$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft File: 78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json) Hash identifier: WnhQLY9benbJ+MxPt9iAvxKTrPKNlYhkfDCLQlJv7BE= Subject key identifier: 5B:8C:7D:8B:A3:07:D1:B7:7E:FA:92:64:7B:CE:0A:9F:59:DF:FD:73 Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft Manifest number: A9 Signing time: Fri 25 Apr 2025 05:07:32 +0000 Manifest this update: Fri 25 Apr 2025 05:07:31 +0000 Manifest next update: Fri 02 May 2025 05:07:31 +0000 Files and hashes: 1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: lTaid1N9JVYRHZ8UaeG7S2VSb4Rj/vIRzFXU3GewVTs=) 2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: xNbG/utcKUstvbI/+h9lWTxk2xr/yLWlvLD0rYAm3fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Validity Not Before: Apr 25 05:07:31 2025 GMT Not After : May 2 05:07:31 2025 GMT Subject: CN=680b1893-fb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:e4:76:52:02:47:69:ed:7c:3e:7a:4c:16: b0:da:4b:57:aa:25:3d:27:7c:44:7b:2e:1f:19:1f: db:e0:0d:2f:92:24:d1:03:ca:61:d4:46:96:69:22: 0a:89:6d:af:49:21:57:c3:ac:37:5f:af:4c:ae:cd: aa:ef:d5:0a:94:c1:a6:00:6a:b0:d4:6a:dd:dc:13: 0f:08:25:bc:f2:13:71:03:8f:67:8a:33:98:28:7e: a3:c8:2c:a7:2a:96:7c:f3:6f:e0:ba:fc:cb:0e:19: 82:1c:73:a6:b6:f8:3e:f1:1e:63:23:69:72:73:a7: f7:d5:21:69:71:e7:e2:f5:87:c7:d9:c3:d3:1d:19: a0:5d:80:64:cb:12:4b:54:fa:25:0b:c2:01:83:b2: 45:15:e0:f3:ad:b6:8c:f6:11:3c:1b:84:c9:4a:e6: 84:0f:8e:64:8f:6b:83:6c:1d:af:91:84:c3:c7:93: c4:b9:7c:d2:87:fe:f9:a0:b0:19:b3:f1:f9:98:cd: 82:05:a1:22:9d:f0:84:1d:07:ba:5a:7e:8e:63:05: 9e:ca:e1:84:37:4b:1f:37:88:eb:8b:72:e3:f3:4d: 7f:2c:1c:15:31:24:de:ab:9a:72:56:19:59:de:3a: 9d:e7:2e:17:66:be:3a:17:4b:e0:1f:89:03:9b:b3: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8C:7D:8B:A3:07:D1:B7:7E:FA:92:64:7B:CE:0A:9F:59:DF:FD:73 X509v3 Authority Key Identifier: keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:80:14:95:79:99:91:66:20:ba:65:e9:88:1c:9b:d5:e8:80: cb:d5:f9:df:48:9b:fd:91:af:91:ce:73:8a:37:17:c5:e5:43: ab:4b:1c:1e:8f:4e:80:db:c5:dd:29:bc:a4:20:34:75:a5:ca: cd:30:6b:16:5d:07:2e:b0:41:e1:ff:04:2d:4f:5c:aa:c1:ff: 37:5b:bb:f5:ad:5f:53:24:21:e6:be:c4:af:c3:ff:db:bc:5c: 66:7b:2f:9c:b5:2f:15:a6:21:d1:1b:6d:07:37:d3:d1:89:91: 9b:99:93:51:74:32:73:bd:bc:36:93:3f:00:6e:d8:35:19:5e: ba:c1:72:e3:6d:25:7d:82:fb:54:2d:37:17:9b:2e:57:21:33: 9a:d5:b0:82:48:0a:09:ab:91:cf:5a:3f:39:62:34:f7:cf:5c: f5:da:a6:52:a4:17:40:2a:01:16:d2:63:08:af:f3:b1:71:36: 9c:ac:08:74:ca:b8:8c:9d:30:79:9b:b7:ce:26:d4:c7:2f:4f: d5:c6:19:86:58:2d:09:26:ca:db:df:7a:9f:e6:98:a6:8b:01: 1b:39:ad:00:e8:55:9e:df:d9:a8:ca:bb:b4:e4:fa:66:30:c4: e1:be:d5:bf:a3:12:d3:6d:28:9a:2b:15:08:00:49:fa:d3:22: 1d:9c:7b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwQ0YxMTAvBgNVBAUTKEVGQzE3QjBEMTExMjZDN0ZBOTQxQkQ0RDBFQ0E3QUEz OUU5MzQ2QTAwHhcNMjUwNDI1MDUwNzMxWhcNMjUwNTAyMDUwNzMxWjAYMRYwFAYD VQQDEw02ODBiMTg5My1mYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJXkdlICR2ntfD56TBaw2ktXqiU9J3xEey4fGR/b4A0vkiTRA8ph1EaWaSIK iW2vSSFXw6w3X69Mrs2q79UKlMGmAGqw1Grd3BMPCCW88hNxA49nijOYKH6jyCyn KpZ882/guvzLDhmCHHOmtvg+8R5jI2lyc6f31SFpcefi9YfH2cPTHRmgXYBkyxJL VPolC8IBg7JFFeDzrbaM9hE8G4TJSuaED45kj2uDbB2vkYTDx5PEuXzSh/75oLAZ s/H5mM2CBaEinfCEHQe6Wn6OYwWeyuGEN0sfN4jri3Lj801/LBwVMSTeq5pyVhlZ 3jqd5y4XZr46F0vgH4kDm7PUdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuMfYuj B9G3fvqSZHvOCp9Z3/1zMB8GA1UdIwQYMBaAFO/Bew0REmx/qUG9TQ7KeqOek0ag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBDRi83RTAxM0NEQTFG MTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JILXBRYjFORHNwNm81NlRS cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4RjdEUkVTYkgtcFFiMU5Ec3A2bzU2VFJxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjBDRi83RTAxM0NEQTFGMTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JI LXBRYjFORHNwNm81NlRScUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUgBSVeZmRZiC6ZemIHJvV6IDL1fnfSJv9ka+RznOKNxfF5UOrSxwe j06A28XdKbykIDR1pcrNMGsWXQcusEHh/wQtT1yqwf83W7v1rV9TJCHmvsSvw//b vFxmey+ctS8VpiHRG20HN9PRiZGbmZNRdDJzvbw2kz8Abtg1GV66wXLjbSV9gvtU LTcXmy5XITOa1bCCSAoJq5HPWj85YjT3z1z12qZSpBdAKgEW0mMIr/OxcTacrAh0 yriMnTB5m7fOJtTHL0/VxhmGWC0JJsrb33qf5pimiwEbOa0A6FWe39moyru05Ppm MMThvtW/oxLTbSiaKxUIAEn60yIdnHtO -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:23 2025 by rpki-client