$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json) Hash identifier: 6MSJcNKyxqSHC0HDzo0UpQguckVTN9qOdNocqx1r1d0= Subject key identifier: 24:E2:63:12:9A:CC:F5:DA:CD:0B:F5:55:BD:5B:0B:4A:E3:58:74:82 Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Certificate serial: 0580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft Manifest number: 0572 Signing time: Sun 20 Jul 2025 23:31:45 +0000 Manifest this update: Sun 20 Jul 2025 23:31:44 +0000 Manifest next update: Sun 27 Jul 2025 23:31:44 +0000 Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: PPQN9HH390yF3jqXQ8jZ9MZ4dGGVLeOGuB9Pc5HlKF8=) 2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: ZDchGQlVuJ+QjHKNA7YoG+7MDRY2/kTvBgBCNq57J7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Validity Not Before: Jul 20 23:31:44 2025 GMT Not After : Jul 27 23:31:44 2025 GMT Subject: CN=687d7c61-05a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:30:29:7a:ed:b0:85:bf:d9:d0:de:41:36: 2a:a7:8b:fb:46:e6:71:a6:74:42:6a:c2:35:cd:90: 74:32:e8:69:3f:69:8b:c1:39:73:95:f6:ca:c7:94: 70:17:94:10:62:d2:ed:00:a2:2f:06:d0:52:8c:88: ef:15:20:02:eb:84:68:91:19:de:c2:53:a8:ab:0f: 9b:da:bf:ea:37:82:0e:68:05:6b:34:fb:7f:47:58: cd:e4:65:93:ee:20:06:b1:9f:33:5c:c5:3c:98:c1: 94:a5:08:7f:d2:8b:f6:48:41:9e:4f:d7:9c:fd:a4: 38:9d:71:49:a6:f9:c0:65:5a:1e:e1:ff:63:db:a6: 4c:c1:79:ba:37:5c:64:67:1a:7c:9b:51:59:a4:cb: f9:cb:1d:a2:e1:40:1b:1c:37:d8:4d:5c:02:4c:e7: 75:f1:56:e1:c8:f3:6a:1f:8c:fb:1b:ed:75:4f:bc: 85:40:33:15:74:b8:4c:60:ba:42:8f:d4:c5:65:35: 01:52:c5:f9:41:de:18:a6:35:78:f6:bb:a3:96:86: 88:91:19:a8:0e:05:70:d4:79:6a:62:df:23:b9:85: 69:81:58:e6:fb:d5:16:38:cc:27:52:ec:b7:b7:61: cb:e1:16:0b:8f:ff:48:62:c0:3d:5a:9b:26:0c:4b: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E2:63:12:9A:CC:F5:DA:CD:0B:F5:55:BD:5B:0B:4A:E3:58:74:82 X509v3 Authority Key Identifier: keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:73:b4:7a:95:47:c6:ab:c4:11:7a:4f:90:a0:11:75:55:cd: 1f:3e:b1:37:48:ee:0e:5f:ef:ed:06:ec:c7:dc:0e:9d:65:6c: 9c:ec:33:83:77:46:48:4e:6d:58:9a:f1:43:eb:33:cf:15:71: af:e1:59:e0:7f:e7:bb:78:b9:04:8a:88:d2:84:26:02:ed:a3: 40:6f:a5:c1:64:5d:24:d8:51:42:d0:80:14:6f:be:b5:77:c5: 66:89:40:3b:9e:d3:f4:68:60:36:a8:50:39:b0:c4:11:5d:f4: b4:bd:c4:f9:0c:c3:97:8e:c6:64:e2:69:35:70:3f:03:b9:0d: ce:4c:d8:b1:8d:24:85:15:a5:8f:ba:f3:e4:16:fa:0b:ae:e9: f1:20:66:f0:cc:6f:a8:82:fe:8e:82:24:f1:69:b5:5d:1c:99: a2:0e:25:e2:20:16:a6:b7:ec:27:dd:05:b5:bb:84:3c:4d:c2: 16:18:13:28:aa:25:86:93:41:05:14:4e:d3:39:1c:38:b6:18: 89:7c:6a:c9:55:2c:41:05:8f:54:c6:78:6e:1d:93:c1:cf:db: 83:4c:65:73:30:e9:92:0a:4e:38:3a:8f:68:8d:de:b9:af:93: 04:57:f4:2b:68:22:7c:bc:32:f6:24:f8:cc:a2:82:2d:7a:97: 16:09:e2:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyMzQxMTAvBgNVBAUTKEMzREVDN0ZEREQ0NUM5NTE3MjYwODY0RkE5RUVCQ0ZF N0I4QkNGNTcwHhcNMjUwNzIwMjMzMTQ0WhcNMjUwNzI3MjMzMTQ0WjAYMRYwFAYD VQQDEw02ODdkN2M2MS0wNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FkwKXrtsIW/2dDeQTYqp4v7RuZxpnRCasI1zZB0MuhpP2mLwTlzlfbKx5Rw F5QQYtLtAKIvBtBSjIjvFSAC64RokRnewlOoqw+b2r/qN4IOaAVrNPt/R1jN5GWT 7iAGsZ8zXMU8mMGUpQh/0ov2SEGeT9ec/aQ4nXFJpvnAZVoe4f9j26ZMwXm6N1xk Zxp8m1FZpMv5yx2i4UAbHDfYTVwCTOd18VbhyPNqH4z7G+11T7yFQDMVdLhMYLpC j9TFZTUBUsX5Qd4YpjV49rujloaIkRmoDgVw1HlqYt8juYVpgVjm+9UWOMwnUuy3 t2HL4RYLj/9IYsA9WpsmDEv2pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTiYxKa zPXazQv1Vb1bC0rjWHSCMB8GA1UdIwQYMBaAFMPex/3dRclRcmCGT6nuvP57i89X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTIzNC82QThFMDBFQUVG OEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlWRnlZSVpQcWU2OF9udUx6 MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5N0hfZDFGeVZGeVlJWlBxZTY4X251THoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTIzNC82QThFMDBFQUVGOEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlW RnlZSVpQcWU2OF9udUx6MWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARc7R6lUfGq8QRek+QoBF1Vc0fPrE3SO4OX+/tBuzH3A6dZWyc7DOD d0ZITm1YmvFD6zPPFXGv4Vngf+e7eLkEiojShCYC7aNAb6XBZF0k2FFC0IAUb761 d8VmiUA7ntP0aGA2qFA5sMQRXfS0vcT5DMOXjsZk4mk1cD8DuQ3OTNixjSSFFaWP uvPkFvoLrunxIGbwzG+ogv6OgiTxabVdHJmiDiXiIBamt+wn3QW1u4Q8TcIWGBMo qiWGk0EFFE7TORw4thiJfGrJVSxBBY9UxnhuHZPBz9uDTGVzMOmSCk44Oo9ojd65 r5MEV/QraCJ8vDL2JPjMooItepcWCeJr -----END CERTIFICATE-----Generated at Mon Jul 21 23:48:20 2025 by rpki-client