$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft File: M77xZK7T_RPWmutR5aDM85n5QUQ.mft (raw, json) Hash identifier: LxnoEKPcn5+9NbQ/l9GQzDZijABU25gnwKnScwgHYvU= Subject key identifier: C4:2A:89:35:60:49:D0:E9:2D:C4:B4:FC:25:A7:0B:91:3A:CC:20:2B Authority key identifier: 33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 Certificate issuer: /CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft Manifest number: 0132 Signing time: Sat 23 Aug 2025 04:38:54 +0000 Manifest this update: Sat 23 Aug 2025 04:38:54 +0000 Manifest next update: Sat 30 Aug 2025 04:38:54 +0000 Files and hashes: 1: M77xZK7T_RPWmutR5aDM85n5QUQ.crl (hash: IQ1JhkHdCgv0evLVRi62IMMJPV5z3aNY46ySMOpiFZY=) 2: B4B20B56AA3D11EEA301A133C4F9AE02.roa (hash: 9jZY1z+VdOX3EbpblEw/cnzGPIt1FRo4e67BiqUONWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E37, serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Validity Not Before: Aug 23 04:38:54 2025 GMT Not After : Aug 30 04:38:54 2025 GMT Subject: CN=68a945de-4a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8a:05:91:62:01:8d:d9:84:79:82:14:6d:b4: d3:95:72:59:79:82:b2:49:a1:76:39:cc:f8:bb:21: 5d:98:cf:5e:4e:a8:8b:2e:7e:23:9d:5a:5e:f1:65: df:53:6f:ec:d8:03:5d:b6:ed:22:b6:28:54:b9:fb: 6c:51:15:eb:9f:e9:85:a6:e5:76:fe:17:9f:fe:25: eb:8c:74:6e:f1:8a:22:d3:43:18:a6:5e:98:e6:79: aa:98:4a:dc:a5:ea:3f:f0:e4:65:69:85:d0:70:b2: 7d:06:da:dc:b6:e9:62:d7:e7:48:25:b4:61:df:46: 31:bf:26:09:23:d1:00:4d:00:7b:f1:6b:a2:87:a3: 8e:9a:d4:13:d4:d5:d1:3e:f0:ac:02:41:19:a7:8e: 35:96:5b:28:70:db:c8:dc:3d:4a:78:a9:96:e7:03: e7:f8:a0:a0:37:5b:94:10:6a:f1:ba:de:f4:6a:5e: 74:58:ca:23:fa:a6:c6:79:0e:cf:73:86:b7:90:11: 44:a1:4d:22:f9:66:a9:c9:99:86:e4:81:37:91:4e: 75:a8:b3:aa:c7:a3:29:37:df:ab:91:df:47:4e:db: 0d:5b:fb:47:51:66:02:2b:ef:b8:09:df:97:2f:00: 15:80:d0:51:7d:c3:6f:e6:ca:db:9c:01:da:48:cf: ea:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2A:89:35:60:49:D0:E9:2D:C4:B4:FC:25:A7:0B:91:3A:CC:20:2B X509v3 Authority Key Identifier: keyid:33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:bb:4b:d8:00:f6:47:bd:27:a8:e3:bc:ad:e0:6e:c2:f2:23: e3:fd:7a:89:5f:69:cd:d7:c2:f2:d2:d8:12:fc:ac:87:3c:84: f2:87:06:0d:df:be:09:54:7c:2a:5d:d0:e4:3f:6b:23:c8:e1: 25:b4:aa:cf:f0:8e:7f:80:3a:48:fa:5b:8b:60:64:09:50:5c: f5:39:c3:84:58:59:08:f4:bc:ba:80:36:a0:fa:e4:58:ed:8b: 58:5f:32:d4:55:03:78:6c:c3:39:84:42:0e:c9:e0:16:ca:52: 40:b4:b6:f7:0c:07:5c:df:2b:28:36:e3:48:ab:62:7b:9c:d8: 1f:c1:e0:67:fa:52:ca:ad:50:51:9b:af:37:3b:e2:c0:23:40: ac:22:98:e2:86:a6:2a:e7:a1:25:d6:6e:ed:d9:c6:bd:1d:94: 89:a8:30:5b:21:a0:bf:5e:c5:11:b5:cc:b2:db:5a:dd:e2:7e: 69:50:49:81:c3:eb:6d:fd:b7:8f:d2:92:3e:61:54:b3:2c:5d: 16:93:bd:1c:8b:5a:7c:a9:33:88:82:67:e7:65:f6:82:b3:78: 29:11:24:6c:7e:7a:dd:39:cc:1e:85:d3:5c:6f:27:05:ac:d5: e3:ab:e1:ac:f9:1c:a8:b3:ab:23:ba:72:cd:30:21:22:2f:63: 42:9a:1c:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFMzcxMTAvBgNVBAUTKDMzQkVGMTY0QUVEM0ZEMTNENjlBRUI1MUU1QTBDQ0Yz OTlGOTQxNDQwHhcNMjUwODIzMDQzODU0WhcNMjUwODMwMDQzODU0WjAYMRYwFAYD VQQDEw02OGE5NDVkZS00YTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4oFkWIBjdmEeYIUbbTTlXJZeYKySaF2Ocz4uyFdmM9eTqiLLn4jnVpe8WXf U2/s2ANdtu0itihUuftsURXrn+mFpuV2/hef/iXrjHRu8Yoi00MYpl6Y5nmqmErc peo/8ORlaYXQcLJ9Btrctuli1+dIJbRh30YxvyYJI9EATQB78Wuih6OOmtQT1NXR PvCsAkEZp441llsocNvI3D1KeKmW5wPn+KCgN1uUEGrxut70al50WMoj+qbGeQ7P c4a3kBFEoU0i+WapyZmG5IE3kU51qLOqx6MpN9+rkd9HTtsNW/tHUWYCK++4Cd+X LwAVgNBRfcNv5srbnAHaSM/qqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQqiTVg SdDpLcS0/CWnC5E6zCArMB8GA1UdIwQYMBaAFDO+8WSu0/0T1prrUeWgzPOZ+UFE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkUzNy80QUM2OTM4OEFB M0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9SUFdtdXRSNWFETTg1bjVR VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003N3haSzdUX1JQV211dFI1YURNODVuNVFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkUzNy80QUM2OTM4OEFBM0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9S UFdtdXRSNWFETTg1bjVRVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQu0vYAPZHvSeo47yt4G7C8iPj/XqJX2nN18Ly0tgS/KyHPITyhwYN 374JVHwqXdDkP2sjyOEltKrP8I5/gDpI+luLYGQJUFz1OcOEWFkI9Ly6gDag+uRY 7YtYXzLUVQN4bMM5hEIOyeAWylJAtLb3DAdc3ysoNuNIq2J7nNgfweBn+lLKrVBR m683O+LAI0CsIpjihqYq56El1m7t2ca9HZSJqDBbIaC/XsURtcyy21rd4n5pUEmB w+tt/beP0pI+YVSzLF0Wk70ci1p8qTOIgmfnZfaCs3gpESRsfnrdOcwehdNcbycF rNXjq+Gs+Ryos6sjunLNMCEiL2NCmhzI -----END CERTIFICATE-----Generated at Sun Aug 24 05:14:31 2025 by rpki-client