$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json) Hash identifier: lmBvbSDqaEhQFKUvOwqIcXRoF8gPcT7+urUh0KhN4GM= Subject key identifier: 05:60:BB:83:95:53:38:2C:DD:5D:9B:15:E4:1C:8D:7A:CF:DE:47:8F Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Certificate serial: 0566 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft Manifest number: 0558 Signing time: Fri 30 May 2025 23:37:31 +0000 Manifest this update: Fri 30 May 2025 23:37:31 +0000 Manifest next update: Fri 06 Jun 2025 23:37:31 +0000 Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: 8HoF/iuLgAQO0jk0FmnKRx0KFz0RL2cCEUeaSzQCZ4o=) 2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: ZDchGQlVuJ+QjHKNA7YoG+7MDRY2/kTvBgBCNq57J7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Validity Not Before: May 30 23:37:31 2025 GMT Not After : Jun 6 23:37:31 2025 GMT Subject: CN=683a413b-db7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:21:78:a2:04:84:04:dd:08:16:83:a6:6b: c8:03:1d:8a:6f:a6:31:12:32:55:14:5a:6a:e1:10: eb:28:b9:48:43:2a:98:11:dc:5e:af:81:64:6c:80: eb:91:9b:f0:5e:3d:d8:7d:ac:76:e2:e9:45:17:01: 62:6c:ef:fe:8c:3c:5b:4e:a6:6c:5f:34:da:21:a9: b2:ca:fb:06:3f:55:55:bc:ce:77:c6:3f:80:18:2c: fe:a6:c0:fe:d9:14:bf:54:21:75:aa:6d:20:6a:62: 48:6a:c9:d2:21:12:49:b3:6d:50:9a:bc:4b:42:f4: bc:45:46:0a:18:2e:ca:62:9b:5d:0b:fc:41:bd:02: 2d:d1:88:e9:10:e9:28:87:09:8e:a8:da:95:50:ef: 79:8f:16:b9:6b:c0:1e:5a:88:4f:15:8e:58:89:cd: 36:2f:8c:b9:f0:b1:0d:dc:60:49:80:18:b1:33:df: f8:d5:6c:d6:a8:42:17:8b:fd:b0:57:84:cc:bb:97: 78:42:a0:6f:50:1b:32:9d:58:f2:6b:9d:95:39:6a: cf:fe:86:bb:23:b9:34:63:1a:93:48:74:7e:12:58: 08:4f:74:ea:2b:49:8d:ea:71:ae:47:28:10:27:2a: d7:c8:7c:6f:f6:93:99:f0:9b:7c:43:55:cf:fe:1d: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:60:BB:83:95:53:38:2C:DD:5D:9B:15:E4:1C:8D:7A:CF:DE:47:8F X509v3 Authority Key Identifier: keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:be:b3:b6:61:70:8e:00:b9:7c:b3:85:6b:88:35:78:29:3a: b1:72:ad:7c:f4:c7:2e:0b:49:51:ed:c0:cc:c8:6d:4d:2c:ec: e2:77:49:2b:94:19:08:5a:f8:df:3b:79:2e:94:f9:2e:20:66: 12:71:d5:0b:dd:ca:91:a2:e4:aa:53:c9:33:71:e8:47:ea:01: 0c:38:1f:45:45:65:6f:56:45:53:b8:e1:84:b4:da:15:d0:04: 10:c3:2d:85:ea:d8:fe:b5:05:c1:d2:58:90:06:25:6d:ce:df: 5a:68:c6:ea:86:b5:20:7b:f9:cd:a6:70:ce:63:34:97:44:49: 92:89:6a:45:2a:5d:e4:3b:7e:83:de:93:e3:f5:27:79:10:88: 6b:cd:f6:96:ac:ad:12:25:30:6d:ec:08:af:24:d3:78:c0:be: 09:81:05:16:8d:6c:a3:70:f7:50:6b:e9:1f:f1:cb:95:d3:60: 30:21:28:1d:2d:a0:f4:56:de:44:25:e1:14:bb:0c:fc:57:51: f4:03:d4:3b:87:d2:1b:90:73:ec:90:44:6a:02:1b:95:5b:43: 4c:5b:99:1b:fa:64:b1:f4:ac:29:18:6d:3d:6c:e1:33:1e:3d: c1:13:c0:f5:5e:e9:f0:ef:de:f1:da:3d:1b:8f:6e:eb:23:84: 57:28:8b:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyMzQxMTAvBgNVBAUTKEMzREVDN0ZEREQ0NUM5NTE3MjYwODY0RkE5RUVCQ0ZF N0I4QkNGNTcwHhcNMjUwNTMwMjMzNzMxWhcNMjUwNjA2MjMzNzMxWjAYMRYwFAYD VQQDEw02ODNhNDEzYi1kYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs40heKIEhATdCBaDpmvIAx2Kb6YxEjJVFFpq4RDrKLlIQyqYEdxer4FkbIDr kZvwXj3Yfax24ulFFwFibO/+jDxbTqZsXzTaIamyyvsGP1VVvM53xj+AGCz+psD+ 2RS/VCF1qm0gamJIasnSIRJJs21QmrxLQvS8RUYKGC7KYptdC/xBvQIt0YjpEOko hwmOqNqVUO95jxa5a8AeWohPFY5Yic02L4y58LEN3GBJgBixM9/41WzWqEIXi/2w V4TMu5d4QqBvUBsynVjya52VOWrP/oa7I7k0YxqTSHR+ElgIT3TqK0mN6nGuRygQ JyrXyHxv9pOZ8Jt8Q1XP/h1jXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVgu4OV Uzgs3V2bFeQcjXrP3kePMB8GA1UdIwQYMBaAFMPex/3dRclRcmCGT6nuvP57i89X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTIzNC82QThFMDBFQUVG OEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlWRnlZSVpQcWU2OF9udUx6 MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5N0hfZDFGeVZGeVlJWlBxZTY4X251THoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTIzNC82QThFMDBFQUVGOEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlW RnlZSVpQcWU2OF9udUx6MWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXvrO2YXCOALl8s4VriDV4KTqxcq189McuC0lR7cDMyG1NLOzid0kr lBkIWvjfO3kulPkuIGYScdUL3cqRouSqU8kzcehH6gEMOB9FRWVvVkVTuOGEtNoV 0AQQwy2F6tj+tQXB0liQBiVtzt9aaMbqhrUge/nNpnDOYzSXREmSiWpFKl3kO36D 3pPj9Sd5EIhrzfaWrK0SJTBt7AivJNN4wL4JgQUWjWyjcPdQa+kf8cuV02AwISgd LaD0Vt5EJeEUuwz8V1H0A9Q7h9IbkHPskERqAhuVW0NMW5kb+mSx9KwpGG09bOEz Hj3BE8D1Xunw797x2j0bj27rI4RXKIsK -----END CERTIFICATE-----Generated at Sat May 31 17:26:18 2025 by rpki-client