$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft File: 78WCsqPLLBDooxZW548EvNW8UxA.mft (raw, json) Hash identifier: A2MN16sddqpi23hIDoR2xsIb0tSuSldg9jy2GFN9XXY= Subject key identifier: 67:C5:13:63:FF:3B:F6:B9:D7:D4:E8:08:FE:B0:C1:4F:A3:4D:58:7F Authority key identifier: EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10 Certificate issuer: /CN=A91D09A2/serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310 Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft Manifest number: 064C Signing time: Fri 30 May 2025 22:46:50 +0000 Manifest this update: Fri 30 May 2025 22:46:50 +0000 Manifest next update: Fri 06 Jun 2025 22:46:50 +0000 Files and hashes: 1: 78WCsqPLLBDooxZW548EvNW8UxA.crl (hash: fDFluOSRAJ/tEImXIttAZaUN43id0qDpUAbbnUBgkpw=) 2: 59AD29B88C6B11EBA286C569C4F9AE02.roa (hash: moTAt3VjmiOCHxAKpACaMWgI7E3LHjdxwtqNPvRROiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09A2, serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310 Validity Not Before: May 30 22:46:50 2025 GMT Not After : Jun 6 22:46:50 2025 GMT Subject: CN=683a355a-c7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:19:10:7b:cb:d7:0f:b2:50:49:df:13:82:4b: c4:cf:a5:be:fc:9e:c6:f2:10:fa:28:fa:31:74:3e: fa:ef:0f:25:ce:c2:b4:c4:08:94:e4:06:fc:26:a9: 37:18:c6:65:bf:98:5c:8e:c5:cf:3a:43:54:d3:e0: 94:04:0b:31:6d:de:fd:7e:74:75:4f:eb:70:e2:3c: fd:62:5d:2d:5d:6c:ad:b2:fe:55:52:72:93:8a:9a: 57:19:74:8f:fe:53:c3:e2:eb:a2:30:44:8a:42:41: 8b:69:e0:ff:b5:ab:c0:0a:5d:e2:90:de:0f:dc:3f: f9:52:ae:2e:b1:49:4b:6f:bb:9d:e9:3c:27:89:35: 86:4a:8a:10:7f:af:d2:c5:04:3f:86:13:d2:1f:59: 95:b8:26:aa:29:b6:be:fa:aa:7c:98:3a:a3:03:dd: 38:37:21:06:40:a7:0c:1c:49:c5:86:43:05:92:2e: 89:3b:8b:dc:ca:fc:ed:eb:a9:fe:e0:cf:9a:65:be: b7:e8:47:df:cc:02:79:db:bc:34:5a:42:b7:aa:f2: 12:ce:ca:3d:7c:2f:3b:a3:e7:44:c0:2f:bd:33:65: df:37:c8:c8:00:a2:7a:e3:a6:5f:b4:fe:03:89:b8: 71:3a:39:a7:51:02:27:a8:79:dd:98:fa:cc:a2:08: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C5:13:63:FF:3B:F6:B9:D7:D4:E8:08:FE:B0:C1:4F:A3:4D:58:7F X509v3 Authority Key Identifier: keyid:EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:38:9b:5a:8a:99:ba:bd:a9:cd:a4:87:36:09:1b:c8:1f:54: dc:bd:7f:43:f3:c5:24:21:cb:7a:6a:20:a0:32:ca:ee:19:4b: dd:97:a7:e6:01:01:8c:e0:53:23:50:50:26:ea:9a:43:f9:91: 0f:cc:3c:54:33:f0:47:ba:73:06:9d:ae:de:28:be:c3:58:3e: 8c:49:bd:6b:60:b9:39:a1:67:16:4c:46:78:ca:2d:46:1a:ac: 67:34:2f:12:80:b4:72:ff:d7:4a:02:1b:b5:2d:33:ed:61:bd: 58:7d:11:a5:09:22:ca:ca:8f:c3:95:51:8b:0a:f8:ce:2b:8b: cd:75:10:b2:03:07:78:4f:13:af:e5:8b:30:9b:7f:35:64:35: fc:55:13:0c:89:f4:91:36:56:11:0e:19:cf:63:37:56:9c:ad: 41:20:68:92:a7:5c:a4:53:ab:38:4a:ff:bc:49:1e:67:35:df: af:1c:45:08:bf:df:7e:13:06:ac:47:11:92:d8:2a:f0:85:83: 57:66:27:b5:91:f4:80:3a:d7:5a:11:fe:9c:8b:d5:a9:5d:53: 5a:34:5f:61:37:0e:f3:cd:48:40:f6:9a:28:96:35:37:66:6d: 10:68:41:25:a8:02:99:9c:64:74:89:18:52:8b:22:3a:f3:b3: 15:60:b8:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QTIxMTAvBgNVBAUTKEVGQzU4MkIyQTNDQjJDMTBFOEEzMTY1NkU3OEYwNEJD RDVCQzUzMTAwHhcNMjUwNTMwMjI0NjUwWhcNMjUwNjA2MjI0NjUwWjAYMRYwFAYD VQQDEw02ODNhMzU1YS1jN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3BkQe8vXD7JQSd8TgkvEz6W+/J7G8hD6KPoxdD767w8lzsK0xAiU5Ab8Jqk3 GMZlv5hcjsXPOkNU0+CUBAsxbd79fnR1T+tw4jz9Yl0tXWytsv5VUnKTippXGXSP /lPD4uuiMESKQkGLaeD/tavACl3ikN4P3D/5Uq4usUlLb7ud6TwniTWGSooQf6/S xQQ/hhPSH1mVuCaqKba++qp8mDqjA904NyEGQKcMHEnFhkMFki6JO4vcyvzt66n+ 4M+aZb636EffzAJ527w0WkK3qvISzso9fC87o+dEwC+9M2XfN8jIAKJ646ZftP4D ibhxOjmnUQInqHndmPrMogjf5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfFE2P/ O/a519ToCP6wwU+jTVh/MB8GA1UdIwQYMBaAFO/FgrKjyywQ6KMWVuePBLzVvFMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlBMi8xRkVCNUEyMDhD NkExMUVCOThERURENjhDNEY5QUUwMi83OFdDc3FQTExCRG9veFpXNTQ4RXZOVzhV eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4V0NzcVBMTEJEb294Wlc1NDhFdk5XOFV4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlBMi8xRkVCNUEyMDhDNkExMUVCOThERURENjhDNEY5QUUwMi83OFdDc3FQTExC RG9veFpXNTQ4RXZOVzhVeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYOJtaipm6vanNpIc2CRvIH1TcvX9D88UkIct6aiCgMsruGUvdl6fm AQGM4FMjUFAm6ppD+ZEPzDxUM/BHunMGna7eKL7DWD6MSb1rYLk5oWcWTEZ4yi1G GqxnNC8SgLRy/9dKAhu1LTPtYb1YfRGlCSLKyo/DlVGLCvjOK4vNdRCyAwd4TxOv 5Yswm381ZDX8VRMMifSRNlYRDhnPYzdWnK1BIGiSp1ykU6s4Sv+8SR5nNd+vHEUI v99+EwasRxGS2CrwhYNXZie1kfSAOtdaEf6ci9WpXVNaNF9hNw7zzUhA9pooljU3 Zm0QaEElqAKZnGR0iRhSiyI687MVYLiV -----END CERTIFICATE-----Generated at Sat May 31 16:35:05 2025 by rpki-client