$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json) Hash identifier: BRxIqmvORiK81OewsVx83kfBi4ckaaNjNwS/BRKpiEI= Subject key identifier: 94:1F:A3:8A:51:91:15:9F:90:08:18:6A:59:03:3E:BC:71:E0:8F:8B Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft Manifest number: 0311 Signing time: Sun 15 Jun 2025 00:54:40 +0000 Manifest this update: Sun 15 Jun 2025 00:54:40 +0000 Manifest next update: Sun 22 Jun 2025 00:54:40 +0000 Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: fubAWRMb0Nth318sSZ+e7bV5IajxxEmhvVt4yFul+00=) 2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: gGb0/UgfSasORS6rGMdjPg33Z1o+REJnn5mJbTdXj5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Validity Not Before: Jun 15 00:54:40 2025 GMT Not After : Jun 22 00:54:40 2025 GMT Subject: CN=684e19d0-ab35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:76:d1:89:90:9e:98:e8:68:4b:3c:79:42: 99:02:be:a2:b1:87:eb:6b:0f:68:1d:a3:e2:59:d9: 65:25:0a:2d:3c:a3:57:93:73:b6:1e:db:90:65:f4: 3e:b5:99:16:64:a1:c3:05:f0:ba:84:51:ad:91:b1: c4:a2:0b:26:a8:b1:fc:9f:a6:b4:ba:5a:57:cf:2d: e1:2b:26:3d:4c:36:25:22:3b:72:ef:40:94:22:0a: 6b:ea:d4:59:16:b7:9d:78:4c:d5:a4:6b:56:a8:ab: 8b:88:73:16:64:b1:b4:3e:ba:3b:61:d2:fe:6c:fd: 3a:81:06:46:08:f1:05:5e:81:d8:32:96:74:92:f4: e1:6b:11:32:aa:13:64:51:85:bd:75:4d:9b:b2:e1: 30:b5:30:2d:ef:06:f2:43:ef:05:5e:40:8a:05:b4: fd:d4:2d:0b:41:1e:8e:b2:7a:5a:3a:34:2d:da:9e: f6:84:03:83:85:6d:96:c0:2f:4f:c4:40:15:d0:e7: ae:45:92:8b:bc:30:5f:38:7e:70:a9:65:8e:9d:bb: f2:dd:dc:05:6f:23:b5:22:f4:88:de:63:84:5d:a1: 2c:0a:80:09:ad:bf:10:2e:9c:40:c5:71:43:2b:9d: 59:d0:87:42:4b:88:f6:41:f1:eb:1b:7b:24:b7:e2: 7a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1F:A3:8A:51:91:15:9F:90:08:18:6A:59:03:3E:BC:71:E0:8F:8B X509v3 Authority Key Identifier: keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ec:87:d9:c6:1e:8b:f5:9b:52:43:7c:4d:0a:dc:59:d6:f8: 4e:e3:60:dd:d4:c9:ca:8a:7c:76:60:69:42:25:4b:27:80:5f: 80:db:56:f2:04:64:1f:d3:f0:6c:33:04:c7:6a:6c:83:84:30: 44:55:2a:a4:2c:fc:53:45:d1:eb:80:1b:84:21:71:37:be:3c: 93:9e:e1:51:48:ef:bb:de:53:1c:4d:95:92:b7:3b:a2:c4:aa: 01:b8:54:93:e4:af:6e:67:55:23:48:51:ef:3d:7b:b0:3a:3a: 52:c8:a5:3c:f5:1e:96:c4:c5:1d:fa:1e:23:1a:04:eb:ec:4c: 79:a1:0a:8e:b2:30:81:03:9f:f4:1c:4f:dd:50:f8:37:f5:51: 8f:e9:83:69:b1:ca:c6:65:ca:8d:7b:e6:2e:06:a1:de:3f:a1: 77:45:6c:b3:de:9e:38:16:a6:a4:b0:f4:55:3f:32:23:34:5f: b8:1c:c0:21:9a:b8:4f:08:0f:8b:17:9c:f2:3a:3f:70:c7:29: 6c:3b:0b:e8:13:cf:43:2e:64:87:5a:86:19:1f:7e:22:cd:91: f4:92:73:c0:ff:96:92:e8:f4:97:4d:cd:06:14:92:de:05:bd: 18:95:83:e2:b2:3d:4e:df:26:79:82:a4:83:dd:5e:a0:3f:fc: 5f:6f:b1:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC RkVERTkxQjMwHhcNMjUwNjE1MDA1NDQwWhcNMjUwNjIyMDA1NDQwWjAYMRYwFAYD VQQDEw02ODRlMTlkMC1hYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSh20YmQnpjoaEs8eUKZAr6isYfraw9oHaPiWdllJQotPKNXk3O2HtuQZfQ+ tZkWZKHDBfC6hFGtkbHEogsmqLH8n6a0ulpXzy3hKyY9TDYlIjty70CUIgpr6tRZ FredeEzVpGtWqKuLiHMWZLG0Pro7YdL+bP06gQZGCPEFXoHYMpZ0kvThaxEyqhNk UYW9dU2bsuEwtTAt7wbyQ+8FXkCKBbT91C0LQR6OsnpaOjQt2p72hAODhW2WwC9P xEAV0OeuRZKLvDBfOH5wqWWOnbvy3dwFbyO1IvSI3mOEXaEsCoAJrb8QLpxAxXFD K51Z0IdCS4j2QfHrG3skt+J6rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQfo4pR kRWfkAgYalkDPrxx4I+LMB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0 REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj7IfZxh6L9ZtSQ3xNCtxZ1vhO42Dd1MnKinx2YGlCJUsngF+A21by BGQf0/BsMwTHamyDhDBEVSqkLPxTRdHrgBuEIXE3vjyTnuFRSO+73lMcTZWStzui xKoBuFST5K9uZ1UjSFHvPXuwOjpSyKU89R6WxMUd+h4jGgTr7Ex5oQqOsjCBA5/0 HE/dUPg39VGP6YNpscrGZcqNe+YuBqHeP6F3RWyz3p44FqaksPRVPzIjNF+4HMAh mrhPCA+LF5zyOj9wxylsOwvoE89DLmSHWoYZH34izZH0knPA/5aS6PSXTc0GFJLe Bb0YlYPisj1O3yZ5gqSD3V6gP/xfb7FS -----END CERTIFICATE-----Generated at Sun Jun 15 10:01:58 2025 by rpki-client