$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft File: M77xZK7T_RPWmutR5aDM85n5QUQ.mft (raw, json) Hash identifier: hP9J9LTvvNWxXXCrg3/IBFVVFSg6dp6HeNX9UZDllgM= Subject key identifier: 61:1D:5B:D7:90:91:8C:B7:DA:BF:7E:5F:DE:9F:C4:50:E5:C4:60:C4 Authority key identifier: 33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 Certificate issuer: /CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft Manifest number: 010F Signing time: Sun 15 Jun 2025 04:04:16 +0000 Manifest this update: Sun 15 Jun 2025 04:04:15 +0000 Manifest next update: Sun 22 Jun 2025 04:04:15 +0000 Files and hashes: 1: M77xZK7T_RPWmutR5aDM85n5QUQ.crl (hash: dw7kbglvRWafh6u7d0F4FfNO1AMUlGVm+jqrqgAwmX0=) 2: B4B20B56AA3D11EEA301A133C4F9AE02.roa (hash: 9jZY1z+VdOX3EbpblEw/cnzGPIt1FRo4e67BiqUONWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E37, serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Validity Not Before: Jun 15 04:04:15 2025 GMT Not After : Jun 22 04:04:15 2025 GMT Subject: CN=684e463f-3598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:57:f7:4a:6c:25:28:99:96:95:cb:d7:7a: e0:a1:da:09:7b:e5:72:47:d9:a5:33:0e:de:b6:84: 07:aa:55:a0:d5:29:b7:55:0b:00:52:bd:5d:dc:9a: 6b:88:f3:22:01:69:dd:5b:65:b9:00:79:58:20:ad: 18:5d:f8:31:d2:c1:37:4b:3a:47:2e:ba:09:89:0d: dc:02:3b:69:c9:47:aa:1b:54:93:da:01:d9:ce:1c: b8:24:ba:7c:93:f5:a8:09:ef:18:02:21:63:39:bc: e0:41:d6:f4:fe:c2:21:40:54:38:d2:cd:3b:bd:ef: 8e:a3:5f:d8:c4:db:a4:c1:bf:02:73:d5:1d:e8:cd: f6:5d:17:92:c3:c5:82:84:f1:c5:e9:9f:d6:39:f1: 85:ca:0f:1d:54:e3:64:e5:10:d8:c6:af:55:f2:16: a2:e8:d0:ec:46:a4:2e:11:ef:9b:ed:73:75:99:9c: 8d:ac:bf:4c:29:af:8b:6a:07:5a:3e:2a:55:7c:3a: b7:47:94:d2:80:a8:69:0a:d9:0d:fd:3b:da:82:e5: dc:79:83:e1:43:89:26:18:a8:c9:01:c5:fe:78:2c: 6c:a9:07:0e:ae:01:7a:69:ff:f6:a0:ec:03:09:b9: cf:5e:3e:29:d2:c6:57:cb:e7:22:cb:38:5f:fe:70: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1D:5B:D7:90:91:8C:B7:DA:BF:7E:5F:DE:9F:C4:50:E5:C4:60:C4 X509v3 Authority Key Identifier: keyid:33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:cf:44:4e:34:c8:64:36:90:57:27:a1:1c:97:ab:37:80:81: c8:ee:2f:8b:0c:81:e2:47:be:84:31:2e:8b:c4:e6:77:e2:19: 04:26:df:9f:c5:7f:97:41:dc:d7:db:fb:98:97:05:05:a8:d1: e6:c0:bf:c5:aa:ae:82:1b:b0:6e:05:0b:0d:f6:e6:14:39:b9: 39:29:a0:4e:b0:99:40:d0:9e:5d:da:77:ef:1e:3b:f6:d9:3f: aa:99:96:6a:e4:8d:43:14:87:1c:30:0d:3a:5e:71:36:76:b9: 0f:5b:62:09:c6:77:62:f3:1e:3d:89:ff:56:44:54:3c:8c:46: 65:53:61:5e:c4:29:30:7d:8a:c7:cf:ff:e1:30:20:39:c0:c2: eb:5f:94:e9:a2:e9:09:86:fe:06:75:f4:3e:f5:ef:43:e6:39: 6f:7e:93:30:b4:aa:ef:13:0c:bc:e1:5f:07:8a:68:81:89:49: f1:16:97:db:fb:fb:46:11:4f:8a:68:b6:dd:0a:75:c7:54:1d: d7:c8:1a:ab:19:28:ca:0e:d9:dc:33:5d:ad:09:d0:a0:c1:45: 35:7a:4e:af:52:c5:b4:9f:c1:bb:cf:97:80:59:4e:24:f6:6f: 4b:49:c0:9b:c1:01:93:e2:04:58:46:a3:05:bd:6d:4b:8f:f3: e7:4f:bb:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFMzcxMTAvBgNVBAUTKDMzQkVGMTY0QUVEM0ZEMTNENjlBRUI1MUU1QTBDQ0Yz OTlGOTQxNDQwHhcNMjUwNjE1MDQwNDE1WhcNMjUwNjIyMDQwNDE1WjAYMRYwFAYD VQQDEw02ODRlNDYzZi0zNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxr9X90psJSiZlpXL13rgodoJe+VyR9mlMw7etoQHqlWg1Sm3VQsAUr1d3Jpr iPMiAWndW2W5AHlYIK0YXfgx0sE3SzpHLroJiQ3cAjtpyUeqG1ST2gHZzhy4JLp8 k/WoCe8YAiFjObzgQdb0/sIhQFQ40s07ve+Oo1/YxNukwb8Cc9Ud6M32XReSw8WC hPHF6Z/WOfGFyg8dVONk5RDYxq9V8hai6NDsRqQuEe+b7XN1mZyNrL9MKa+Lagda PipVfDq3R5TSgKhpCtkN/TvaguXceYPhQ4kmGKjJAcX+eCxsqQcOrgF6af/2oOwD CbnPXj4p0sZXy+ciyzhf/nC2AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEdW9eQ kYy32r9+X96fxFDlxGDEMB8GA1UdIwQYMBaAFDO+8WSu0/0T1prrUeWgzPOZ+UFE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkUzNy80QUM2OTM4OEFB M0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9SUFdtdXRSNWFETTg1bjVR VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003N3haSzdUX1JQV211dFI1YURNODVuNVFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkUzNy80QUM2OTM4OEFBM0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9S UFdtdXRSNWFETTg1bjVRVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzz0RONMhkNpBXJ6Ecl6s3gIHI7i+LDIHiR76EMS6LxOZ34hkEJt+f xX+XQdzX2/uYlwUFqNHmwL/Fqq6CG7BuBQsN9uYUObk5KaBOsJlA0J5d2nfvHjv2 2T+qmZZq5I1DFIccMA06XnE2drkPW2IJxndi8x49if9WRFQ8jEZlU2FexCkwfYrH z//hMCA5wMLrX5TpoukJhv4GdfQ+9e9D5jlvfpMwtKrvEwy84V8HimiBiUnxFpfb +/tGEU+KaLbdCnXHVB3XyBqrGSjKDtncM12tCdCgwUU1ek6vUsW0n8G7z5eAWU4k 9m9LScCbwQGT4gRYRqMFvW1Lj/PnT7tE -----END CERTIFICATE-----Generated at Sun Jun 15 10:07:16 2025 by rpki-client