$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft File: M77xZK7T_RPWmutR5aDM85n5QUQ.mft (raw, json) Hash identifier: L4P55pGL0ZPpLpvKPLUdQIZSpAIub1vthvEoh6uyiIs= Subject key identifier: 32:F8:BF:CF:E3:A3:94:A8:D9:A2:F9:42:36:74:79:05:66:3C:2E:D4 Authority key identifier: 33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 Certificate issuer: /CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft Manifest number: 0118 Signing time: Thu 03 Jul 2025 04:58:40 +0000 Manifest this update: Thu 03 Jul 2025 04:58:40 +0000 Manifest next update: Thu 10 Jul 2025 04:58:40 +0000 Files and hashes: 1: M77xZK7T_RPWmutR5aDM85n5QUQ.crl (hash: lDQxWbQE3LlEDJaL1W3ruIRJd2O4RR7b2pc83rcIVuA=) 2: B4B20B56AA3D11EEA301A133C4F9AE02.roa (hash: 9jZY1z+VdOX3EbpblEw/cnzGPIt1FRo4e67BiqUONWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E37, serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Validity Not Before: Jul 3 04:58:40 2025 GMT Not After : Jul 10 04:58:40 2025 GMT Subject: CN=68660e00-f41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:9d:88:b6:9d:74:da:a4:d0:de:4e:54:30: b3:09:82:d3:de:45:bb:6b:ac:06:e1:b3:12:e6:4f: 8f:b4:48:12:2c:d2:ce:2f:26:5b:54:3a:21:ac:28: 17:70:c5:43:dc:8a:73:e4:11:14:4f:58:d5:11:1b: dd:e7:3f:94:c4:e2:76:40:f6:6d:25:70:17:2d:c4: 08:ab:29:a4:24:c5:98:10:c0:af:a3:ae:68:3d:89: 5b:3e:22:76:d0:1d:f4:6b:c1:29:88:a5:ee:1b:c9: 7b:41:1d:3f:f7:6a:0d:c0:18:c4:17:e5:98:9b:2f: 33:4e:dc:1c:cd:6f:43:54:ba:98:00:a7:0e:ab:79: 8e:35:be:be:2e:68:f2:46:91:42:b0:53:e9:93:ee: 58:6e:bc:78:f6:78:1f:9b:2d:c9:b2:61:4d:05:01: 5e:c4:59:4e:92:e4:8c:70:72:99:44:f5:d2:20:86: 36:42:2a:4f:51:4d:3c:54:f5:de:50:81:fb:b6:37: b1:6c:3f:96:90:c2:4a:bc:b6:ad:dc:f5:9e:76:e1: 6c:f1:66:da:0d:ad:da:da:68:89:1d:78:33:39:61: 03:9d:c4:62:21:2b:cb:4a:93:7c:b4:c3:6f:f2:1a: 25:9b:ac:88:0d:d1:89:a4:5d:27:f4:4c:95:07:a8: ad:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F8:BF:CF:E3:A3:94:A8:D9:A2:F9:42:36:74:79:05:66:3C:2E:D4 X509v3 Authority Key Identifier: keyid:33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e0:86:29:37:d9:ec:d4:c3:8f:c9:4a:71:12:1f:94:b7:43: 69:6c:57:2e:d6:e9:15:1b:72:93:99:8e:b3:46:dc:62:17:3b: bd:90:e1:63:01:b4:85:1f:b5:92:bc:1a:8b:7b:7a:f3:15:30: 70:ed:a6:33:00:44:92:45:b6:d4:b1:be:77:46:2c:36:2f:14: 76:4e:70:0d:b1:e3:03:92:06:e2:14:42:b7:1d:b5:9a:78:43: 08:9d:77:5f:80:f5:22:17:f1:49:42:b5:34:6f:51:a9:fa:01: 86:cd:b6:b2:26:67:5a:99:f4:29:94:75:bd:93:b9:4f:8c:aa: 1e:24:49:9b:f0:89:5f:33:ed:5b:c4:74:58:b7:2f:66:1e:9f: 0d:a9:dc:d3:0f:98:e3:95:aa:ee:0a:e2:a2:e0:9a:c9:a8:b8: 58:2e:35:fa:b9:fd:b5:aa:f2:82:24:a0:95:ce:36:65:b7:ad: 7d:b1:9c:e9:91:14:4c:e9:59:79:37:a7:96:90:8d:04:f7:1e: b0:ad:4d:31:5a:ce:18:b5:7b:71:19:94:46:1b:57:83:9a:20: ce:77:63:f7:60:1d:5e:7a:ab:72:5f:32:4f:a3:f3:2c:7a:fa: 1c:c5:fb:33:db:99:c7:ec:9d:bf:91:46:ea:f3:08:e9:1a:d8: 61:bd:0f:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFMzcxMTAvBgNVBAUTKDMzQkVGMTY0QUVEM0ZEMTNENjlBRUI1MUU1QTBDQ0Yz OTlGOTQxNDQwHhcNMjUwNzAzMDQ1ODQwWhcNMjUwNzEwMDQ1ODQwWjAYMRYwFAYD VQQDEw02ODY2MGUwMC1mNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUidiLaddNqk0N5OVDCzCYLT3kW7a6wG4bMS5k+PtEgSLNLOLyZbVDohrCgX cMVD3Ipz5BEUT1jVERvd5z+UxOJ2QPZtJXAXLcQIqymkJMWYEMCvo65oPYlbPiJ2 0B30a8EpiKXuG8l7QR0/92oNwBjEF+WYmy8zTtwczW9DVLqYAKcOq3mONb6+Lmjy RpFCsFPpk+5Ybrx49ngfmy3JsmFNBQFexFlOkuSMcHKZRPXSIIY2QipPUU08VPXe UIH7tjexbD+WkMJKvLat3PWeduFs8WbaDa3a2miJHXgzOWEDncRiISvLSpN8tMNv 8holm6yIDdGJpF0n9EyVB6it5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDL4v8/j o5So2aL5QjZ0eQVmPC7UMB8GA1UdIwQYMBaAFDO+8WSu0/0T1prrUeWgzPOZ+UFE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkUzNy80QUM2OTM4OEFB M0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9SUFdtdXRSNWFETTg1bjVR VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003N3haSzdUX1JQV211dFI1YURNODVuNVFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkUzNy80QUM2OTM4OEFBM0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9S UFdtdXRSNWFETTg1bjVRVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY4IYpN9ns1MOPyUpxEh+Ut0NpbFcu1ukVG3KTmY6zRtxiFzu9kOFj AbSFH7WSvBqLe3rzFTBw7aYzAESSRbbUsb53Riw2LxR2TnANseMDkgbiFEK3HbWa eEMInXdfgPUiF/FJQrU0b1Gp+gGGzbayJmdamfQplHW9k7lPjKoeJEmb8IlfM+1b xHRYty9mHp8NqdzTD5jjlaruCuKi4JrJqLhYLjX6uf21qvKCJKCVzjZlt619sZzp kRRM6Vl5N6eWkI0E9x6wrU0xWs4YtXtxGZRGG1eDmiDOd2P3YB1eeqtyXzJPo/Ms evocxfsz25nH7J2/kUbq8wjpGthhvQ94 -----END CERTIFICATE-----Generated at Fri Jul 4 00:09:39 2025 by rpki-client