$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft File: CDWHSXi6MJ7X2kZz53OdkyLyYps.mft (raw, json) Hash identifier: TF9RSqKdbf4MigmEXz72TLeS5Ez0QEcWuFoLU26py4Y= Subject key identifier: 93:17:14:6D:93:98:29:82:AC:CB:ED:BE:FB:82:BB:6E:30:BF:54:24 Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B Certificate issuer: /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft Manifest number: 55 Signing time: Wed 02 Jul 2025 23:39:59 +0000 Manifest this update: Wed 02 Jul 2025 23:39:59 +0000 Manifest next update: Wed 09 Jul 2025 23:39:59 +0000 Files and hashes: 1: CDWHSXi6MJ7X2kZz53OdkyLyYps.crl (hash: M/JVc3YYk2yBEBa5TnAvN0qvZyR96f+HOOowfnZHJYo=) 2: 2DA549EAE23E11EFB267422EC4F9AE02.roa (hash: MAjR+6vV6kQAbBvReYR67qji2ZeC3+thGK+jJVjSbNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Validity Not Before: Jul 2 23:39:59 2025 GMT Not After : Jul 9 23:39:59 2025 GMT Subject: CN=6865c34f-06e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:87:17:f5:48:b3:e6:cc:68:80:39:d3:25: 9d:73:51:16:8c:97:cf:0b:35:08:d6:82:5b:a9:e2: 60:a7:cb:92:73:4a:b9:0c:3e:61:10:ba:2e:4b:d6: 75:31:84:15:c9:2c:96:95:f8:4e:67:68:dc:01:b7: 36:06:57:02:af:c0:5a:2a:7b:a1:a8:76:a5:6c:6c: 0f:d4:d9:ed:36:91:ed:1e:35:bb:92:3e:59:80:cd: ec:8d:de:2e:a7:22:07:b1:26:ac:16:0e:3d:52:e8: 49:d0:04:09:82:30:9b:1b:bb:50:66:84:9e:f4:67: 22:07:29:8c:2d:a5:ab:e7:51:90:e4:d4:07:dd:68: c2:51:0a:30:b6:1f:31:e0:9f:04:56:60:eb:a5:0b: 9f:c1:7d:6e:df:43:e0:7f:03:ae:7e:fd:3b:a1:10: 75:d8:9c:7d:72:6c:37:52:77:4f:dd:5d:97:00:c0: 38:f4:52:5e:c7:d6:67:b0:2c:3c:71:e0:af:b1:50: dd:de:86:c2:2e:05:57:06:34:56:69:0e:3f:50:ba: 7c:09:21:68:63:a7:b5:4f:8a:64:65:36:12:c2:37: a8:ad:fc:6b:55:89:8b:88:87:d3:c6:a7:a1:7f:db: a5:b7:c8:7d:51:5b:b6:86:ea:b7:68:70:e0:a7:7d: 69:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:17:14:6D:93:98:29:82:AC:CB:ED:BE:FB:82:BB:6E:30:BF:54:24 X509v3 Authority Key Identifier: keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:4e:de:0e:3f:9a:6d:75:ec:42:81:5b:d7:fc:c7:3c:30:3c: d1:42:b3:9c:52:c7:94:64:98:20:bc:98:6e:fe:40:89:52:e3: 98:71:2c:9b:79:55:44:0b:70:f0:9e:6c:cb:12:66:dc:47:20: 1a:8b:57:75:9c:b5:45:e7:2f:ce:06:b7:e7:dc:6d:80:6b:13: 57:f9:63:21:f7:42:64:68:7e:2c:eb:6e:a6:41:ea:72:44:01: 9e:b8:2f:b8:e1:3b:70:73:af:7e:a0:f3:d6:77:a7:0d:78:3f: ca:11:48:12:78:f1:dc:10:5b:36:01:27:56:e2:68:c9:3e:69: 8e:67:10:39:63:a6:f6:83:98:b6:68:f3:55:6f:a1:7f:7c:c1: ca:18:e9:ac:a3:9d:30:c9:2f:c8:a7:1d:f4:0a:d4:82:9f:89: 55:ca:ca:d3:7b:09:2f:94:4c:bc:c6:19:8d:6d:fc:c3:86:ee: 13:b9:4f:e3:07:42:c9:ad:43:c0:e0:2a:25:2e:84:42:86:9f: dd:d0:36:7d:c4:b5:3c:11:33:11:de:57:5f:fa:1f:4c:b5:70: b8:5a:4c:d0:34:a2:25:b4:0e:ff:4a:a4:fd:94:10:49:5a:8d: e2:7b:86:de:a8:2a:4b:20:a4:0d:03:38:e9:1c:d5:64:37:9f: d5:86:ec:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTAwRjExMC8GA1UEBRMoMDgzNTg3NDk3OEJBMzA5RUQ3REE0NjczRTc3MzlEOTMy MkYyNjI5QjAeFw0yNTA3MDIyMzM5NTlaFw0yNTA3MDkyMzM5NTlaMBgxFjAUBgNV BAMTDTY4NjVjMzRmLTA2ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA1ocX9Uiz5sxogDnTJZ1zURaMl88LNQjWglup4mCny5JzSrkMPmEQui5L1nUx hBXJLJaV+E5naNwBtzYGVwKvwFoqe6GodqVsbA/U2e02ke0eNbuSPlmAzeyN3i6n IgexJqwWDj1S6EnQBAmCMJsbu1BmhJ70ZyIHKYwtpavnUZDk1AfdaMJRCjC2HzHg nwRWYOulC5/BfW7fQ+B/A65+/TuhEHXYnH1ybDdSd0/dXZcAwDj0Ul7H1mewLDxx 4K+xUN3ehsIuBVcGNFZpDj9QunwJIWhjp7VPimRlNhLCN6it/GtViYuIh9PGp6F/ 26W3yH1RW7aG6rdocOCnfWntAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkxcUbZOY KYKsy+2++4K7bjC/VCQwHwYDVR0jBBgwFoAUCDWHSXi6MJ7X2kZz53OdkyLyYpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMDBGLzdEMkIxREYwRDdE MDExRUY5RUZDOTEwREM0RjlBRTAyL0NEV0hTWGk2TUo3WDJrWno1M09ka3lMeVlw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0RXSFNYaTZNSjdYMmtaejUzT2RreUx5WXBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MDBGLzdEMkIxREYwRDdEMDExRUY5RUZDOTEwREM0RjlBRTAyL0NEV0hTWGk2TUo3 WDJrWno1M09ka3lMeVlwcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFNO3g4/mm117EKBW9f8xzwwPNFCs5xSx5RkmCC8mG7+QIlS45hxLJt5 VUQLcPCebMsSZtxHIBqLV3WctUXnL84Gt+fcbYBrE1f5YyH3QmRofizrbqZB6nJE AZ64L7jhO3Bzr36g89Z3pw14P8oRSBJ48dwQWzYBJ1biaMk+aY5nEDljpvaDmLZo 81VvoX98wcoY6ayjnTDJL8inHfQK1IKfiVXKytN7CS+UTLzGGY1t/MOG7hO5T+MH QsmtQ8DgKiUuhEKGn93QNn3EtTwRMxHeV1/6H0y1cLhaTNA0oiW0Dv9KpP2UEEla jeJ7ht6oKksgpA0DOOkc1WQ3n9WG7Ak= -----END CERTIFICATE-----Generated at Fri Jul 4 17:37:55 2025 by rpki-client