$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft File: 78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json) Hash identifier: mgkHnFenZ1LbffuPuuiXKVs9NzgMldof1re0ibedu40= Subject key identifier: 20:CB:88:57:21:5C:D3:81:8F:74:68:60:BE:AA:74:4B:1A:A2:26:B5 Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft Manifest number: CC Signing time: Tue 01 Jul 2025 06:17:48 +0000 Manifest this update: Tue 01 Jul 2025 06:17:47 +0000 Manifest next update: Tue 08 Jul 2025 06:17:47 +0000 Files and hashes: 1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: 24oxHoTPsgcYx9Nt4q9y1SDi09Hf1pjvygDDlu7mHa8=) 2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: gGWIR4nH/QFD71GxDfh04qRa0gYEVkAhSwx6PRLquIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Validity Not Before: Jul 1 06:17:47 2025 GMT Not After : Jul 8 06:17:47 2025 GMT Subject: CN=68637d8c-3a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:56:fe:a0:db:38:14:14:3c:96:fd:91:3d:e7: a0:81:01:35:3f:b5:54:1e:1a:ec:33:99:69:d0:1e: 8d:28:6d:46:e2:9d:6c:80:65:e9:5c:4e:e7:2e:6c: 45:9a:a0:3f:a5:30:37:89:18:a5:9b:cd:90:77:69: b2:9f:5b:12:0b:6c:fb:3c:37:c7:87:78:de:86:80: 91:77:85:cc:aa:54:25:3c:09:f5:4b:a4:f9:f6:30: 08:72:8c:03:33:be:b0:b6:ec:07:bb:18:df:58:76: 83:6c:8e:4b:47:14:6d:33:63:9b:63:92:c4:d3:a4: 43:27:c8:80:86:46:e0:66:a7:6b:b7:b8:bb:74:ee: c9:0f:1d:07:8a:a1:27:a9:2d:58:ec:81:b8:25:b7: ac:0c:42:e2:1c:ec:a8:89:42:63:25:78:1f:15:33: a3:b8:94:17:33:14:8d:6d:a6:bb:09:57:36:20:cf: 9a:ba:ac:a7:55:93:b9:98:16:d8:0b:62:2f:a5:fe: 51:b2:b5:48:70:f9:9f:ef:f8:a1:93:f5:e2:11:86: bf:d1:bf:21:05:34:40:50:79:c5:41:b5:83:2f:6a: b0:a5:d8:57:89:27:ce:02:f3:f5:f3:ae:16:93:9b: 98:82:2c:0a:bf:0f:3c:3e:f6:bc:68:f2:21:3a:c1: 38:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CB:88:57:21:5C:D3:81:8F:74:68:60:BE:AA:74:4B:1A:A2:26:B5 X509v3 Authority Key Identifier: keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:90:4a:ee:d6:73:1e:1f:16:9e:fd:3a:19:50:be:89:a3:ed: fb:9c:c5:71:3e:a9:3c:0d:e0:3a:3d:e0:1a:a7:50:62:d4:e5: d1:52:2a:99:c8:b5:23:77:75:d7:da:98:19:95:91:f8:a1:e5: fd:8b:b7:5a:02:d9:b3:21:4e:13:dc:72:be:43:5a:c8:d8:06: e1:26:df:c8:7e:dc:0a:c1:56:ff:91:37:8d:bd:e0:99:c2:ba: 16:c6:51:26:cd:76:d4:c8:c4:b2:6b:63:dc:96:0f:a8:51:dc: 3d:a9:1d:cd:ea:1c:d2:fe:0a:54:d0:50:45:7f:45:2a:d1:a3: d5:c5:21:b8:78:7c:8f:b6:92:8e:7b:3f:f7:37:09:c9:b6:6f: 1f:25:36:dd:fe:6f:04:e7:a0:f3:e2:e3:a1:50:89:79:b9:6b: 34:e7:97:eb:b2:6f:44:76:8c:be:b0:c3:53:9f:5d:a5:d6:b4: f7:58:fb:b1:6e:ae:d3:88:e5:1b:5c:da:f2:2b:9c:45:36:91: 0b:c2:bc:fe:b1:03:a7:ca:00:33:d6:b7:f4:a2:9c:8c:57:9b: 7d:f4:ce:70:af:a5:b3:6b:5d:11:da:62:4d:11:02:19:b1:67: f7:f0:ec:22:20:82:3c:a5:e6:15:89:22:e4:e6:60:4d:31:40: 79:de:2d:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwQ0YxMTAvBgNVBAUTKEVGQzE3QjBEMTExMjZDN0ZBOTQxQkQ0RDBFQ0E3QUEz OUU5MzQ2QTAwHhcNMjUwNzAxMDYxNzQ3WhcNMjUwNzA4MDYxNzQ3WjAYMRYwFAYD VQQDEw02ODYzN2Q4Yy0zYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9lb+oNs4FBQ8lv2RPeeggQE1P7VUHhrsM5lp0B6NKG1G4p1sgGXpXE7nLmxF mqA/pTA3iRilm82Qd2myn1sSC2z7PDfHh3jehoCRd4XMqlQlPAn1S6T59jAIcowD M76wtuwHuxjfWHaDbI5LRxRtM2ObY5LE06RDJ8iAhkbgZqdrt7i7dO7JDx0HiqEn qS1Y7IG4JbesDELiHOyoiUJjJXgfFTOjuJQXMxSNbaa7CVc2IM+auqynVZO5mBbY C2Ivpf5RsrVIcPmf7/ihk/XiEYa/0b8hBTRAUHnFQbWDL2qwpdhXiSfOAvP1864W k5uYgiwKvw88Pva8aPIhOsE4UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDLiFch XNOBj3RoYL6qdEsaoia1MB8GA1UdIwQYMBaAFO/Bew0REmx/qUG9TQ7KeqOek0ag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBDRi83RTAxM0NEQTFG MTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JILXBRYjFORHNwNm81NlRS cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4RjdEUkVTYkgtcFFiMU5Ec3A2bzU2VFJxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjBDRi83RTAxM0NEQTFGMTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JI LXBRYjFORHNwNm81NlRScUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdkEru1nMeHxae/ToZUL6Jo+37nMVxPqk8DeA6PeAap1Bi1OXRUiqZ yLUjd3XX2pgZlZH4oeX9i7daAtmzIU4T3HK+Q1rI2AbhJt/IftwKwVb/kTeNveCZ wroWxlEmzXbUyMSya2Pclg+oUdw9qR3N6hzS/gpU0FBFf0Uq0aPVxSG4eHyPtpKO ez/3NwnJtm8fJTbd/m8E56Dz4uOhUIl5uWs055frsm9Edoy+sMNTn12l1rT3WPux bq7TiOUbXNryK5xFNpELwrz+sQOnygAz1rf0opyMV5t99M5wr6Wza10R2mJNEQIZ sWf38OwiIII8peYViSLk5mBNMUB53i1g -----END CERTIFICATE-----Generated at Thu Jul 3 06:00:51 2025 by rpki-client