$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft File: 79iPiiibFMeUQxKLu7eRtS2lEa0.mft (raw, json) Hash identifier: SZsjvfFUBLmI85jl9rYv3IC/zc+vJqIikBAAkbO1e4M= Subject key identifier: 73:C4:DB:E7:3B:DE:79:27:BF:97:B4:67:6F:D8:C3:C3:67:76:46:8F Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD Certificate issuer: /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft Manifest number: 01AB Signing time: Sat 31 May 2025 02:55:43 +0000 Manifest this update: Sat 31 May 2025 02:55:42 +0000 Manifest next update: Sat 07 Jun 2025 02:55:42 +0000 Files and hashes: 1: 79iPiiibFMeUQxKLu7eRtS2lEa0.crl (hash: t8W7fiV2C5vPn9NQo7qZsKAr+2kY4w6Vy5NTGR1M0TI=) 2: 9344B512B1BA11ED8DC4D42EC4F9AE02.roa (hash: 05FYul9tCmnEluZqc+GxuuNUpvwFpQ5F6tjIORKsJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Validity Not Before: May 31 02:55:42 2025 GMT Not After : Jun 7 02:55:42 2025 GMT Subject: CN=683a6faf-842b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:de:40:6c:c3:87:d6:2b:30:b4:e2:d7:8f:35: e1:14:d6:a6:db:13:91:0d:84:d0:3b:0b:83:45:f5: 8d:e6:e0:5b:01:95:08:e5:6a:a5:cc:60:c7:f9:b0: 9e:b2:a0:a3:93:7b:81:e7:fe:6a:24:ac:a5:64:5c: 2d:d5:fa:92:93:34:4d:93:c3:19:44:28:26:89:99: 7c:5a:f7:b5:07:fd:e7:fe:01:8e:b4:19:b8:31:49: d1:4c:36:ea:7e:1d:67:9c:d0:35:93:15:99:35:9e: 35:72:fc:88:48:35:51:e7:9b:34:1c:7d:67:b1:93: d9:a4:81:84:ad:f7:2c:7f:e6:46:b4:c2:c7:4d:e4: 6e:ec:14:12:9b:f7:90:f9:50:11:ee:c6:b8:fd:69: 16:1a:ee:d9:01:96:26:03:0d:dc:4a:94:3f:53:d6: 89:9f:f8:90:d5:f5:17:91:28:75:74:13:37:b4:a5: 19:eb:a4:27:7c:2f:b8:11:7c:3a:73:7b:5e:23:bf: 07:d7:aa:79:4c:94:41:44:ea:ad:e0:11:06:0b:1f: a2:fc:6e:03:c6:38:90:f6:7a:4c:39:1d:98:9b:46: 0e:c7:de:f0:38:1a:c9:47:32:59:d2:e7:e6:9c:f0: c9:7d:00:fb:89:e4:97:33:dc:a4:9e:f1:d7:47:88: 5c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C4:DB:E7:3B:DE:79:27:BF:97:B4:67:6F:D8:C3:C3:67:76:46:8F X509v3 Authority Key Identifier: keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:55:5c:05:fc:40:d5:b3:31:04:be:c1:d2:31:05:dc:29:21: ee:c7:b8:cb:69:09:63:3c:63:38:83:5c:54:f9:55:c9:e9:f0: 98:2f:9f:23:14:f6:0b:f9:4d:5a:54:22:c5:66:8f:63:6b:81: 8c:f2:55:41:98:e2:54:6b:cf:48:12:5e:74:60:32:ab:e9:d0: 0c:92:c7:18:2d:36:32:b2:04:73:07:9c:a1:34:ce:2e:7c:60: 37:3d:06:35:0a:b7:86:91:2e:8e:86:6c:05:04:7b:3c:ff:e8: 69:01:2b:ba:ba:fe:6d:1b:07:00:30:8b:5d:e1:b6:5f:8f:ae: 64:f1:34:8c:9c:27:24:98:86:e7:d0:0e:8f:dc:a0:d1:7c:54: 1e:68:92:ce:03:79:11:d0:1d:ed:26:fc:22:ba:d0:8b:df:b1: b8:31:28:05:ca:e1:55:38:a8:69:06:27:a8:b7:0d:f4:61:84: 9a:2f:84:09:77:77:ee:fc:c1:e8:50:2f:c0:b1:58:77:00:18: a4:f4:e3:8a:d8:af:1e:eb:13:79:27:f5:7c:1a:bd:a9:68:ea: 13:bb:dd:a1:8a:04:35:f3:1e:4c:43:99:60:9b:47:09:7d:99: 4f:62:b9:be:6b:5a:5a:25:73:7a:90:d3:31:b9:c5:06:74:e5: e9:0a:24:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0YxMTAvBgNVBAUTKEVGRDg4RjhBMjg5QjE0Qzc5NDQzMTI4QkJCQjc5MUI1 MkRBNTExQUQwHhcNMjUwNTMxMDI1NTQyWhcNMjUwNjA3MDI1NTQyWjAYMRYwFAYD VQQDEw02ODNhNmZhZi04NDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0d5AbMOH1iswtOLXjzXhFNam2xORDYTQOwuDRfWN5uBbAZUI5WqlzGDH+bCe sqCjk3uB5/5qJKylZFwt1fqSkzRNk8MZRCgmiZl8Wve1B/3n/gGOtBm4MUnRTDbq fh1nnNA1kxWZNZ41cvyISDVR55s0HH1nsZPZpIGErfcsf+ZGtMLHTeRu7BQSm/eQ +VAR7sa4/WkWGu7ZAZYmAw3cSpQ/U9aJn/iQ1fUXkSh1dBM3tKUZ66QnfC+4EXw6 c3teI78H16p5TJRBROqt4BEGCx+i/G4DxjiQ9npMOR2Ym0YOx97wOBrJRzJZ0ufm nPDJfQD7ieSXM9yknvHXR4hc8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPE2+c7 3nknv5e0Z2/Yw8NndkaPMB8GA1UdIwQYMBaAFO/Yj4oomxTHlEMSi7u3kbUtpRGt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzRi85QjlDOEU2QUIx QjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZNZVVReEtMdTdlUnRTMmxF YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5aVBpaWliRk1lVVF4S0x1N2VSdFMybEVhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzRi85QjlDOEU2QUIxQjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZN ZVVReEtMdTdlUnRTMmxFYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGVVwF/EDVszEEvsHSMQXcKSHux7jLaQljPGM4g1xU+VXJ6fCYL58j FPYL+U1aVCLFZo9ja4GM8lVBmOJUa89IEl50YDKr6dAMkscYLTYysgRzB5yhNM4u fGA3PQY1CreGkS6OhmwFBHs8/+hpASu6uv5tGwcAMItd4bZfj65k8TSMnCckmIbn 0A6P3KDRfFQeaJLOA3kR0B3tJvwiutCL37G4MSgFyuFVOKhpBieotw30YYSaL4QJ d3fu/MHoUC/AsVh3ABik9OOK2K8e6xN5J/V8Gr2paOoTu92higQ18x5MQ5lgm0cJ fZlPYrm+a1paJXN6kNMxucUGdOXpCiSP -----END CERTIFICATE-----Generated at Sat May 31 17:27:59 2025 by rpki-client