$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft File: 79iPiiibFMeUQxKLu7eRtS2lEa0.mft (raw, json) Hash identifier: lG1gQZAa7yBCnJ+vYRoCQCsZF0FKFEglB5Sbp9MkqIo= Subject key identifier: 0B:22:0A:39:93:05:F0:14:FF:9A:FD:2A:01:38:5B:9A:A8:46:B8:8A Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD Certificate issuer: /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft Manifest number: 019A Signing time: Fri 25 Apr 2025 02:33:30 +0000 Manifest this update: Fri 25 Apr 2025 02:33:30 +0000 Manifest next update: Fri 02 May 2025 02:33:30 +0000 Files and hashes: 1: 79iPiiibFMeUQxKLu7eRtS2lEa0.crl (hash: SgQno/dV0HmfedCIBhkdstdwlha3+OIN77v1VMs8GuI=) 2: 9344B512B1BA11ED8DC4D42EC4F9AE02.roa (hash: 05FYul9tCmnEluZqc+GxuuNUpvwFpQ5F6tjIORKsJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Validity Not Before: Apr 25 02:33:30 2025 GMT Not After : May 2 02:33:30 2025 GMT Subject: CN=680af47a-50c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:63:1e:85:2f:63:22:de:07:cb:bc:73:55:4a: aa:4b:7b:61:43:17:68:76:27:2d:25:67:4d:28:22: 9d:e5:29:e8:53:a0:9b:51:25:65:a0:3f:d1:35:71: 93:9e:33:de:f2:21:6a:e9:94:79:df:2d:ed:98:f2: 54:4b:20:ac:62:60:d7:40:ac:ab:5b:41:e2:73:b1: e9:63:37:6d:a4:05:16:29:da:8d:f6:9d:84:e4:84: 92:17:4f:88:76:70:95:13:b9:43:06:c8:7d:60:e6: c0:87:04:0c:77:2b:05:f9:cb:c5:61:f6:1d:73:cd: 22:8c:83:9a:27:15:56:0a:ad:b0:40:e0:88:4f:b5: 7c:18:c2:bd:e7:f8:f8:9b:82:a0:52:44:4c:cf:54: c6:7a:8c:16:1d:20:19:50:da:00:a6:9c:a8:e2:1a: ed:74:b7:32:e5:56:0d:f0:62:1a:ba:f8:a0:8f:03: fd:e2:a2:bc:be:60:81:68:46:5a:51:3b:e6:32:f1: 39:e6:07:5a:a8:80:a6:a3:18:c6:f6:56:16:79:8c: 10:51:cf:b0:67:d5:b6:a7:38:55:87:e7:1d:1f:45: fd:63:d1:cf:c7:61:9f:f3:7f:b8:c4:08:0d:7c:42: e2:32:f4:ec:32:2c:0f:4b:6a:a7:eb:f9:93:eb:2d: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:22:0A:39:93:05:F0:14:FF:9A:FD:2A:01:38:5B:9A:A8:46:B8:8A X509v3 Authority Key Identifier: keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4d:e8:61:3d:94:3d:f2:9b:bf:d0:00:92:4f:cc:ce:85:27: ef:3e:10:1e:cb:19:80:f1:cb:8f:42:39:39:07:a3:4b:a5:23: 3c:cb:02:70:af:96:48:4d:37:da:36:23:f2:d8:ed:46:f2:bf: 35:0a:aa:4c:31:ca:4d:e4:e4:9e:8f:bb:17:64:e9:e4:d0:44: c3:5e:25:28:64:0a:68:f5:42:83:43:3a:3c:e6:3b:8c:c3:6c: 8f:c1:4e:76:19:22:48:f9:c8:56:aa:a5:23:dc:e7:33:45:6b: a2:a5:b1:d9:fa:b5:4b:9a:f3:24:0f:86:e1:33:14:76:61:1e: 91:cf:1e:b9:60:39:6d:ba:a2:e5:55:0f:2d:2a:c9:96:57:27: 31:3c:72:b7:d1:a4:b2:e1:56:71:ef:56:5f:97:f5:4e:eb:5b: ef:17:3a:3f:30:5e:bb:0b:c0:d8:5c:9e:ea:f9:89:81:bf:9d: 3f:eb:5d:82:20:54:1c:98:0b:2e:3b:63:fb:a9:7b:da:4a:97: ef:18:61:72:2d:5b:dd:c2:e6:39:7d:b4:b0:ca:1e:c5:5e:c8: c5:73:98:19:a0:57:b3:19:cf:21:f6:be:fe:10:ae:24:8e:46: 15:67:d8:94:c2:93:69:c4:78:db:3f:fe:0f:86:bf:cd:2c:5f: 29:0c:e7:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0YxMTAvBgNVBAUTKEVGRDg4RjhBMjg5QjE0Qzc5NDQzMTI4QkJCQjc5MUI1 MkRBNTExQUQwHhcNMjUwNDI1MDIzMzMwWhcNMjUwNTAyMDIzMzMwWjAYMRYwFAYD VQQDEw02ODBhZjQ3YS01MGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+mMehS9jIt4Hy7xzVUqqS3thQxdodictJWdNKCKd5SnoU6CbUSVloD/RNXGT njPe8iFq6ZR53y3tmPJUSyCsYmDXQKyrW0Hic7HpYzdtpAUWKdqN9p2E5ISSF0+I dnCVE7lDBsh9YObAhwQMdysF+cvFYfYdc80ijIOaJxVWCq2wQOCIT7V8GMK95/j4 m4KgUkRMz1TGeowWHSAZUNoAppyo4hrtdLcy5VYN8GIauvigjwP94qK8vmCBaEZa UTvmMvE55gdaqICmoxjG9lYWeYwQUc+wZ9W2pzhVh+cdH0X9Y9HPx2Gf83+4xAgN fELiMvTsMiwPS2qn6/mT6y17fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsiCjmT BfAU/5r9KgE4W5qoRriKMB8GA1UdIwQYMBaAFO/Yj4oomxTHlEMSi7u3kbUtpRGt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzRi85QjlDOEU2QUIx QjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZNZVVReEtMdTdlUnRTMmxF YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5aVBpaWliRk1lVVF4S0x1N2VSdFMybEVhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzRi85QjlDOEU2QUIxQjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZN ZVVReEtMdTdlUnRTMmxFYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9TehhPZQ98pu/0ACST8zOhSfvPhAeyxmA8cuPQjk5B6NLpSM8ywJw r5ZITTfaNiPy2O1G8r81CqpMMcpN5OSej7sXZOnk0ETDXiUoZApo9UKDQzo85juM w2yPwU52GSJI+chWqqUj3OczRWuipbHZ+rVLmvMkD4bhMxR2YR6Rzx65YDltuqLl VQ8tKsmWVycxPHK30aSy4VZx71Zfl/VO61vvFzo/MF67C8DYXJ7q+YmBv50/612C IFQcmAsuO2P7qXvaSpfvGGFyLVvdwuY5fbSwyh7FXsjFc5gZoFezGc8h9r7+EK4k jkYVZ9iUwpNpxHjbP/4Phr/NLF8pDOca -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:32 2025 by rpki-client