$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft File: M77xZK7T_RPWmutR5aDM85n5QUQ.mft (raw, json) Hash identifier: b4we3JUyYkRxfn7ak95nEf6S1K37s5YLArI0AvjH454= Subject key identifier: 24:49:14:F2:98:1B:9D:DD:B2:79:35:23:09:2B:4D:82:60:CA:FA:59 Authority key identifier: 33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 Certificate issuer: /CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft Manifest number: 014F Signing time: Sun 19 Oct 2025 06:54:35 +0000 Manifest this update: Sun 19 Oct 2025 06:54:34 +0000 Manifest next update: Sun 26 Oct 2025 06:54:34 +0000 Files and hashes: 1: M77xZK7T_RPWmutR5aDM85n5QUQ.crl (hash: JqADZcKr+OGSGvY0MeTV+nCvk4MHLrWyYH6KOtxJGLs=) 2: B4B20B56AA3D11EEA301A133C4F9AE02.roa (hash: 9jZY1z+VdOX3EbpblEw/cnzGPIt1FRo4e67BiqUONWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E37, serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Validity Not Before: Oct 19 06:54:34 2025 GMT Not After : Oct 26 06:54:34 2025 GMT Subject: CN=68f48b2a-e609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:c1:5f:62:7a:e4:56:3f:bd:f3:5d:60:a1: 43:9e:e5:90:93:53:8f:9c:7a:0d:ff:78:50:9c:46: d5:e9:60:9b:56:17:35:08:2d:a0:9c:1d:28:3c:78: b9:35:77:ff:85:2b:b1:2c:e0:33:bf:d8:2d:66:a2: 5f:d3:de:4f:1d:3c:44:64:ba:8e:72:af:ed:d4:0c: 04:66:eb:ad:5e:d9:fb:e6:59:40:8d:45:8f:11:e7: 4a:5e:4e:81:58:45:30:db:6d:c5:90:82:bf:e3:ed: 86:55:0f:41:e6:03:ae:15:08:fc:5c:7e:4e:4e:d4: fb:54:f6:eb:c8:e1:b8:44:65:c2:27:e5:f7:40:36: 3d:76:ff:3f:0d:78:ea:b1:90:f2:31:15:75:30:c1: 54:fd:57:75:65:2c:05:f3:7b:d7:b0:ce:e2:7f:fa: 4e:07:12:a7:53:76:45:db:f0:cb:5a:a5:35:03:76: 69:8e:99:05:cb:f3:86:1f:17:8c:1c:26:f0:e3:5f: 37:f9:43:5e:69:de:38:c2:8e:d8:6c:d8:f5:42:8f: 7c:de:1c:8f:5d:a1:a1:fd:4d:de:09:86:15:a0:70: c9:12:46:29:1d:ec:84:ee:b8:0b:9e:bc:41:04:71: 89:90:f6:96:09:ba:fe:95:34:55:25:aa:a9:f1:07: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:49:14:F2:98:1B:9D:DD:B2:79:35:23:09:2B:4D:82:60:CA:FA:59 X509v3 Authority Key Identifier: keyid:33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a5:7e:40:a8:5b:ce:b4:84:d9:fe:d7:34:7f:93:0e:97:07: 34:da:56:0d:52:f6:81:c2:68:08:e9:72:d8:04:c2:24:f8:f3: fa:23:3a:2d:ae:5a:06:1d:6c:ec:fd:88:c4:53:05:db:1c:5f: 4f:e2:12:a0:b9:28:3f:c0:9a:03:4f:f9:6d:99:a6:81:c5:ab: 59:87:f4:da:50:b5:c2:ee:44:76:42:6c:12:c2:30:62:99:da: 31:2c:d2:5b:1f:66:fa:c0:97:6e:93:c0:76:f8:ab:2a:e3:82: 19:a8:1a:f6:c3:03:d5:80:b0:8b:c6:7e:e7:5b:38:ee:eb:42: 10:81:e9:7d:ce:a4:09:a0:5f:aa:e9:73:a9:09:4b:96:97:ed: e5:12:64:b7:68:3a:69:ec:0b:30:36:9a:7f:aa:db:5a:4c:bf: 45:9a:45:c6:0f:4d:52:61:ea:b0:86:68:0d:86:15:d2:a0:ee: f1:be:02:81:a1:1e:01:c9:c3:2c:d1:47:cd:5e:e6:85:94:5b: da:65:68:0c:4a:f7:e3:62:14:7f:04:cf:2a:d6:8b:fb:00:ee: 94:41:d8:b1:a4:bf:d0:b3:44:9e:86:39:df:4f:39:22:a2:b0: 0f:04:2e:9d:ff:33:bb:24:73:81:87:6a:5b:fc:d7:2d:4a:74: 73:0d:a7:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFMzcxMTAvBgNVBAUTKDMzQkVGMTY0QUVEM0ZEMTNENjlBRUI1MUU1QTBDQ0Yz OTlGOTQxNDQwHhcNMjUxMDE5MDY1NDM0WhcNMjUxMDI2MDY1NDM0WjAYMRYwFAYD VQQDEw02OGY0OGIyYS1lNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37zBX2J65FY/vfNdYKFDnuWQk1OPnHoN/3hQnEbV6WCbVhc1CC2gnB0oPHi5 NXf/hSuxLOAzv9gtZqJf095PHTxEZLqOcq/t1AwEZuutXtn75llAjUWPEedKXk6B WEUw223FkIK/4+2GVQ9B5gOuFQj8XH5OTtT7VPbryOG4RGXCJ+X3QDY9dv8/DXjq sZDyMRV1MMFU/Vd1ZSwF83vXsM7if/pOBxKnU3ZF2/DLWqU1A3ZpjpkFy/OGHxeM HCbw4183+UNead44wo7YbNj1Qo983hyPXaGh/U3eCYYVoHDJEkYpHeyE7rgLnrxB BHGJkPaWCbr+lTRVJaqp8Qf+2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRJFPKY G53dsnk1IwkrTYJgyvpZMB8GA1UdIwQYMBaAFDO+8WSu0/0T1prrUeWgzPOZ+UFE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkUzNy80QUM2OTM4OEFB M0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9SUFdtdXRSNWFETTg1bjVR VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003N3haSzdUX1JQV211dFI1YURNODVuNVFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkUzNy80QUM2OTM4OEFBM0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9S UFdtdXRSNWFETTg1bjVRVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkpX5AqFvOtITZ/tc0f5MOlwc02lYNUvaBwmgI6XLYBMIk+PP6Izot rloGHWzs/YjEUwXbHF9P4hKguSg/wJoDT/ltmaaBxatZh/TaULXC7kR2QmwSwjBi mdoxLNJbH2b6wJduk8B2+Ksq44IZqBr2wwPVgLCLxn7nWzju60IQgel9zqQJoF+q 6XOpCUuWl+3lEmS3aDpp7AswNpp/qttaTL9FmkXGD01SYeqwhmgNhhXSoO7xvgKB oR4BycMs0UfNXuaFlFvaZWgMSvfjYhR/BM8q1ov7AO6UQdixpL/Qs0SehjnfTzki orAPBC6d/zO7JHOBh2pb/NctSnRzDafj -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:24 2025 by rpki-client