$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json) Hash identifier: N76A+jlnv5qzT72suhmGbXdN6WVjom+x7AGeikOXkPM= Subject key identifier: 46:F8:F4:B2:D2:71:25:87:4B:5C:1C:D0:BB:0C:24:20:0B:85:F7:3E Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Certificate serial: 0320 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft Manifest number: 031A Signing time: Thu 03 Jul 2025 01:33:27 +0000 Manifest this update: Thu 03 Jul 2025 01:33:27 +0000 Manifest next update: Thu 10 Jul 2025 01:33:27 +0000 Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: rxw+IFxVfdqUcQmQ3T0IhP1i6pDZKAnaAe0Wtg11Zeo=) 2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: gGb0/UgfSasORS6rGMdjPg33Z1o+REJnn5mJbTdXj5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 800 (0x320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Validity Not Before: Jul 3 01:33:27 2025 GMT Not After : Jul 10 01:33:27 2025 GMT Subject: CN=6865dde7-3eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:58:b3:7d:f3:3a:72:af:20:c4:09:e8:65:dd: 81:f6:fe:41:79:c4:7b:73:29:f6:45:69:31:ea:10: cf:0e:a7:66:4e:19:8e:6f:d1:ef:0a:27:52:20:33: e3:c4:8a:ec:a0:97:e5:dc:ae:c2:0b:b7:e2:bf:d5: ac:22:5a:cb:bf:af:d6:ab:b2:53:b3:cf:81:56:b9: 91:27:ff:57:05:28:a0:02:cf:b0:e8:a4:ce:67:a6: e3:3f:23:c1:a6:27:f0:45:d4:d4:f7:a2:fd:57:0e: a8:f7:66:06:76:1c:e2:28:07:27:52:17:15:18:cc: 0d:03:4a:a3:b2:d6:2e:55:df:22:28:06:04:0b:69: b7:ea:4c:90:f3:f5:ba:17:bb:1f:d0:1c:72:43:15: 6c:a1:fa:75:2c:2a:5b:71:1a:56:fb:a1:02:d4:02: bc:85:f4:5e:a1:8b:a2:58:a7:96:0f:f8:ac:7c:2d: f5:fc:73:f8:ce:39:69:ae:6a:4c:d0:70:3d:91:19: a5:29:c4:e8:cc:ce:fc:12:9d:12:06:2d:a2:92:b3: 2d:ec:08:42:fa:fd:21:9c:29:dc:83:16:14:47:00: 6a:a1:55:e2:86:b0:fd:71:2e:96:a5:26:1d:9a:e4: df:5d:1f:2a:1d:9c:77:ac:e3:3d:ad:81:13:2d:2c: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F8:F4:B2:D2:71:25:87:4B:5C:1C:D0:BB:0C:24:20:0B:85:F7:3E X509v3 Authority Key Identifier: keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:81:b7:8b:f0:70:f5:af:37:b0:f0:fd:9a:8d:ef:e5:da:b5: 45:c1:9a:6f:57:2a:64:17:00:fe:eb:d4:32:04:c6:a7:32:e0: b3:45:f2:d5:d0:ac:07:68:73:a8:d5:24:b4:f3:17:55:5b:d8: 62:1b:c8:16:76:80:49:f7:f1:6b:74:21:d0:e8:b2:b3:8c:2d: a9:86:f5:cc:5d:19:65:5b:a2:71:19:30:04:1d:36:8e:1c:79: 5f:b4:5c:79:4b:2e:59:05:f3:94:60:9d:8d:eb:36:68:2f:3d: c9:4e:9a:96:13:02:f0:d0:d7:d6:74:ed:27:9f:b0:af:40:51: 60:2b:70:a6:ad:91:60:ef:45:63:fb:96:49:4a:54:2c:b2:50: af:66:cc:79:be:30:25:eb:d7:26:7b:56:12:d4:08:71:19:e2: fc:0a:31:96:32:09:81:06:de:d6:4a:33:b7:82:47:7b:59:c5: f0:1f:ac:12:e8:11:7d:c8:2c:0b:65:fc:19:5e:1a:5b:e5:58: f9:fa:2a:8b:b8:35:8f:fc:48:a0:cd:2b:73:c0:98:f0:46:d2: 74:15:61:cc:c5:fc:64:27:2c:1f:98:83:5d:87:82:53:83:96: ce:cb:15:61:72:a1:ee:6f:d1:4a:ed:73:8f:ab:58:b4:9d:04: 60:fa:c1:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC RkVERTkxQjMwHhcNMjUwNzAzMDEzMzI3WhcNMjUwNzEwMDEzMzI3WjAYMRYwFAYD VQQDEw02ODY1ZGRlNy0zZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1izffM6cq8gxAnoZd2B9v5BecR7cyn2RWkx6hDPDqdmThmOb9HvCidSIDPj xIrsoJfl3K7CC7fiv9WsIlrLv6/Wq7JTs8+BVrmRJ/9XBSigAs+w6KTOZ6bjPyPB pifwRdTU96L9Vw6o92YGdhziKAcnUhcVGMwNA0qjstYuVd8iKAYEC2m36kyQ8/W6 F7sf0BxyQxVsofp1LCpbcRpW+6EC1AK8hfReoYuiWKeWD/isfC31/HP4zjlprmpM 0HA9kRmlKcTozM78Ep0SBi2ikrMt7AhC+v0hnCncgxYURwBqoVXihrD9cS6WpSYd muTfXR8qHZx3rOM9rYETLSzc+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb49LLS cSWHS1wc0LsMJCALhfc+MB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0 REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdgbeL8HD1rzew8P2aje/l2rVFwZpvVypkFwD+69QyBManMuCzRfLV 0KwHaHOo1SS08xdVW9hiG8gWdoBJ9/FrdCHQ6LKzjC2phvXMXRllW6JxGTAEHTaO HHlftFx5Sy5ZBfOUYJ2N6zZoLz3JTpqWEwLw0NfWdO0nn7CvQFFgK3CmrZFg70Vj +5ZJSlQsslCvZsx5vjAl69cme1YS1AhxGeL8CjGWMgmBBt7WSjO3gkd7WcXwH6wS 6BF9yCwLZfwZXhpb5Vj5+iqLuDWP/EigzStzwJjwRtJ0FWHMxfxkJywfmINdh4JT g5bOyxVhcqHub9FK7XOPq1i0nQRg+sGu -----END CERTIFICATE-----Generated at Fri Jul 4 07:45:19 2025 by rpki-client