$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json) Hash identifier: JP/DVJJFz4vjAlOpa1sPrUn5Ij5JbIBMCv94I3XMSQE= Subject key identifier: 05:42:2F:44:AD:C5:6D:47:98:FC:11:E7:5D:C4:61:80:66:5D:2A:92 Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft Manifest number: 0334 Signing time: Sat 23 Aug 2025 01:20:43 +0000 Manifest this update: Sat 23 Aug 2025 01:20:43 +0000 Manifest next update: Sat 30 Aug 2025 01:20:43 +0000 Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: oaLHHbxkhGK5oMk7Te/gMEzeXUavJ2LKbVnXZHF070g=) 2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: gGb0/UgfSasORS6rGMdjPg33Z1o+REJnn5mJbTdXj5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Validity Not Before: Aug 23 01:20:43 2025 GMT Not After : Aug 30 01:20:43 2025 GMT Subject: CN=68a9176b-634d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:f6:92:11:d7:24:bf:a7:df:55:d2:9d:75: 31:8f:86:0f:25:c1:d0:0a:bb:c7:a1:b7:b2:09:2d: 6b:0b:a3:39:3f:1f:4d:dc:9e:a3:a2:69:ec:0a:68: 30:f6:e5:67:8d:75:8e:cf:eb:0b:39:11:6b:0f:63: 13:54:01:5c:7e:96:99:64:47:18:88:ab:1a:e1:ed: 98:97:85:5b:d4:9a:48:a5:37:4f:b8:9b:64:67:c5: c9:73:25:3d:b6:ac:c2:36:ec:73:21:f0:a3:7c:9d: 4c:9b:ad:56:b6:97:f4:7f:db:91:20:1e:86:56:86: 44:b7:27:ef:2e:c5:72:17:d9:c9:b2:ab:94:61:1a: e2:5b:49:b9:8a:80:ad:d2:07:ed:7e:9d:77:92:11: c8:58:52:e6:19:89:05:db:79:a5:30:8e:a0:21:20: 4a:a0:27:98:d9:75:db:fc:6d:f1:3c:db:5f:18:75: 12:11:16:e4:9f:3f:45:d7:62:18:5b:78:e7:7f:8f: 48:64:cc:54:a7:a5:89:0f:17:31:c0:e1:19:ac:b0: 72:fa:8b:d3:56:d4:55:6e:44:aa:2a:20:c5:ee:94: 7a:44:00:98:51:c7:7e:9b:5b:ae:d3:d6:ab:fe:84: 0f:a8:b3:ae:18:63:62:98:92:c1:e4:8d:b3:bc:20: 01:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:42:2F:44:AD:C5:6D:47:98:FC:11:E7:5D:C4:61:80:66:5D:2A:92 X509v3 Authority Key Identifier: keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:b6:11:1d:cf:cb:37:1a:a6:f8:1a:a2:87:06:5e:5f:9d:bb: 37:28:a2:e6:f0:02:8f:a5:df:c8:05:43:e0:26:2d:b7:ba:a4: f7:2c:57:8c:91:96:29:a2:26:98:a3:78:74:d1:63:02:d4:41: d0:c8:c3:17:35:b1:7f:19:61:e8:21:70:d0:e9:b4:da:ac:96: 9e:d4:2a:86:ea:a2:a3:f0:f8:9c:95:25:5e:05:c5:c1:2c:f7: 6e:51:81:a4:78:c6:f1:7a:ba:7a:5b:aa:66:15:21:66:8a:64: 07:3d:12:72:cb:50:5c:df:57:c1:1c:f5:24:82:78:c0:12:e7: 98:35:53:b7:d1:55:e6:6e:87:01:67:cf:e0:84:42:97:27:d9: dc:23:d5:dc:61:a1:6e:d3:15:10:75:fd:8a:97:4c:3a:bf:2a: 83:e9:75:52:18:26:8d:f4:b1:0c:78:cd:47:d6:52:0f:2a:62: d1:56:b0:12:07:4a:85:f7:6f:8f:0b:a6:a1:e8:44:87:41:a5: 2a:11:54:b4:ec:5a:fd:e4:33:1d:70:1c:c6:71:f9:9c:93:d2: bc:2a:8b:d9:2b:f8:63:6e:40:a9:15:2c:c8:92:12:e4:86:8f: 0b:5d:67:1d:19:97:27:71:e4:a9:5e:b8:a1:28:75:d8:87:04: 49:3b:01:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC RkVERTkxQjMwHhcNMjUwODIzMDEyMDQzWhcNMjUwODMwMDEyMDQzWjAYMRYwFAYD VQQDEw02OGE5MTc2Yi02MzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/P2khHXJL+n31XSnXUxj4YPJcHQCrvHobeyCS1rC6M5Px9N3J6jomnsCmgw 9uVnjXWOz+sLORFrD2MTVAFcfpaZZEcYiKsa4e2Yl4Vb1JpIpTdPuJtkZ8XJcyU9 tqzCNuxzIfCjfJ1Mm61Wtpf0f9uRIB6GVoZEtyfvLsVyF9nJsquUYRriW0m5ioCt 0gftfp13khHIWFLmGYkF23mlMI6gISBKoCeY2XXb/G3xPNtfGHUSERbknz9F12IY W3jnf49IZMxUp6WJDxcxwOEZrLBy+ovTVtRVbkSqKiDF7pR6RACYUcd+m1uu09ar /oQPqLOuGGNimJLB5I2zvCABCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVCL0St xW1HmPwR513EYYBmXSqSMB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0 REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqthEdz8s3Gqb4GqKHBl5fnbs3KKLm8AKPpd/IBUPgJi23uqT3LFeM kZYpoiaYo3h00WMC1EHQyMMXNbF/GWHoIXDQ6bTarJae1CqG6qKj8PiclSVeBcXB LPduUYGkeMbxerp6W6pmFSFmimQHPRJyy1Bc31fBHPUkgnjAEueYNVO30VXmbocB Z8/ghEKXJ9ncI9XcYaFu0xUQdf2Kl0w6vyqD6XVSGCaN9LEMeM1H1lIPKmLRVrAS B0qF92+PC6ah6ESHQaUqEVS07Fr95DMdcBzGcfmck9K8KovZK/hjbkCpFSzIkhLk ho8LXWcdGZcnceSpXrihKHXYhwRJOwGQ -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:12 2025 by rpki-client