$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json) Hash identifier: JpL2kF+nfJfDq6G0gTAIf1r6xuAKMZ6Z2joA66wP06Q= Subject key identifier: 4D:D0:A6:2B:17:89:69:F1:74:B9:D7:49:45:1E:11:F2:B5:D4:97:14 Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Certificate serial: 0376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft Manifest number: 0372 Signing time: Sun 15 Jun 2025 00:37:07 +0000 Manifest this update: Sun 15 Jun 2025 00:37:07 +0000 Manifest next update: Sun 22 Jun 2025 00:37:07 +0000 Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: St3A+KwMyTTWBWtg9zQTatehNaXBOllVGC+89MyLXm8=) 2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: mfWKFm3R9Zz1cfvfe7gZWjinbVCRooVyIR4rmFi/Bec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 886 (0x376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Validity Not Before: Jun 15 00:37:07 2025 GMT Not After : Jun 22 00:37:07 2025 GMT Subject: CN=684e15b3-2056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:67:3b:0c:6e:a7:4b:74:25:67:70:79:ba: 56:ea:ac:f6:d4:8e:1d:3d:d9:fc:c8:fb:dc:9d:2f: b3:67:0c:1d:c1:36:d7:d2:ad:b4:d5:42:31:b1:3b: 56:82:f4:1c:9e:ff:6d:2f:45:cd:12:ef:f1:1f:6f: 9e:7e:6a:2c:8a:c0:8c:25:e0:6c:6c:0f:3a:68:f8: 0b:87:af:3d:65:9b:12:2f:e9:78:11:21:62:5f:75: ec:c7:89:b6:99:e5:1e:bb:ee:8d:91:30:91:ae:dc: 7d:54:09:c1:bf:4d:0c:47:75:18:ac:3d:26:98:59: c4:39:9a:6c:ff:8e:f2:bc:55:ca:41:50:4a:56:a0: 30:97:b0:83:22:90:d1:7b:87:4e:c0:8e:8e:32:08: 7e:11:cb:99:9a:3b:7f:b4:d4:1f:c3:7c:05:2e:4a: 5c:9c:04:08:cc:ae:81:1e:d6:88:d3:fa:af:61:ee: d4:9c:90:50:63:d5:9b:bb:f1:af:88:52:7c:5e:54: a4:f5:db:85:a5:a4:5d:11:a6:0a:1d:91:16:cd:53: 9e:90:36:43:ce:55:c7:ee:57:ad:4c:3b:95:12:dd: b3:e0:03:4d:3a:99:88:33:6f:83:fe:07:ca:90:13: bd:f1:8a:61:d2:d3:68:21:51:30:b2:f0:4c:3d:da: 67:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D0:A6:2B:17:89:69:F1:74:B9:D7:49:45:1E:11:F2:B5:D4:97:14 X509v3 Authority Key Identifier: keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:4b:3a:f8:31:58:5e:e4:84:35:78:66:3a:d9:90:0c:3e:c0: 1e:a7:37:27:22:ab:0d:40:3e:d5:b4:19:7f:ea:d1:79:83:fc: eb:bb:c1:b9:42:8b:b3:e4:d6:20:9e:ff:6d:35:4b:6c:e0:2b: e2:a6:c7:58:be:23:4b:7f:7e:68:fd:da:1f:88:73:32:c3:c7: 08:6a:8c:54:db:69:dc:fd:6d:d9:87:2b:9f:78:9b:bd:b8:14: fd:44:2a:3d:64:cf:e7:37:19:a2:35:bb:88:02:5c:e7:4b:11: c8:8c:71:7a:43:02:57:c2:8c:78:0e:aa:82:40:97:b8:fe:eb: ba:c6:3b:a1:db:a4:fb:53:5f:d9:9a:34:4d:ba:9a:57:e3:25: f4:f7:2a:b3:fc:27:43:4b:c8:d3:58:7e:52:b1:57:8c:1e:09: 8f:f2:8f:6c:5d:f1:84:ef:40:4f:1e:c0:e9:bc:ce:2f:42:f2: cc:d6:d3:6b:5e:ce:50:ec:0a:d8:56:ec:1e:d5:ce:6c:3c:f0: a6:3c:ad:5c:ae:1f:b2:76:01:1b:fa:53:be:75:c6:69:fa:5d: 49:d6:6e:6d:6c:db:6b:37:88:71:f7:29:21:e9:45:97:e7:72: 4f:fb:fc:d8:24:5e:6a:89:1c:01:13:a3:5e:79:a2:ba:8c:b8: 86:c7:3a:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG NUQzMEYxRjIwHhcNMjUwNjE1MDAzNzA3WhcNMjUwNjIyMDAzNzA3WjAYMRYwFAYD VQQDEw02ODRlMTViMy0yMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvFnOwxup0t0JWdwebpW6qz21I4dPdn8yPvcnS+zZwwdwTbX0q201UIxsTtW gvQcnv9tL0XNEu/xH2+efmosisCMJeBsbA86aPgLh689ZZsSL+l4ESFiX3Xsx4m2 meUeu+6NkTCRrtx9VAnBv00MR3UYrD0mmFnEOZps/47yvFXKQVBKVqAwl7CDIpDR e4dOwI6OMgh+EcuZmjt/tNQfw3wFLkpcnAQIzK6BHtaI0/qvYe7UnJBQY9Wbu/Gv iFJ8XlSk9duFpaRdEaYKHZEWzVOekDZDzlXH7letTDuVEt2z4ANNOpmIM2+D/gfK kBO98Yph0tNoIVEwsvBMPdpnGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3QpisX iWnxdLnXSUUeEfK11JcUMB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATSzr4MVhe5IQ1eGY62ZAMPsAepzcnIqsNQD7VtBl/6tF5g/zru8G5 Qouz5NYgnv9tNUts4CvipsdYviNLf35o/dofiHMyw8cIaoxU22nc/W3ZhyufeJu9 uBT9RCo9ZM/nNxmiNbuIAlznSxHIjHF6QwJXwox4DqqCQJe4/uu6xjuh26T7U1/Z mjRNuppX4yX09yqz/CdDS8jTWH5SsVeMHgmP8o9sXfGE70BPHsDpvM4vQvLM1tNr Xs5Q7ArYVuwe1c5sPPCmPK1crh+ydgEb+lO+dcZp+l1J1m5tbNtrN4hx9ykh6UWX 53JP+/zYJF5qiRwBE6NeeaK6jLiGxzqc -----END CERTIFICATE-----Generated at Sun Jun 15 07:11:37 2025 by rpki-client