$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft File: 78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json) Hash identifier: UFKi8UiVt1/wSTxkCMUvnHNTdBE2b1WVvt2ms5vYcXg= Subject key identifier: DC:3C:D5:8F:EB:FF:FB:6D:40:70:36:16:17:C9:61:BB:1F:11:7C:31 Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft Manifest number: C4 Signing time: Sun 15 Jun 2025 04:55:38 +0000 Manifest this update: Sun 15 Jun 2025 04:55:37 +0000 Manifest next update: Sun 22 Jun 2025 04:55:37 +0000 Files and hashes: 1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: sJh+qTUBkT5IMXcDEXg0so5eO4yiAVuAs2KOwVAWT48=) 2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: gGWIR4nH/QFD71GxDfh04qRa0gYEVkAhSwx6PRLquIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Validity Not Before: Jun 15 04:55:37 2025 GMT Not After : Jun 22 04:55:37 2025 GMT Subject: CN=684e5249-05f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:36:95:f8:a4:4b:04:56:c7:a9:dd:be:e9: ef:93:81:9b:e9:92:43:cf:51:e1:e6:68:ba:ff:00: 1e:fe:6e:b0:7f:fc:82:67:43:7b:83:32:32:2c:f6: c0:c7:da:37:34:bc:94:71:dc:9e:e8:22:a2:1a:20: 85:4f:4e:ae:a6:51:bc:1f:11:39:a9:7e:72:7e:36: 39:9d:e5:94:6c:cb:7e:11:41:2a:2d:da:2f:77:33: 57:28:e6:6f:6a:9e:9d:30:62:97:7d:0c:38:7f:79: 5a:0b:05:ae:3b:0c:ec:52:e0:53:94:d8:6f:16:ff: f0:b6:ca:a9:5e:f2:fd:c1:2b:99:e6:29:5b:4c:89: 4d:0f:62:3f:c0:c5:0e:6e:a5:26:c1:3b:a5:58:1d: 6d:0e:eb:bb:dd:2b:be:48:f0:76:c3:05:8a:b9:05: 19:b9:51:cd:ec:d0:f1:e8:59:83:a0:af:56:c5:2d: 1e:d8:8d:bc:2b:44:3b:c9:6c:36:8e:4c:54:c7:0d: b5:84:4c:c3:bb:3c:7f:30:fb:bd:72:3f:86:2e:10: bc:e6:36:e6:01:a6:d1:c8:c3:5b:bd:ee:0c:12:c2: 4f:17:db:e8:39:39:6e:ba:bd:33:6d:60:ab:63:bd: 2e:ca:d0:93:46:66:14:4b:b3:63:e0:18:56:83:18: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3C:D5:8F:EB:FF:FB:6D:40:70:36:16:17:C9:61:BB:1F:11:7C:31 X509v3 Authority Key Identifier: keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ba:42:25:e6:42:bc:80:2a:c6:1d:3e:1c:b9:cf:17:d8:9d: dc:00:4e:28:9f:5f:ec:04:6e:8b:d6:cd:14:24:3a:6f:ed:e6: ff:0a:f9:b3:e8:36:56:33:6d:68:b6:38:3c:4e:8b:04:f0:8d: a8:25:87:68:fa:69:41:0a:de:ab:cb:2b:d9:61:94:b9:ac:2d: af:ab:1f:1b:11:2c:3d:09:a3:26:60:44:fc:71:a0:29:7d:81: 31:0b:37:13:24:2e:ad:61:b2:5b:32:17:e3:6d:e3:e3:0c:73: d7:4a:90:a5:37:da:3d:7f:e7:ee:5e:c5:05:00:5c:7b:65:69: 4f:28:d2:5b:a9:83:cb:95:ef:e5:84:1d:a1:cd:bc:ba:78:4c: 8d:16:fe:41:92:6a:38:d4:da:9f:1f:a3:80:4d:92:94:ad:5b: 43:65:34:bb:05:be:ac:72:dc:41:a9:5d:7e:2f:7f:e0:0d:9d: 2b:98:52:b0:0f:a9:90:0e:8f:96:e9:b0:c1:54:4a:85:ac:fc: 5c:dd:71:ae:71:b1:3f:73:f6:0b:ce:43:64:ab:70:6d:e6:de: 74:f1:d4:52:4b:33:c3:a3:b1:90:6e:88:f1:9c:7d:1f:15:ed: 2f:cb:d5:69:03:c0:85:4a:9e:5a:e0:f5:e2:1f:16:17:45:5c: cd:1f:fe:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwQ0YxMTAvBgNVBAUTKEVGQzE3QjBEMTExMjZDN0ZBOTQxQkQ0RDBFQ0E3QUEz OUU5MzQ2QTAwHhcNMjUwNjE1MDQ1NTM3WhcNMjUwNjIyMDQ1NTM3WjAYMRYwFAYD VQQDEw02ODRlNTI0OS0wNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycI2lfikSwRWx6ndvunvk4Gb6ZJDz1Hh5mi6/wAe/m6wf/yCZ0N7gzIyLPbA x9o3NLyUcdye6CKiGiCFT06uplG8HxE5qX5yfjY5neWUbMt+EUEqLdovdzNXKOZv ap6dMGKXfQw4f3laCwWuOwzsUuBTlNhvFv/wtsqpXvL9wSuZ5ilbTIlND2I/wMUO bqUmwTulWB1tDuu73Su+SPB2wwWKuQUZuVHN7NDx6FmDoK9WxS0e2I28K0Q7yWw2 jkxUxw21hEzDuzx/MPu9cj+GLhC85jbmAabRyMNbve4MEsJPF9voOTluur0zbWCr Y70uytCTRmYUS7Nj4BhWgxhQvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw81Y/r //ttQHA2FhfJYbsfEXwxMB8GA1UdIwQYMBaAFO/Bew0REmx/qUG9TQ7KeqOek0ag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBDRi83RTAxM0NEQTFG MTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JILXBRYjFORHNwNm81NlRS cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4RjdEUkVTYkgtcFFiMU5Ec3A2bzU2VFJxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjBDRi83RTAxM0NEQTFGMTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JI LXBRYjFORHNwNm81NlRScUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLukIl5kK8gCrGHT4cuc8X2J3cAE4on1/sBG6L1s0UJDpv7eb/Cvmz 6DZWM21otjg8TosE8I2oJYdo+mlBCt6ryyvZYZS5rC2vqx8bESw9CaMmYET8caAp fYExCzcTJC6tYbJbMhfjbePjDHPXSpClN9o9f+fuXsUFAFx7ZWlPKNJbqYPLle/l hB2hzby6eEyNFv5Bkmo41NqfH6OATZKUrVtDZTS7Bb6sctxBqV1+L3/gDZ0rmFKw D6mQDo+W6bDBVEqFrPxc3XGucbE/c/YLzkNkq3Bt5t508dRSSzPDo7GQbojxnH0f Fe0vy9VpA8CFSp5a4PXiHxYXRVzNH/6i -----END CERTIFICATE-----Generated at Sun Jun 15 10:01:03 2025 by rpki-client