$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json) Hash identifier: GlwPGsheUzHSqlhU2LaGXGsBaDDoWUZ4Lcdl5ZV4OlI= Subject key identifier: 2D:FB:B8:5E:37:0B:CF:72:BD:14:40:DC:E2:A0:16:9A:16:60:7C:BE Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Certificate serial: 0353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft Manifest number: 034F Signing time: Sat 05 Apr 2025 01:09:28 +0000 Manifest this update: Sat 05 Apr 2025 01:09:28 +0000 Manifest next update: Sat 12 Apr 2025 01:09:28 +0000 Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: I0qtLj8nUyFf+DxGw3H/OFvRsztVofsuJ8bwHu42c0M=) 2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: mfWKFm3R9Zz1cfvfe7gZWjinbVCRooVyIR4rmFi/Bec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7700 Validity Not Before: Apr 5 01:09:28 2025 GMT Not After : Apr 12 01:09:28 2025 GMT Subject: CN=67f082c8-7d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0f:aa:c3:7d:c4:b7:3e:a2:bd:a8:bd:7c:fe: 93:6f:16:e9:c1:2d:f2:3e:6f:33:29:45:3f:fd:f1: cc:4e:2c:a4:29:72:98:97:7e:96:2a:dd:cb:74:96: 5e:63:9d:70:f6:3c:69:1e:7f:cf:14:1a:8b:07:63: 04:ef:8b:cf:0b:fc:76:0d:a9:e9:f0:38:8c:cb:2d: e8:79:42:cc:a9:bd:84:25:d0:db:69:e0:97:b7:74: c5:15:f6:3a:e3:a6:30:3a:06:01:4d:d1:ec:1b:74: e7:12:d1:09:41:11:01:39:2f:86:75:d2:c8:8a:f0: 2f:24:69:58:e1:6c:e9:ac:36:0a:0e:d9:98:07:7a: 30:13:8a:e0:42:97:d5:6f:ab:30:0c:5d:f6:c3:5d: 42:a1:d8:2f:7e:4f:52:e9:2d:2e:79:cc:ef:c2:11: b1:93:28:63:8e:cb:24:b3:81:d5:10:55:60:3c:ca: 9d:25:62:78:cd:0a:83:28:13:58:c9:bc:84:33:6e: 27:99:9d:e2:91:20:d1:1a:f8:f8:6f:7a:51:8a:dc: 6b:3f:0b:67:e5:1e:ba:be:cb:6c:d6:dd:99:32:b3: c1:9f:24:2a:1e:5e:88:4b:6a:84:99:bf:0c:76:63: b9:33:c3:d9:c1:fc:23:43:3c:fd:c6:39:99:69:cd: 83:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FB:B8:5E:37:0B:CF:72:BD:14:40:DC:E2:A0:16:9A:16:60:7C:BE X509v3 Authority Key Identifier: keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:4e:d4:e2:2c:99:91:6e:2f:4a:c0:78:41:15:b9:dd:bd:a8: ae:b8:87:af:c9:43:65:b0:ea:2d:01:34:cd:b7:c6:7d:32:55: 9c:ae:11:7d:a3:65:07:38:d5:57:33:92:ad:13:37:a0:7d:b1: 78:73:cc:62:df:80:21:93:49:76:44:de:5c:2d:3f:50:ba:97: b3:23:f0:f2:3c:9b:80:47:3d:47:88:ac:d5:c6:82:b7:7a:b8: 8f:ed:05:f7:75:98:a8:06:b4:0f:46:76:16:f3:7d:7f:5d:19: 8b:67:d5:72:c9:e4:d9:e9:69:e4:4d:a3:54:0a:aa:e5:ae:8e: ce:6e:7d:2b:27:4e:82:6f:47:eb:05:da:44:3c:a4:e6:3b:ad: 89:b9:04:1c:bd:3b:9e:0e:08:04:a1:cd:9d:e3:e1:ff:1d:d6: e9:86:9d:9e:03:b0:94:91:f5:09:a1:a9:0e:f5:2e:fd:21:89: 58:ff:0a:79:67:62:05:e1:f0:af:9b:21:73:e6:c4:a4:e8:df: ce:f8:2d:6a:c7:a4:c8:06:00:6d:d8:85:80:20:b8:da:b9:7d: 8f:3f:ea:c9:dc:61:cb:10:76:16:5c:37:a7:f1:db:88:4d:f4: 9a:cd:8a:43:fc:ff:5e:f5:09:a5:1a:26:64:3c:aa:62:ab:4a: 97:b7:6a:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG NUQzMEYxRjIwHhcNMjUwNDA1MDEwOTI4WhcNMjUwNDEyMDEwOTI4WjAYMRYwFAYD VQQDEw02N2YwODJjOC03ZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyA+qw33Etz6ivai9fP6TbxbpwS3yPm8zKUU//fHMTiykKXKYl36WKt3LdJZe Y51w9jxpHn/PFBqLB2ME74vPC/x2Danp8DiMyy3oeULMqb2EJdDbaeCXt3TFFfY6 46YwOgYBTdHsG3TnEtEJQREBOS+GddLIivAvJGlY4WzprDYKDtmYB3owE4rgQpfV b6swDF32w11Codgvfk9S6S0ueczvwhGxkyhjjssks4HVEFVgPMqdJWJ4zQqDKBNY ybyEM24nmZ3ikSDRGvj4b3pRitxrPwtn5R66vsts1t2ZMrPBnyQqHl6IS2qEmb8M dmO5M8PZwfwjQzz9xjmZac2DaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC37uF43 C89yvRRA3OKgFpoWYHy+MB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGTtTiLJmRbi9KwHhBFbndvaiuuIevyUNlsOotATTNt8Z9MlWcrhF9 o2UHONVXM5KtEzegfbF4c8xi34Ahk0l2RN5cLT9QupezI/DyPJuARz1HiKzVxoK3 eriP7QX3dZioBrQPRnYW831/XRmLZ9VyyeTZ6WnkTaNUCqrlro7Obn0rJ06Cb0fr BdpEPKTmO62JuQQcvTueDggEoc2d4+H/Hdbphp2eA7CUkfUJoakO9S79IYlY/wp5 Z2IF4fCvmyFz5sSk6N/O+C1qx6TIBgBt2IWAILjauX2PP+rJ3GHLEHYWXDen8duI TfSazYpD/P9e9QmlGiZkPKpiq0qXt2og -----END CERTIFICATE-----Generated at Sat Apr 5 16:20:32 2025 by rpki-client