$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json) Hash identifier: HDEeY77IckqYeSg/hFnafkO+p79bn+sgqhDKTUfnNuc= Subject key identifier: 92:90:11:7A:43:04:9A:55:97:CD:C6:D0:8D:54:0E:68:36:AF:48:1C Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Certificate serial: 0388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft Manifest number: 0384 Signing time: Mon 21 Jul 2025 01:06:41 +0000 Manifest this update: Mon 21 Jul 2025 01:06:41 +0000 Manifest next update: Mon 28 Jul 2025 01:06:41 +0000 Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: bd+nGYgVdmsn42Xoo2k8es/nOyhJ8OtkCHLDGQcuN5Q=) 2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: mfWKFm3R9Zz1cfvfe7gZWjinbVCRooVyIR4rmFi/Bec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Validity Not Before: Jul 21 01:06:41 2025 GMT Not After : Jul 28 01:06:41 2025 GMT Subject: CN=687d92a1-5fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:23:bb:a9:70:87:2b:63:91:7a:05:15:35: fc:85:be:f5:5a:32:62:6b:4f:7a:89:00:fc:f7:be: c0:4c:f0:7f:89:48:ce:2d:bf:45:25:4d:37:ef:4f: 56:0e:8e:95:1e:8f:a6:61:8d:23:01:e1:91:07:5f: e1:48:d5:dc:52:2f:e8:22:55:bf:d1:ee:69:90:ae: b4:d0:74:21:4e:b0:5d:ae:18:87:71:e9:99:76:86: 3d:74:37:a7:db:f6:b9:52:23:12:47:80:b9:e7:14: a9:0e:10:26:78:97:77:24:78:40:58:36:f2:7b:85: ae:ad:d2:bf:85:ea:de:c1:6e:9a:9a:05:9b:5b:97: 28:a7:3b:2d:c2:ad:14:23:9f:90:0f:b2:55:5a:9c: 01:fc:d8:8b:d8:13:8f:a7:ce:a8:b8:55:20:99:fb: 96:28:4e:dd:8e:fd:47:6f:4d:d1:2f:e7:29:a1:13: 9d:80:bf:d0:7b:b3:fc:d1:a0:76:d5:f5:80:8f:e4: 6c:81:20:16:d5:d0:55:4b:98:09:27:e6:d3:92:bb: 28:44:88:03:15:71:c2:d0:6d:a7:92:17:f1:34:b6: 2a:6a:3a:a4:76:c7:fc:4f:0d:50:9c:43:f4:0f:e5: c6:e1:11:b5:31:02:04:ce:c5:f5:7d:2b:18:87:99: b7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:90:11:7A:43:04:9A:55:97:CD:C6:D0:8D:54:0E:68:36:AF:48:1C X509v3 Authority Key Identifier: keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:10:ca:36:f8:fa:90:bb:7d:2c:0e:1a:8c:42:c1:86:4a:39: 4b:db:35:34:bc:9e:17:4d:7d:7b:3e:11:2b:3d:e3:a0:8d:ff: 77:2c:02:30:91:e2:7b:90:09:e8:de:77:e2:90:4f:29:97:f0: 1c:03:7a:10:3d:39:39:1d:45:f5:2e:f8:cc:83:16:44:82:92: 49:32:1d:f8:31:9e:7d:63:d0:27:72:6c:91:aa:59:a4:f8:c1: 70:24:a6:8b:33:c4:24:53:4a:02:44:38:c8:88:3b:84:3b:e2: a2:2c:d6:a6:b6:ac:a0:f3:5e:d2:ee:d7:c9:9e:81:ae:a7:93: 10:bc:83:24:e9:9f:49:1d:d8:84:f9:ac:47:e2:d1:4a:0f:eb: 42:20:70:07:86:6c:fc:20:5e:31:ed:aa:b8:37:fb:7a:c7:d6: ac:61:2d:a6:c8:c5:09:f7:c9:4e:d6:a2:8b:27:10:60:86:f7: f7:0f:f9:a1:2e:67:24:6c:09:df:8a:d1:95:a6:ec:88:59:11: 35:77:b6:03:52:dc:c2:d8:ba:15:f6:84:8c:0e:01:25:24:a1: 94:96:11:83:5d:6b:69:3b:b8:55:15:f4:98:ad:3d:c8:23:75: 25:0a:19:46:35:33:55:eb:e9:39:93:4d:5c:4d:48:6c:83:19: 07:1c:70:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG NUQzMEYxRjIwHhcNMjUwNzIxMDEwNjQxWhcNMjUwNzI4MDEwNjQxWjAYMRYwFAYD VQQDEw02ODdkOTJhMS01ZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsckju6lwhytjkXoFFTX8hb71WjJia096iQD8977ATPB/iUjOLb9FJU03709W Do6VHo+mYY0jAeGRB1/hSNXcUi/oIlW/0e5pkK600HQhTrBdrhiHcemZdoY9dDen 2/a5UiMSR4C55xSpDhAmeJd3JHhAWDbye4WurdK/herewW6amgWbW5copzstwq0U I5+QD7JVWpwB/NiL2BOPp86ouFUgmfuWKE7djv1Hb03RL+cpoROdgL/Qe7P80aB2 1fWAj+RsgSAW1dBVS5gJJ+bTkrsoRIgDFXHC0G2nkhfxNLYqajqkdsf8Tw1QnEP0 D+XG4RG1MQIEzsX1fSsYh5m3WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKQEXpD BJpVl83G0I1UDmg2r0gcMB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkEMo2+PqQu30sDhqMQsGGSjlL2zU0vJ4XTX17PhErPeOgjf93LAIw keJ7kAno3nfikE8pl/AcA3oQPTk5HUX1LvjMgxZEgpJJMh34MZ59Y9AncmyRqlmk +MFwJKaLM8QkU0oCRDjIiDuEO+KiLNamtqyg817S7tfJnoGup5MQvIMk6Z9JHdiE +axH4tFKD+tCIHAHhmz8IF4x7aq4N/t6x9asYS2myMUJ98lO1qKLJxBghvf3D/mh LmckbAnfitGVpuyIWRE1d7YDUtzC2LoV9oSMDgElJKGUlhGDXWtpO7hVFfSYrT3I I3UlChlGNTNV6+k5k01cTUhsgxkHHHA0 -----END CERTIFICATE-----Generated at Mon Jul 21 12:33:14 2025 by rpki-client