$ rpki-client -vvf rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft File: 77_xazqfbkTaHnWOk5XRxbcUR1o.mft (raw, json) Hash identifier: 0u9Uo75GRA81h9JnNtbCx3n+luMo98IPaU0PSknflnI= Subject key identifier: F6:51:EF:A6:43:0B:EC:62:29:16:64:AB:72:E8:1D:4B:AF:D3:67:14 Authority key identifier: EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A Certificate issuer: /CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft Manifest number: 0650 Signing time: Thu 24 Apr 2025 22:18:54 +0000 Manifest this update: Thu 24 Apr 2025 22:18:53 +0000 Manifest next update: Thu 01 May 2025 22:18:53 +0000 Files and hashes: 1: 77_xazqfbkTaHnWOk5XRxbcUR1o.crl (hash: wnbx7cqmLDpff45/0EzS/15KyzrAK7TYfvu0ABFedDM=) 2: 3ADF4748836D11EBAD2CDC13C4F9AE02.roa (hash: /FJLHrb+Y+v6CrfuPekX8L5QT/sE2Qa/rLDAkhyiJro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136B8D, serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Validity Not Before: Apr 24 22:18:53 2025 GMT Not After : May 1 22:18:53 2025 GMT Subject: CN=680ab8cd-2640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:26:e5:12:63:21:61:d6:ce:e8:f6:11:ca:2d: 7f:64:93:0a:d1:b3:2c:5f:d7:d1:76:e1:1b:72:26: 1c:9c:24:77:f6:fd:c8:ac:e7:7f:04:6f:e1:fa:61: 1e:13:5b:42:96:d3:83:1c:8b:4e:3b:88:d4:a4:3c: 26:05:54:30:18:0c:54:42:65:4a:c9:8a:bb:19:60: 84:18:52:1d:2c:56:72:1e:59:43:9a:f8:af:8c:65: 1f:07:8c:a9:c5:72:40:3a:1e:14:03:21:f4:45:61: 79:55:f8:cb:da:13:89:67:2d:18:f7:76:f7:30:f3: 07:03:d7:04:ef:88:e6:3f:22:cd:f7:bd:d6:e9:90: 5c:67:33:4b:e9:3c:80:f0:86:6e:75:1d:12:69:6e: 59:45:f4:1c:f8:0e:50:b3:c6:93:89:d6:c1:8b:5c: 93:c4:9a:0b:c7:d4:28:71:92:69:07:96:c6:5f:37: c3:95:cd:19:c9:40:18:a9:7d:3b:82:ac:c6:84:51: b7:45:94:d8:1c:85:de:27:4f:b2:ee:fb:69:b9:b2: e1:53:22:53:89:38:a2:a8:f1:65:6c:69:7f:b2:47: 1b:72:6c:b3:90:6a:3c:5b:30:da:86:7f:e4:05:e9: 8e:37:bb:08:6d:76:37:28:9f:fc:18:2d:3a:4e:d3: 7f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:51:EF:A6:43:0B:EC:62:29:16:64:AB:72:E8:1D:4B:AF:D3:67:14 X509v3 Authority Key Identifier: keyid:EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:13:0b:07:68:db:c1:3a:0f:0b:c5:30:45:d0:31:e9:a0:50: 97:f3:8d:26:59:d6:ba:18:d4:10:64:1b:db:0f:9c:44:9e:28: d5:6d:2e:7b:58:5a:98:b7:10:a9:08:28:b8:3d:7e:e8:31:77: 75:00:1e:fc:6f:2f:df:ec:f0:d8:0e:3e:aa:50:0e:78:ea:62: 52:fe:57:6c:f2:d2:26:f0:0f:86:b2:da:db:e0:ce:3a:1f:34: 59:af:c7:53:c8:33:18:39:f6:c2:ca:6d:91:ec:2e:d7:22:98: 49:3e:c3:1b:c9:e8:f9:57:45:2b:8d:c0:82:23:be:b3:bd:ab: 87:9a:00:01:e7:98:14:df:80:d6:ee:2c:62:aa:4f:8d:e8:39: c7:9e:f5:78:03:bf:98:9e:0d:b3:6a:b0:e0:32:16:fa:7c:a1: c7:e0:da:24:dc:0e:7d:03:23:9d:77:75:e5:b0:d0:56:2d:7a: 8c:0e:b3:c6:8d:0a:df:30:e5:22:ef:d5:56:cb:1e:ac:4b:8b: f8:60:1a:1e:68:ff:8b:20:64:a0:e3:5e:f8:88:b3:66:99:61: af:25:a9:72:0e:2a:f1:76:95:ef:ce:2e:fa:72:66:1c:74:d0: e2:80:55:98:c4:6f:ee:6d:b4:ef:ff:c0:e4:be:53:70:d6:b3: 60:71:91:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCOEQxMTAvBgNVBAUTKEVGQkZGMTZCM0E5RjZFNDREQTFFNzU4RTkzOTVEMUM1 QjcxNDQ3NUEwHhcNMjUwNDI0MjIxODUzWhcNMjUwNTAxMjIxODUzWjAYMRYwFAYD VQQDEw02ODBhYjhjZC0yNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CblEmMhYdbO6PYRyi1/ZJMK0bMsX9fRduEbciYcnCR39v3IrOd/BG/h+mEe E1tCltODHItOO4jUpDwmBVQwGAxUQmVKyYq7GWCEGFIdLFZyHllDmvivjGUfB4yp xXJAOh4UAyH0RWF5VfjL2hOJZy0Y93b3MPMHA9cE74jmPyLN973W6ZBcZzNL6TyA 8IZudR0SaW5ZRfQc+A5Qs8aTidbBi1yTxJoLx9QocZJpB5bGXzfDlc0ZyUAYqX07 gqzGhFG3RZTYHIXeJ0+y7vtpubLhUyJTiTiiqPFlbGl/skcbcmyzkGo8WzDahn/k BemON7sIbXY3KJ/8GC06TtN/0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZR76ZD C+xiKRZkq3LoHUuv02cUMB8GA1UdIwQYMBaAFO+/8Ws6n25E2h51jpOV0cW3FEda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkI4RC8wREI4OTNFQzgz NkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJrVGFIbldPazVYUnhiY1VS MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3X3hhenFmYmtUYUhuV09rNVhSeGJjVVIxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkI4RC8wREI4OTNFQzgzNkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJr VGFIbldPazVYUnhiY1VSMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/EwsHaNvBOg8LxTBF0DHpoFCX840mWda6GNQQZBvbD5xEnijVbS57 WFqYtxCpCCi4PX7oMXd1AB78by/f7PDYDj6qUA546mJS/lds8tIm8A+Gstrb4M46 HzRZr8dTyDMYOfbCym2R7C7XIphJPsMbyej5V0UrjcCCI76zvauHmgAB55gU34DW 7ixiqk+N6DnHnvV4A7+Yng2zarDgMhb6fKHH4Nok3A59AyOdd3XlsNBWLXqMDrPG jQrfMOUi79VWyx6sS4v4YBoeaP+LIGSg4174iLNmmWGvJalyDirxdpXvzi76cmYc dNDigFWYxG/ubbTv/8DkvlNw1rNgcZFF -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:31 2025 by rpki-client