$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft File: 76axB-8ZSk3WeyjVVYARdcz3FEU.mft (raw, json) Hash identifier: jzVhiDx1Sf7qCRXTpcQIzXX+sDE9kEjkZwZbAzg+nNY= Subject key identifier: D6:7F:A1:8E:77:69:3C:9E:5E:7A:C0:31:EC:22:AF:51:73:4E:35:9B Authority key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 Certificate issuer: /CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Certificate serial: 076F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft Manifest number: 0764 Signing time: Fri 22 Aug 2025 21:46:59 +0000 Manifest this update: Fri 22 Aug 2025 21:46:58 +0000 Manifest next update: Fri 29 Aug 2025 21:46:58 +0000 Files and hashes: 1: 76axB-8ZSk3WeyjVVYARdcz3FEU.crl (hash: zmrMzpSnfj0caOaxGrVLM5/61Vvq1RTVSZgvoqjlzNA=) 2: 666595E890A911EDA8F5FF52C4F9AE02.roa (hash: BtJQntraWj3X9XmZWJOEGn+Y1wojJqx0bXvw8A5EV+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1903 (0x76f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFD7, serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Validity Not Before: Aug 22 21:46:58 2025 GMT Not After : Aug 29 21:46:58 2025 GMT Subject: CN=68a8e553-43c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:d6:a9:38:7f:d3:9c:21:5b:04:71:d2:da: f1:43:ff:68:dd:19:5a:50:ea:96:23:0e:e4:df:e7: 2a:97:c0:17:85:de:48:df:6c:f2:0f:d0:ab:0c:c9: e3:91:c0:36:c3:67:c7:22:1f:65:be:fb:4e:5f:71: 31:c8:e7:51:cc:b3:56:94:ca:5e:69:5b:3f:e5:c0: 79:2c:35:82:d0:12:0c:d1:16:e3:e9:02:93:7d:88: 58:30:1f:50:7f:25:93:ad:b5:b4:47:b3:00:53:6d: 80:bb:91:6d:a4:1d:d1:2b:97:8a:1c:5b:ef:35:68: b1:8c:b4:24:5f:27:a1:6d:4d:7b:77:e0:d0:a4:eb: 16:19:57:d5:5e:d0:52:f3:34:3b:1d:0b:4c:d0:59: 58:23:e9:a0:3f:06:31:c5:62:2f:18:85:40:eb:49: a8:b4:c6:c7:61:ae:2f:7a:7d:03:7f:fb:22:1c:c6: 4e:97:0a:48:92:54:31:85:b7:06:c8:31:32:4c:d5: 91:49:de:ea:58:7e:31:15:9d:59:cb:33:91:01:c4: 07:c6:da:3d:ce:6b:1e:8c:30:ba:0d:13:64:bc:89: eb:17:45:f2:b2:a4:04:4e:82:9f:19:13:9a:87:06: 4e:cd:2d:89:86:15:be:3c:52:40:ed:3c:47:ab:f8: 00:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7F:A1:8E:77:69:3C:9E:5E:7A:C0:31:EC:22:AF:51:73:4E:35:9B X509v3 Authority Key Identifier: keyid:EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c9:ce:a3:d9:cd:37:47:a3:39:d2:09:25:1d:32:cc:e9:37: 79:d5:d9:fa:a9:12:e2:2d:8e:e6:27:50:e0:5c:16:63:5b:5c: 04:3b:05:5c:6f:49:fb:b3:23:36:8d:43:85:a5:fd:32:e0:0e: c1:29:61:22:34:9c:4b:94:05:c6:ec:3a:4a:25:ed:b3:e6:1b: 81:ad:ee:a1:fb:d3:4a:bd:bc:22:d7:89:7e:e7:b2:a1:fc:89: 87:4e:7a:0d:02:5a:3b:07:a6:f8:99:a3:5e:f0:ad:40:7f:e6: 22:ff:2c:14:2c:f4:0e:a4:1d:c6:66:76:a7:a8:bc:e8:1e:a9: 66:6e:f6:11:ad:71:bc:47:fb:e0:b3:56:66:44:c4:0d:43:2c: 40:a6:a0:eb:f9:21:ae:87:c3:1c:28:54:5d:41:b1:7e:04:a1: c5:fd:2a:6f:77:ce:ef:c5:9d:57:57:74:f7:7d:e4:5e:91:07: 15:75:b2:df:3e:05:16:a6:8b:72:25:79:0f:6e:4a:0d:7e:d9: 90:ab:38:cb:31:e9:59:aa:54:78:ac:3d:bc:b0:9d:96:80:d7: 18:e2:7e:5d:55:0a:7b:39:96:8c:7b:4f:f4:49:48:87:9e:ab: c2:4f:78:ea:39:15:78:47:38:71:54:77:a7:3a:14:35:fe:a7: 73:37:9d:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGRDcxMTAvBgNVBAUTKEVGQTZCMTA3RUYxOTRBNERENjdCMjhENTU1ODAxMTc1 Q0NGNzE0NDUwHhcNMjUwODIyMjE0NjU4WhcNMjUwODI5MjE0NjU4WjAYMRYwFAYD VQQDEw02OGE4ZTU1My00M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvXWqTh/05whWwRx0trxQ/9o3RlaUOqWIw7k3+cql8AXhd5I32zyD9CrDMnj kcA2w2fHIh9lvvtOX3ExyOdRzLNWlMpeaVs/5cB5LDWC0BIM0Rbj6QKTfYhYMB9Q fyWTrbW0R7MAU22Au5FtpB3RK5eKHFvvNWixjLQkXyehbU17d+DQpOsWGVfVXtBS 8zQ7HQtM0FlYI+mgPwYxxWIvGIVA60motMbHYa4ven0Df/siHMZOlwpIklQxhbcG yDEyTNWRSd7qWH4xFZ1ZyzORAcQHxto9zmsejDC6DRNkvInrF0XysqQEToKfGROa hwZOzS2JhhW+PFJA7TxHq/gA9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZ/oY53 aTyeXnrAMewir1FzTjWbMB8GA1UdIwQYMBaAFO+msQfvGUpN1nso1VWAEXXM9xRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZENy83QjQwOUNBMDJG QTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNrM1dleWpWVllBUmRjejNG RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc2YXhCLThaU2szV2V5alZWWUFSZGN6M0ZFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZENy83QjQwOUNBMDJGQTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNr M1dleWpWVllBUmRjejNGRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPyc6j2c03R6M50gklHTLM6Td51dn6qRLiLY7mJ1DgXBZjW1wEOwVc b0n7syM2jUOFpf0y4A7BKWEiNJxLlAXG7DpKJe2z5huBre6h+9NKvbwi14l+57Kh /ImHTnoNAlo7B6b4maNe8K1Af+Yi/ywULPQOpB3GZnanqLzoHqlmbvYRrXG8R/vg s1ZmRMQNQyxApqDr+SGuh8McKFRdQbF+BKHF/Spvd87vxZ1XV3T3feRekQcVdbLf PgUWpotyJXkPbkoNftmQqzjLMelZqlR4rD28sJ2WgNcY4n5dVQp7OZaMe0/0SUiH nqvCT3jqORV4RzhxVHenOhQ1/qdzN52M -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:58 2025 by rpki-client