$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft File: 79iPiiibFMeUQxKLu7eRtS2lEa0.mft (raw, json) Hash identifier: rVhGzl68CEoRYeDn6jnug15l5Eg+sOO/HUQwdZN/EyE= Subject key identifier: DF:A4:14:81:4E:39:1E:0C:AF:35:86:56:9D:75:37:72:52:B0:05:20 Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD Certificate issuer: /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft Manifest number: 01A4 Signing time: Thu 15 May 2025 02:45:08 +0000 Manifest this update: Thu 15 May 2025 02:45:08 +0000 Manifest next update: Thu 22 May 2025 02:45:08 +0000 Files and hashes: 1: 79iPiiibFMeUQxKLu7eRtS2lEa0.crl (hash: PStIixciB+o+IeiqWc2DaYkL7XYcDT4wObeE2s2qveg=) 2: 9344B512B1BA11ED8DC4D42EC4F9AE02.roa (hash: 05FYul9tCmnEluZqc+GxuuNUpvwFpQ5F6tjIORKsJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Validity Not Before: May 15 02:45:08 2025 GMT Not After : May 22 02:45:08 2025 GMT Subject: CN=68255534-c20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:15:79:ba:31:a1:4c:3e:cd:fb:e2:4d:d6: c3:0b:8e:63:49:35:da:df:8d:c1:d0:63:53:db:8d: 94:04:bf:d0:eb:0b:be:ef:b5:53:07:e9:83:9e:d9: 62:d6:5d:22:94:ea:10:13:c0:66:5d:50:93:18:1e: e4:f7:a8:5a:42:bb:5d:0c:6e:d4:a4:3a:20:b3:93: fe:4d:93:c7:9d:f2:1f:be:a5:0a:87:b8:fa:a2:d9: f3:0c:38:04:2f:aa:39:1f:bb:c9:4a:e6:93:95:e9: 8f:88:58:a7:98:f6:d0:3e:f5:f2:d8:6b:e1:4c:15: ae:da:bd:d4:9c:0c:53:46:78:b8:df:31:73:7c:de: 19:39:b4:c9:93:fd:59:7e:1b:e6:89:5a:30:b1:49: c9:b7:f5:45:3f:a6:0a:16:f2:7a:a0:8a:c0:cc:d0: 7c:71:e5:2c:24:b9:b0:72:29:13:04:b3:d2:00:c5: d0:3c:70:4a:87:2e:e3:bf:e3:62:e6:85:13:8c:46: d8:86:25:c2:4a:15:bb:9c:e0:fb:70:5a:5a:85:f2: 98:d0:d6:48:99:52:a6:52:62:c0:e0:b9:4e:19:d1: 4a:2b:38:5d:2d:b5:f2:85:51:d8:44:76:08:a3:cd: 08:8b:39:90:e1:24:22:55:8c:6f:da:09:bc:71:04: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A4:14:81:4E:39:1E:0C:AF:35:86:56:9D:75:37:72:52:B0:05:20 X509v3 Authority Key Identifier: keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:1d:f9:ff:c2:15:ad:28:fe:e7:7d:6d:b3:6a:0a:5c:28:d3: d4:4f:11:3b:b3:ab:67:55:8a:f9:70:b9:b2:56:a5:ae:4b:bb: 44:69:1e:1e:af:b5:1c:a7:9e:ba:63:56:aa:4c:7f:9b:37:12: 6d:a2:2a:32:3e:81:84:5a:f7:ff:22:e7:67:fb:02:aa:c0:df: e1:4e:72:21:44:2f:0b:a7:c2:03:bf:17:81:c9:e4:38:6d:9c: e2:84:50:bf:a4:e4:cf:85:21:22:e8:cf:de:94:3e:93:09:3b: a7:d5:2e:97:91:61:bc:35:7e:fc:a2:41:02:c5:cf:da:e9:e7: b0:13:2c:2b:a9:8b:8f:c8:f4:14:26:6f:fa:8a:a9:d8:bd:99: 5a:68:ab:62:f3:36:b3:7a:1b:de:31:ad:7f:11:bf:bc:a3:5c: 7d:bd:46:5f:d0:91:e4:48:2e:af:5f:dc:99:d5:78:f8:cc:83: 83:8e:a7:fd:ac:d2:fd:03:a0:cb:c4:48:ab:65:6d:37:70:b0: 1e:b7:70:c5:e7:a9:a7:ad:48:86:22:fe:df:7d:49:82:8a:a6: 45:3a:67:be:82:9f:44:76:6b:c5:54:9f:1d:44:d3:66:aa:89: 67:ed:47:b0:e9:e6:cb:ad:61:75:58:78:47:32:d2:ac:ff:4b: 0f:9f:b2:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0YxMTAvBgNVBAUTKEVGRDg4RjhBMjg5QjE0Qzc5NDQzMTI4QkJCQjc5MUI1 MkRBNTExQUQwHhcNMjUwNTE1MDI0NTA4WhcNMjUwNTIyMDI0NTA4WjAYMRYwFAYD VQQDEw02ODI1NTUzNC1jMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRoVeboxoUw+zfviTdbDC45jSTXa343B0GNT242UBL/Q6wu+77VTB+mDntli 1l0ilOoQE8BmXVCTGB7k96haQrtdDG7UpDogs5P+TZPHnfIfvqUKh7j6otnzDDgE L6o5H7vJSuaTlemPiFinmPbQPvXy2GvhTBWu2r3UnAxTRni43zFzfN4ZObTJk/1Z fhvmiVowsUnJt/VFP6YKFvJ6oIrAzNB8ceUsJLmwcikTBLPSAMXQPHBKhy7jv+Ni 5oUTjEbYhiXCShW7nOD7cFpahfKY0NZImVKmUmLA4LlOGdFKKzhdLbXyhVHYRHYI o80IizmQ4SQiVYxv2gm8cQT4FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+kFIFO OR4MrzWGVp11N3JSsAUgMB8GA1UdIwQYMBaAFO/Yj4oomxTHlEMSi7u3kbUtpRGt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzRi85QjlDOEU2QUIx QjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZNZVVReEtMdTdlUnRTMmxF YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5aVBpaWliRk1lVVF4S0x1N2VSdFMybEVhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzRi85QjlDOEU2QUIxQjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZN ZVVReEtMdTdlUnRTMmxFYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxHfn/whWtKP7nfW2zagpcKNPUTxE7s6tnVYr5cLmyVqWuS7tEaR4e r7Ucp566Y1aqTH+bNxJtoioyPoGEWvf/Iudn+wKqwN/hTnIhRC8Lp8IDvxeByeQ4 bZzihFC/pOTPhSEi6M/elD6TCTun1S6XkWG8NX78okECxc/a6eewEywrqYuPyPQU Jm/6iqnYvZlaaKti8zazehveMa1/Eb+8o1x9vUZf0JHkSC6vX9yZ1Xj4zIODjqf9 rNL9A6DLxEirZW03cLAet3DF56mnrUiGIv7ffUmCiqZFOme+gp9EdmvFVJ8dRNNm qoln7Uew6ebLrWF1WHhHMtKs/0sPn7If -----END CERTIFICATE-----Generated at Thu May 15 12:40:10 2025 by rpki-client