$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft File: 77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json) Hash identifier: UEVPhuGc8vl0ArPhNNzC2Tt9T5bytM+mg56e0kWFgEk= Subject key identifier: C3:16:9A:C6:E7:95:B3:D0:05:CD:BC:FE:87:76:24:DA:B4:B9:53:8E Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft Manifest number: 0C3F Signing time: Fri 22 Aug 2025 18:43:15 +0000 Manifest this update: Fri 22 Aug 2025 18:43:15 +0000 Manifest next update: Fri 29 Aug 2025 18:43:15 +0000 Files and hashes: 1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: AVKRv+JZMDNYCz92KthHWSzZvIPRAQqMgHELci4NTGU=) 2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: WgtMqOXutoCTVgnfA2uL+HiTE6KoWpCNsapDLYeBrco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Validity Not Before: Aug 22 18:43:15 2025 GMT Not After : Aug 29 18:43:15 2025 GMT Subject: CN=68a8ba43-1d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:eb:c7:6f:95:94:2b:7f:46:e2:fd:fd:6e: 22:ea:01:97:54:d9:62:2d:05:e1:2b:51:ec:12:6b: b6:a8:39:62:d9:67:22:e4:ec:8a:a1:b0:46:1c:45: 86:e4:19:23:c3:55:9a:d6:e9:2d:2f:22:10:a4:5a: e7:40:d6:a2:dc:c4:78:a1:e1:41:c3:7b:f8:77:fc: c6:ab:e5:99:6a:08:27:86:07:c9:6c:7a:c0:01:6e: a7:36:5d:7c:3a:a4:19:1d:58:25:31:5a:86:79:c5: 35:d9:79:21:bd:a3:6f:c3:bd:3c:c2:99:c3:eb:21: 69:60:82:b7:8a:b9:bb:04:7e:21:67:78:f4:cb:7b: 3d:4b:67:bd:23:e5:37:44:9f:34:96:c9:80:ef:87: 2c:2c:a9:5f:29:03:1f:e4:b3:7a:68:95:4e:71:97: 1d:e1:d6:54:9a:61:d6:8a:5e:f5:57:6d:cc:29:4f: 5d:4d:50:da:31:5f:11:17:a8:8b:3b:12:78:8f:a6: 1e:55:10:6e:58:bd:c1:41:a9:5b:2b:b7:1b:c4:72: 26:f8:d8:35:db:2d:a3:56:22:d2:68:ea:d7:e6:ee: 4d:94:95:63:39:88:eb:2c:5e:13:0a:8f:e2:59:e3: dd:ab:65:9a:98:78:50:47:71:61:41:9c:a2:58:d6: 0f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:16:9A:C6:E7:95:B3:D0:05:CD:BC:FE:87:76:24:DA:B4:B9:53:8E X509v3 Authority Key Identifier: keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ea:30:b4:55:ad:f4:d3:60:75:65:96:a3:e2:3a:db:5e:39: e2:d1:2a:6a:50:76:8f:d0:a1:ad:58:77:71:16:1d:a8:d8:77: af:f3:7e:c1:22:71:9a:bd:90:68:0d:f2:39:45:bb:f6:9e:7f: f3:95:e5:9e:80:d2:b3:a4:45:9f:e7:a5:87:93:c4:6a:a6:6a: 32:97:93:9e:b5:bd:c7:c3:15:c8:0d:5f:95:e4:12:1c:76:15: 38:f8:35:53:c3:c7:44:9e:9e:c0:52:9b:74:84:45:2b:45:53: 63:18:da:ce:e4:82:e3:74:5c:e6:c0:60:46:71:19:35:1b:df: b5:5e:26:81:f0:e0:0e:f0:0b:e9:b8:89:54:4a:0c:a2:fe:c6: ee:46:02:01:57:f5:82:1b:c2:e5:3a:c7:b5:91:ff:89:a5:9f: 85:be:29:e0:b7:53:be:1a:88:90:c9:1d:86:c8:d2:89:a6:4e: 1c:4c:34:0b:12:fc:e2:61:e3:23:4c:cb:bc:5d:0c:b1:5c:59: 56:d5:68:79:c9:67:d4:2d:81:31:a8:cb:11:50:6b:cc:f5:51: 1c:4d:ff:15:4f:1e:e1:67:34:64:45:ca:74:76:d5:1d:ff:8d: 30:c0:36:6b:54:65:f1:ee:d5:e8:90:bb:de:4e:3f:79:94:df: b8:3b:8b:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM1OUUxMTAvBgNVBAUTKEVGQjY5MDcwRTJDNDAxQTVGNzcxMzNEMkRCQjFCQTM0 MUQxN0U2MUUwHhcNMjUwODIyMTg0MzE1WhcNMjUwODI5MTg0MzE1WjAYMRYwFAYD VQQDEw02OGE4YmE0My0xZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPLrx2+VlCt/RuL9/W4i6gGXVNliLQXhK1HsEmu2qDli2Wci5OyKobBGHEWG 5Bkjw1Wa1uktLyIQpFrnQNai3MR4oeFBw3v4d/zGq+WZaggnhgfJbHrAAW6nNl18 OqQZHVglMVqGecU12XkhvaNvw708wpnD6yFpYIK3irm7BH4hZ3j0y3s9S2e9I+U3 RJ80lsmA74csLKlfKQMf5LN6aJVOcZcd4dZUmmHWil71V23MKU9dTVDaMV8RF6iL OxJ4j6YeVRBuWL3BQalbK7cbxHIm+Ng12y2jViLSaOrX5u5NlJVjOYjrLF4TCo/i WePdq2WamHhQR3FhQZyiWNYPiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMWmsbn lbPQBc28/od2JNq0uVOOMB8GA1UdIwQYMBaAFO+2kHDixAGl93Ez0tuxujQdF+Ye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzU5RS82QTQ5ODhCNjBE RUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFhWDNjVFBTMjdHNk5CMFg1 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3YVFjT0xFQWFYM2NUUFMyN0c2TkIwWDVoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzU5RS82QTQ5ODhCNjBERUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFh WDNjVFBTMjdHNk5CMFg1aDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN6jC0Va3002B1ZZaj4jrbXjni0SpqUHaP0KGtWHdxFh2o2Hev837B InGavZBoDfI5Rbv2nn/zleWegNKzpEWf56WHk8Rqpmoyl5Oetb3HwxXIDV+V5BIc dhU4+DVTw8dEnp7AUpt0hEUrRVNjGNrO5ILjdFzmwGBGcRk1G9+1XiaB8OAO8Avp uIlUSgyi/sbuRgIBV/WCG8LlOse1kf+JpZ+Fvingt1O+GoiQyR2GyNKJpk4cTDQL EvziYeMjTMu8XQyxXFlW1Wh5yWfULYExqMsRUGvM9VEcTf8VTx7hZzRkRcp0dtUd /40wwDZrVGXx7tXokLveTj95lN+4O4tg -----END CERTIFICATE-----Generated at Sat Aug 23 07:06:10 2025 by rpki-client