$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json) Hash identifier: Jmar+/k8l5CnZ+xAixNnlujRfXNqVjVwvXb0BUqq4TI= Subject key identifier: F8:05:8C:40:DD:32:6C:14:8E:EB:8B:C9:C4:1B:28:06:73:E4:0E:17 Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Certificate serial: 0399 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft Manifest number: 0395 Signing time: Sat 23 Aug 2025 01:02:23 +0000 Manifest this update: Sat 23 Aug 2025 01:02:22 +0000 Manifest next update: Sat 30 Aug 2025 01:02:22 +0000 Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: Gj6QoJJUcRcVVubkauoSZFK2rR1U22rtINCLE4MWoAI=) 2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: mfWKFm3R9Zz1cfvfe7gZWjinbVCRooVyIR4rmFi/Bec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 921 (0x399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Validity Not Before: Aug 23 01:02:22 2025 GMT Not After : Aug 30 01:02:22 2025 GMT Subject: CN=68a9131e-9b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:1b:94:07:21:0a:30:b3:f0:12:7e:f8:b0: 0b:b7:f6:3f:ef:ef:e2:14:d0:b7:20:67:99:10:35: 77:01:a8:1a:c8:37:dc:f6:b8:7c:91:fa:80:a9:be: 65:16:d8:65:23:f5:06:76:ef:04:61:34:01:8f:30: 6a:fc:8a:57:ba:ce:63:e2:06:27:0a:ac:6c:53:55: 15:18:56:06:32:11:a3:a9:00:73:1d:c4:ef:0d:e5: 1f:f1:0e:56:4c:76:9b:bc:86:5c:06:04:ca:5a:d1: 5c:bc:34:8c:63:25:40:82:ad:2b:b4:34:af:8a:a9: fc:77:05:ca:7d:05:5c:b7:66:a6:01:58:96:2a:38: 78:f4:2a:8e:b4:a3:15:58:0b:57:ea:b8:ab:a8:a6: 77:70:70:ca:a1:3e:2a:90:25:12:47:1b:b2:9f:c6: 1f:05:15:92:6c:91:c6:53:5f:21:99:bc:34:2c:1b: 0f:af:11:76:de:04:c2:bd:38:ec:75:a3:20:e2:7f: 37:35:b6:a4:75:b0:e7:5a:96:29:04:52:d7:09:99: a6:7e:7c:cf:75:08:dd:1b:71:91:71:c4:26:d6:18: 87:65:a0:fc:75:38:7c:40:7c:06:12:e5:d2:98:a5: d1:c4:e9:96:68:31:02:66:9f:49:f7:84:78:e0:30: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:05:8C:40:DD:32:6C:14:8E:EB:8B:C9:C4:1B:28:06:73:E4:0E:17 X509v3 Authority Key Identifier: keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1e:11:44:f6:4c:12:3b:cc:9b:1a:48:c7:66:59:4e:aa:65: 60:95:17:d5:76:f1:f9:9f:5e:40:d2:b5:32:3c:33:d6:0b:cb: d9:8e:a2:0c:39:80:b9:0d:19:a9:10:fa:5b:59:95:6d:63:4f: 17:b8:04:86:9c:01:b2:2f:60:e8:fc:9d:e3:d3:1c:a8:c7:80: 7c:e3:04:a9:9d:b8:13:3c:78:2d:34:83:9a:de:c0:b2:a8:6e: 03:82:a9:58:c0:31:7e:d8:fc:21:37:63:29:e4:6c:79:27:1b: 03:98:10:79:df:30:8e:cf:38:d7:d7:d2:56:9b:aa:8d:65:a0: 13:e7:42:06:6a:4f:74:5f:ca:a2:dc:98:00:b1:11:55:10:49: bd:bc:34:89:0f:ef:8b:51:9e:1e:8e:06:13:bc:fa:fb:88:1d: 08:d3:78:f4:a5:bd:a5:7e:18:e9:b0:69:93:13:62:d5:26:9d: 4a:97:84:83:6f:e4:bf:6a:58:30:46:64:51:8f:0c:f9:ae:13: f7:89:93:bf:e6:08:0a:87:e2:6a:7a:ab:c0:e7:11:15:d5:68: 6a:8e:d6:52:38:01:c4:9e:b2:1f:b0:38:45:8b:bb:87:20:cb: 82:fd:7d:9d:8c:a3:70:68:6a:da:3e:8e:34:cb:f9:c0:b4:3b: 82:37:b9:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG NUQzMEYxRjIwHhcNMjUwODIzMDEwMjIyWhcNMjUwODMwMDEwMjIyWjAYMRYwFAYD VQQDEw02OGE5MTMxZS05YjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfQblAchCjCz8BJ++LALt/Y/7+/iFNC3IGeZEDV3AagayDfc9rh8kfqAqb5l FthlI/UGdu8EYTQBjzBq/IpXus5j4gYnCqxsU1UVGFYGMhGjqQBzHcTvDeUf8Q5W THabvIZcBgTKWtFcvDSMYyVAgq0rtDSviqn8dwXKfQVct2amAViWKjh49CqOtKMV WAtX6rirqKZ3cHDKoT4qkCUSRxuyn8YfBRWSbJHGU18hmbw0LBsPrxF23gTCvTjs daMg4n83NbakdbDnWpYpBFLXCZmmfnzPdQjdG3GRccQm1hiHZaD8dTh8QHwGEuXS mKXRxOmWaDECZp9J94R44DAU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgFjEDd MmwUjuuLycQbKAZz5A4XMB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6HhFE9kwSO8ybGkjHZllOqmVglRfVdvH5n15A0rUyPDPWC8vZjqIM OYC5DRmpEPpbWZVtY08XuASGnAGyL2Do/J3j0xyox4B84wSpnbgTPHgtNIOa3sCy qG4DgqlYwDF+2PwhN2Mp5Gx5JxsDmBB53zCOzzjX19JWm6qNZaAT50IGak90X8qi 3JgAsRFVEEm9vDSJD++LUZ4ejgYTvPr7iB0I03j0pb2lfhjpsGmTE2LVJp1Kl4SD b+S/algwRmRRjwz5rhP3iZO/5ggKh+JqeqvA5xEV1WhqjtZSOAHEnrIfsDhFi7uH IMuC/X2djKNwaGraPo40y/nAtDuCN7mV -----END CERTIFICATE-----Generated at Sun Aug 24 00:34:10 2025 by rpki-client