$ rpki-client -vvf rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft File: 77_xazqfbkTaHnWOk5XRxbcUR1o.mft (raw, json) Hash identifier: R5cT0K5UKnhNFnVsmvlDihKiskUAhe/dRV9a+4cKIyA= Subject key identifier: 08:2E:36:26:C9:6C:C3:F6:FB:50:DB:FF:B9:F2:9A:E4:68:5E:E7:33 Authority key identifier: EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A Certificate issuer: /CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft Manifest number: 0685 Signing time: Fri 08 Aug 2025 22:46:04 +0000 Manifest this update: Fri 08 Aug 2025 22:46:03 +0000 Manifest next update: Fri 15 Aug 2025 22:46:03 +0000 Files and hashes: 1: 77_xazqfbkTaHnWOk5XRxbcUR1o.crl (hash: /fvOuy++ASABt66QF9DiCdVnrxOUNeh6hKcIK4cy0aU=) 2: 3ADF4748836D11EBAD2CDC13C4F9AE02.roa (hash: /FJLHrb+Y+v6CrfuPekX8L5QT/sE2Qa/rLDAkhyiJro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136B8D, serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Validity Not Before: Aug 8 22:46:03 2025 GMT Not After : Aug 15 22:46:03 2025 GMT Subject: CN=68967e2b-cb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:f3:8d:ea:6d:b5:e2:c8:ea:45:62:20:6c: 9c:51:78:79:07:dc:38:c0:3b:c1:10:53:4d:2c:8b: 37:2a:3f:f9:54:42:32:08:6f:7b:bc:0e:44:83:1d: 9e:f4:45:bf:80:da:be:ce:0b:24:c7:98:c9:e1:b2: 18:3e:29:7a:eb:8e:f8:2a:59:ae:33:92:80:cd:d6: e3:33:19:49:c6:f2:94:6b:1c:70:44:58:b9:9d:0a: 8b:96:af:fc:cc:1a:d6:df:1b:6c:f7:72:45:d1:8a: f9:33:70:06:34:62:5f:27:e7:e5:24:7e:9f:57:db: 9e:03:2c:35:4c:5c:e6:02:df:f8:78:b3:34:09:78: f2:26:7c:fd:f9:ed:f7:70:da:7d:02:3d:8b:a3:42: 00:5d:87:88:6a:fb:5b:d7:f9:49:2d:e9:5c:69:07: 81:a1:e9:02:53:0c:cc:4f:7f:e6:30:09:b2:59:e9: 01:6f:d3:14:0e:98:c9:79:05:3c:59:13:96:fa:b3: 2e:be:b1:3b:75:26:e7:81:66:e9:1e:b1:7f:a7:1b: 4e:22:53:d0:06:bd:20:8c:b5:bf:d1:f6:d5:ee:7c: b2:5a:24:19:81:a2:e6:2b:41:e7:52:45:25:44:45: 5f:1d:ae:2a:cf:8c:89:dc:fb:be:64:9c:b6:cc:98: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2E:36:26:C9:6C:C3:F6:FB:50:DB:FF:B9:F2:9A:E4:68:5E:E7:33 X509v3 Authority Key Identifier: keyid:EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:4b:8b:0d:68:10:62:eb:79:56:f8:f1:16:11:96:15:21:29: a6:b2:e2:5e:1a:b9:65:02:57:39:46:d7:e8:a3:6a:ab:92:1c: 68:d0:44:34:4e:a5:07:5d:57:2e:da:87:8c:cd:f4:a9:90:61: 1a:f1:18:83:f5:18:d2:77:a5:0d:65:de:d9:42:82:90:05:80: 2c:1d:52:dc:4d:3c:9a:c5:de:ad:4a:f1:ba:0e:18:57:1d:08: 6d:f0:92:a5:87:69:46:cb:a1:48:00:28:14:06:e8:f3:ad:51: b0:16:2a:dc:50:5d:4f:c2:6d:28:f5:db:29:a1:84:b6:e4:dd: 5d:dd:39:bb:ba:05:86:6c:37:57:64:44:7f:26:01:0d:bd:87: fb:c5:6d:dc:16:67:72:d8:c7:fa:d1:ed:1f:7e:56:13:1d:a2: c3:eb:24:54:d2:ad:39:4d:d3:3f:05:8b:c5:fa:f7:27:a8:04: 47:68:6a:00:5d:f2:98:72:bb:99:ba:0f:39:06:44:f7:ec:4a: 2d:51:d5:04:6c:d0:ce:fb:55:b1:a8:01:1b:7d:52:06:1d:23: 2e:10:c3:e2:8c:97:3d:a6:4e:4b:bb:52:6f:f8:71:c6:d7:84: f6:30:bc:ce:93:77:16:b5:f0:12:50:54:ff:d6:23:cf:a9:83: ce:db:77:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCOEQxMTAvBgNVBAUTKEVGQkZGMTZCM0E5RjZFNDREQTFFNzU4RTkzOTVEMUM1 QjcxNDQ3NUEwHhcNMjUwODA4MjI0NjAzWhcNMjUwODE1MjI0NjAzWjAYMRYwFAYD VQQDEw02ODk2N2UyYi1jYjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApp7zjeptteLI6kViIGycUXh5B9w4wDvBEFNNLIs3Kj/5VEIyCG97vA5Egx2e 9EW/gNq+zgskx5jJ4bIYPil66474KlmuM5KAzdbjMxlJxvKUaxxwRFi5nQqLlq/8 zBrW3xts93JF0Yr5M3AGNGJfJ+flJH6fV9ueAyw1TFzmAt/4eLM0CXjyJnz9+e33 cNp9Aj2Lo0IAXYeIavtb1/lJLelcaQeBoekCUwzMT3/mMAmyWekBb9MUDpjJeQU8 WROW+rMuvrE7dSbngWbpHrF/pxtOIlPQBr0gjLW/0fbV7nyyWiQZgaLmK0HnUkUl REVfHa4qz4yJ3Pu+ZJy2zJgOzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAguNibJ bMP2+1Db/7nymuRoXuczMB8GA1UdIwQYMBaAFO+/8Ws6n25E2h51jpOV0cW3FEda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkI4RC8wREI4OTNFQzgz NkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJrVGFIbldPazVYUnhiY1VS MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3X3hhenFmYmtUYUhuV09rNVhSeGJjVVIxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkI4RC8wREI4OTNFQzgzNkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJr VGFIbldPazVYUnhiY1VSMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhS4sNaBBi63lW+PEWEZYVISmmsuJeGrllAlc5Rtfoo2qrkhxo0EQ0 TqUHXVcu2oeMzfSpkGEa8RiD9RjSd6UNZd7ZQoKQBYAsHVLcTTyaxd6tSvG6DhhX HQht8JKlh2lGy6FIACgUBujzrVGwFircUF1Pwm0o9dspoYS25N1d3Tm7ugWGbDdX ZER/JgENvYf7xW3cFmdy2Mf60e0fflYTHaLD6yRU0q05TdM/BYvF+vcnqARHaGoA XfKYcruZug85BkT37EotUdUEbNDO+1WxqAEbfVIGHSMuEMPijJc9pk5Lu1Jv+HHG 14T2MLzOk3cWtfASUFT/1iPPqYPO23cc -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:05 2025 by rpki-client