$ rpki-client -vvf rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft File: 77_xazqfbkTaHnWOk5XRxbcUR1o.mft (raw, json) Hash identifier: ufbZqO0BsodBIIlxLQbbuBB1DlGO7Xt2WJKeLeYz+OY= Subject key identifier: 8A:47:49:E5:29:50:39:06:04:0A:1D:5E:0B:F5:26:74:5E:70:1A:34 Authority key identifier: EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A Certificate issuer: /CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Certificate serial: 0674 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft Manifest number: 066B Signing time: Wed 18 Jun 2025 22:16:11 +0000 Manifest this update: Wed 18 Jun 2025 22:16:10 +0000 Manifest next update: Wed 25 Jun 2025 22:16:10 +0000 Files and hashes: 1: 77_xazqfbkTaHnWOk5XRxbcUR1o.crl (hash: RiFeK7emASXLuFim/duUkq+uH2fpFTSh14tCgGnpfNM=) 2: 3ADF4748836D11EBAD2CDC13C4F9AE02.roa (hash: /FJLHrb+Y+v6CrfuPekX8L5QT/sE2Qa/rLDAkhyiJro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136B8D, serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Validity Not Before: Jun 18 22:16:10 2025 GMT Not After : Jun 25 22:16:10 2025 GMT Subject: CN=68533aab-be68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:0b:35:45:ae:04:83:d6:06:d3:5e:35:e9: be:e2:a9:2f:ab:25:e8:50:c9:26:81:4f:cb:35:75: f7:0d:e3:98:95:d3:57:ac:b0:97:c6:10:90:82:93: d5:26:81:84:01:a7:20:52:e0:d7:a4:4e:b4:70:76: d6:a8:73:1f:11:ee:3a:06:9f:7e:a1:20:61:35:b9: 8d:b8:2f:a1:0c:7e:74:dc:29:ae:31:e3:30:fd:36: 12:df:e1:33:79:9f:a2:bb:6b:db:6b:9d:f2:ab:91: 33:a1:cb:7d:af:c6:66:bf:35:30:b0:83:e1:29:c1: 03:09:4e:48:cb:08:0e:c1:7f:08:f5:cf:e2:7c:24: f4:ba:08:f7:8c:bc:cc:ee:b8:22:2e:7c:d7:ae:14: 13:e6:6f:62:a5:51:6f:70:08:e2:e1:d0:a0:78:03: 4d:28:54:ed:81:08:d0:a6:2e:3f:10:ca:61:05:c8: 96:97:db:04:5b:10:48:68:80:d5:88:4d:c1:ab:3e: 7e:15:a6:4a:2c:b1:90:bb:89:3f:89:72:ba:7b:7e: 7c:46:fe:f9:2a:1e:7a:39:43:5d:bb:d3:71:d1:ee: 5d:16:54:f8:17:f3:23:c3:ee:90:39:ca:11:ea:ee: ad:00:dc:ca:b2:a1:00:37:65:cd:fd:5a:e4:2b:a2: e1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:47:49:E5:29:50:39:06:04:0A:1D:5E:0B:F5:26:74:5E:70:1A:34 X509v3 Authority Key Identifier: keyid:EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c7:84:4e:13:58:86:4c:93:da:41:fb:2a:14:5c:75:c6:f0: 52:94:b3:7d:be:7a:fb:e0:89:42:ac:bc:8e:0b:a8:f5:15:7b: d0:ba:7a:ca:e6:29:d6:6a:6d:91:22:4a:87:8e:07:2c:79:a8: f5:64:e0:2a:4e:4b:9e:66:15:b2:00:1d:03:a8:a0:10:52:74: 66:c1:8e:29:b6:d6:08:da:6f:a1:07:c3:c2:12:ed:53:20:55: db:d5:19:1c:51:0a:64:51:c5:21:8c:22:96:94:a7:85:76:57: c8:a7:f4:c1:8b:44:d6:40:d6:db:2a:79:49:3d:ef:3d:1d:34: 19:7e:42:f6:58:8e:22:08:0a:4e:64:0d:64:15:e1:4c:0f:85: d1:99:59:32:a0:73:f7:2d:82:b9:6f:75:69:31:ae:f0:90:46: 02:68:cc:51:d2:42:18:b0:33:9d:aa:e7:3b:25:ed:bf:4e:53: 0e:57:b7:ea:1f:34:73:76:b4:a9:56:ff:6c:52:04:95:ec:ca: bb:c1:71:fb:de:03:e2:6a:a8:b1:c3:68:d6:b1:60:de:d8:87: 62:d5:93:16:64:5f:f1:d4:1c:a8:31:2a:f9:24:b9:0b:13:c0: 4b:d3:d9:81:f5:e0:11:a6:68:be:29:33:a8:e8:d8:95:97:3e: 22:0b:cf:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCOEQxMTAvBgNVBAUTKEVGQkZGMTZCM0E5RjZFNDREQTFFNzU4RTkzOTVEMUM1 QjcxNDQ3NUEwHhcNMjUwNjE4MjIxNjEwWhcNMjUwNjI1MjIxNjEwWjAYMRYwFAYD VQQDEw02ODUzM2FhYi1iZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT4LNUWuBIPWBtNeNem+4qkvqyXoUMkmgU/LNXX3DeOYldNXrLCXxhCQgpPV JoGEAacgUuDXpE60cHbWqHMfEe46Bp9+oSBhNbmNuC+hDH503CmuMeMw/TYS3+Ez eZ+iu2vba53yq5Ezoct9r8ZmvzUwsIPhKcEDCU5IywgOwX8I9c/ifCT0ugj3jLzM 7rgiLnzXrhQT5m9ipVFvcAji4dCgeANNKFTtgQjQpi4/EMphBciWl9sEWxBIaIDV iE3Bqz5+FaZKLLGQu4k/iXK6e358Rv75Kh56OUNdu9Nx0e5dFlT4F/Mjw+6QOcoR 6u6tANzKsqEAN2XN/VrkK6Lh7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpHSeUp UDkGBAodXgv1JnRecBo0MB8GA1UdIwQYMBaAFO+/8Ws6n25E2h51jpOV0cW3FEda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkI4RC8wREI4OTNFQzgz NkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJrVGFIbldPazVYUnhiY1VS MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3X3hhenFmYmtUYUhuV09rNVhSeGJjVVIxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkI4RC8wREI4OTNFQzgzNkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJr VGFIbldPazVYUnhiY1VSMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVx4ROE1iGTJPaQfsqFFx1xvBSlLN9vnr74IlCrLyOC6j1FXvQunrK 5inWam2RIkqHjgcseaj1ZOAqTkueZhWyAB0DqKAQUnRmwY4pttYI2m+hB8PCEu1T IFXb1RkcUQpkUcUhjCKWlKeFdlfIp/TBi0TWQNbbKnlJPe89HTQZfkL2WI4iCApO ZA1kFeFMD4XRmVkyoHP3LYK5b3VpMa7wkEYCaMxR0kIYsDOdquc7Je2/TlMOV7fq HzRzdrSpVv9sUgSV7Mq7wXH73gPiaqixw2jWsWDe2Idi1ZMWZF/x1ByoMSr5JLkL E8BL09mB9eARpmi+KTOo6NiVlz4iC89e -----END CERTIFICATE-----Generated at Thu Jun 19 02:57:19 2025 by rpki-client