$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json) Hash identifier: 2MKUyjefIYWYGI8ilzZMkTcx3tJuGcD4hWSdGJiCkwI= Subject key identifier: F0:26:06:E1:4C:60:7E:65:DB:00:A4:74:64:55:76:31:BB:2E:F7:E9 Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Certificate serial: 0556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft Manifest number: 0548 Signing time: Sat 26 Apr 2025 23:07:44 +0000 Manifest this update: Sat 26 Apr 2025 23:07:43 +0000 Manifest next update: Sat 03 May 2025 23:07:43 +0000 Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: oKX6PRn15uVvkzX2qYxI1+lrP+uC4eZGdTt7kbyEQQI=) 2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: ZDchGQlVuJ+QjHKNA7YoG+7MDRY2/kTvBgBCNq57J7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1366 (0x556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Validity Not Before: Apr 26 23:07:43 2025 GMT Not After : May 3 23:07:43 2025 GMT Subject: CN=680d6740-7108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:c2:02:f0:3c:5f:0e:64:9f:52:78:64:87: 63:9b:56:62:49:bd:49:e6:32:5c:ee:29:b4:4d:bd: c7:ba:d6:da:7a:5b:90:51:e8:81:54:97:19:c8:da: da:63:3f:55:e5:9c:32:cd:e2:10:ff:c5:c1:6c:7d: 24:93:4d:aa:a2:19:ae:b2:c6:bd:ca:5b:55:16:7e: 6c:51:41:ba:ec:77:6d:ae:0a:eb:92:06:8c:1e:21: fd:dc:bc:0d:d6:34:e9:1b:a6:87:41:ce:a8:24:f7: 2e:0c:09:72:7a:96:76:b7:0a:63:b0:e5:b8:ca:8b: 68:9d:e3:f5:11:c2:a8:eb:ec:2f:cc:dd:f5:03:e3: 4f:00:37:82:7c:ba:27:30:87:13:1d:57:71:3e:b9: 02:be:00:f5:32:5f:72:b3:b6:11:c0:34:13:cd:99: 97:07:7a:d7:93:3e:14:35:a5:76:2e:ba:85:15:79: 87:a6:2c:c6:99:61:85:76:e0:45:04:91:1b:a8:6e: fc:c4:9b:fa:b4:96:e0:62:8e:ed:3e:f2:bd:db:11: 00:32:e2:cd:10:78:29:d4:ad:34:cf:cd:96:05:ef: 3e:13:ce:1e:d2:aa:1e:25:a4:c6:a5:47:66:7f:78: 26:29:30:09:95:14:2f:e6:2a:cf:0a:0e:ea:af:13: 0c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:26:06:E1:4C:60:7E:65:DB:00:A4:74:64:55:76:31:BB:2E:F7:E9 X509v3 Authority Key Identifier: keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:56:b3:61:b5:3b:cd:2f:be:f3:8b:5b:21:bb:23:d5:73:bb: fa:42:05:01:d2:c1:cc:ba:43:b8:fe:09:99:85:98:00:15:4d: 48:a2:d4:cc:17:a9:68:04:25:a5:1b:f4:d3:63:43:07:27:81: 28:75:6f:c7:a0:8b:70:ce:a1:b6:18:16:3f:09:36:47:6c:25: ff:4e:b2:32:dd:a4:83:ba:b1:66:a1:ee:29:07:84:08:fc:27: ae:3c:65:52:20:eb:4c:d4:d2:97:5e:42:5e:89:b1:33:2c:7f: 2f:36:ef:89:af:2c:7f:5d:70:51:82:17:80:83:ab:2f:4b:db: 17:7f:dd:bf:91:48:48:7c:48:a2:7a:f7:7b:d9:fb:05:cb:1a: 80:e9:a8:57:6f:36:9b:c7:86:a3:78:88:40:23:77:b8:56:32: 75:d0:6b:39:14:bb:3e:69:8f:ad:4c:b0:43:98:4e:c5:5f:80: 86:7d:c1:dc:b9:51:cc:d2:11:d8:ec:93:62:b4:7e:b0:86:b3: bd:85:42:65:ef:52:09:e6:98:ab:e9:7b:b7:62:a0:ad:19:c1: 87:25:df:64:21:c3:0d:e5:c2:e7:78:9a:d3:11:57:61:cd:b1: 3d:8d:18:1d:29:d4:c0:aa:32:47:9b:ca:ea:60:16:9a:24:cd: 3f:15:a6:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyMzQxMTAvBgNVBAUTKEMzREVDN0ZEREQ0NUM5NTE3MjYwODY0RkE5RUVCQ0ZF N0I4QkNGNTcwHhcNMjUwNDI2MjMwNzQzWhcNMjUwNTAzMjMwNzQzWjAYMRYwFAYD VQQDEw02ODBkNjc0MC03MTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxszCAvA8Xw5kn1J4ZIdjm1ZiSb1J5jJc7im0Tb3HutbaeluQUeiBVJcZyNra Yz9V5ZwyzeIQ/8XBbH0kk02qohmussa9yltVFn5sUUG67HdtrgrrkgaMHiH93LwN 1jTpG6aHQc6oJPcuDAlyepZ2twpjsOW4yotoneP1EcKo6+wvzN31A+NPADeCfLon MIcTHVdxPrkCvgD1Ml9ys7YRwDQTzZmXB3rXkz4UNaV2LrqFFXmHpizGmWGFduBF BJEbqG78xJv6tJbgYo7tPvK92xEAMuLNEHgp1K00z82WBe8+E84e0qoeJaTGpUdm f3gmKTAJlRQv5irPCg7qrxMM5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAmBuFM YH5l2wCkdGRVdjG7LvfpMB8GA1UdIwQYMBaAFMPex/3dRclRcmCGT6nuvP57i89X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTIzNC82QThFMDBFQUVG OEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlWRnlZSVpQcWU2OF9udUx6 MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5N0hfZDFGeVZGeVlJWlBxZTY4X251THoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTIzNC82QThFMDBFQUVGOEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlW RnlZSVpQcWU2OF9udUx6MWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxVrNhtTvNL77zi1shuyPVc7v6QgUB0sHMukO4/gmZhZgAFU1IotTM F6loBCWlG/TTY0MHJ4EodW/HoItwzqG2GBY/CTZHbCX/TrIy3aSDurFmoe4pB4QI /CeuPGVSIOtM1NKXXkJeibEzLH8vNu+Jryx/XXBRgheAg6svS9sXf92/kUhIfEii evd72fsFyxqA6ahXbzabx4ajeIhAI3e4VjJ10Gs5FLs+aY+tTLBDmE7FX4CGfcHc uVHM0hHY7JNitH6whrO9hUJl71IJ5pir6Xu3YqCtGcGHJd9kIcMN5cLneJrTEVdh zbE9jRgdKdTAqjJHm8rqYBaaJM0/FaYJ -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:49 2025 by rpki-client on console.sobornost.net