$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft File: 77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json) Hash identifier: mIojUdvcGoErgTiXG7Uz9bnxSYNnZEqVak71QpGq8Gw= Subject key identifier: 89:60:DE:EE:4F:D0:19:A5:06:9E:DC:6C:7A:2A:A3:6A:FF:70:0F:EE Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Certificate serial: 0C3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft Manifest number: 0C38 Signing time: Fri 08 Aug 2025 18:50:40 +0000 Manifest this update: Fri 08 Aug 2025 18:50:40 +0000 Manifest next update: Fri 15 Aug 2025 18:50:40 +0000 Files and hashes: 1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: sngmbfHalGY0aemayaE3nQvZoVFFoBmjj63DsvMR3iE=) 2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: WgtMqOXutoCTVgnfA2uL+HiTE6KoWpCNsapDLYeBrco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3135 (0xc3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Validity Not Before: Aug 8 18:50:40 2025 GMT Not After : Aug 15 18:50:40 2025 GMT Subject: CN=68964700-9451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:d1:17:e7:d5:13:4b:55:51:02:96:25:74: 40:74:41:75:c3:2c:46:d1:03:70:8f:34:ca:75:a4: d7:6f:18:a4:05:72:2a:57:e1:1b:66:cf:1d:5d:2b: e6:c2:59:2e:ac:5b:7a:f7:3a:ff:77:9c:c6:a0:14: fe:b5:9a:20:ad:b5:2e:b9:53:7b:b4:a3:48:03:12: 3d:da:9a:6e:79:70:ae:65:55:34:8c:aa:db:c5:db: 1c:b0:f6:20:e6:35:1d:dc:84:68:54:8a:b3:29:07: 8d:9f:00:a4:d3:e4:e9:c4:b1:af:7e:76:d4:e1:14: 92:b2:1e:3d:ae:e0:9b:92:fa:8b:af:7f:b3:dd:0f: 0c:e0:b8:83:bc:7a:ad:be:99:aa:39:9f:88:ae:29: 52:15:7d:f1:f8:50:39:ad:06:cc:bf:05:f5:16:98: 04:d2:4e:a9:b8:29:b5:f4:11:0c:1a:21:5e:e7:2b: 15:1b:5b:26:f7:8f:78:56:9a:5f:8c:03:58:29:e8: 9b:f9:95:94:72:87:81:e9:28:13:88:c5:d4:02:ef: 57:ed:3d:cd:49:ca:01:f6:b0:d8:6a:d3:07:64:06: db:4d:56:fe:b8:35:22:27:67:40:ae:45:64:fc:40: 54:2c:4f:50:57:4f:1a:98:38:0c:39:78:6d:ab:94: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:60:DE:EE:4F:D0:19:A5:06:9E:DC:6C:7A:2A:A3:6A:FF:70:0F:EE X509v3 Authority Key Identifier: keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:66:7e:a0:dc:9b:83:07:37:fa:25:7d:8d:6b:cb:f5:e2:bb: 5e:37:84:eb:e4:4f:64:14:b8:2a:44:8e:3b:64:1d:6f:52:1e: 43:40:d1:4f:64:af:4e:e9:e1:50:10:42:c9:80:82:00:48:b7: 38:9c:6b:ea:1b:e2:5e:43:29:63:33:89:9d:ad:eb:ba:b0:5d: d3:ca:aa:fd:1f:dd:38:30:c2:24:4b:1a:19:dd:c5:31:06:59: 9d:be:d0:8c:6d:c7:36:80:73:38:8d:39:88:67:e3:f1:32:90: 53:ea:90:87:c6:f2:7c:7f:a0:e4:83:a1:8f:39:8b:d7:91:78: 3c:31:26:8b:04:d3:ff:e5:f3:b6:b7:a1:4c:04:41:30:92:09: de:bb:75:29:08:32:e9:82:7c:f9:4e:91:4b:f7:fc:bf:2a:99: 39:f1:d6:1f:74:e4:44:c3:8f:23:60:9a:2a:4c:00:ba:33:42: 30:9c:8f:77:5b:ec:f8:19:21:a5:1d:73:d4:24:70:80:65:ea: 21:de:63:a8:44:06:6f:09:b2:6a:de:58:36:51:49:4b:a3:96: ce:43:39:95:e5:fd:88:ed:45:8d:59:b3:2f:ea:86:bb:bf:eb: 81:8b:e8:22:7c:69:c0:66:98:fa:cc:75:cf:2f:bd:59:52:8a: 39:a8:1f:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM1OUUxMTAvBgNVBAUTKEVGQjY5MDcwRTJDNDAxQTVGNzcxMzNEMkRCQjFCQTM0 MUQxN0U2MUUwHhcNMjUwODA4MTg1MDQwWhcNMjUwODE1MTg1MDQwWjAYMRYwFAYD VQQDEw02ODk2NDcwMC05NDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MXRF+fVE0tVUQKWJXRAdEF1wyxG0QNwjzTKdaTXbxikBXIqV+EbZs8dXSvm wlkurFt69zr/d5zGoBT+tZogrbUuuVN7tKNIAxI92ppueXCuZVU0jKrbxdscsPYg 5jUd3IRoVIqzKQeNnwCk0+TpxLGvfnbU4RSSsh49ruCbkvqLr3+z3Q8M4LiDvHqt vpmqOZ+IrilSFX3x+FA5rQbMvwX1FpgE0k6puCm19BEMGiFe5ysVG1sm9494Vppf jANYKeib+ZWUcoeB6SgTiMXUAu9X7T3NScoB9rDYatMHZAbbTVb+uDUiJ2dArkVk /EBULE9QV08amDgMOXhtq5QdhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlg3u5P 0BmlBp7cbHoqo2r/cA/uMB8GA1UdIwQYMBaAFO+2kHDixAGl93Ez0tuxujQdF+Ye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzU5RS82QTQ5ODhCNjBE RUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFhWDNjVFBTMjdHNk5CMFg1 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3YVFjT0xFQWFYM2NUUFMyN0c2TkIwWDVoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzU5RS82QTQ5ODhCNjBERUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFh WDNjVFBTMjdHNk5CMFg1aDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Zn6g3JuDBzf6JX2Na8v14rteN4Tr5E9kFLgqRI47ZB1vUh5DQNFP ZK9O6eFQEELJgIIASLc4nGvqG+JeQyljM4mdreu6sF3Tyqr9H904MMIkSxoZ3cUx BlmdvtCMbcc2gHM4jTmIZ+PxMpBT6pCHxvJ8f6Dkg6GPOYvXkXg8MSaLBNP/5fO2 t6FMBEEwkgneu3UpCDLpgnz5TpFL9/y/Kpk58dYfdOREw48jYJoqTAC6M0IwnI93 W+z4GSGlHXPUJHCAZeoh3mOoRAZvCbJq3lg2UUlLo5bOQzmV5f2I7UWNWbMv6oa7 v+uBi+gifGnAZpj6zHXPL71ZUoo5qB+S -----END CERTIFICATE-----Generated at Sun Aug 10 05:43:37 2025 by rpki-client