$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft File: 78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json) Hash identifier: xMrCtrEBiBGi8TeyVoNvGZ7rM7UqjrdtakGhmG12tvQ= Subject key identifier: 31:DC:18:55:49:5E:C2:72:40:00:35:25:74:B3:D4:8B:2C:9E:B3:65 Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft Manifest number: B2 Signing time: Tue 13 May 2025 05:11:03 +0000 Manifest this update: Tue 13 May 2025 05:11:03 +0000 Manifest next update: Tue 20 May 2025 05:11:03 +0000 Files and hashes: 1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: 2LDbylXSTsM5zoLEy3yayvqKuS5Ks7UvcDQp+e5++EY=) 2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: xNbG/utcKUstvbI/+h9lWTxk2xr/yLWlvLD0rYAm3fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Validity Not Before: May 13 05:11:03 2025 GMT Not After : May 20 05:11:03 2025 GMT Subject: CN=6822d467-675f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:23:46:00:b1:00:7a:51:9f:76:24:68:4e:55: 89:41:aa:d0:b2:ea:28:ac:e0:79:71:28:ba:b1:7c: 7d:1d:b6:82:3e:9d:df:99:c3:9a:ba:05:3f:fb:a3: 77:65:13:22:6f:da:f9:2e:2f:f8:3c:8b:86:2d:0b: f6:f5:97:0f:38:9a:61:00:61:32:5d:dd:4c:04:c8: a8:e8:a0:79:26:6c:96:0c:63:88:8e:6c:d9:6a:2b: 44:53:43:33:e4:26:b8:be:e7:03:82:c2:82:d0:e9: 8c:a8:10:60:c6:d1:54:d8:0b:3e:1b:d4:6d:fb:a0: 8e:f4:84:e7:24:5b:2a:70:6d:09:38:53:0c:e0:88: 07:a7:09:5c:34:7a:21:7e:a6:e6:13:88:c8:48:bd: d4:73:bd:0e:61:07:72:4d:a9:10:52:ce:26:48:ed: 76:ab:90:cb:69:33:b3:84:65:ba:1c:ab:7c:ee:c6: 44:c5:5b:d8:67:5c:00:e2:a9:09:1a:f0:8c:8a:6d: 62:36:f6:2a:52:b2:c4:0e:6d:74:c7:45:2e:77:1f: 99:ef:6c:d6:e6:6f:0f:77:ae:61:94:50:e2:48:ab: 34:8e:15:7e:9a:8c:2e:44:b2:5f:76:76:ba:b4:e5: 5f:17:ed:9b:55:c3:92:a2:b7:62:2c:9d:91:aa:5e: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DC:18:55:49:5E:C2:72:40:00:35:25:74:B3:D4:8B:2C:9E:B3:65 X509v3 Authority Key Identifier: keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2f:b3:80:93:89:77:04:63:8c:a3:b9:91:44:01:8a:d2:cb: df:89:29:39:41:d6:82:ce:89:d0:69:7a:1d:68:33:e4:6e:2c: 3f:91:b1:b8:1c:2c:17:82:fd:03:b6:36:9f:5b:6c:cb:89:6f: 61:3c:cb:9e:d6:f8:8e:c4:be:a6:1a:a1:09:f6:07:aa:97:e3: 05:6e:b5:b0:94:59:73:6a:93:6e:ef:fa:17:87:a9:6c:3d:a4: 97:d8:fc:e8:6c:c3:22:51:dc:52:47:5b:5a:26:8d:0d:49:d4: 33:39:ed:56:73:d6:97:3a:68:20:d9:3e:cf:b5:58:d1:be:c3: 5e:b5:ff:2b:d1:7c:ab:60:d7:13:fe:45:bc:a5:f6:2a:b2:b6: db:a2:70:3a:c3:d2:d6:f1:b4:82:71:19:48:a9:a2:14:9d:7f: 9a:88:80:15:40:b0:cd:ef:19:84:18:3c:8d:e9:09:d5:33:9e: b4:52:9b:51:b8:c4:fd:2a:bb:ab:d8:96:83:2e:2a:92:a8:6e: 51:22:1e:15:fb:05:23:7e:9e:a7:b0:7c:52:8c:d4:b5:27:77: 9f:a3:e8:0a:4a:e7:7f:60:eb:64:68:bd:ae:9a:e4:2f:29:64: f8:14:ef:31:80:17:cb:2d:b3:08:e3:22:50:de:74:e1:ee:38: 02:0f:e5:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwQ0YxMTAvBgNVBAUTKEVGQzE3QjBEMTExMjZDN0ZBOTQxQkQ0RDBFQ0E3QUEz OUU5MzQ2QTAwHhcNMjUwNTEzMDUxMTAzWhcNMjUwNTIwMDUxMTAzWjAYMRYwFAYD VQQDEw02ODIyZDQ2Ny02NzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/CNGALEAelGfdiRoTlWJQarQsuoorOB5cSi6sXx9HbaCPp3fmcOaugU/+6N3 ZRMib9r5Li/4PIuGLQv29ZcPOJphAGEyXd1MBMio6KB5JmyWDGOIjmzZaitEU0Mz 5Ca4vucDgsKC0OmMqBBgxtFU2As+G9Rt+6CO9ITnJFsqcG0JOFMM4IgHpwlcNHoh fqbmE4jISL3Uc70OYQdyTakQUs4mSO12q5DLaTOzhGW6HKt87sZExVvYZ1wA4qkJ GvCMim1iNvYqUrLEDm10x0Uudx+Z72zW5m8Pd65hlFDiSKs0jhV+mowuRLJfdna6 tOVfF+2bVcOSordiLJ2Rql7/4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHcGFVJ XsJyQAA1JXSz1IssnrNlMB8GA1UdIwQYMBaAFO/Bew0REmx/qUG9TQ7KeqOek0ag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBDRi83RTAxM0NEQTFG MTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JILXBRYjFORHNwNm81NlRS cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4RjdEUkVTYkgtcFFiMU5Ec3A2bzU2VFJxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjBDRi83RTAxM0NEQTFGMTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JI LXBRYjFORHNwNm81NlRScUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgL7OAk4l3BGOMo7mRRAGK0svfiSk5QdaCzonQaXodaDPkbiw/kbG4 HCwXgv0DtjafW2zLiW9hPMue1viOxL6mGqEJ9geql+MFbrWwlFlzapNu7/oXh6ls PaSX2PzobMMiUdxSR1taJo0NSdQzOe1Wc9aXOmgg2T7PtVjRvsNetf8r0XyrYNcT /kW8pfYqsrbbonA6w9LW8bSCcRlIqaIUnX+aiIAVQLDN7xmEGDyN6QnVM560UptR uMT9Krur2JaDLiqSqG5RIh4V+wUjfp6nsHxSjNS1J3efo+gKSud/YOtkaL2umuQv KWT4FO8xgBfLLbMI4yJQ3nTh7jgCD+W8 -----END CERTIFICATE-----Generated at Wed May 14 17:20:43 2025 by rpki-client