$ rpki-client -vvf rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft File: 77_xazqfbkTaHnWOk5XRxbcUR1o.mft (raw, json) Hash identifier: kAawMW1wrLnZ7g5/0UUo4pITWp2bHoYpJvR4sI4hDMY= Subject key identifier: 19:90:9D:50:56:3B:FC:17:8C:2F:45:54:79:FF:6C:AA:C6:D4:55:A9 Authority key identifier: EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A Certificate issuer: /CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft Manifest number: 0659 Signing time: Mon 12 May 2025 22:16:43 +0000 Manifest this update: Mon 12 May 2025 22:16:42 +0000 Manifest next update: Mon 19 May 2025 22:16:42 +0000 Files and hashes: 1: 77_xazqfbkTaHnWOk5XRxbcUR1o.crl (hash: hsYdl64Kluo/bTvO7ZMI5oJJbs1Wzx8o8HUjxQnrgoo=) 2: 3ADF4748836D11EBAD2CDC13C4F9AE02.roa (hash: /FJLHrb+Y+v6CrfuPekX8L5QT/sE2Qa/rLDAkhyiJro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136B8D, serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Validity Not Before: May 12 22:16:42 2025 GMT Not After : May 19 22:16:42 2025 GMT Subject: CN=6822734b-7674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1e:10:9b:c4:6a:29:6f:5d:51:ac:16:43:7e: de:6f:66:6e:bf:99:5c:2c:ac:2f:37:07:80:dd:a3: e8:15:22:a9:9b:13:b6:5c:3a:8d:07:eb:b2:cb:ef: 0d:63:ac:2b:e1:6d:4e:af:d9:fb:9b:da:da:78:6d: cd:ba:3f:68:1b:ae:67:ba:c3:87:28:fc:e2:c4:54: 18:ec:61:b3:95:b9:85:24:a7:77:f3:2a:bc:7f:ff: 8b:f2:68:05:81:02:e6:92:c8:2f:3c:d9:7f:7b:64: 9c:ee:d8:89:da:3b:bb:c6:82:23:14:0d:cc:04:b1: 80:fa:55:dc:aa:72:bc:46:a1:c4:0f:fe:01:50:ff: 42:65:e4:05:75:a7:e8:88:a0:ed:c9:84:cf:9b:2a: 69:83:75:89:5e:1c:48:d5:f9:70:f3:1c:c5:96:56: 14:32:3c:27:f1:4d:ff:8b:8f:df:28:f2:65:57:8e: d4:ce:db:91:b7:53:1c:b1:1c:79:67:20:d4:74:04: 70:a7:20:fb:42:85:6e:b1:6a:b4:94:e7:ee:77:4c: 30:79:1f:82:b4:e4:bd:f8:0c:cd:26:b5:d0:6e:48: ff:89:60:b1:48:b6:aa:54:e8:28:35:80:db:fd:09: 3e:8b:a5:24:cb:46:b3:05:bb:8e:77:15:6a:74:37: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:90:9D:50:56:3B:FC:17:8C:2F:45:54:79:FF:6C:AA:C6:D4:55:A9 X509v3 Authority Key Identifier: keyid:EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:8c:e5:f1:14:74:70:77:53:9f:73:67:7f:67:21:03:bd:e5: c7:e9:9b:09:45:70:e1:87:04:57:bd:25:2b:9e:c7:53:b6:67: 83:3a:7f:fb:c4:03:5f:ef:0a:73:53:54:5a:06:b7:47:64:a1: cb:fb:97:e5:1c:a0:2d:f2:51:5c:a2:f0:8e:d6:3e:1f:2a:ef: e0:bf:11:9e:c1:f8:da:55:cd:e9:86:92:6b:7f:fa:79:43:75: c5:93:86:0e:24:c3:b2:7f:9c:68:6b:95:c2:3b:84:62:38:90: 30:d8:b2:0b:cc:a6:d7:84:3d:a7:a9:7f:03:4a:fc:21:6c:d5: 4a:b6:a2:0b:33:6f:ad:9e:42:8e:db:f1:01:07:58:c0:ff:df: 1c:e8:f9:28:24:f6:b8:1b:9d:79:a5:c1:f6:48:01:fa:3c:f9: 9f:80:46:41:fe:3e:56:30:23:7b:7b:4b:b5:f1:be:8f:60:30: 08:ae:29:13:ce:a0:c9:46:74:77:68:fa:4b:a4:69:2d:3c:f2: 78:aa:79:8e:09:41:54:e3:ec:90:c3:37:53:e0:61:5b:2f:b4: 6d:d1:10:3d:d4:a5:0b:08:eb:f9:08:a5:6b:44:ec:1f:d1:af: 46:c4:4e:90:da:df:14:4f:4c:d9:e1:b6:45:fc:9f:6f:2f:1b: 74:1b:db:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCOEQxMTAvBgNVBAUTKEVGQkZGMTZCM0E5RjZFNDREQTFFNzU4RTkzOTVEMUM1 QjcxNDQ3NUEwHhcNMjUwNTEyMjIxNjQyWhcNMjUwNTE5MjIxNjQyWjAYMRYwFAYD VQQDEw02ODIyNzM0Yi03Njc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+R4Qm8RqKW9dUawWQ37eb2Zuv5lcLKwvNweA3aPoFSKpmxO2XDqNB+uyy+8N Y6wr4W1Or9n7m9raeG3Nuj9oG65nusOHKPzixFQY7GGzlbmFJKd38yq8f/+L8mgF gQLmksgvPNl/e2Sc7tiJ2ju7xoIjFA3MBLGA+lXcqnK8RqHED/4BUP9CZeQFdafo iKDtyYTPmyppg3WJXhxI1flw8xzFllYUMjwn8U3/i4/fKPJlV47UztuRt1McsRx5 ZyDUdARwpyD7QoVusWq0lOfud0wweR+CtOS9+AzNJrXQbkj/iWCxSLaqVOgoNYDb /Qk+i6Uky0azBbuOdxVqdDdY1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmQnVBW O/wXjC9FVHn/bKrG1FWpMB8GA1UdIwQYMBaAFO+/8Ws6n25E2h51jpOV0cW3FEda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkI4RC8wREI4OTNFQzgz NkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJrVGFIbldPazVYUnhiY1VS MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3X3hhenFmYmtUYUhuV09rNVhSeGJjVVIxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkI4RC8wREI4OTNFQzgzNkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJr VGFIbldPazVYUnhiY1VSMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgjOXxFHRwd1Ofc2d/ZyEDveXH6ZsJRXDhhwRXvSUrnsdTtmeDOn/7 xANf7wpzU1RaBrdHZKHL+5flHKAt8lFcovCO1j4fKu/gvxGewfjaVc3phpJrf/p5 Q3XFk4YOJMOyf5xoa5XCO4RiOJAw2LILzKbXhD2nqX8DSvwhbNVKtqILM2+tnkKO 2/EBB1jA/98c6PkoJPa4G515pcH2SAH6PPmfgEZB/j5WMCN7e0u18b6PYDAIrikT zqDJRnR3aPpLpGktPPJ4qnmOCUFU4+yQwzdT4GFbL7Rt0RA91KULCOv5CKVrROwf 0a9GxE6Q2t8UT0zZ4bZF/J9vLxt0G9ut -----END CERTIFICATE-----Generated at Tue May 13 01:08:35 2025 by rpki-client