$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json) Hash identifier: 2nv5DilgKnLfR9shdYXmdHE5aCcxnxu0LJUs2udUqXg= Subject key identifier: 5D:D7:98:10:AC:6C:97:71:96:50:2B:AF:D7:AF:EF:25:BD:49:A4:8D Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Certificate serial: 035E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft Manifest number: 0358 Signing time: Mon 03 Nov 2025 00:55:11 +0000 Manifest this update: Mon 03 Nov 2025 00:55:11 +0000 Manifest next update: Mon 10 Nov 2025 00:55:11 +0000 Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: vvPgyDcsa08szshLXEwCnNVk+Ko2VKMyUmtbvojnxds=) 2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: gGb0/UgfSasORS6rGMdjPg33Z1o+REJnn5mJbTdXj5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 862 (0x35e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Validity Not Before: Nov 3 00:55:11 2025 GMT Not After : Nov 10 00:55:11 2025 GMT Subject: CN=6907fd6f-2c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:64:cf:2c:59:fc:e2:a6:a7:dc:d3:ee:1e: c4:1e:65:73:e6:f6:14:b2:62:9f:e4:dc:f6:94:4a: 24:ea:b3:69:6d:5f:86:0b:f0:f5:81:b9:5c:a9:74: ab:24:5c:35:cc:52:bd:49:5d:65:ac:f1:ab:f3:43: 2e:38:7c:ab:9e:ff:f3:89:a1:48:03:36:43:0c:a6: 42:86:5c:2a:31:18:f3:7f:dc:90:a3:61:ec:96:a3: e2:e1:c3:4b:b9:81:1f:ab:a8:86:e7:2a:f9:8f:d5: 57:21:e6:a2:c2:80:d8:d0:70:24:d9:fa:08:c4:a8: 5f:5b:24:c8:8f:bb:78:21:0d:09:10:11:82:06:1d: c1:29:35:8b:1a:85:be:12:68:24:78:a6:ee:5c:9e: 74:82:50:a2:3b:4b:81:5c:2f:88:ba:1e:33:b5:19: eb:5c:4d:20:4c:d7:5c:b2:37:66:bd:61:f5:8f:48: 48:cd:9e:b1:9d:c7:2c:14:33:10:ab:77:32:80:e8: 0c:fb:d2:b6:48:96:6f:0f:cb:3a:a2:d9:13:55:b1: 4c:40:27:6b:fe:70:61:72:2c:65:03:58:2d:ff:d1: 99:4f:9c:d1:a3:72:35:42:fc:dc:87:48:f5:ce:8d: 8b:61:04:cb:38:44:98:c9:81:42:6c:28:e4:74:82: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:98:10:AC:6C:97:71:96:50:2B:AF:D7:AF:EF:25:BD:49:A4:8D X509v3 Authority Key Identifier: keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:2f:62:68:ee:6d:4b:2c:7a:d7:ce:47:63:a8:81:2f:5f:57: f6:bc:3b:0c:6a:b6:9a:5f:71:65:b3:63:8b:7e:bc:45:5c:91: 09:90:da:f5:04:0c:a8:6a:24:4f:08:66:56:a3:c6:f8:2e:3c: 23:be:99:d7:ff:79:f5:03:62:3a:2f:18:94:15:37:65:cf:0f: cd:af:8e:67:63:3f:a7:6f:0e:04:c8:2a:04:e4:ba:38:af:c7: 80:83:d6:c4:f1:3c:22:8b:52:e2:61:4d:73:11:4c:2e:88:33: 34:e9:80:1d:9a:9a:e7:d2:25:51:9c:53:3e:b2:bb:8c:73:ec: 65:4b:08:74:ab:15:8e:a3:d0:4d:ee:22:e0:58:09:9b:05:ae: 9a:1c:ef:b5:61:cf:e1:01:a1:3e:24:87:8a:d4:1c:dd:62:f3: 3b:1b:b0:c9:39:1b:51:81:ab:d1:3c:04:47:2c:b3:74:d5:04: cf:4f:99:02:fa:ac:3b:3a:30:55:1f:5e:a8:32:f8:33:fb:fe: a2:43:86:0d:32:4a:74:9f:18:79:36:2d:b5:9d:84:23:8a:e6: 45:14:59:9b:70:2c:08:b0:49:49:af:51:ec:56:aa:bb:f9:47: 0a:32:38:bc:27:fa:65:2e:ff:1f:4f:1e:6c:70:72:d8:e2:c9: 12:88:d5:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC RkVERTkxQjMwHhcNMjUxMTAzMDA1NTExWhcNMjUxMTEwMDA1NTExWjAYMRYwFAYD VQQDEw02OTA3ZmQ2Zi0yYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzxkzyxZ/OKmp9zT7h7EHmVz5vYUsmKf5Nz2lEok6rNpbV+GC/D1gblcqXSr JFw1zFK9SV1lrPGr80MuOHyrnv/ziaFIAzZDDKZChlwqMRjzf9yQo2HslqPi4cNL uYEfq6iG5yr5j9VXIeaiwoDY0HAk2foIxKhfWyTIj7t4IQ0JEBGCBh3BKTWLGoW+ EmgkeKbuXJ50glCiO0uBXC+Iuh4ztRnrXE0gTNdcsjdmvWH1j0hIzZ6xnccsFDMQ q3cygOgM+9K2SJZvD8s6otkTVbFMQCdr/nBhcixlA1gt/9GZT5zRo3I1Qvzch0j1 zo2LYQTLOESYyYFCbCjkdIKPOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3XmBCs bJdxllArr9ev7yW9SaSNMB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0 REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKL2Jo7m1LLHrXzkdjqIEvX1f2vDsMaraaX3Fls2OLfrxFXJEJkNr1 BAyoaiRPCGZWo8b4LjwjvpnX/3n1A2I6LxiUFTdlzw/Nr45nYz+nbw4EyCoE5Lo4 r8eAg9bE8Twii1LiYU1zEUwuiDM06YAdmprn0iVRnFM+sruMc+xlSwh0qxWOo9BN 7iLgWAmbBa6aHO+1Yc/hAaE+JIeK1BzdYvM7G7DJORtRgavRPARHLLN01QTPT5kC +qw7OjBVH16oMvgz+/6iQ4YNMkp0nxh5Ni21nYQjiuZFFFmbcCwIsElJr1HsVqq7 +UcKMji8J/plLv8fTx5scHLY4skSiNUx -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:45 2025 by rpki-client