$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json) Hash identifier: HskeEO7kZ0AnAtQiIbqFNY0KCKeSpLWfCNhZX/CetFI= Subject key identifier: 0D:9B:A3:94:69:9A:E3:38:E3:6D:1D:72:EF:D2:10:3B:8C:24:9F:F1 Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Certificate serial: 037E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft Manifest number: 037A Signing time: Tue 01 Jul 2025 01:28:22 +0000 Manifest this update: Tue 01 Jul 2025 01:28:22 +0000 Manifest next update: Tue 08 Jul 2025 01:28:22 +0000 Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: JKbJUn6DRUpHIxbXRntpFKWdzLhQtcLuK0Dpq5uasVM=) 2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: mfWKFm3R9Zz1cfvfe7gZWjinbVCRooVyIR4rmFi/Bec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 894 (0x37e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Validity Not Before: Jul 1 01:28:22 2025 GMT Not After : Jul 8 01:28:22 2025 GMT Subject: CN=686339b6-8334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:4d:f5:47:67:8a:02:5f:ab:ae:f0:a5:cd: 62:81:5d:93:b2:ef:b2:09:88:8e:5b:67:62:19:c5: db:00:f1:dd:0b:dc:ec:d7:5b:15:16:2b:20:6f:67: 03:c3:e9:24:27:ef:d0:b9:00:2b:59:95:f0:ab:ff: b3:87:6d:82:db:f7:88:6f:93:58:a0:56:09:89:75: 5c:14:4f:ce:e7:63:6b:88:c5:1b:43:ee:c7:ac:77: 5b:f7:7d:8e:48:eb:be:59:3d:1e:13:a6:48:9c:8a: b1:f2:a9:1e:8e:12:be:3c:d0:3d:a9:1c:9e:5f:90: 6e:6e:a7:c1:5f:8d:75:53:c1:65:69:5d:26:81:f8: 9a:b0:d8:b2:59:d7:58:d4:de:5c:ac:e6:d0:2d:5d: 2b:07:7c:e5:bc:40:57:08:b7:94:f3:94:da:3d:ab: 02:de:54:58:bd:46:b3:bd:93:84:5c:44:93:7f:f4: ae:ac:cd:ab:30:e2:0f:2b:cc:6a:eb:80:31:de:0a: 6a:a2:cc:26:73:00:e1:2b:01:1b:77:dd:0b:ba:ed: 07:4a:8d:bf:d3:e0:37:c4:80:29:f2:4f:87:bb:d1: b2:23:4d:ed:a7:d2:39:99:bf:c4:9d:64:e0:62:fd: 20:54:f0:ea:25:1c:4c:35:d7:77:3c:19:08:e8:4d: 47:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9B:A3:94:69:9A:E3:38:E3:6D:1D:72:EF:D2:10:3B:8C:24:9F:F1 X509v3 Authority Key Identifier: keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b5:a0:1f:27:3b:f3:27:bc:49:dc:bc:68:6b:b6:ee:75:39: 2e:21:65:17:14:ab:d9:cd:ee:fe:ff:70:ee:f2:36:85:70:c1: e9:55:ad:26:be:10:b5:20:1e:cd:e5:c6:4d:c5:83:77:fc:b6: 1f:45:69:72:d1:37:74:1b:61:22:e3:8f:3e:95:9f:8c:bf:b7: 10:40:e9:68:23:52:6e:cb:02:bd:d7:6c:97:db:b0:47:80:88: ff:e6:56:35:79:d9:6d:cb:b2:d3:5b:ff:67:ee:99:ee:73:4a: 94:a2:53:42:2b:d8:47:12:55:2f:6a:cd:23:a9:b3:f1:31:0f: dd:54:4e:2e:84:23:68:b7:2c:c8:90:68:6f:b3:6c:13:06:b0: 32:21:97:d1:20:15:50:b1:4f:52:e5:9e:4e:3b:df:5e:f1:d5: 16:84:f2:a1:10:7f:aa:7f:57:08:9c:33:07:5b:d3:e8:a4:33: 9f:08:81:53:53:87:a7:02:ac:53:bc:0c:ad:ff:0d:a9:b7:5a: 42:19:e9:82:50:3c:eb:1c:d2:93:2d:b2:96:eb:74:6a:29:35: 0e:3e:c5:54:03:e5:ac:2a:a0:7d:e5:48:38:85:58:cc:9c:94: d5:6e:f7:86:9f:db:ed:73:14:83:bf:f3:2d:86:bb:b2:ef:d7: 7b:9d:d2:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG NUQzMEYxRjIwHhcNMjUwNzAxMDEyODIyWhcNMjUwNzA4MDEyODIyWjAYMRYwFAYD VQQDEw02ODYzMzliNi04MzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNNN9UdnigJfq67wpc1igV2Tsu+yCYiOW2diGcXbAPHdC9zs11sVFisgb2cD w+kkJ+/QuQArWZXwq/+zh22C2/eIb5NYoFYJiXVcFE/O52NriMUbQ+7HrHdb932O SOu+WT0eE6ZInIqx8qkejhK+PNA9qRyeX5BubqfBX411U8FlaV0mgfiasNiyWddY 1N5crObQLV0rB3zlvEBXCLeU85TaPasC3lRYvUazvZOEXESTf/SurM2rMOIPK8xq 64Ax3gpqoswmcwDhKwEbd90Luu0HSo2/0+A3xIAp8k+Hu9GyI03tp9I5mb/EnWTg Yv0gVPDqJRxMNdd3PBkI6E1HqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2bo5Rp muM4420dcu/SEDuMJJ/xMB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAttaAfJzvzJ7xJ3Lxoa7budTkuIWUXFKvZze7+/3Du8jaFcMHpVa0m vhC1IB7N5cZNxYN3/LYfRWly0Td0G2Ei448+lZ+Mv7cQQOloI1JuywK912yX27BH gIj/5lY1edlty7LTW/9n7pnuc0qUolNCK9hHElUvas0jqbPxMQ/dVE4uhCNotyzI kGhvs2wTBrAyIZfRIBVQsU9S5Z5OO99e8dUWhPKhEH+qf1cInDMHW9PopDOfCIFT U4enAqxTvAyt/w2pt1pCGemCUDzrHNKTLbKW63RqKTUOPsVUA+WsKqB95Ug4hVjM nJTVbveGn9vtcxSDv/Mthruy79d7ndJv -----END CERTIFICATE-----Generated at Wed Jul 2 15:07:31 2025 by rpki-client