$ rpki-client -vvf rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft File: 77_xazqfbkTaHnWOk5XRxbcUR1o.mft (raw, json) Hash identifier: jDes1xkBD39qsqYOCg+kHmv0NvNY8hXuC2sjbpDZv08= Subject key identifier: C6:E6:9F:95:7C:E4:34:C1:46:CE:34:81:D7:19:4A:70:C0:FF:7B:99 Authority key identifier: EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A Certificate issuer: /CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft Manifest number: 0661 Signing time: Fri 30 May 2025 22:40:46 +0000 Manifest this update: Fri 30 May 2025 22:40:45 +0000 Manifest next update: Fri 06 Jun 2025 22:40:45 +0000 Files and hashes: 1: 77_xazqfbkTaHnWOk5XRxbcUR1o.crl (hash: xt21DgEMyEJiof3cb6UJ1uQzGT8KvS2V4pcTdJrIyy0=) 2: 3ADF4748836D11EBAD2CDC13C4F9AE02.roa (hash: /FJLHrb+Y+v6CrfuPekX8L5QT/sE2Qa/rLDAkhyiJro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136B8D, serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Validity Not Before: May 30 22:40:45 2025 GMT Not After : Jun 6 22:40:45 2025 GMT Subject: CN=683a33ee-077c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8b:e6:aa:2c:01:ad:f4:bc:e1:ad:3a:c2:f5: 2e:8c:70:be:cd:2d:6b:f6:a8:e3:7e:4c:b8:97:1b: 20:78:bf:82:11:ab:9c:d6:64:17:27:56:40:cb:ff: b3:38:99:08:64:19:fc:12:35:3b:4c:8b:cf:59:ea: 13:5e:95:33:3f:47:a2:54:c2:37:71:80:22:ca:ed: 52:29:74:d5:15:85:58:0d:b4:31:91:0f:b7:90:9c: 3c:0c:b2:9b:24:f8:6f:1d:2d:bf:b8:75:1a:eb:2b: b9:19:1c:2e:9b:db:0b:74:43:fc:4e:dc:80:4f:53: d6:95:1d:39:24:09:89:97:2b:ac:11:34:ef:67:78: 18:5a:53:17:99:21:b9:64:9d:55:f3:31:17:04:db: f7:9d:64:11:dc:50:d7:54:48:ab:2e:7d:df:45:38: 43:58:b1:6d:62:2a:88:1c:b5:8e:5a:b1:9b:f2:9b: 36:88:9f:7c:7c:69:54:1f:75:ac:ad:eb:7c:1f:c3: 3d:b6:7c:48:0c:b2:d7:fa:65:20:2a:3f:8c:af:22: ec:95:87:5f:9a:00:7b:15:c4:4c:7c:f2:59:5d:0f: 3e:a6:90:d8:d4:fe:99:b4:68:9a:be:59:82:71:eb: 77:bb:04:c0:0e:95:0d:0a:20:5c:e1:3d:0c:3b:cd: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E6:9F:95:7C:E4:34:C1:46:CE:34:81:D7:19:4A:70:C0:FF:7B:99 X509v3 Authority Key Identifier: keyid:EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a9:f1:6a:74:d5:3e:a1:e6:a0:96:a8:12:c4:62:91:80:68: 14:ec:3e:95:78:33:41:4e:d7:37:d1:69:2b:e2:22:58:4d:cb: 89:4c:63:45:02:57:7b:62:07:37:32:87:2e:53:04:8f:1a:43: 03:56:27:e2:f9:cc:1c:5b:89:40:db:f8:90:12:69:2b:e6:5c: 9d:4a:ff:f3:ac:78:4d:5f:50:3d:d4:84:3f:af:36:7a:67:76: f0:83:4d:5a:1e:f6:62:fd:99:c2:ab:69:38:1c:48:f9:63:44: d3:0f:7a:bd:cc:76:e1:dd:6c:86:b0:3a:19:2d:0e:5e:12:b2: 21:9e:47:a1:45:89:8e:46:77:8e:41:9e:77:d0:b9:bc:96:d6: f6:09:af:a9:12:cf:e8:58:9b:c6:49:eb:ae:06:5e:68:43:a5: 1d:34:e6:1c:e8:26:3a:51:ac:f2:1d:d3:dd:39:73:50:0b:15: 65:73:4f:ca:4d:e6:1e:eb:2c:e3:2a:8e:76:70:bb:88:75:ec: 60:97:c5:28:81:fb:c5:96:ed:8d:42:0a:53:c5:74:2c:ea:a7: 0a:f5:d9:36:28:ba:3a:e8:79:7b:76:25:64:6d:ea:1e:88:3c: 3f:92:2e:3a:2f:5f:46:b5:ae:6c:d1:12:24:1e:1c:42:14:0f: f5:c8:95:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCOEQxMTAvBgNVBAUTKEVGQkZGMTZCM0E5RjZFNDREQTFFNzU4RTkzOTVEMUM1 QjcxNDQ3NUEwHhcNMjUwNTMwMjI0MDQ1WhcNMjUwNjA2MjI0MDQ1WjAYMRYwFAYD VQQDEw02ODNhMzNlZS0wNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIvmqiwBrfS84a06wvUujHC+zS1r9qjjfky4lxsgeL+CEauc1mQXJ1ZAy/+z OJkIZBn8EjU7TIvPWeoTXpUzP0eiVMI3cYAiyu1SKXTVFYVYDbQxkQ+3kJw8DLKb JPhvHS2/uHUa6yu5GRwum9sLdEP8TtyAT1PWlR05JAmJlyusETTvZ3gYWlMXmSG5 ZJ1V8zEXBNv3nWQR3FDXVEirLn3fRThDWLFtYiqIHLWOWrGb8ps2iJ98fGlUH3Ws ret8H8M9tnxIDLLX+mUgKj+MryLslYdfmgB7FcRMfPJZXQ8+ppDY1P6ZtGiavlmC cet3uwTADpUNCiBc4T0MO81WgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbmn5V8 5DTBRs40gdcZSnDA/3uZMB8GA1UdIwQYMBaAFO+/8Ws6n25E2h51jpOV0cW3FEda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkI4RC8wREI4OTNFQzgz NkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJrVGFIbldPazVYUnhiY1VS MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3X3hhenFmYmtUYUhuV09rNVhSeGJjVVIxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkI4RC8wREI4OTNFQzgzNkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJr VGFIbldPazVYUnhiY1VSMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbqfFqdNU+oeaglqgSxGKRgGgU7D6VeDNBTtc30Wkr4iJYTcuJTGNF Ald7Ygc3MocuUwSPGkMDVifi+cwcW4lA2/iQEmkr5lydSv/zrHhNX1A91IQ/rzZ6 Z3bwg01aHvZi/ZnCq2k4HEj5Y0TTD3q9zHbh3WyGsDoZLQ5eErIhnkehRYmORneO QZ530Lm8ltb2Ca+pEs/oWJvGSeuuBl5oQ6UdNOYc6CY6UazyHdPdOXNQCxVlc0/K TeYe6yzjKo52cLuIdexgl8UogfvFlu2NQgpTxXQs6qcK9dk2KLo66Hl7diVkbeoe iDw/ki46L19Gta5s0RIkHhxCFA/1yJXM -----END CERTIFICATE-----Generated at Sat May 31 16:52:12 2025 by rpki-client