$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft File: 79cHaffoVdJXok1qHUkDlQqzadM.mft (raw, json) Hash identifier: OM50DZAuXfq9tkZ6Zmn7r91szvHAk3l2zEzmLsaMwyg= Subject key identifier: DC:F5:76:7E:C8:96:8D:33:26:3D:DC:49:22:46:01:29:D3:78:BF:2C Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3 Certificate issuer: /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft Manifest number: 0690 Signing time: Wed 02 Jul 2025 22:31:29 +0000 Manifest this update: Wed 02 Jul 2025 22:31:28 +0000 Manifest next update: Wed 09 Jul 2025 22:31:28 +0000 Files and hashes: 1: 79cHaffoVdJXok1qHUkDlQqzadM.crl (hash: uja1maIy0B+KwBu2VZ3VJ8oVLl7LQzz6iMqqLwZqobk=) 2: 9E924168765811EB9E261F25C4F9AE02.roa (hash: gf+XHv/B7y9fMOtlEsCMLfQ4eU62pqLRv/z7H7sAxg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBE37, serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3 Validity Not Before: Jul 2 22:31:28 2025 GMT Not After : Jul 9 22:31:28 2025 GMT Subject: CN=6865b341-d8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9c:3b:69:1d:6a:df:ce:93:83:39:38:84:97: 53:91:68:9f:da:02:21:2d:25:14:30:be:97:95:f4: 6c:40:61:98:04:d9:61:11:42:3a:ee:1c:21:e8:87: 8f:a3:10:93:24:55:a8:07:22:a3:5b:8a:6e:b1:ca: e1:33:46:2e:f8:7f:32:3c:06:6e:2f:92:d0:08:f8: c6:7a:c7:75:e3:50:16:73:78:6f:48:5b:4d:28:1d: 7b:bd:b9:da:e7:cd:ce:8f:cd:84:4c:e9:c2:d8:fd: 3b:d2:22:a2:77:17:96:36:23:1a:67:e6:91:a1:f0: 42:f1:3b:52:20:22:a2:bc:ae:17:92:8e:c0:58:20: 87:ad:47:1e:5a:6d:7c:16:4a:c2:8a:3d:46:c0:e3: a8:d2:34:18:ef:2d:90:25:93:3e:46:f8:7f:35:e7: bf:f9:c8:ee:7e:6e:3e:93:a1:57:4b:d8:77:67:fb: 37:dc:1e:1d:f7:32:ad:99:fc:40:8d:5f:8a:de:8f: 45:ff:41:18:a7:3e:66:a0:7d:6f:e5:87:b4:32:d6: 69:67:2a:e4:6c:9c:4d:46:26:58:95:61:00:c0:f0: c4:75:b1:83:93:cb:6d:cf:51:3f:9a:1b:35:0f:2e: 82:fb:ea:73:c4:cd:16:08:48:ee:1c:5a:7d:6b:e6: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F5:76:7E:C8:96:8D:33:26:3D:DC:49:22:46:01:29:D3:78:BF:2C X509v3 Authority Key Identifier: keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:f0:e3:d4:1f:39:5f:91:56:e6:0f:b5:22:cb:2a:06:21:44: 51:1f:46:b3:9c:8d:25:c0:b6:fa:9e:07:8e:a9:f7:19:e2:8d: 51:83:62:26:fd:89:5a:07:9b:a7:2e:20:b5:98:6b:d5:ca:67: 36:70:6b:c5:9f:f9:0b:20:b8:03:ba:77:7f:3c:9f:f0:e5:47: ce:67:99:8e:39:0a:eb:26:88:89:79:16:a1:45:bd:c2:8a:ee: b3:e4:3b:b1:46:26:d7:70:56:eb:d5:e1:eb:b6:75:64:8e:16: df:bc:ce:7d:21:c4:5d:f6:3e:e8:89:34:2a:19:d1:68:c8:b8: 0f:41:93:2f:4d:09:2a:02:89:aa:4b:ce:de:12:91:58:24:df: 63:fd:58:41:4c:e3:79:b3:a9:e4:37:f7:26:5c:1d:e8:55:60: 88:a1:6c:be:99:84:2e:a7:fd:cc:4c:aa:2c:97:32:40:d1:82: 8b:c8:cc:90:02:23:6d:7b:de:88:52:4b:de:0e:69:7f:9d:aa: 52:4e:5c:bc:9a:ab:81:77:8f:0c:27:6a:b8:19:a4:42:24:cb: 85:80:06:2a:02:98:17:8a:c9:ad:49:3c:e8:b1:37:97:65:07: e5:ea:29:b7:6c:41:be:7f:f3:ea:f1:0b:f9:5d:84:5d:6b:9e: 5c:56:f5:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJFMzcxMTAvBgNVBAUTKEVGRDcwNzY5RjdFODU1RDI1N0EyNEQ2QTFENDkwMzk1 MEFCMzY5RDMwHhcNMjUwNzAyMjIzMTI4WhcNMjUwNzA5MjIzMTI4WjAYMRYwFAYD VQQDEw02ODY1YjM0MS1kOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Zw7aR1q386Tgzk4hJdTkWif2gIhLSUUML6XlfRsQGGYBNlhEUI67hwh6IeP oxCTJFWoByKjW4puscrhM0Yu+H8yPAZuL5LQCPjGesd141AWc3hvSFtNKB17vbna 583Oj82ETOnC2P070iKidxeWNiMaZ+aRofBC8TtSICKivK4Xko7AWCCHrUceWm18 FkrCij1GwOOo0jQY7y2QJZM+Rvh/Nee/+cjufm4+k6FXS9h3Z/s33B4d9zKtmfxA jV+K3o9F/0EYpz5moH1v5Ye0MtZpZyrkbJxNRiZYlWEAwPDEdbGDk8ttz1E/mhs1 Dy6C++pzxM0WCEjuHFp9a+YwIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNz1dn7I lo0zJj3cSSJGASnTeL8sMB8GA1UdIwQYMBaAFO/XB2n36FXSV6JNah1JA5UKs2nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkUzNy82QTM1RTNEMDc2 NTcxMUVCOTk3REI0MjRDNEY5QUUwMi83OWNIYWZmb1ZkSlhvazFxSFVrRGxRcXph ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5Y0hhZmZvVmRKWG9rMXFIVWtEbFFxemFkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkUzNy82QTM1RTNEMDc2NTcxMUVCOTk3REI0MjRDNEY5QUUwMi83OWNIYWZmb1Zk SlhvazFxSFVrRGxRcXphZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj8OPUHzlfkVbmD7UiyyoGIURRH0aznI0lwLb6ngeOqfcZ4o1Rg2Im /YlaB5unLiC1mGvVymc2cGvFn/kLILgDund/PJ/w5UfOZ5mOOQrrJoiJeRahRb3C iu6z5DuxRibXcFbr1eHrtnVkjhbfvM59IcRd9j7oiTQqGdFoyLgPQZMvTQkqAomq S87eEpFYJN9j/VhBTON5s6nkN/cmXB3oVWCIoWy+mYQup/3MTKoslzJA0YKLyMyQ AiNte96IUkveDml/napSTly8mquBd48MJ2q4GaRCJMuFgAYqApgXismtSTzosTeX ZQfl6im3bEG+f/Pq8Qv5XYRda55cVvXp -----END CERTIFICATE-----Generated at Fri Jul 4 14:43:50 2025 by rpki-client