$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json) Hash identifier: Tt7oj/UFd2J0ukde0bCXut2fwR9nA7QH4Sqs4ZhHZNU= Subject key identifier: 04:9E:F7:88:2B:5A:62:85:F1:88:46:7A:53:EF:53:8A:DA:F7:66:32 Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Certificate serial: 0359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft Manifest number: 0353 Signing time: Sat 25 Oct 2025 04:05:55 +0000 Manifest this update: Sat 25 Oct 2025 04:05:55 +0000 Manifest next update: Sat 01 Nov 2025 04:05:55 +0000 Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: Zy2IQu67j5W+QX5eVExObuV8VaQU/ZzSEpFoi5sYFYY=) 2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: gGb0/UgfSasORS6rGMdjPg33Z1o+REJnn5mJbTdXj5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 04:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Validity Not Before: Oct 25 04:05:55 2025 GMT Not After : Nov 1 04:05:55 2025 GMT Subject: CN=68fc4ca3-2d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b9:b2:53:94:c2:76:d4:13:79:3e:7e:23:b9: 63:9a:e7:6f:16:f7:99:52:09:f1:45:71:fd:d9:65: 7b:a2:43:07:0c:5a:4d:8b:55:5e:cc:b9:d5:57:44: b6:6a:d5:c5:14:be:c0:89:4e:15:fd:5e:66:18:34: cb:27:90:3c:12:58:56:95:ca:83:09:e2:68:7a:7a: 68:74:84:5a:84:53:f2:02:9f:3e:fb:19:0e:c7:c6: 69:ab:bf:00:28:92:a7:78:07:9c:ed:2f:95:43:e0: b6:26:3f:b8:1b:d9:69:39:3c:1d:a1:14:dd:c9:16: 0d:ce:9a:c0:a9:74:44:c6:53:62:ed:c8:11:7c:d3: 30:20:59:00:a5:ee:00:68:d1:64:e9:6f:ab:45:92: 0d:5c:b9:bf:08:f8:f7:27:e3:db:67:f1:c0:86:ac: 74:e5:fe:4e:93:14:44:55:4e:79:6f:96:85:8d:ac: dd:74:13:29:43:86:1a:e6:b4:ac:a8:1f:b9:99:67: 70:65:0d:4f:1d:1b:d5:17:21:72:4a:16:ed:ed:c9: 08:26:17:22:3c:d0:94:bb:0d:26:b7:4e:9b:c1:26: 48:93:97:d4:9f:50:a0:69:85:98:db:c7:89:98:75: 26:8b:e3:bc:9d:32:0c:c9:15:b7:00:b7:b4:ac:07: 1d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9E:F7:88:2B:5A:62:85:F1:88:46:7A:53:EF:53:8A:DA:F7:66:32 X509v3 Authority Key Identifier: keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:0b:ae:c0:a0:f1:35:7c:0b:ad:92:fa:f5:b8:b0:a3:64:b2: 10:05:bf:65:a4:f3:9d:7b:f5:b9:5a:08:46:c2:2a:33:7b:96: af:32:8b:77:49:b3:97:5f:2e:54:c3:4e:ae:be:d3:9d:39:3b: 7d:ea:26:7e:e1:67:16:7b:fd:ab:e1:05:29:19:e4:6d:84:8b: e3:31:66:fd:28:b8:7e:21:60:18:09:32:8d:c9:df:88:90:78: 64:b8:44:ec:ed:5c:d5:34:6a:4f:3d:2d:45:fd:6b:41:e4:31: 0c:c7:2d:c6:41:f7:cb:65:70:67:86:66:c8:e9:5b:5c:08:4d: 82:b5:a9:e8:82:47:3e:1f:3d:cf:95:09:0d:1d:d3:1f:63:7e: cb:34:20:72:97:1a:f6:d7:f5:e1:18:db:a5:ae:ff:67:22:6c: 55:f5:32:45:11:6e:41:e1:66:f0:79:e0:5e:c1:f5:0a:49:3b: ec:d4:56:19:f6:4a:d6:67:ba:15:5d:a4:b7:77:cb:d7:45:ad: 07:be:86:f7:7f:8e:a6:3b:4e:9d:4e:04:bd:84:9a:42:34:40: a4:e7:db:65:e5:e3:0d:a4:c4:c7:ae:9c:46:e5:af:3a:14:ea: 4c:c6:96:6c:ec:a4:c5:1e:c6:4b:85:c2:7d:4b:90:87:87:3b: 44:3c:1e:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC RkVERTkxQjMwHhcNMjUxMDI1MDQwNTU1WhcNMjUxMTAxMDQwNTU1WjAYMRYwFAYD VQQDEw02OGZjNGNhMy0yZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9LmyU5TCdtQTeT5+I7ljmudvFveZUgnxRXH92WV7okMHDFpNi1VezLnVV0S2 atXFFL7AiU4V/V5mGDTLJ5A8ElhWlcqDCeJoenpodIRahFPyAp8++xkOx8Zpq78A KJKneAec7S+VQ+C2Jj+4G9lpOTwdoRTdyRYNzprAqXRExlNi7cgRfNMwIFkApe4A aNFk6W+rRZINXLm/CPj3J+PbZ/HAhqx05f5OkxREVU55b5aFjazddBMpQ4Ya5rSs qB+5mWdwZQ1PHRvVFyFyShbt7ckIJhciPNCUuw0mt06bwSZIk5fUn1CgaYWY28eJ mHUmi+O8nTIMyRW3ALe0rAcdpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASe94gr WmKF8YhGelPvU4ra92YyMB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0 REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAC67AoPE1fAutkvr1uLCjZLIQBb9lpPOde/W5WghGwioze5avMot3 SbOXXy5Uw06uvtOdOTt96iZ+4WcWe/2r4QUpGeRthIvjMWb9KLh+IWAYCTKNyd+I kHhkuETs7VzVNGpPPS1F/WtB5DEMxy3GQffLZXBnhmbI6VtcCE2Ctanogkc+Hz3P lQkNHdMfY37LNCBylxr21/XhGNulrv9nImxV9TJFEW5B4WbweeBewfUKSTvs1FYZ 9krWZ7oVXaS3d8vXRa0Hvob3f46mO06dTgS9hJpCNECk59tl5eMNpMTHrpxG5a86 FOpMxpZs7KTFHsZLhcJ9S5CHhztEPB5S -----END CERTIFICATE-----Generated at Sun Oct 26 00:41:43 2025 by rpki-client