$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft File: CDWHSXi6MJ7X2kZz53OdkyLyYps.mft (raw, json) Hash identifier: +LB/QPC8Vi1Q0ftPxWqMNZPPtcH0LPMMe+MaMzDZKz4= Subject key identifier: 2B:68:2C:24:FD:0B:92:9B:D1:25:E8:2E:21:10:04:BB:87:C5:CA:0D Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B Certificate issuer: /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft Manifest number: 3C Signing time: Mon 12 May 2025 23:13:00 +0000 Manifest this update: Mon 12 May 2025 23:13:00 +0000 Manifest next update: Mon 19 May 2025 23:13:00 +0000 Files and hashes: 1: CDWHSXi6MJ7X2kZz53OdkyLyYps.crl (hash: tIDQQ99FCaRyonHBj5QPmlNICsdipWi6M40Zv8pfSE8=) 2: 2DA549EAE23E11EFB267422EC4F9AE02.roa (hash: MAjR+6vV6kQAbBvReYR67qji2ZeC3+thGK+jJVjSbNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Validity Not Before: May 12 23:13:00 2025 GMT Not After : May 19 23:13:00 2025 GMT Subject: CN=6822807c-51e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:1f:d8:21:94:5e:a2:9b:d0:ea:43:f4:c5: 6f:f8:a6:e2:b0:fd:22:a8:20:5b:f7:05:a2:e6:e2: 5b:7b:f2:b2:33:d2:ec:8a:f9:05:52:3a:8d:ee:6c: 9a:8e:cf:a0:0a:b0:9d:5f:14:5d:60:ec:be:dc:b6: 48:85:a2:53:4c:b6:aa:7e:61:03:1f:32:8a:fd:42: 64:cf:1e:68:9a:49:32:2c:f0:5e:f0:e1:2b:45:8f: fe:53:7e:8c:5f:73:d9:bc:67:37:e8:f0:aa:62:7f: 62:0d:b9:80:c6:2b:bc:bf:6e:54:22:2f:f9:a4:25: ca:9d:7e:9a:ec:77:cd:bf:9e:0f:87:68:49:4a:2e: 59:ec:b4:bb:32:eb:de:58:19:4b:bb:57:bd:94:e1: 7b:37:47:ff:d1:0b:ec:c1:5e:75:ce:1b:35:c1:a9: 9b:28:7c:50:8d:a5:39:62:a2:83:94:4d:4f:a3:22: 2d:ff:5b:c1:d4:95:dd:6b:71:db:72:65:d3:cb:55: a7:28:01:5f:ee:7a:d1:a3:c3:27:fd:24:29:f2:ac: fe:d9:98:22:5d:74:25:b2:f1:79:65:d2:cd:50:51: e4:41:d4:fc:5c:77:df:89:85:a8:69:91:54:70:6d: 40:36:6b:50:bb:74:a5:c9:4e:20:fc:a7:97:82:e4: 42:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:68:2C:24:FD:0B:92:9B:D1:25:E8:2E:21:10:04:BB:87:C5:CA:0D X509v3 Authority Key Identifier: keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:29:bc:61:8b:85:2e:fa:ae:77:c0:32:01:c1:a1:a3:63:ba: 66:8a:60:e0:5f:98:49:16:12:03:ca:83:cd:dd:a5:14:e1:56: 09:af:06:73:56:ba:e6:94:d4:26:e5:01:f0:fd:b3:c3:73:c8: c8:25:cd:a0:06:ba:02:82:fb:01:c5:1a:32:e7:5c:31:88:18: 8d:50:1b:ce:a7:aa:cd:af:99:d1:04:04:69:a9:20:a3:af:12: 86:26:54:73:68:71:c4:71:8d:ca:09:82:5d:0b:d5:34:99:e3: b1:af:8b:17:33:b4:c5:e4:ff:96:a4:7c:eb:b8:cc:9f:00:84: 5d:99:9c:f4:66:6c:91:b3:f1:b2:21:ad:4b:b1:bd:52:79:19: 81:8f:a3:9e:95:65:97:c5:e6:a1:dd:c5:3f:c9:59:9f:a8:e5: 60:41:35:d6:99:ac:cc:78:00:00:a7:4a:39:ea:70:0a:f6:9d: d1:38:58:b0:8b:41:1d:92:23:45:b5:e6:8d:91:67:5b:15:d5: 3d:99:b5:88:9e:51:bb:da:42:34:a8:62:96:9f:fb:b7:fd:3a: bb:d7:fd:1b:67:f1:d1:80:14:69:2b:9a:ae:89:14:67:ae:60: 7d:56:68:7b:d1:32:9b:96:17:10:67:cf:4e:86:d4:bc:51:f7: fe:b4:96:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTAwRjExMC8GA1UEBRMoMDgzNTg3NDk3OEJBMzA5RUQ3REE0NjczRTc3MzlEOTMy MkYyNjI5QjAeFw0yNTA1MTIyMzEzMDBaFw0yNTA1MTkyMzEzMDBaMBgxFjAUBgNV BAMTDTY4MjI4MDdjLTUxZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXlR/YIZReopvQ6kP0xW/4puKw/SKoIFv3BaLm4lt78rIz0uyK+QVSOo3ubJqO z6AKsJ1fFF1g7L7ctkiFolNMtqp+YQMfMor9QmTPHmiaSTIs8F7w4StFj/5Tfoxf c9m8Zzfo8Kpif2INuYDGK7y/blQiL/mkJcqdfprsd82/ng+HaElKLlnstLsy695Y GUu7V72U4Xs3R//RC+zBXnXOGzXBqZsofFCNpTliooOUTU+jIi3/W8HUld1rcdty ZdPLVacoAV/uetGjwyf9JCnyrP7ZmCJddCWy8Xll0s1QUeRB1Pxcd9+JhahpkVRw bUA2a1C7dKXJTiD8p5eC5EIHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK2gsJP0L kpvRJeguIRAEu4fFyg0wHwYDVR0jBBgwFoAUCDWHSXi6MJ7X2kZz53OdkyLyYpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMDBGLzdEMkIxREYwRDdE MDExRUY5RUZDOTEwREM0RjlBRTAyL0NEV0hTWGk2TUo3WDJrWno1M09ka3lMeVlw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0RXSFNYaTZNSjdYMmtaejUzT2RreUx5WXBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MDBGLzdEMkIxREYwRDdEMDExRUY5RUZDOTEwREM0RjlBRTAyL0NEV0hTWGk2TUo3 WDJrWno1M09ka3lMeVlwcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHkpvGGLhS76rnfAMgHBoaNjumaKYOBfmEkWEgPKg83dpRThVgmvBnNW uuaU1CblAfD9s8NzyMglzaAGugKC+wHFGjLnXDGIGI1QG86nqs2vmdEEBGmpIKOv EoYmVHNoccRxjcoJgl0L1TSZ47GvixcztMXk/5akfOu4zJ8AhF2ZnPRmbJGz8bIh rUuxvVJ5GYGPo56VZZfF5qHdxT/JWZ+o5WBBNdaZrMx4AACnSjnqcAr2ndE4WLCL QR2SI0W15o2RZ1sV1T2ZtYieUbvaQjSoYpaf+7f9OrvX/Rtn8dGAFGkrmq6JFGeu YH1WaHvRMpuWFxBnz06G1LxR9/60lsg= -----END CERTIFICATE-----Generated at Wed May 14 06:06:45 2025 by rpki-client