$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft File: M77xZK7T_RPWmutR5aDM85n5QUQ.mft (raw, json) Hash identifier: 0DrMppsmkBfK9TPNzfzZrJU9kHEpmsVjwD4IbY7084Y= Subject key identifier: 52:01:B4:BE:DA:DC:E0:DE:AA:60:0F:D0:43:3D:F1:98:EE:21:21:3D Authority key identifier: 33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 Certificate issuer: /CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft Manifest number: 012B Signing time: Sat 09 Aug 2025 04:58:21 +0000 Manifest this update: Sat 09 Aug 2025 04:58:21 +0000 Manifest next update: Sat 16 Aug 2025 04:58:21 +0000 Files and hashes: 1: M77xZK7T_RPWmutR5aDM85n5QUQ.crl (hash: K2g2/rD8ymkMie2/jWMhINjaSDeu0O/3qyFI4NxJ/VM=) 2: B4B20B56AA3D11EEA301A133C4F9AE02.roa (hash: 9jZY1z+VdOX3EbpblEw/cnzGPIt1FRo4e67BiqUONWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E37, serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Validity Not Before: Aug 9 04:58:21 2025 GMT Not After : Aug 16 04:58:21 2025 GMT Subject: CN=6896d56d-82e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:63:af:5d:65:15:14:2a:be:4a:6a:94:3f: 61:a7:0e:52:a0:e3:9a:72:3e:a7:0c:c8:d2:4a:f8: e1:54:ea:73:36:e1:d8:53:e5:a8:e6:7e:02:3e:e8: cc:6c:38:7b:cc:cf:76:a2:e9:15:8b:0b:2d:28:22: 92:34:d5:24:8a:64:40:e5:63:74:db:e9:d6:00:4a: f0:7d:e7:d3:a9:6b:5a:ad:b8:e4:21:db:43:9d:41: 22:6e:76:d7:7e:e9:01:21:77:58:02:e5:bc:74:9d: 9a:7e:d3:0c:e3:c2:e2:f0:5b:3d:7d:0e:7f:aa:85: 06:0c:a6:8e:40:a5:c7:14:41:ee:b6:c5:ca:39:66: 2c:45:5d:bf:09:eb:21:68:22:0d:41:ab:7a:9a:45: 20:5f:8b:58:e2:ac:33:38:4c:ba:ff:eb:3b:a2:49: b0:73:3f:55:7b:c0:df:6a:34:b0:83:5c:4e:1f:23: 03:08:d9:50:5b:0f:2d:0c:48:5e:21:bd:dd:6a:eb: 86:30:91:34:5e:2d:40:9c:60:fd:5a:51:76:9c:f5: b1:ce:84:52:fc:cd:50:50:dc:0a:d0:f6:53:55:44: f0:e5:f6:4c:33:cc:92:02:3e:82:bd:a0:52:c2:3e: 07:87:1f:51:40:42:35:dd:d9:8b:1c:7d:36:f6:04: 59:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:01:B4:BE:DA:DC:E0:DE:AA:60:0F:D0:43:3D:F1:98:EE:21:21:3D X509v3 Authority Key Identifier: keyid:33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7d:c5:d0:97:be:c3:90:74:c7:cf:0f:87:ae:99:ee:1d:fc: 36:ae:72:cc:cc:b9:28:fa:05:c5:4a:56:46:4d:5f:bf:65:87: 53:63:4f:08:40:02:83:62:6e:19:69:6c:d8:25:87:68:46:20: 13:15:08:9d:da:da:fb:99:9b:c4:34:6a:97:3e:70:dc:f7:b4: 7c:50:33:58:39:43:19:75:21:36:b6:98:e4:ef:36:93:8d:34: 26:cb:87:50:ec:6e:4e:da:43:e1:5b:4c:37:0d:6c:43:3c:58: 2a:e2:29:15:24:ee:53:be:df:c5:55:e8:a9:64:ef:1b:44:11: e6:00:bd:bf:82:38:32:4a:50:88:3c:bd:54:d4:5a:15:75:c5: 32:d0:54:85:ef:c9:2d:03:7c:0b:7c:00:8b:ed:f6:77:39:79: 05:db:81:5e:5b:70:7b:5d:d9:dd:c4:70:bb:48:02:3a:90:91: 59:f6:68:1f:91:f2:f5:a6:ae:ac:4c:db:21:4a:eb:ef:12:4b: 09:04:89:18:35:a4:2e:a8:ee:f3:9e:5b:62:0f:f6:d5:c6:77: 9a:2e:4d:9d:07:26:33:00:49:de:81:e8:fd:c6:bb:45:de:72: 96:d2:27:02:79:8d:9a:4d:d9:0c:b9:d0:b3:0f:8f:25:35:8f: 97:dd:ad:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFMzcxMTAvBgNVBAUTKDMzQkVGMTY0QUVEM0ZEMTNENjlBRUI1MUU1QTBDQ0Yz OTlGOTQxNDQwHhcNMjUwODA5MDQ1ODIxWhcNMjUwODE2MDQ1ODIxWjAYMRYwFAYD VQQDEw02ODk2ZDU2ZC04MmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUNjr11lFRQqvkpqlD9hpw5SoOOacj6nDMjSSvjhVOpzNuHYU+Wo5n4CPujM bDh7zM92oukViwstKCKSNNUkimRA5WN02+nWAErwfefTqWtarbjkIdtDnUEibnbX fukBIXdYAuW8dJ2aftMM48Li8Fs9fQ5/qoUGDKaOQKXHFEHutsXKOWYsRV2/Cesh aCINQat6mkUgX4tY4qwzOEy6/+s7okmwcz9Ve8DfajSwg1xOHyMDCNlQWw8tDEhe Ib3dauuGMJE0Xi1AnGD9WlF2nPWxzoRS/M1QUNwK0PZTVUTw5fZMM8ySAj6CvaBS wj4Hhx9RQEI13dmLHH029gRZBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIBtL7a 3ODeqmAP0EM98ZjuISE9MB8GA1UdIwQYMBaAFDO+8WSu0/0T1prrUeWgzPOZ+UFE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkUzNy80QUM2OTM4OEFB M0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9SUFdtdXRSNWFETTg1bjVR VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003N3haSzdUX1JQV211dFI1YURNODVuNVFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkUzNy80QUM2OTM4OEFBM0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9S UFdtdXRSNWFETTg1bjVRVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBufcXQl77DkHTHzw+HrpnuHfw2rnLMzLko+gXFSlZGTV+/ZYdTY08I QAKDYm4ZaWzYJYdoRiATFQid2tr7mZvENGqXPnDc97R8UDNYOUMZdSE2tpjk7zaT jTQmy4dQ7G5O2kPhW0w3DWxDPFgq4ikVJO5Tvt/FVeipZO8bRBHmAL2/gjgySlCI PL1U1FoVdcUy0FSF78ktA3wLfACL7fZ3OXkF24FeW3B7XdndxHC7SAI6kJFZ9mgf kfL1pq6sTNshSuvvEksJBIkYNaQuqO7znltiD/bVxneaLk2dByYzAEnegej9xrtF 3nKW0icCeY2aTdkMudCzD48lNY+X3a0x -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:28 2025 by rpki-client