$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json) Hash identifier: e3y1Ekewf0SGgX24Z0uFvnFtO+o9rCSm8jiK7NIWu5o= Subject key identifier: 9C:3A:DD:E4:5B:D3:89:04:C7:2D:D3:9B:89:E1:2E:5B:CB:63:40:29 Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Certificate serial: 0555 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft Manifest number: 0547 Signing time: Thu 24 Apr 2025 23:15:20 +0000 Manifest this update: Thu 24 Apr 2025 23:15:19 +0000 Manifest next update: Thu 01 May 2025 23:15:19 +0000 Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: QBWWBtT7MRrFkNPyT5U+5JQ/8Vq7HPC/7iY7CMVK5wA=) 2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: ZDchGQlVuJ+QjHKNA7YoG+7MDRY2/kTvBgBCNq57J7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1365 (0x555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Validity Not Before: Apr 24 23:15:19 2025 GMT Not After : May 1 23:15:19 2025 GMT Subject: CN=680ac608-aac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:47:87:91:26:16:07:79:f6:a0:78:d7:22:ba: 3c:1b:be:87:70:a2:29:64:ee:86:05:d8:b6:b9:03: 83:1a:ab:05:da:b2:c0:85:94:c5:f8:b4:18:f6:a6: a1:10:aa:6e:2a:27:96:ed:77:2a:f0:3b:b9:7f:f2: cd:8d:ef:27:69:f0:76:22:13:03:14:9b:a3:43:28: fb:e7:41:80:99:b7:6d:c3:97:da:e8:b1:7b:7a:a5: 0f:51:70:5d:71:d3:bd:28:b0:fd:ea:8b:88:06:4a: c4:9c:9f:36:c9:5f:e0:2a:da:6e:dc:26:15:b1:28: 30:6d:4f:b6:18:18:b1:aa:a8:f1:8d:59:01:0e:3d: cd:1f:71:29:f3:97:3f:b0:65:fb:28:46:dd:61:e2: fa:b3:6c:3b:2c:4a:0c:07:63:bc:81:d6:0b:c3:4e: 62:9e:b9:3b:e7:47:b2:3d:1e:3b:25:73:c8:91:90: 68:5d:24:d4:c0:48:2f:a9:8e:c4:56:b0:7a:5d:c5: 74:21:d1:6b:17:95:8b:49:c8:7e:f4:6b:36:f2:de: 66:a6:36:06:7a:e8:12:4c:fa:d4:0e:2d:cd:8d:8f: ad:80:7c:21:ab:41:c3:49:1a:bc:0f:16:95:a8:da: 1a:b1:88:5f:d0:87:8b:aa:4d:5e:b3:c3:22:90:2f: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3A:DD:E4:5B:D3:89:04:C7:2D:D3:9B:89:E1:2E:5B:CB:63:40:29 X509v3 Authority Key Identifier: keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:59:d1:1f:c8:b3:2a:59:f7:03:b7:20:6b:fa:93:1e:14:5c: 8f:6d:19:68:21:8a:20:47:12:78:2f:7d:57:1f:12:1b:c4:06: b2:0d:a8:35:03:35:1e:fb:f9:d4:8f:9e:27:70:9e:4f:50:53: 64:7c:91:4c:85:99:ca:57:7a:99:a1:fc:bd:eb:70:51:dd:5d: 69:d3:3a:9e:6c:58:d9:90:22:bb:3a:40:db:4c:58:c6:18:eb: d1:22:0f:68:e7:9c:d7:ef:d2:43:38:13:7e:79:bf:0d:f7:e7: a0:ac:f3:ed:7d:1e:2f:16:95:6b:9f:4c:aa:dc:de:6d:28:a1: 29:df:2c:32:32:c4:32:1d:8c:1b:49:a7:99:ed:9a:bb:0d:8d: 1c:15:60:6d:c8:d1:9a:a2:e5:bc:1c:1c:af:37:06:14:08:36: 51:ca:cf:64:e6:7b:14:df:bc:26:32:45:eb:16:da:18:26:88: a2:51:fe:a8:41:12:59:6c:2e:c4:b8:b8:3e:52:a9:0e:18:af: 04:ec:9d:e2:aa:45:5a:ad:1e:69:43:c7:98:ae:7e:7e:06:14: 64:1c:a7:34:f1:dd:7a:49:64:0a:97:3e:79:12:d5:b8:48:45: 79:21:15:56:9f:dc:03:ff:20:01:e5:f2:26:13:55:2b:47:01: 50:a2:a6:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyMzQxMTAvBgNVBAUTKEMzREVDN0ZEREQ0NUM5NTE3MjYwODY0RkE5RUVCQ0ZF N0I4QkNGNTcwHhcNMjUwNDI0MjMxNTE5WhcNMjUwNTAxMjMxNTE5WjAYMRYwFAYD VQQDEw02ODBhYzYwOC1hYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5keHkSYWB3n2oHjXIro8G76HcKIpZO6GBdi2uQODGqsF2rLAhZTF+LQY9qah EKpuKieW7Xcq8Du5f/LNje8nafB2IhMDFJujQyj750GAmbdtw5fa6LF7eqUPUXBd cdO9KLD96ouIBkrEnJ82yV/gKtpu3CYVsSgwbU+2GBixqqjxjVkBDj3NH3Ep85c/ sGX7KEbdYeL6s2w7LEoMB2O8gdYLw05inrk750eyPR47JXPIkZBoXSTUwEgvqY7E VrB6XcV0IdFrF5WLSch+9Gs28t5mpjYGeugSTPrUDi3NjY+tgHwhq0HDSRq8DxaV qNoasYhf0IeLqk1es8MikC9J9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJw63eRb 04kExy3Tm4nhLlvLY0ApMB8GA1UdIwQYMBaAFMPex/3dRclRcmCGT6nuvP57i89X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTIzNC82QThFMDBFQUVG OEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlWRnlZSVpQcWU2OF9udUx6 MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5N0hfZDFGeVZGeVlJWlBxZTY4X251THoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTIzNC82QThFMDBFQUVGOEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlW RnlZSVpQcWU2OF9udUx6MWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByWdEfyLMqWfcDtyBr+pMeFFyPbRloIYogRxJ4L31XHxIbxAayDag1 AzUe+/nUj54ncJ5PUFNkfJFMhZnKV3qZofy963BR3V1p0zqebFjZkCK7OkDbTFjG GOvRIg9o55zX79JDOBN+eb8N9+egrPPtfR4vFpVrn0yq3N5tKKEp3ywyMsQyHYwb SaeZ7Zq7DY0cFWBtyNGaouW8HByvNwYUCDZRys9k5nsU37wmMkXrFtoYJoiiUf6o QRJZbC7EuLg+UqkOGK8E7J3iqkVarR5pQ8eYrn5+BhRkHKc08d16SWQKlz55EtW4 SEV5IRVWn9wD/yAB5fImE1UrRwFQoqb0 -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:51 2025 by rpki-client