$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft File: 79iPiiibFMeUQxKLu7eRtS2lEa0.mft (raw, json) Hash identifier: 8DnAj5C+VBdtYzTvJ0QAh6dHKkZy6bL355J9gVHJI4g= Subject key identifier: 71:BE:6B:43:0C:D5:E2:DC:0C:4B:A9:3B:FE:CB:2D:76:87:9A:C1:18 Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD Certificate issuer: /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft Manifest number: 01B2 Signing time: Fri 13 Jun 2025 02:11:36 +0000 Manifest this update: Fri 13 Jun 2025 02:11:35 +0000 Manifest next update: Fri 20 Jun 2025 02:11:35 +0000 Files and hashes: 1: 79iPiiibFMeUQxKLu7eRtS2lEa0.crl (hash: YCWOWzUHiOMEmLc4FsXCWhpsZdeGQZfPsFfzok1OMgg=) 2: 9344B512B1BA11ED8DC4D42EC4F9AE02.roa (hash: 05FYul9tCmnEluZqc+GxuuNUpvwFpQ5F6tjIORKsJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Validity Not Before: Jun 13 02:11:35 2025 GMT Not After : Jun 20 02:11:35 2025 GMT Subject: CN=684b88d8-182a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:d5:87:ea:d8:bf:d2:f1:c3:3d:3a:3d:53: f8:8e:2e:b4:00:28:c9:09:b5:9d:c2:19:22:56:cb: 80:c4:3a:75:c8:2c:3a:2d:44:8c:0a:98:8d:c3:36: 72:98:df:d4:59:ca:2b:37:b2:40:3e:94:ca:b0:53: 1d:4a:17:a0:0a:1d:af:6c:18:78:ee:c4:4e:8a:74: 38:3c:2e:7a:21:26:7e:cb:64:b7:81:03:ef:dd:2d: 82:80:17:ca:fa:b8:10:3d:96:db:f0:a9:07:b7:cc: 33:69:c7:25:ec:6e:64:48:8b:8a:45:20:89:e5:35: f2:55:a5:fd:3a:31:87:d6:2f:4f:5e:97:c2:c5:bf: 38:17:12:fa:d0:c9:af:47:f9:17:5f:c2:58:ff:b5: a2:ac:fd:b3:e9:94:cc:49:f1:1b:3d:38:f7:23:7c: 9c:7f:e9:9e:ac:b0:83:05:fc:64:6b:a6:49:3c:55: 89:0b:03:0d:4e:bd:f4:0b:a4:6a:a9:38:95:a9:8d: 11:6b:a0:23:47:71:10:48:8f:e2:80:dd:f8:6d:9b: 3e:3a:04:37:45:b3:99:7c:2b:55:36:b0:92:3a:df: 35:81:d5:ba:78:b8:33:3b:81:24:75:01:4a:5c:a9: 23:b9:67:f2:55:cc:39:14:59:92:75:f7:14:dc:31: 0a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BE:6B:43:0C:D5:E2:DC:0C:4B:A9:3B:FE:CB:2D:76:87:9A:C1:18 X509v3 Authority Key Identifier: keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:66:f7:d0:ce:80:4f:39:dd:da:70:37:c5:94:3c:0e:be:75: 0f:6d:ee:f6:a7:d8:38:44:7c:00:f6:d4:0e:e0:f9:7c:28:4f: a5:e2:4d:4a:29:aa:23:45:84:94:18:35:9e:32:cb:a9:63:45: a4:b0:3f:3a:24:33:30:b7:cf:fe:48:1c:61:95:97:d1:d4:a8: 0b:53:77:4e:34:94:99:c3:58:09:c9:0a:6b:f8:68:f5:01:2c: 9f:27:9b:1f:d2:e0:fb:a7:86:08:c0:a1:66:28:ac:b4:e1:b9: 51:39:48:c4:ca:52:0f:21:77:67:03:a6:d5:e2:cf:96:8c:46: ec:b1:de:e0:bc:4d:3f:17:ff:b7:32:fb:1e:e7:55:2e:5e:4b: 70:73:1e:84:3f:24:34:f2:30:98:ec:51:25:a4:ee:10:6f:77: 4c:7e:13:4e:7e:ab:c7:e9:60:1b:af:f3:a8:1f:ea:61:7f:db: f0:8c:c4:c3:7a:d4:ad:a6:5b:80:f6:62:fc:3a:d0:c1:a0:93: 83:6d:3f:a2:25:e1:18:ff:92:6e:1d:e9:7f:1a:1e:0f:a4:68: 8e:92:40:d1:a3:8f:ff:80:56:1a:6e:a1:cf:28:4d:b3:3a:b0: 6f:29:3a:bc:5a:43:04:12:c4:e7:5a:41:2b:d0:5b:83:20:8c: d0:ab:fd:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0YxMTAvBgNVBAUTKEVGRDg4RjhBMjg5QjE0Qzc5NDQzMTI4QkJCQjc5MUI1 MkRBNTExQUQwHhcNMjUwNjEzMDIxMTM1WhcNMjUwNjIwMDIxMTM1WjAYMRYwFAYD VQQDEw02ODRiODhkOC0xODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoHVh+rYv9Lxwz06PVP4ji60ACjJCbWdwhkiVsuAxDp1yCw6LUSMCpiNwzZy mN/UWcorN7JAPpTKsFMdShegCh2vbBh47sROinQ4PC56ISZ+y2S3gQPv3S2CgBfK +rgQPZbb8KkHt8wzaccl7G5kSIuKRSCJ5TXyVaX9OjGH1i9PXpfCxb84FxL60Mmv R/kXX8JY/7WirP2z6ZTMSfEbPTj3I3ycf+merLCDBfxka6ZJPFWJCwMNTr30C6Rq qTiVqY0Ra6AjR3EQSI/igN34bZs+OgQ3RbOZfCtVNrCSOt81gdW6eLgzO4EkdQFK XKkjuWfyVcw5FFmSdfcU3DEKTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHG+a0MM 1eLcDEupO/7LLXaHmsEYMB8GA1UdIwQYMBaAFO/Yj4oomxTHlEMSi7u3kbUtpRGt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzRi85QjlDOEU2QUIx QjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZNZVVReEtMdTdlUnRTMmxF YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5aVBpaWliRk1lVVF4S0x1N2VSdFMybEVhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzRi85QjlDOEU2QUIxQjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZN ZVVReEtMdTdlUnRTMmxFYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeZvfQzoBPOd3acDfFlDwOvnUPbe72p9g4RHwA9tQO4Pl8KE+l4k1K KaojRYSUGDWeMsupY0WksD86JDMwt8/+SBxhlZfR1KgLU3dONJSZw1gJyQpr+Gj1 ASyfJ5sf0uD7p4YIwKFmKKy04blROUjEylIPIXdnA6bV4s+WjEbssd7gvE0/F/+3 Mvse51UuXktwcx6EPyQ08jCY7FElpO4Qb3dMfhNOfqvH6WAbr/OoH+phf9vwjMTD etStpluA9mL8OtDBoJODbT+iJeEY/5JuHel/Gh4PpGiOkkDRo4//gFYabqHPKE2z OrBvKTq8WkMEEsTnWkEr0FuDIIzQq/21 -----END CERTIFICATE-----Generated at Sat Jun 14 19:23:28 2025 by rpki-client