$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft File: CDWHSXi6MJ7X2kZz53OdkyLyYps.mft (raw, json) Hash identifier: V1cTBLz6WkDyqMWMqe6qfQLvAucdYqKLKmB2q1wOcAM= Subject key identifier: 2F:BC:19:0A:D0:AD:8E:A1:75:FE:D2:85:E6:C5:E1:A9:0E:AB:2A:FF Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B Certificate issuer: /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft Manifest number: 71 Signing time: Fri 22 Aug 2025 23:27:26 +0000 Manifest this update: Fri 22 Aug 2025 23:27:25 +0000 Manifest next update: Fri 29 Aug 2025 23:27:25 +0000 Files and hashes: 1: CDWHSXi6MJ7X2kZz53OdkyLyYps.crl (hash: b6MEQJsxy1u8TdalPl1gDnDyKpwe1+YaAnI3xW5yIC8=) 2: 2DA549EAE23E11EFB267422EC4F9AE02.roa (hash: IwOryXN0CLNaxtv7IBy7ZDsktAOlHn3+ya1AEPZi2Ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Validity Not Before: Aug 22 23:27:25 2025 GMT Not After : Aug 29 23:27:25 2025 GMT Subject: CN=68a8fcdd-8726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6c:91:7f:29:e3:88:c0:72:ab:d2:98:8a:fd: 85:5a:23:3a:bb:c2:81:08:09:fb:fc:76:46:b5:18: b4:f8:a1:a8:3f:67:43:83:e5:b5:e3:36:aa:26:c9: 27:83:7b:cf:cb:f9:81:00:5f:8e:df:d9:f9:04:10: 25:a4:64:99:08:c1:ed:5f:b8:82:f7:9a:4c:01:a6: e9:7b:2c:39:9d:6f:81:03:6c:07:04:0c:e7:e7:6a: 3f:c2:04:ed:b2:25:7b:aa:12:17:18:b5:15:d1:db: c8:58:bf:ff:16:7f:d2:13:b1:e6:ee:29:54:10:fd: 42:ac:66:9d:d8:d5:3a:39:1d:2a:40:c1:13:4b:c5: be:af:aa:47:fd:df:65:49:4f:06:34:d5:8e:16:54: b0:6e:a1:66:b7:ed:eb:66:fa:d7:21:9c:e1:e4:16: 40:a1:8c:4e:4b:38:83:76:95:93:ac:a9:d6:4c:a9: cc:99:3d:7d:97:c3:08:1d:24:95:4e:8e:20:e0:b8: 89:83:99:25:f2:93:6d:bd:f9:06:74:d3:83:64:31: c3:ba:a8:48:47:e9:7f:9d:08:bc:8b:d1:5c:d4:9d: 3b:6d:c3:01:1a:9e:e3:32:73:ee:bb:85:09:38:bb: 73:14:c8:18:6d:f4:1b:6f:70:73:9e:ef:47:9e:8d: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BC:19:0A:D0:AD:8E:A1:75:FE:D2:85:E6:C5:E1:A9:0E:AB:2A:FF X509v3 Authority Key Identifier: keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:70:4a:cb:b3:27:df:7b:52:32:9d:86:6b:77:2c:d2:8c:52: c2:f3:6e:8a:f5:40:2f:ea:07:60:31:69:8a:1c:d7:62:a0:13: 26:ba:22:a1:40:fe:d2:91:ea:ea:4b:d7:65:bc:df:32:f4:15: d6:08:9b:83:47:fe:18:85:36:8f:f3:f2:a3:37:07:1b:67:6c: 32:9a:61:5e:d8:f9:fa:4d:7c:21:29:37:d1:af:17:73:b0:00: 9f:3f:38:c2:e5:d2:f4:fe:91:11:76:f5:7d:c5:34:3f:67:e5: 30:39:1b:a1:69:b1:e3:91:19:e2:87:d1:5e:be:9b:f4:4f:1c: 3d:47:96:32:a6:7a:b8:cc:56:68:9b:05:1a:ad:39:03:43:18: 9f:45:3f:a2:50:2e:e7:ea:7c:db:b4:29:43:68:92:78:8b:fd: b3:5d:7e:db:c5:0f:59:15:b7:47:dc:3f:09:69:dc:3e:41:25: ec:60:95:9d:eb:e0:f1:92:ae:60:78:7c:34:7a:03:d1:cc:f7: 5e:0b:5f:e2:df:0a:e5:05:d3:06:4f:c7:dd:1f:e5:6d:5a:98: 69:8d:38:b4:6a:e0:ef:3a:bd:cc:d9:85:c8:fb:9f:76:19:2a: 06:3c:37:cc:aa:2f:46:9f:26:7f:2a:0b:dd:54:06:09:b7:a5: 92:16:10:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTAwRjExMC8GA1UEBRMoMDgzNTg3NDk3OEJBMzA5RUQ3REE0NjczRTc3MzlEOTMy MkYyNjI5QjAeFw0yNTA4MjIyMzI3MjVaFw0yNTA4MjkyMzI3MjVaMBgxFjAUBgNV BAMTDTY4YThmY2RkLTg3MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYbJF/KeOIwHKr0piK/YVaIzq7woEICfv8dka1GLT4oag/Z0OD5bXjNqomySeD e8/L+YEAX47f2fkEECWkZJkIwe1fuIL3mkwBpul7LDmdb4EDbAcEDOfnaj/CBO2y JXuqEhcYtRXR28hYv/8Wf9ITsebuKVQQ/UKsZp3Y1To5HSpAwRNLxb6vqkf932VJ TwY01Y4WVLBuoWa37etm+tchnOHkFkChjE5LOIN2lZOsqdZMqcyZPX2XwwgdJJVO jiDguImDmSXyk229+QZ004NkMcO6qEhH6X+dCLyL0VzUnTttwwEanuMyc+67hQk4 u3MUyBht9BtvcHOe70eejZm5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL7wZCtCt jqF1/tKF5sXhqQ6rKv8wHwYDVR0jBBgwFoAUCDWHSXi6MJ7X2kZz53OdkyLyYpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMDBGLzdEMkIxREYwRDdE MDExRUY5RUZDOTEwREM0RjlBRTAyL0NEV0hTWGk2TUo3WDJrWno1M09ka3lMeVlw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0RXSFNYaTZNSjdYMmtaejUzT2RreUx5WXBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MDBGLzdEMkIxREYwRDdEMDExRUY5RUZDOTEwREM0RjlBRTAyL0NEV0hTWGk2TUo3 WDJrWno1M09ka3lMeVlwcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIBwSsuzJ997UjKdhmt3LNKMUsLzbor1QC/qB2AxaYoc12KgEya6IqFA /tKR6upL12W83zL0FdYIm4NH/hiFNo/z8qM3BxtnbDKaYV7Y+fpNfCEpN9GvF3Ow AJ8/OMLl0vT+kRF29X3FND9n5TA5G6FpseORGeKH0V6+m/RPHD1HljKmerjMVmib BRqtOQNDGJ9FP6JQLufqfNu0KUNokniL/bNdftvFD1kVt0fcPwlp3D5BJexglZ3r 4PGSrmB4fDR6A9HM914LX+LfCuUF0wZPx90f5W1amGmNOLRq4O86vczZhcj7n3YZ KgY8N8yqL0afJn8qC91UBgm3pZIWEOs= -----END CERTIFICATE-----Generated at Sat Aug 23 14:29:35 2025 by rpki-client