$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json) Hash identifier: pA355sHtLUnRYS7ItjeWIY0vmCc0lRFxauFeR6bejJE= Subject key identifier: 59:96:2A:6B:BB:63:B9:6F:D5:87:72:F0:76:CC:95:C2:2D:6D:46:91 Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft Manifest number: 058D Signing time: Sat 06 Sep 2025 23:35:45 +0000 Manifest this update: Sat 06 Sep 2025 23:35:44 +0000 Manifest next update: Sat 13 Sep 2025 23:35:44 +0000 Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: iLhqYq5fdp/WhzvIjgYxxU4JPxdXVS+Bip2MtH9HVTE=) 2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: 2bH75nk9O6TD/rf7czJlYhCGMNmtoX73i8QmFGzj+S0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Validity Not Before: Sep 6 23:35:44 2025 GMT Not After : Sep 13 23:35:44 2025 GMT Subject: CN=68bcc550-65c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:0a:0f:fc:1d:94:25:b0:9b:21:31:ff:93: 82:aa:9c:14:bc:43:1c:da:b1:5a:d3:cf:e9:55:b8: 62:29:ba:b4:9f:3c:03:71:e9:12:0c:63:1e:b1:62: ce:19:60:72:89:bd:54:cd:d9:d2:30:ac:17:a4:49: 7c:fc:19:1c:5d:40:ed:e7:fa:c1:21:95:d4:88:0b: 55:ab:d9:01:25:14:79:2d:bc:f6:c1:bf:96:55:68: 64:53:bc:ae:69:f8:10:07:41:3a:88:3e:ed:0c:33: 58:b2:9e:3d:7d:be:7a:d2:3c:d9:69:4b:75:02:2f: 31:bb:6d:86:4a:6f:13:48:87:63:62:d6:54:1a:ab: e6:cd:aa:6b:1d:b3:a1:ff:46:25:d7:c6:1d:6a:af: f3:56:4e:92:7b:72:3f:bf:d1:e1:67:97:1f:7e:3c: 28:4e:3b:09:f9:d0:ea:25:fd:e5:80:21:af:9e:18: 7c:0d:5d:9a:04:34:7a:93:b1:b7:dd:8f:d6:05:d4: f1:8e:5e:cb:e8:7d:6a:87:22:d9:e0:8e:5e:25:b8: d4:fc:7d:81:d6:40:f0:00:82:5b:f3:0b:18:43:51: f5:70:d3:64:93:7d:6b:1e:99:7b:32:c7:c0:e0:af: 41:86:a8:86:47:bb:ba:a6:a6:a5:7b:24:f8:01:ac: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:96:2A:6B:BB:63:B9:6F:D5:87:72:F0:76:CC:95:C2:2D:6D:46:91 X509v3 Authority Key Identifier: keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:28:85:4f:4c:96:a3:78:f3:c8:e1:d9:9d:b1:b7:fa:bc:65: f9:0a:a8:50:eb:26:ca:b4:c8:94:1f:19:13:29:75:8c:db:72: d9:2a:88:c5:86:61:e6:4c:3d:58:31:f2:2f:0d:88:15:b9:bc: 1e:b8:00:c2:01:8b:86:85:e0:4f:2d:55:13:83:b3:91:dd:fc: 05:99:bd:a4:e2:2c:aa:45:11:3b:f8:45:96:2f:68:39:e2:03: 49:91:28:b0:da:32:58:8f:3f:e5:5a:1f:f0:ee:06:d1:50:ab: 83:c7:f1:fc:3e:6e:08:b1:be:56:74:5e:77:2d:40:53:33:83: 73:e3:23:30:fb:14:5e:66:40:3d:a1:8c:85:cf:31:3b:3c:ce: 6c:91:b7:9e:c3:80:98:a5:ba:05:41:ac:70:67:cb:07:b0:bd: d5:bf:7a:11:33:d2:3b:3b:a7:b2:a8:95:ed:a6:0c:10:ff:ed: d9:81:84:3c:73:47:15:7f:1d:ac:9a:85:36:e7:85:68:52:6d: 38:84:67:5e:db:63:09:9e:aa:69:2e:a4:61:c3:34:ca:8c:57: 7f:03:f6:a2:3f:da:f5:68:d5:0e:6a:f1:ea:28:83:b4:52:f8: e7:f9:53:93:13:6a:e9:c8:64:84:ec:9c:b1:24:49:d2:92:4b: 01:5e:94:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyMzQxMTAvBgNVBAUTKEMzREVDN0ZEREQ0NUM5NTE3MjYwODY0RkE5RUVCQ0ZF N0I4QkNGNTcwHhcNMjUwOTA2MjMzNTQ0WhcNMjUwOTEzMjMzNTQ0WjAYMRYwFAYD VQQDEw02OGJjYzU1MC02NWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7MKD/wdlCWwmyEx/5OCqpwUvEMc2rFa08/pVbhiKbq0nzwDcekSDGMesWLO GWByib1UzdnSMKwXpEl8/BkcXUDt5/rBIZXUiAtVq9kBJRR5Lbz2wb+WVWhkU7yu afgQB0E6iD7tDDNYsp49fb560jzZaUt1Ai8xu22GSm8TSIdjYtZUGqvmzaprHbOh /0Yl18Ydaq/zVk6Se3I/v9HhZ5cffjwoTjsJ+dDqJf3lgCGvnhh8DV2aBDR6k7G3 3Y/WBdTxjl7L6H1qhyLZ4I5eJbjU/H2B1kDwAIJb8wsYQ1H1cNNkk31rHpl7MsfA 4K9BhqiGR7u6pqaleyT4AawqDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmWKmu7 Y7lv1Ydy8HbMlcItbUaRMB8GA1UdIwQYMBaAFMPex/3dRclRcmCGT6nuvP57i89X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTIzNC82QThFMDBFQUVG OEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlWRnlZSVpQcWU2OF9udUx6 MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5N0hfZDFGeVZGeVlJWlBxZTY4X251THoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTIzNC82QThFMDBFQUVGOEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlW RnlZSVpQcWU2OF9udUx6MWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcKIVPTJajePPI4dmdsbf6vGX5CqhQ6ybKtMiUHxkTKXWM23LZKojF hmHmTD1YMfIvDYgVubweuADCAYuGheBPLVUTg7OR3fwFmb2k4iyqRRE7+EWWL2g5 4gNJkSiw2jJYjz/lWh/w7gbRUKuDx/H8Pm4Isb5WdF53LUBTM4Nz4yMw+xReZkA9 oYyFzzE7PM5skbeew4CYpboFQaxwZ8sHsL3Vv3oRM9I7O6eyqJXtpgwQ/+3ZgYQ8 c0cVfx2smoU254VoUm04hGde22MJnqppLqRhwzTKjFd/A/aiP9r1aNUOavHqKIO0 Uvjn+VOTE2rpyGSE7JyxJEnSkksBXpSX -----END CERTIFICATE-----Generated at Mon Sep 8 00:37:14 2025 by rpki-client