$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json) Hash identifier: RrOI430H2Cx4LnnbBfC22RBI5Tm2fEnFrFHOHHrGpIE= Subject key identifier: 9A:C9:23:A3:FD:CA:7A:22:F6:F8:C1:49:D4:BD:86:E0:02:4F:47:A8 Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Certificate serial: 0312 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft Manifest number: 030C Signing time: Thu 05 Jun 2025 01:08:11 +0000 Manifest this update: Thu 05 Jun 2025 01:08:10 +0000 Manifest next update: Thu 12 Jun 2025 01:08:10 +0000 Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: yBwvXpbic1no3jNQfHahQQuqEMJQpHwLx0P+O8DHGP4=) 2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: gGb0/UgfSasORS6rGMdjPg33Z1o+REJnn5mJbTdXj5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 01:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Validity Not Before: Jun 5 01:08:10 2025 GMT Not After : Jun 12 01:08:10 2025 GMT Subject: CN=6840edfb-edc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:96:12:02:93:95:33:fa:35:f8:1e:d7:2b:a7: b6:17:f1:d7:bf:f0:1b:c1:ab:f1:e8:82:7f:9d:e8: 04:14:60:f3:17:06:ed:2c:ff:08:e2:76:70:80:43: fe:c6:24:c4:cd:3e:dd:18:b7:00:cd:35:fa:e4:66: e3:4e:8d:fb:04:44:53:69:e7:ae:b0:c6:3f:31:8a: ec:56:f0:49:14:f0:e2:ba:59:94:34:91:ff:23:f8: 66:16:31:23:11:56:27:dd:07:f8:b0:99:64:c9:cb: 34:8d:46:fa:81:80:2a:3e:ce:e3:9e:43:60:94:16: 33:f5:2c:a1:05:ff:aa:75:c4:78:eb:fa:9d:97:fa: 51:3c:d9:e4:1d:37:3f:67:e8:87:b9:e0:3e:0c:b3: c2:09:5b:c6:b8:99:96:ab:18:79:d2:fd:c0:17:6c: c0:a3:86:e4:2c:0f:82:28:9e:cd:cb:f4:59:be:36: 3e:9b:28:a6:6c:9e:8a:16:dc:24:a2:5d:55:c3:5e: 1e:bc:23:bf:15:58:00:f2:a5:4b:97:d1:60:b0:6a: f8:fc:b6:8c:d1:71:69:1c:64:af:21:10:3c:58:01: ed:5d:8c:a3:cd:ed:9e:e6:9c:b4:cc:6b:b9:6a:2e: 7f:e3:9a:a4:f2:00:7a:c0:ac:55:2a:6f:7d:62:72: 0a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C9:23:A3:FD:CA:7A:22:F6:F8:C1:49:D4:BD:86:E0:02:4F:47:A8 X509v3 Authority Key Identifier: keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:8e:35:ec:d2:3f:a0:4c:56:c0:26:54:fe:0d:68:7a:f1:4b: 84:d2:cf:f9:c8:3c:43:69:fc:99:ed:8b:6a:7e:c4:a0:ff:a5: b2:94:7d:51:39:b0:88:36:8b:d4:dc:43:2a:92:9d:b3:f8:1c: 55:52:18:91:89:9a:5c:aa:c1:ea:aa:fb:1e:d4:42:64:bd:78: 13:71:a4:1f:08:c0:c0:db:3b:f6:92:8d:bf:1b:14:95:98:99: 89:8b:66:8e:8c:d2:69:50:e0:83:da:44:2a:f1:9f:33:fd:a8: aa:76:f2:60:39:85:cf:6c:0d:6c:1a:c1:eb:23:f9:03:48:f0: 62:6c:5c:49:ee:53:fa:7e:3b:f4:5b:0d:16:25:2f:93:cb:07: 3e:1f:11:8d:ae:ef:1b:2b:44:57:de:f5:f3:09:29:49:a0:78: 9b:11:ca:ea:88:db:1e:1f:5c:d3:f1:57:b5:bf:1c:cd:47:74: c2:0b:02:c4:be:a5:e1:34:40:70:65:54:9e:60:87:8b:3f:2a: f1:31:18:38:00:ba:65:e9:fa:77:6e:1f:c1:d4:06:01:8c:fa: 8b:a2:fd:df:08:c4:a0:cf:dc:e2:82:61:a6:f0:cc:d1:43:94: d7:17:8c:cc:b5:c0:74:1e:1c:dc:72:f7:53:38:c4:d3:19:94: 91:9d:ac:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC RkVERTkxQjMwHhcNMjUwNjA1MDEwODEwWhcNMjUwNjEyMDEwODEwWjAYMRYwFAYD VQQDEw02ODQwZWRmYi1lZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZYSApOVM/o1+B7XK6e2F/HXv/Abwavx6IJ/negEFGDzFwbtLP8I4nZwgEP+ xiTEzT7dGLcAzTX65GbjTo37BERTaeeusMY/MYrsVvBJFPDiulmUNJH/I/hmFjEj EVYn3Qf4sJlkycs0jUb6gYAqPs7jnkNglBYz9SyhBf+qdcR46/qdl/pRPNnkHTc/ Z+iHueA+DLPCCVvGuJmWqxh50v3AF2zAo4bkLA+CKJ7Ny/RZvjY+myimbJ6KFtwk ol1Vw14evCO/FVgA8qVLl9FgsGr4/LaM0XFpHGSvIRA8WAHtXYyjze2e5py0zGu5 ai5/45qk8gB6wKxVKm99YnIKrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrJI6P9 ynoi9vjBSdS9huACT0eoMB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0 REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgjjXs0j+gTFbAJlT+DWh68UuE0s/5yDxDafyZ7YtqfsSg/6WylH1R ObCINovU3EMqkp2z+BxVUhiRiZpcqsHqqvse1EJkvXgTcaQfCMDA2zv2ko2/GxSV mJmJi2aOjNJpUOCD2kQq8Z8z/aiqdvJgOYXPbA1sGsHrI/kDSPBibFxJ7lP6fjv0 Ww0WJS+Tywc+HxGNru8bK0RX3vXzCSlJoHibEcrqiNseH1zT8Ve1vxzNR3TCCwLE vqXhNEBwZVSeYIeLPyrxMRg4ALpl6fp3bh/B1AYBjPqLov3fCMSgz9zigmGm8MzR Q5TXF4zMtcB0HhzccvdTOMTTGZSRnawd -----END CERTIFICATE-----Generated at Thu Jun 5 19:21:03 2025 by rpki-client