERTIFICATE-----Generated at Thu Jul 3 01:46:33 2025 by rpki-client