$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json) Hash identifier: cPf7IQIwLVg9OxcV3LPXjfd2vvTM4tlNykDpef/2hsA= Subject key identifier: 93:C1:1E:4A:7F:D3:17:D2:6B:7A:9B:06:B4:69:FB:58:EF:1C:4F:70 Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Certificate serial: 035D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft Manifest number: 0359 Signing time: Fri 25 Apr 2025 00:44:54 +0000 Manifest this update: Fri 25 Apr 2025 00:44:54 +0000 Manifest next update: Fri 02 May 2025 00:44:54 +0000 Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: HK6FHrJ1Gpu2qg9oidWPZuX4zuPKP20hPgprN9uvrsA=) 2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: mfWKFm3R9Zz1cfvfe7gZWjinbVCRooVyIR4rmFi/Bec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 861 (0x35d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Validity Not Before: Apr 25 00:44:54 2025 GMT Not After : May 2 00:44:54 2025 GMT Subject: CN=680adb06-3eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d9:32:e7:54:d7:08:70:f4:7f:3f:e0:d6:5f: ec:3f:52:85:4b:e0:ad:42:2c:79:bf:52:31:85:a2: 3d:f7:11:b9:e1:c2:57:a1:47:46:e2:5a:db:52:41: d0:63:9e:d6:70:8b:38:80:85:f5:19:be:6a:b7:ab: 22:bf:f6:39:9c:33:c0:7b:c1:35:46:e5:f3:7a:36: 99:60:f9:aa:05:6c:60:be:a6:22:26:86:68:85:d8: 01:51:ed:3a:b3:d7:d8:8e:2c:09:13:08:df:05:06: 97:f6:d3:45:c2:fd:bd:90:e8:d4:b0:41:ba:71:45: 1f:51:a5:ac:89:4c:dc:47:bd:e5:6f:22:95:89:d6: 57:b5:9b:54:ee:a5:e2:1e:d0:1b:90:b3:b9:f8:ba: 9c:f5:8f:3e:94:68:24:6c:25:4b:c3:71:42:f8:20: 43:84:be:c5:72:a8:6c:18:21:99:14:ec:95:67:5b: 2e:34:85:a9:9f:a1:23:1a:00:50:84:e7:b4:12:ca: d3:ad:7b:c2:00:71:ce:04:a4:e9:c9:c4:90:b1:3c: b6:1c:2f:27:4f:a9:c5:6f:68:72:2e:c0:46:d7:70: 47:8d:b4:fe:80:f2:9b:3d:39:97:fe:47:29:ad:6d: 3b:24:96:50:9d:d9:b2:84:65:eb:16:a3:46:cb:e5: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C1:1E:4A:7F:D3:17:D2:6B:7A:9B:06:B4:69:FB:58:EF:1C:4F:70 X509v3 Authority Key Identifier: keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:cb:ff:6e:93:25:bd:d4:b7:cb:81:1d:00:99:aa:95:3e:60: e2:77:96:b1:f3:8f:57:67:8c:96:47:f6:19:bd:94:0c:15:c8: d0:88:89:12:be:9c:71:2d:67:c7:11:ed:e5:88:5f:45:a6:5a: 71:72:99:8c:15:48:61:8c:6f:58:e7:8e:92:b8:4e:56:9e:ba: 71:45:a8:e0:a8:6d:95:e4:05:0e:ca:5d:76:63:6e:d4:61:53: d3:8d:ff:8a:da:34:47:0e:38:08:60:f2:04:7f:a9:e6:47:1f: 69:ec:7c:6a:3e:26:4e:fd:11:79:e0:9d:16:7a:35:e0:64:72: d1:d5:e0:70:29:a1:05:0c:61:55:ce:59:83:50:a9:4e:c2:49: b7:20:4b:66:cd:cf:bf:03:4c:22:ba:8a:0e:21:45:d3:fa:bf: be:ca:e0:72:3a:b9:10:17:21:ca:22:9a:85:93:65:85:fb:9d: d0:03:3c:7b:7e:ba:8e:b7:f6:36:ba:6a:e0:88:c8:94:84:2a: b9:54:73:25:ff:16:8e:37:0f:a2:55:3f:f2:30:9c:b1:dd:13: ad:b3:25:f4:e4:2b:42:da:a2:98:6c:d2:34:18:78:7e:e0:79: f4:84:ab:52:a8:30:4e:cd:58:8a:2a:d1:66:91:b4:6f:7e:29: 8b:f2:61:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG NUQzMEYxRjIwHhcNMjUwNDI1MDA0NDU0WhcNMjUwNTAyMDA0NDU0WjAYMRYwFAYD VQQDEw02ODBhZGIwNi0zZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dky51TXCHD0fz/g1l/sP1KFS+CtQix5v1IxhaI99xG54cJXoUdG4lrbUkHQ Y57WcIs4gIX1Gb5qt6siv/Y5nDPAe8E1RuXzejaZYPmqBWxgvqYiJoZohdgBUe06 s9fYjiwJEwjfBQaX9tNFwv29kOjUsEG6cUUfUaWsiUzcR73lbyKVidZXtZtU7qXi HtAbkLO5+Lqc9Y8+lGgkbCVLw3FC+CBDhL7FcqhsGCGZFOyVZ1suNIWpn6EjGgBQ hOe0EsrTrXvCAHHOBKTpycSQsTy2HC8nT6nFb2hyLsBG13BHjbT+gPKbPTmX/kcp rW07JJZQndmyhGXrFqNGy+WNkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPBHkp/ 0xfSa3qbBrRp+1jvHE9wMB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASy/9ukyW91LfLgR0AmaqVPmDid5ax849XZ4yWR/YZvZQMFcjQiIkS vpxxLWfHEe3liF9FplpxcpmMFUhhjG9Y546SuE5WnrpxRajgqG2V5AUOyl12Y27U YVPTjf+K2jRHDjgIYPIEf6nmRx9p7HxqPiZO/RF54J0WejXgZHLR1eBwKaEFDGFV zlmDUKlOwkm3IEtmzc+/A0wiuooOIUXT+r++yuByOrkQFyHKIpqFk2WF+53QAzx7 frqOt/Y2umrgiMiUhCq5VHMl/xaONw+iVT/yMJyx3ROtsyX05CtC2qKYbNI0GHh+ 4Hn0hKtSqDBOzViKKtFmkbRvfimL8mE6 -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:57 2025 by rpki-client