$ rpki-client -vvf rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft File: 77_xazqfbkTaHnWOk5XRxbcUR1o.mft (raw, json) Hash identifier: xP6I3/e1sg+c8O5Kdm3NgXSTSu2i8TCohZTokJG/RvQ= Subject key identifier: 2B:11:82:1B:93:42:49:99:5D:4F:F6:6E:58:9E:80:2A:61:9F:39:43 Authority key identifier: EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A Certificate issuer: /CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft Manifest number: 068C Signing time: Fri 22 Aug 2025 22:29:57 +0000 Manifest this update: Fri 22 Aug 2025 22:29:56 +0000 Manifest next update: Fri 29 Aug 2025 22:29:56 +0000 Files and hashes: 1: 77_xazqfbkTaHnWOk5XRxbcUR1o.crl (hash: pZo0t0KApcqbF/b73VU6zF2btYwb6zVNi1g/wbvmUe0=) 2: 3ADF4748836D11EBAD2CDC13C4F9AE02.roa (hash: /FJLHrb+Y+v6CrfuPekX8L5QT/sE2Qa/rLDAkhyiJro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136B8D, serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Validity Not Before: Aug 22 22:29:56 2025 GMT Not After : Aug 29 22:29:56 2025 GMT Subject: CN=68a8ef65-4ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:82:71:7d:a6:64:1e:ec:5f:c2:81:95:f0: ba:e6:22:02:1b:b5:3b:b9:44:5f:73:35:08:ca:bd: 96:40:99:74:58:08:11:2c:59:7d:27:c9:50:6c:7e: 36:92:15:38:57:da:05:22:3f:cc:9a:ee:61:54:35: e2:b4:80:6d:16:71:12:69:a8:da:56:42:c1:16:41: bb:85:68:77:75:1a:a3:8d:01:15:86:16:64:a6:2b: d7:0b:52:6a:70:08:ca:1e:52:6e:4a:bd:0d:c7:e1: b4:58:58:97:51:50:ba:3b:8d:02:7e:8a:70:eb:61: 51:72:d1:70:d6:55:d9:43:98:a3:26:71:35:ee:37: ab:05:e7:e0:dc:a6:f7:ca:83:5a:e6:c4:9f:23:8d: e4:7d:bf:4c:e5:73:52:56:cb:d2:9e:bd:6b:8c:61: 8a:b9:02:73:53:a7:06:c1:91:ba:e5:cd:39:52:3f: ba:9c:3b:2d:ae:88:04:8a:df:34:7b:6d:cc:55:b1: a4:29:b9:84:dc:2c:de:e9:3c:c4:9f:ad:0a:da:76: 5f:29:4e:4f:1c:a7:29:79:d0:85:fe:59:0b:a3:bb: 6a:02:4a:1a:36:49:2e:01:1f:48:f9:f1:16:d6:fe: 5f:c1:40:f2:d1:0e:97:fe:e7:5c:4a:f6:4b:b9:f0: a9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:11:82:1B:93:42:49:99:5D:4F:F6:6E:58:9E:80:2A:61:9F:39:43 X509v3 Authority Key Identifier: keyid:EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ad:45:22:19:6c:77:ea:1e:e4:79:4f:dc:a7:33:f6:c0:1d: 14:5c:78:8b:08:19:0f:da:e6:13:1f:63:e7:67:58:2c:0e:6f: f1:57:ee:34:3b:e5:fb:e1:eb:fb:75:7f:04:ec:93:80:a1:4e: d8:17:14:33:ac:d4:b4:fe:af:77:61:8b:5a:2e:00:4b:4f:e6: 31:81:52:70:7c:0c:88:ff:b7:a4:7b:6f:b5:d3:6e:c1:d5:97: c2:02:db:ab:94:d8:d5:e6:98:f3:03:61:27:64:d7:23:15:07: 2d:da:ed:4a:65:f6:e6:eb:fe:93:35:b9:72:0e:11:ac:70:c2: de:67:8d:89:19:5b:89:e9:f4:ab:9e:bf:44:b6:8f:4a:85:5b: 72:05:d4:c0:cc:63:15:46:b6:38:66:95:17:48:bb:70:7a:9b: f5:1c:5d:12:f9:69:8d:59:88:2c:dd:ab:7d:f9:cf:7f:41:91: 02:0e:7f:df:23:2a:3b:4e:2b:96:16:92:4d:9d:de:ff:cf:d8: 69:99:30:57:5f:be:ff:48:5c:6c:6b:11:8e:32:e6:95:d0:9b: e8:14:f2:2b:74:08:2b:3a:c4:34:e0:a1:62:b7:54:bb:b1:b5: 50:4f:3f:f9:50:fc:7d:38:16:70:47:c3:ee:be:f7:ce:8b:d3: 2f:ab:89:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCOEQxMTAvBgNVBAUTKEVGQkZGMTZCM0E5RjZFNDREQTFFNzU4RTkzOTVEMUM1 QjcxNDQ3NUEwHhcNMjUwODIyMjIyOTU2WhcNMjUwODI5MjIyOTU2WjAYMRYwFAYD VQQDEw02OGE4ZWY2NS00ZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+yCcX2mZB7sX8KBlfC65iICG7U7uURfczUIyr2WQJl0WAgRLFl9J8lQbH42 khU4V9oFIj/Mmu5hVDXitIBtFnESaajaVkLBFkG7hWh3dRqjjQEVhhZkpivXC1Jq cAjKHlJuSr0Nx+G0WFiXUVC6O40Cfopw62FRctFw1lXZQ5ijJnE17jerBefg3Kb3 yoNa5sSfI43kfb9M5XNSVsvSnr1rjGGKuQJzU6cGwZG65c05Uj+6nDstrogEit80 e23MVbGkKbmE3Cze6TzEn60K2nZfKU5PHKcpedCF/lkLo7tqAkoaNkkuAR9I+fEW 1v5fwUDy0Q6X/udcSvZLufCpiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsRghuT QkmZXU/2bliegCphnzlDMB8GA1UdIwQYMBaAFO+/8Ws6n25E2h51jpOV0cW3FEda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkI4RC8wREI4OTNFQzgz NkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJrVGFIbldPazVYUnhiY1VS MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3X3hhenFmYmtUYUhuV09rNVhSeGJjVVIxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkI4RC8wREI4OTNFQzgzNkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJr VGFIbldPazVYUnhiY1VSMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABrUUiGWx36h7keU/cpzP2wB0UXHiLCBkP2uYTH2PnZ1gsDm/xV+40 O+X74ev7dX8E7JOAoU7YFxQzrNS0/q93YYtaLgBLT+YxgVJwfAyI/7eke2+1027B 1ZfCAturlNjV5pjzA2EnZNcjFQct2u1KZfbm6/6TNblyDhGscMLeZ42JGVuJ6fSr nr9Eto9KhVtyBdTAzGMVRrY4ZpUXSLtwepv1HF0S+WmNWYgs3at9+c9/QZECDn/f Iyo7TiuWFpJNnd7/z9hpmTBXX77/SFxsaxGOMuaV0JvoFPIrdAgrOsQ04KFit1S7 sbVQTz/5UPx9OBZwR8PuvvfOi9Mvq4nc -----END CERTIFICATE-----Generated at Sat Aug 23 21:23:27 2025 by rpki-client