$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft File: M77xZK7T_RPWmutR5aDM85n5QUQ.mft (raw, json) Hash identifier: ON2MGzeZt5FFvYTqHzEgQCsAvI1gvhjiXlvEqiHaGxA= Subject key identifier: AA:03:EA:16:3F:CA:1E:E7:12:4F:0D:9D:0E:06:40:BF:F6:A0:CC:70 Authority key identifier: 33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 Certificate issuer: /CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft Manifest number: F6 Signing time: Fri 25 Apr 2025 04:15:55 +0000 Manifest this update: Fri 25 Apr 2025 04:15:55 +0000 Manifest next update: Fri 02 May 2025 04:15:55 +0000 Files and hashes: 1: M77xZK7T_RPWmutR5aDM85n5QUQ.crl (hash: InmZjkM1MKUki2lnlloIWePX3rEjSVt4WPinKK+nGLo=) 2: B4B20B56AA3D11EEA301A133C4F9AE02.roa (hash: 9jZY1z+VdOX3EbpblEw/cnzGPIt1FRo4e67BiqUONWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E37, serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Validity Not Before: Apr 25 04:15:55 2025 GMT Not After : May 2 04:15:55 2025 GMT Subject: CN=680b0c7b-90ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:06:5a:4b:2d:9d:3d:8a:ca:73:fd:db:50: f6:41:13:d3:75:96:5f:70:28:9e:73:f6:38:31:91: 94:03:a1:18:37:7a:95:4b:00:8a:00:de:78:63:e7: 87:f7:ff:0f:4e:2d:96:b4:1d:6a:e7:c1:d0:5b:44: a3:fc:24:e0:0c:3d:2c:d2:a9:6d:cf:54:c5:1c:6e: f9:6c:5f:62:92:d0:96:70:1d:d5:3c:b3:66:1a:01: 30:62:e2:d4:dc:9e:da:c1:e5:65:05:ff:c2:0a:b1: 06:35:68:4d:19:cc:38:5b:ec:06:39:85:04:0f:af: 76:fc:21:1a:06:4f:c7:ce:eb:87:62:70:5f:2b:73: 24:79:7e:b9:b8:ce:fd:8a:d6:d4:b2:79:1a:9a:68: b3:dd:e2:11:ed:24:24:4b:f9:2b:d8:c2:d7:00:77: cb:e0:19:d3:ad:2d:c9:00:7c:b4:ed:26:a8:4d:93: 27:e7:b8:28:f2:38:94:5a:d8:d1:91:bc:5e:58:88: 4c:4c:d1:18:9a:62:e0:28:71:32:9c:58:52:24:ba: 8e:7a:4c:46:42:d5:35:30:14:79:5e:03:aa:30:e1: 54:6b:dc:9b:5d:21:a4:62:91:74:8b:79:e3:f6:79: e7:9b:69:df:04:a9:8e:0f:3f:6c:ec:c9:b9:e7:51: 52:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:03:EA:16:3F:CA:1E:E7:12:4F:0D:9D:0E:06:40:BF:F6:A0:CC:70 X509v3 Authority Key Identifier: keyid:33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:06:43:c7:71:85:ad:e1:20:a9:7e:41:8c:09:e9:8e:8f:4b: 3b:20:ca:70:15:30:5c:b9:95:b9:5c:18:35:9b:27:09:19:6b: d9:26:cb:c4:61:45:05:11:81:7f:f8:f6:70:42:d0:e1:88:4d: 89:62:b8:ff:85:b9:4d:29:a7:9f:b6:e0:83:3e:94:84:fa:5c: 10:8d:05:e0:b9:b6:97:8a:c9:82:0c:8b:d7:24:b4:70:bb:a3: a0:8c:ba:1b:70:2c:8f:e5:a0:81:a7:54:d2:82:18:6d:06:c5: 43:01:e7:f7:4d:28:85:3f:d0:32:2b:08:c7:2e:6c:84:03:3e: 72:e2:34:af:d9:34:8d:07:c9:e7:2e:ad:93:78:f2:30:96:35: c3:b1:0c:3d:a8:27:e2:4e:40:ff:2e:79:09:18:a1:be:09:4b: 4b:98:ce:22:a1:b2:25:5a:9a:4e:d9:8c:1e:83:59:6e:ac:4d: 82:38:74:cb:82:f2:92:c1:40:79:be:a5:f1:8f:ec:fe:50:b0: 22:2c:c7:54:84:56:14:97:8e:2e:c6:08:68:f3:b1:f7:2c:a6: b6:76:80:43:45:f5:09:dc:6f:5f:83:fe:0e:94:44:8e:f3:6c: 05:a9:0c:60:8a:a4:69:fc:d0:33:21:fe:66:c8:58:f0:c6:cf: 2f:f2:61:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFMzcxMTAvBgNVBAUTKDMzQkVGMTY0QUVEM0ZEMTNENjlBRUI1MUU1QTBDQ0Yz OTlGOTQxNDQwHhcNMjUwNDI1MDQxNTU1WhcNMjUwNTAyMDQxNTU1WjAYMRYwFAYD VQQDEw02ODBiMGM3Yi05MGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttoGWkstnT2KynP921D2QRPTdZZfcCiec/Y4MZGUA6EYN3qVSwCKAN54Y+eH 9/8PTi2WtB1q58HQW0Sj/CTgDD0s0qltz1TFHG75bF9iktCWcB3VPLNmGgEwYuLU 3J7aweVlBf/CCrEGNWhNGcw4W+wGOYUED692/CEaBk/HzuuHYnBfK3MkeX65uM79 itbUsnkammiz3eIR7SQkS/kr2MLXAHfL4BnTrS3JAHy07SaoTZMn57go8jiUWtjR kbxeWIhMTNEYmmLgKHEynFhSJLqOekxGQtU1MBR5XgOqMOFUa9ybXSGkYpF0i3nj 9nnnm2nfBKmODz9s7Mm551FSxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoD6hY/ yh7nEk8NnQ4GQL/2oMxwMB8GA1UdIwQYMBaAFDO+8WSu0/0T1prrUeWgzPOZ+UFE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkUzNy80QUM2OTM4OEFB M0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9SUFdtdXRSNWFETTg1bjVR VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003N3haSzdUX1JQV211dFI1YURNODVuNVFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkUzNy80QUM2OTM4OEFBM0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9S UFdtdXRSNWFETTg1bjVRVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0BkPHcYWt4SCpfkGMCemOj0s7IMpwFTBcuZW5XBg1mycJGWvZJsvE YUUFEYF/+PZwQtDhiE2JYrj/hblNKaeftuCDPpSE+lwQjQXgubaXismCDIvXJLRw u6OgjLobcCyP5aCBp1TSghhtBsVDAef3TSiFP9AyKwjHLmyEAz5y4jSv2TSNB8nn Lq2TePIwljXDsQw9qCfiTkD/LnkJGKG+CUtLmM4iobIlWppO2Yweg1lurE2COHTL gvKSwUB5vqXxj+z+ULAiLMdUhFYUl44uxgho87H3LKa2doBDRfUJ3G9fg/4OlESO 82wFqQxgiqRp/NAzIf5myFjwxs8v8mHs -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:18 2025 by rpki-client