$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft File: 79cHaffoVdJXok1qHUkDlQqzadM.mft (raw, json) Hash identifier: I4vYdzw/eIJS9K6NxQZmSyO8ex5RzBiUOaToOJFhxJ0= Subject key identifier: 82:CB:CF:3C:DB:1A:15:90:42:56:7D:2E:B4:E5:3B:A1:10:34:85:CC Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3 Certificate issuer: /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3 Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft Manifest number: 0662 Signing time: Wed 02 Apr 2025 22:22:02 +0000 Manifest this update: Wed 02 Apr 2025 22:22:01 +0000 Manifest next update: Wed 09 Apr 2025 22:22:01 +0000 Files and hashes: 1: 79cHaffoVdJXok1qHUkDlQqzadM.crl (hash: N0MQXHxZW/PytAosCSAxYr6A/XOGd4RwNI+tdFDzPIA=) 2: 9E924168765811EB9E261F25C4F9AE02.roa (hash: gf+XHv/B7y9fMOtlEsCMLfQ4eU62pqLRv/z7H7sAxg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBE37 Validity Not Before: Apr 2 22:22:01 2025 GMT Not After : Apr 9 22:22:01 2025 GMT Subject: CN=67edb889-f27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:d3:4b:84:2d:88:c4:c0:7a:ef:06:c9:1f: ac:d2:ec:af:c6:7e:24:f6:83:89:7e:bf:7f:72:be: aa:50:7d:4c:c6:8e:fd:ad:0c:4f:ec:b6:a5:7f:99: 76:db:c9:c8:bd:02:f9:1b:23:f7:87:41:85:0a:45: 68:85:c8:68:37:0b:9e:f0:5d:6a:65:ff:22:61:a7: 09:11:e4:8d:08:7f:41:c9:0a:db:a9:9d:cc:05:fa: ec:e5:57:00:2f:77:f7:8a:9e:1d:fa:45:cb:ad:93: ca:0e:22:8f:31:ce:c6:a0:59:50:c5:0f:47:6d:cb: 05:9f:c3:8d:4f:03:c6:1d:e3:bc:a7:b0:da:40:52: 8f:c4:bf:88:58:87:1f:9c:1e:9e:91:82:58:75:05: d7:4b:cc:09:71:9b:88:02:47:3e:bb:72:a2:64:0c: 75:6a:7a:73:0f:c5:e5:65:91:5c:bb:5d:6d:a7:a1: fa:e8:d2:08:b8:af:25:21:2e:17:0c:34:46:2c:5e: 3a:d2:08:33:c0:39:29:11:ad:9c:49:ca:a7:a4:cc: 8f:7b:b9:4a:a5:12:e8:1c:1d:f5:5d:b1:89:0f:18: 9e:0e:32:ec:be:d2:ce:f2:2c:0c:36:28:3c:3c:c3: d9:27:29:b2:be:71:55:64:a7:c2:44:29:9b:30:cd: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CB:CF:3C:DB:1A:15:90:42:56:7D:2E:B4:E5:3B:A1:10:34:85:CC X509v3 Authority Key Identifier: keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:1a:84:8e:6c:ba:1a:9c:36:bd:0b:30:d2:a9:b6:8b:4e:14: 65:e0:db:6f:e8:89:85:e9:04:03:b7:1e:a4:d1:0b:5f:c9:8b: 59:bd:77:bd:0f:88:37:34:e5:d9:62:5d:e3:bd:be:ff:7b:f2: 44:45:d2:c7:40:19:f3:6a:23:64:21:ea:a4:e0:43:22:ef:ec: 6b:69:07:34:50:84:b5:a4:4e:3b:6d:10:0d:55:5f:3d:9c:e3: 6b:fc:ae:28:eb:98:39:47:34:af:fa:2b:b8:55:49:29:ee:12: 87:95:8f:6e:9d:ae:de:b6:5b:8c:37:e6:02:c8:33:05:fa:5e: ee:c5:a8:7a:e7:33:c2:5b:2c:5f:37:b7:9f:42:78:ab:54:13: c1:98:af:30:3c:58:1c:a7:80:75:44:83:85:e1:ca:e0:7f:10: 82:6a:8e:ca:cd:d8:46:66:30:2c:30:af:11:25:fa:7e:23:bd: 6d:40:51:1d:e6:a5:73:d4:0b:4b:9e:66:7e:a5:b1:f7:23:d4: 52:a1:5c:c9:91:da:25:ef:f7:56:a6:d7:d3:15:70:92:76:c1: 0f:2a:64:ca:d8:30:74:56:c0:e2:04:0c:c0:d1:99:4e:f7:45: 0b:7f:85:d1:9d:b5:4e:ed:51:e8:2b:38:d0:f6:f7:ce:7f:c1: 4a:59:e3:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJFMzcxMTAvBgNVBAUTKEVGRDcwNzY5RjdFODU1RDI1N0EyNEQ2QTFENDkwMzk1 MEFCMzY5RDMwHhcNMjUwNDAyMjIyMjAxWhcNMjUwNDA5MjIyMjAxWjAYMRYwFAYD VQQDEw02N2VkYjg4OS1mMjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhXTS4QtiMTAeu8GyR+s0uyvxn4k9oOJfr9/cr6qUH1Mxo79rQxP7Lalf5l2 28nIvQL5GyP3h0GFCkVohchoNwue8F1qZf8iYacJEeSNCH9ByQrbqZ3MBfrs5VcA L3f3ip4d+kXLrZPKDiKPMc7GoFlQxQ9HbcsFn8ONTwPGHeO8p7DaQFKPxL+IWIcf nB6ekYJYdQXXS8wJcZuIAkc+u3KiZAx1anpzD8XlZZFcu11tp6H66NIIuK8lIS4X DDRGLF460ggzwDkpEa2cScqnpMyPe7lKpRLoHB31XbGJDxieDjLsvtLO8iwMNig8 PMPZJymyvnFVZKfCRCmbMM1VqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILLzzzb GhWQQlZ9LrTlO6EQNIXMMB8GA1UdIwQYMBaAFO/XB2n36FXSV6JNah1JA5UKs2nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkUzNy82QTM1RTNEMDc2 NTcxMUVCOTk3REI0MjRDNEY5QUUwMi83OWNIYWZmb1ZkSlhvazFxSFVrRGxRcXph ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5Y0hhZmZvVmRKWG9rMXFIVWtEbFFxemFkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkUzNy82QTM1RTNEMDc2NTcxMUVCOTk3REI0MjRDNEY5QUUwMi83OWNIYWZmb1Zk SlhvazFxSFVrRGxRcXphZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYGoSObLoanDa9CzDSqbaLThRl4Ntv6ImF6QQDtx6k0QtfyYtZvXe9 D4g3NOXZYl3jvb7/e/JERdLHQBnzaiNkIeqk4EMi7+xraQc0UIS1pE47bRANVV89 nONr/K4o65g5RzSv+iu4VUkp7hKHlY9una7etluMN+YCyDMF+l7uxah65zPCWyxf N7efQnirVBPBmK8wPFgcp4B1RIOF4crgfxCCao7KzdhGZjAsMK8RJfp+I71tQFEd 5qVz1AtLnmZ+pbH3I9RSoVzJkdol7/dWptfTFXCSdsEPKmTK2DB0VsDiBAzA0ZlO 90ULf4XRnbVO7VHoKzjQ9vfOf8FKWeMR -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:12 2025 by rpki-client