$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft File: 76axB-8ZSk3WeyjVVYARdcz3FEU.mft (raw, json) Hash identifier: y3qfvPGtXC/71KdOMqPep9/Qby/fRjCuX788A+h5vVI= Subject key identifier: 8C:FA:11:52:98:2D:5D:2A:7C:19:99:CC:E7:F2:21:EE:4B:43:95:74 Authority key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 Certificate issuer: /CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Certificate serial: 0736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft Manifest number: 072B Signing time: Wed 30 Apr 2025 21:30:36 +0000 Manifest this update: Wed 30 Apr 2025 21:30:35 +0000 Manifest next update: Wed 07 May 2025 21:30:35 +0000 Files and hashes: 1: 76axB-8ZSk3WeyjVVYARdcz3FEU.crl (hash: EZ0JJ/SOCUSjEpW74Tj7O/otTkheDzc0ohX4wX0Vk2M=) 2: 666595E890A911EDA8F5FF52C4F9AE02.roa (hash: BtJQntraWj3X9XmZWJOEGn+Y1wojJqx0bXvw8A5EV+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 21:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1846 (0x736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFD7, serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Validity Not Before: Apr 30 21:30:35 2025 GMT Not After : May 7 21:30:35 2025 GMT Subject: CN=6812967c-2480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:96:02:97:91:12:80:16:d6:5f:40:29:28:29: cf:da:f1:4d:74:31:cd:b2:db:14:a6:0f:21:ee:51: 17:d3:70:df:28:ec:51:c1:c3:26:01:ef:19:fb:38: 6d:b6:78:d5:ad:03:b7:84:66:8e:79:e1:d5:81:9f: 62:0e:39:42:7c:29:6a:c5:01:7e:89:5b:13:8f:39: 09:73:fe:fd:eb:63:36:ec:82:62:72:13:82:99:b0: 08:34:1a:50:0a:09:9c:3b:e9:46:c9:da:c4:95:d0: 9d:49:e2:d7:a8:37:b8:27:cb:b3:a1:1c:6e:37:6b: 00:0b:17:01:86:f2:bf:68:1b:24:2a:84:46:5d:11: f4:39:7a:94:f6:50:ba:b6:6a:9d:16:62:da:c7:d8: 2d:41:ef:26:f0:93:a7:a8:f9:f8:35:67:82:29:2d: 66:05:c8:b2:ce:7f:1a:8f:fe:1f:9b:66:73:74:e1: 91:a6:e3:1e:a7:ec:79:26:c9:77:e4:e2:0f:a3:59: 6d:69:2a:71:9d:45:80:38:a5:1a:eb:7b:c5:92:88: 2b:e2:c0:96:09:ff:b2:84:18:b2:8f:4f:3f:48:f9: ec:82:f8:5b:a0:a0:74:38:fd:5b:7b:25:94:98:d5: 87:f9:77:79:b9:19:78:f5:f2:56:76:44:c1:7e:d8: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FA:11:52:98:2D:5D:2A:7C:19:99:CC:E7:F2:21:EE:4B:43:95:74 X509v3 Authority Key Identifier: keyid:EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:54:51:1c:0e:8d:0c:02:6e:df:a7:5b:1a:d8:8a:4f:e8:28: 47:b9:7f:84:e7:99:32:36:f8:da:46:ca:bd:03:dc:e4:b8:28: b1:c7:70:31:01:65:e9:c8:4a:b0:46:c8:9a:51:2e:bb:63:c5: 47:80:e1:87:cf:45:47:70:7f:09:0a:29:e4:a5:0c:71:57:fa: 0c:9d:5e:21:5a:f5:90:e9:e4:98:51:8a:54:7c:cf:ed:fb:e3: 12:aa:a5:23:a2:0f:0b:dc:51:65:25:e6:e0:db:41:e3:8f:60: e0:d6:89:6c:1c:45:1d:38:a2:51:d7:ee:05:8f:3c:3e:e8:35: be:22:af:80:36:2d:59:69:73:5d:db:26:65:7f:ac:61:b0:91: 3d:55:5f:d5:72:bd:97:0f:99:77:c7:e7:ef:c8:47:1a:40:9f: 9c:05:2a:64:fa:35:0a:62:1f:6f:6e:f1:1a:8c:6f:7e:1f:65: 78:5a:88:5e:d7:54:06:45:2d:58:ae:f0:6d:f5:a8:d1:b2:ed: fb:10:d6:95:26:0e:56:ef:0c:68:3e:20:a9:e2:29:20:02:42: 37:a1:fe:87:1d:70:77:a4:a1:e9:6e:f7:9c:a3:1f:82:b5:b3: 80:05:52:76:7a:c4:45:58:00:10:45:d2:db:e4:f1:c7:bf:eb: f7:17:6e:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGRDcxMTAvBgNVBAUTKEVGQTZCMTA3RUYxOTRBNERENjdCMjhENTU1ODAxMTc1 Q0NGNzE0NDUwHhcNMjUwNDMwMjEzMDM1WhcNMjUwNTA3MjEzMDM1WjAYMRYwFAYD VQQDEw02ODEyOTY3Yy0yNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZYCl5ESgBbWX0ApKCnP2vFNdDHNstsUpg8h7lEX03DfKOxRwcMmAe8Z+zht tnjVrQO3hGaOeeHVgZ9iDjlCfClqxQF+iVsTjzkJc/7962M27IJichOCmbAINBpQ CgmcO+lGydrEldCdSeLXqDe4J8uzoRxuN2sACxcBhvK/aBskKoRGXRH0OXqU9lC6 tmqdFmLax9gtQe8m8JOnqPn4NWeCKS1mBciyzn8aj/4fm2ZzdOGRpuMep+x5Jsl3 5OIPo1ltaSpxnUWAOKUa63vFkogr4sCWCf+yhBiyj08/SPnsgvhboKB0OP1beyWU mNWH+Xd5uRl49fJWdkTBftiD8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIz6EVKY LV0qfBmZzOfyIe5LQ5V0MB8GA1UdIwQYMBaAFO+msQfvGUpN1nso1VWAEXXM9xRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZENy83QjQwOUNBMDJG QTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNrM1dleWpWVllBUmRjejNG RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc2YXhCLThaU2szV2V5alZWWUFSZGN6M0ZFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZENy83QjQwOUNBMDJGQTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNr M1dleWpWVllBUmRjejNGRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIVFEcDo0MAm7fp1sa2IpP6ChHuX+E55kyNvjaRsq9A9zkuCixx3Ax AWXpyEqwRsiaUS67Y8VHgOGHz0VHcH8JCinkpQxxV/oMnV4hWvWQ6eSYUYpUfM/t ++MSqqUjog8L3FFlJebg20Hjj2Dg1olsHEUdOKJR1+4Fjzw+6DW+Iq+ANi1ZaXNd 2yZlf6xhsJE9VV/Vcr2XD5l3x+fvyEcaQJ+cBSpk+jUKYh9vbvEajG9+H2V4Wohe 11QGRS1YrvBt9ajRsu37ENaVJg5W7wxoPiCp4ikgAkI3of6HHXB3pKHpbvecox+C tbOABVJ2esRFWAAQRdLb5PHHv+v3F26v -----END CERTIFICATE-----Generated at Thu May 1 06:09:53 2025 by rpki-client