$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft File: 78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json) Hash identifier: k7RQCPR6IVji6MFx28qbFc93FMP/uw7Lhjet2d0uMwM= Subject key identifier: D9:4A:4B:EC:FF:81:06:16:88:AC:2E:16:85:FE:D6:A8:50:C4:F7:CB Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft Manifest number: 9E Signing time: Thu 03 Apr 2025 05:30:48 +0000 Manifest this update: Thu 03 Apr 2025 05:30:48 +0000 Manifest next update: Thu 10 Apr 2025 05:30:48 +0000 Files and hashes: 1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: +HbIHixGTvrcgMKaSBB8+/+gew/JFtB4mV5wPEbEH8c=) 2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: xNbG/utcKUstvbI/+h9lWTxk2xr/yLWlvLD0rYAm3fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B0CF Validity Not Before: Apr 3 05:30:48 2025 GMT Not After : Apr 10 05:30:48 2025 GMT Subject: CN=67ee1d08-4de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:03:6a:4c:97:31:59:b7:b2:e6:b0:ea:c9:10: 25:ef:aa:27:b7:11:9a:5e:cb:99:a6:95:44:07:e6: b4:ff:a9:db:61:44:37:6a:87:81:aa:81:69:83:ba: 87:f2:1e:75:77:ed:d4:73:b7:e3:4e:de:51:0d:de: 68:1a:31:e9:d2:cd:9c:00:e2:f0:62:a7:e4:1e:ac: 57:a4:ec:8e:96:3d:95:2a:c0:72:5c:7f:80:34:5c: 94:15:c3:bf:9b:07:30:78:de:bc:53:f1:30:09:fb: 97:9c:b4:f6:66:87:b1:ba:5b:c2:73:af:53:6f:17: 49:dc:5e:6a:71:f0:8f:a9:19:22:2a:ee:50:9f:1a: 7e:47:64:68:91:1d:97:55:8c:f8:04:ed:fe:cf:66: 62:98:8f:e5:ce:3a:42:43:38:8a:e4:39:4d:96:e6: 83:ef:c4:97:f1:e0:76:cb:48:fc:61:13:dd:3f:80: d8:3b:6c:84:cf:b4:6a:b9:e2:22:51:ca:c0:a1:6c: 95:83:c3:74:db:ef:54:61:74:bf:d0:79:9d:94:f6: a6:fe:9d:19:00:61:e7:e4:81:42:40:6b:e7:cd:95: 89:eb:fd:98:bc:79:09:d9:16:db:0f:39:98:6a:33: 29:c7:a1:af:7d:0a:8c:28:fe:0a:20:d4:55:13:b1: 47:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4A:4B:EC:FF:81:06:16:88:AC:2E:16:85:FE:D6:A8:50:C4:F7:CB X509v3 Authority Key Identifier: keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0f:e7:32:6f:7d:37:29:76:76:cc:53:a3:99:6d:bc:3d:7d: 18:2c:cc:42:a7:13:a7:77:b1:1a:c1:8e:20:c9:08:a5:7a:8e: 1e:d0:12:6b:1f:0c:0d:2d:30:81:2b:99:3d:f2:46:cb:4e:3c: e0:3c:e8:94:40:57:89:1f:fb:fd:02:cd:09:cd:1a:03:39:87: b1:09:3b:25:01:b7:11:57:14:22:02:52:c1:0c:d2:9d:c0:40: 37:28:39:29:9b:e4:17:49:e1:08:c6:ca:77:55:63:33:ae:b9: ac:4b:a1:95:c6:a8:54:47:2f:1d:ba:78:0d:0e:f7:3c:09:f5: fa:af:48:fc:c0:31:ec:38:5f:45:fa:c7:ab:85:e3:a2:00:62: 36:06:b1:de:79:ff:f7:90:db:71:7f:16:59:ef:7f:01:3c:36: 51:03:42:7e:d8:af:6a:ad:7a:ee:97:02:33:e7:4e:6f:65:8e: a6:65:31:43:da:17:5d:aa:bc:ac:f8:f6:d8:66:69:cd:5e:e3: a7:2c:57:04:b7:75:a8:a5:df:b1:00:b9:dd:38:a9:ac:99:eb: 7a:c8:12:50:42:e1:6f:ab:87:ec:02:f5:6b:3b:9e:a1:8e:97: 80:7b:35:a3:05:8f:5a:50:77:1d:2d:8b:1b:60:b9:b4:f1:ff: 7d:e7:9a:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwQ0YxMTAvBgNVBAUTKEVGQzE3QjBEMTExMjZDN0ZBOTQxQkQ0RDBFQ0E3QUEz OUU5MzQ2QTAwHhcNMjUwNDAzMDUzMDQ4WhcNMjUwNDEwMDUzMDQ4WjAYMRYwFAYD VQQDEw02N2VlMWQwOC00ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8wNqTJcxWbey5rDqyRAl76ontxGaXsuZppVEB+a0/6nbYUQ3aoeBqoFpg7qH 8h51d+3Uc7fjTt5RDd5oGjHp0s2cAOLwYqfkHqxXpOyOlj2VKsByXH+ANFyUFcO/ mwcweN68U/EwCfuXnLT2ZoexulvCc69TbxdJ3F5qcfCPqRkiKu5Qnxp+R2RokR2X VYz4BO3+z2ZimI/lzjpCQziK5DlNluaD78SX8eB2y0j8YRPdP4DYO2yEz7RqueIi UcrAoWyVg8N02+9UYXS/0HmdlPam/p0ZAGHn5IFCQGvnzZWJ6/2YvHkJ2RbbDzmY ajMpx6GvfQqMKP4KINRVE7FH7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlKS+z/ gQYWiKwuFoX+1qhQxPfLMB8GA1UdIwQYMBaAFO/Bew0REmx/qUG9TQ7KeqOek0ag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBDRi83RTAxM0NEQTFG MTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JILXBRYjFORHNwNm81NlRS cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4RjdEUkVTYkgtcFFiMU5Ec3A2bzU2VFJxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjBDRi83RTAxM0NEQTFGMTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JI LXBRYjFORHNwNm81NlRScUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOD+cyb303KXZ2zFOjmW28PX0YLMxCpxOnd7EawY4gyQileo4e0BJr HwwNLTCBK5k98kbLTjzgPOiUQFeJH/v9As0JzRoDOYexCTslAbcRVxQiAlLBDNKd wEA3KDkpm+QXSeEIxsp3VWMzrrmsS6GVxqhURy8dungNDvc8CfX6r0j8wDHsOF9F +serheOiAGI2BrHeef/3kNtxfxZZ738BPDZRA0J+2K9qrXrulwIz505vZY6mZTFD 2hddqrys+PbYZmnNXuOnLFcEt3Wopd+xALndOKmsmet6yBJQQuFvq4fsAvVrO56h jpeAezWjBY9aUHcdLYsbYLm08f9955py -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:51 2025 by rpki-client