$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json) Hash identifier: TUeK5wRXtt8SqqAwPFOGJ/g05c7WcLZEmsvig+kg7Lw= Subject key identifier: E1:A5:13:B0:C6:E1:8A:9C:9A:6C:85:B7:10:1C:DB:21:C8:20:75:7A Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft Manifest number: 0585 Signing time: Fri 22 Aug 2025 23:28:29 +0000 Manifest this update: Fri 22 Aug 2025 23:28:29 +0000 Manifest next update: Fri 29 Aug 2025 23:28:29 +0000 Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: 9I3U85mN/i1P70cKkidiOXCIniJvWeInCaEosp8nw/Q=) 2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: 2bH75nk9O6TD/rf7czJlYhCGMNmtoX73i8QmFGzj+S0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Validity Not Before: Aug 22 23:28:29 2025 GMT Not After : Aug 29 23:28:29 2025 GMT Subject: CN=68a8fd1d-c7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:68:ea:d1:6d:e3:f0:51:a7:c4:1c:a1:59: 5a:55:51:b2:06:fc:93:d5:30:af:9c:68:db:ac:25: ff:87:ae:38:f1:46:e5:d1:81:9a:32:bf:54:10:31: fc:cd:ec:bf:aa:d2:f0:56:ca:26:4d:86:65:4e:4c: 40:bf:0a:57:9f:4f:c2:e1:c4:61:11:a8:a7:70:69: b4:be:c7:58:61:f2:72:f0:7a:3d:0f:9e:81:98:80: c5:c3:fc:f4:c3:60:cb:6e:97:f0:59:28:60:c3:c1: 48:66:1d:d9:00:23:60:84:76:ca:2e:39:06:f7:06: 95:f2:59:d3:83:63:56:89:86:aa:50:6e:6b:00:18: 1e:34:96:5a:53:1f:12:30:ec:9e:7e:81:41:5d:c5: 02:7c:b8:e9:64:a6:6f:ab:a7:e1:ef:01:58:0f:de: b2:cb:21:0c:3b:52:d3:b1:35:76:db:d6:cb:70:1e: 6f:86:12:02:28:9d:11:92:6c:96:6d:1e:29:c2:d5: 05:d4:d6:86:bc:cb:f5:42:68:fb:6b:30:54:7a:af: 8a:90:d5:5a:e0:ed:6c:26:f6:54:45:50:33:fe:93: 87:0b:77:0d:8e:8b:dc:50:ce:36:36:de:8d:08:9a: a1:c6:91:6c:d0:e0:fc:d3:1d:94:2b:8d:9e:e1:38: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A5:13:B0:C6:E1:8A:9C:9A:6C:85:B7:10:1C:DB:21:C8:20:75:7A X509v3 Authority Key Identifier: keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:68:7c:7f:3e:84:e9:37:e2:74:d7:17:38:2c:a4:0a:52:df: 02:46:5a:ff:fc:38:28:43:82:38:66:57:48:fd:dc:8a:58:0a: 33:54:52:ee:e5:f9:83:c9:db:ec:0a:c3:7f:d1:76:02:51:88: 6b:b0:21:18:b4:63:fc:4f:e3:96:08:6b:bd:be:fb:5c:d6:49: ac:20:52:cb:12:1d:42:ea:46:81:92:05:6f:f5:f4:a9:f2:80: 5f:09:79:6e:54:f8:71:91:cc:1e:d7:4e:89:a3:cb:23:70:66: ab:c3:97:1f:06:fd:f2:fb:09:6d:48:9c:cb:f6:2f:b1:5e:d7: 52:7e:51:d1:1e:d6:21:8c:c4:ec:d4:11:07:9b:5b:dd:3a:6f: 7e:7d:87:e8:96:09:9a:eb:fd:15:24:45:2b:2b:4c:25:a7:d0: 95:26:b4:ea:54:ff:1e:de:c0:28:9f:8c:c4:22:0e:71:19:91: 94:15:b4:24:4f:96:75:4c:32:06:d0:52:d8:f9:5e:83:36:8d: 86:0d:34:b1:44:b2:0a:4d:45:38:d1:69:eb:9a:75:98:c7:30: 01:2b:06:5a:f8:87:db:b2:ed:29:e4:2a:95:cf:2e:89:c8:e4: 76:74:cf:47:57:cb:29:61:5c:56:2b:f4:5f:6b:53:1a:41:6a: 8d:ee:3a:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyMzQxMTAvBgNVBAUTKEMzREVDN0ZEREQ0NUM5NTE3MjYwODY0RkE5RUVCQ0ZF N0I4QkNGNTcwHhcNMjUwODIyMjMyODI5WhcNMjUwODI5MjMyODI5WjAYMRYwFAYD VQQDEw02OGE4ZmQxZC1jN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUNo6tFt4/BRp8QcoVlaVVGyBvyT1TCvnGjbrCX/h6448Ubl0YGaMr9UEDH8 zey/qtLwVsomTYZlTkxAvwpXn0/C4cRhEaincGm0vsdYYfJy8Ho9D56BmIDFw/z0 w2DLbpfwWShgw8FIZh3ZACNghHbKLjkG9waV8lnTg2NWiYaqUG5rABgeNJZaUx8S MOyefoFBXcUCfLjpZKZvq6fh7wFYD96yyyEMO1LTsTV229bLcB5vhhICKJ0RkmyW bR4pwtUF1NaGvMv1Qmj7azBUeq+KkNVa4O1sJvZURVAz/pOHC3cNjovcUM42Nt6N CJqhxpFs0OD80x2UK42e4TheDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGlE7DG 4YqcmmyFtxAc2yHIIHV6MB8GA1UdIwQYMBaAFMPex/3dRclRcmCGT6nuvP57i89X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTIzNC82QThFMDBFQUVG OEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlWRnlZSVpQcWU2OF9udUx6 MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5N0hfZDFGeVZGeVlJWlBxZTY4X251THoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTIzNC82QThFMDBFQUVGOEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlW RnlZSVpQcWU2OF9udUx6MWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcaHx/PoTpN+J01xc4LKQKUt8CRlr//DgoQ4I4ZldI/dyKWAozVFLu 5fmDydvsCsN/0XYCUYhrsCEYtGP8T+OWCGu9vvtc1kmsIFLLEh1C6kaBkgVv9fSp 8oBfCXluVPhxkcwe106Jo8sjcGarw5cfBv3y+wltSJzL9i+xXtdSflHRHtYhjMTs 1BEHm1vdOm9+fYfolgma6/0VJEUrK0wlp9CVJrTqVP8e3sAon4zEIg5xGZGUFbQk T5Z1TDIG0FLY+V6DNo2GDTSxRLIKTUU40WnrmnWYxzABKwZa+Ifbsu0p5CqVzy6J yOR2dM9HV8spYVxWK/Rfa1MaQWqN7jrS -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:24 2025 by rpki-client