$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft File: 78WCsqPLLBDooxZW548EvNW8UxA.mft (raw, json) Hash identifier: 6WDj+qrxWBM4hr0HEbLjCvi0cOG2nAhMjpjR0yIrT6s= Subject key identifier: 6B:80:7F:D6:25:2A:67:DD:61:64:DB:31:A1:B8:AB:74:8E:FC:74:58 Authority key identifier: EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10 Certificate issuer: /CN=A91D09A2/serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310 Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft Manifest number: 063B Signing time: Thu 24 Apr 2025 22:24:50 +0000 Manifest this update: Thu 24 Apr 2025 22:24:49 +0000 Manifest next update: Thu 01 May 2025 22:24:49 +0000 Files and hashes: 1: 78WCsqPLLBDooxZW548EvNW8UxA.crl (hash: S17MX72WIiVKVsWwylwj6E0t65iriY7O3v2p2Fb9R/o=) 2: 59AD29B88C6B11EBA286C569C4F9AE02.roa (hash: moTAt3VjmiOCHxAKpACaMWgI7E3LHjdxwtqNPvRROiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09A2, serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310 Validity Not Before: Apr 24 22:24:49 2025 GMT Not After : May 1 22:24:49 2025 GMT Subject: CN=680aba31-273d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:9b:68:78:20:70:7e:4a:dc:df:4e:bf:f6: 3f:81:87:9f:4f:4d:67:b5:95:9a:b0:7a:76:94:8b: 1b:4c:d6:30:ad:1f:d9:c2:d6:12:1b:1e:fd:9b:c9: 43:9c:16:fb:b5:2f:01:62:9c:6f:1e:04:18:3f:3a: a0:2a:3f:c0:ce:e1:14:8e:61:2c:94:c8:9d:c7:39: 51:c7:25:24:2c:07:1a:70:6b:1d:ab:f0:8a:96:4d: 15:f7:52:6c:03:50:f9:52:6e:cc:16:52:af:2a:2a: 1f:b2:4c:3d:6a:8e:48:e2:2b:fa:88:40:8a:d6:aa: 3a:ab:8c:e8:ce:c2:de:46:52:00:c8:be:28:04:ed: 14:05:3c:a0:8b:e4:e2:ce:55:a3:e8:e4:34:62:39: ee:21:7d:c7:c5:61:48:52:02:38:31:a1:f8:da:69: 30:af:05:69:4e:a1:a3:69:a1:76:eb:74:51:15:16: 09:2c:f1:ff:0d:db:0e:d1:b2:f1:82:41:fb:e8:c2: 75:fc:bb:06:94:00:62:0a:ab:c3:ff:02:36:67:47: 0c:92:41:50:f5:eb:77:a9:f7:aa:68:f4:1e:a7:56: e5:36:d8:0b:4f:9d:51:6d:34:bf:2f:9e:68:53:87: 03:61:40:95:35:25:fb:d6:f8:f5:c5:e6:4b:8a:61: da:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:80:7F:D6:25:2A:67:DD:61:64:DB:31:A1:B8:AB:74:8E:FC:74:58 X509v3 Authority Key Identifier: keyid:EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c7:e8:e8:2d:2e:32:7b:97:e8:d9:b0:10:bd:01:1d:ee:16: 42:dd:e6:b8:1d:f1:34:99:86:4a:88:95:44:71:68:53:93:55: f3:7c:f0:bf:d0:b7:74:e1:e5:8b:89:8a:5f:a6:02:39:d1:4c: 34:4b:e0:56:16:fd:52:86:46:05:a5:11:bf:1d:15:26:6d:d8: af:4c:90:98:8c:92:eb:58:6e:72:17:cd:cc:90:e7:4f:d7:ce: df:fe:98:7b:e8:b2:ca:df:d0:19:0b:ce:e9:63:b8:a5:d7:94: 6d:23:35:5a:f8:18:ce:85:8b:88:bc:d3:b5:9e:bb:46:79:3d: a7:73:e9:41:56:2f:f1:72:87:7c:ff:59:3e:b5:2f:57:73:24: e4:14:83:1e:fc:28:a9:bb:e1:44:31:06:2f:dc:a2:e5:d0:e0: d3:92:97:3d:83:16:20:e1:a3:35:84:76:25:e1:52:9b:d5:48: 0c:69:88:0e:ad:57:9a:f4:24:6a:3d:19:68:88:e2:e6:9f:65: 9a:e9:45:3e:2f:8e:69:e0:7c:b1:01:f4:a8:56:b1:04:1b:1d: a7:92:34:e2:8c:9e:2f:61:70:0c:c9:d2:68:35:06:91:31:3b: ba:b6:8b:70:41:c5:b0:d6:80:a1:36:1a:34:45:3a:9a:15:b5: b9:ff:5f:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QTIxMTAvBgNVBAUTKEVGQzU4MkIyQTNDQjJDMTBFOEEzMTY1NkU3OEYwNEJD RDVCQzUzMTAwHhcNMjUwNDI0MjIyNDQ5WhcNMjUwNTAxMjIyNDQ5WjAYMRYwFAYD VQQDEw02ODBhYmEzMS0yNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/ubaHggcH5K3N9Ov/Y/gYefT01ntZWasHp2lIsbTNYwrR/ZwtYSGx79m8lD nBb7tS8BYpxvHgQYPzqgKj/AzuEUjmEslMidxzlRxyUkLAcacGsdq/CKlk0V91Js A1D5Um7MFlKvKiofskw9ao5I4iv6iECK1qo6q4zozsLeRlIAyL4oBO0UBTygi+Ti zlWj6OQ0YjnuIX3HxWFIUgI4MaH42mkwrwVpTqGjaaF263RRFRYJLPH/DdsO0bLx gkH76MJ1/LsGlABiCqvD/wI2Z0cMkkFQ9et3qfeqaPQep1blNtgLT51RbTS/L55o U4cDYUCVNSX71vj1xeZLimHa0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuAf9Yl KmfdYWTbMaG4q3SO/HRYMB8GA1UdIwQYMBaAFO/FgrKjyywQ6KMWVuePBLzVvFMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlBMi8xRkVCNUEyMDhD NkExMUVCOThERURENjhDNEY5QUUwMi83OFdDc3FQTExCRG9veFpXNTQ4RXZOVzhV eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4V0NzcVBMTEJEb294Wlc1NDhFdk5XOFV4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlBMi8xRkVCNUEyMDhDNkExMUVCOThERURENjhDNEY5QUUwMi83OFdDc3FQTExC RG9veFpXNTQ4RXZOVzhVeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZx+joLS4ye5fo2bAQvQEd7hZC3ea4HfE0mYZKiJVEcWhTk1XzfPC/ 0Ld04eWLiYpfpgI50Uw0S+BWFv1ShkYFpRG/HRUmbdivTJCYjJLrWG5yF83MkOdP 187f/ph76LLK39AZC87pY7il15RtIzVa+BjOhYuIvNO1nrtGeT2nc+lBVi/xcod8 /1k+tS9XcyTkFIMe/Cipu+FEMQYv3KLl0ODTkpc9gxYg4aM1hHYl4VKb1UgMaYgO rVea9CRqPRloiOLmn2Wa6UU+L45p4HyxAfSoVrEEGx2nkjTijJ4vYXAMydJoNQaR MTu6totwQcWw1oChNho0RTqaFbW5/1+5 -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:47 2025 by rpki-client