$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json) Hash identifier: OZuWajFRg8b7zBnkhbPy0TQeFw9FBORpilbSiA+vszs= Subject key identifier: 55:61:7E:4C:1F:E8:0E:7D:A2:A2:22:26:03:59:4C:D1:57:C7:44:71 Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Certificate serial: 0333 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft Manifest number: 032D Signing time: Sat 09 Aug 2025 01:39:20 +0000 Manifest this update: Sat 09 Aug 2025 01:39:19 +0000 Manifest next update: Sat 16 Aug 2025 01:39:19 +0000 Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: wD1HSdhP4SjC3VbZHVjHBtbnkb2zWVMmN4KRnt+07IM=) 2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: gGb0/UgfSasORS6rGMdjPg33Z1o+REJnn5mJbTdXj5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 819 (0x333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Validity Not Before: Aug 9 01:39:19 2025 GMT Not After : Aug 16 01:39:19 2025 GMT Subject: CN=6896a6c7-cb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:c3:b2:2f:3f:6b:23:f8:99:aa:68:8e:2e:0d: dd:a1:e1:2f:26:f3:14:c5:4e:1f:e3:9a:42:d0:81: 66:80:81:ae:9a:68:c1:59:6f:d4:52:26:ad:2f:d4: 46:d8:d1:3d:63:48:c8:c2:73:eb:8d:88:a4:78:86: fc:f2:20:3a:71:d6:9c:8d:33:67:50:75:08:aa:84: 63:88:72:a6:94:4c:96:99:7c:ad:76:b4:7a:b7:ae: 13:75:a2:3f:5f:de:fd:29:fb:29:d8:32:4c:8a:a7: 8f:04:c1:de:f4:38:97:8b:23:70:49:1b:aa:a0:1f: 95:28:01:19:5d:82:38:f5:9e:bf:5b:db:bb:bf:be: 24:5c:86:02:25:89:27:9a:2d:84:1f:83:03:45:b6: 66:b9:2b:00:9d:f0:dd:b9:ff:6f:53:16:9a:98:15: 4f:21:b1:47:e1:dd:6f:06:57:92:bf:d3:63:d1:b0: 8f:ce:ca:71:5e:88:bd:d8:49:d2:13:11:c2:ac:5c: 3e:33:03:44:3e:65:1e:b5:c7:e6:2e:b5:7a:a4:65: 29:17:87:f0:25:ac:cb:0a:28:ad:58:fe:57:07:e2: f8:ee:c2:fd:d2:1b:bf:a4:75:b4:e9:d4:eb:6d:d2: 0b:c4:65:5c:29:5b:17:15:ac:6e:7d:0c:46:06:3b: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:61:7E:4C:1F:E8:0E:7D:A2:A2:22:26:03:59:4C:D1:57:C7:44:71 X509v3 Authority Key Identifier: keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:38:94:1e:69:0c:35:5e:9b:c6:59:ec:c5:ef:ec:9e:d5:29: 6e:47:0c:6c:71:16:90:20:93:43:7c:1c:d2:97:4d:fb:df:de: c7:01:ce:04:26:88:9c:6d:0d:09:55:81:7b:c5:14:56:3c:41: 5c:07:0a:bf:70:8d:48:b8:64:78:56:8d:2d:92:db:55:98:39: 45:ed:a1:51:75:76:72:9c:8a:fc:45:9c:9b:e1:14:62:32:06: 7b:5f:e0:e4:9f:f8:c2:e7:7a:b6:ac:bc:2b:2d:cd:eb:5d:0f: 1b:a8:0e:75:72:ee:f7:d9:6a:ce:fd:56:aa:52:62:55:5d:9c: d0:e0:ad:e9:3a:1d:94:90:bd:76:49:8b:71:6c:d4:92:68:d7: 4e:24:48:38:85:ee:30:35:60:24:02:55:6d:f7:33:9f:8c:5d: 38:d7:5c:9e:5d:1d:67:06:06:9b:28:52:3d:4d:28:ea:b1:5b: e5:ff:95:1c:e6:29:39:29:54:0c:b0:0b:b6:87:9e:95:ca:d8: 06:02:f1:c1:32:75:3b:b0:1a:ee:b2:23:b2:eb:33:ac:d2:30: a1:21:1f:1b:5d:6b:57:08:14:ee:3a:5d:8f:cd:8f:d5:34:d5: 3d:dc:54:b0:60:86:2a:a9:bf:11:74:7e:f2:69:e2:0f:72:71: 64:29:82:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC RkVERTkxQjMwHhcNMjUwODA5MDEzOTE5WhcNMjUwODE2MDEzOTE5WjAYMRYwFAYD VQQDEw02ODk2YTZjNy1jYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/sOyLz9rI/iZqmiOLg3doeEvJvMUxU4f45pC0IFmgIGummjBWW/UUiatL9RG 2NE9Y0jIwnPrjYikeIb88iA6cdacjTNnUHUIqoRjiHKmlEyWmXytdrR6t64TdaI/ X979Kfsp2DJMiqePBMHe9DiXiyNwSRuqoB+VKAEZXYI49Z6/W9u7v74kXIYCJYkn mi2EH4MDRbZmuSsAnfDduf9vUxaamBVPIbFH4d1vBleSv9Nj0bCPzspxXoi92EnS ExHCrFw+MwNEPmUetcfmLrV6pGUpF4fwJazLCiitWP5XB+L47sL90hu/pHW06dTr bdILxGVcKVsXFaxufQxGBjvpoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVhfkwf 6A59oqIiJgNZTNFXx0RxMB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0 REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALOJQeaQw1XpvGWezF7+ye1SluRwxscRaQIJNDfBzSl037397HAc4E JoicbQ0JVYF7xRRWPEFcBwq/cI1IuGR4Vo0tkttVmDlF7aFRdXZynIr8RZyb4RRi MgZ7X+Dkn/jC53q2rLwrLc3rXQ8bqA51cu732WrO/VaqUmJVXZzQ4K3pOh2UkL12 SYtxbNSSaNdOJEg4he4wNWAkAlVt9zOfjF0411yeXR1nBgabKFI9TSjqsVvl/5Uc 5ik5KVQMsAu2h56VytgGAvHBMnU7sBrusiOy6zOs0jChIR8bXWtXCBTuOl2PzY/V NNU93FSwYIYqqb8RdH7yaeIPcnFkKYJr -----END CERTIFICATE-----Generated at Sun Aug 10 04:50:01 2025 by rpki-client