$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft File: 77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json) Hash identifier: yvxsNinNGymSCcpcE5of775h+swP9Gbf5itNE7F41KU= Subject key identifier: 2E:CF:D2:96:8B:65:1A:83:27:1C:8E:7C:EB:91:32:16:A8:1B:49:CA Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Certificate serial: 0C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft Manifest number: 0C40 Signing time: Sun 24 Aug 2025 18:34:28 +0000 Manifest this update: Sun 24 Aug 2025 18:34:28 +0000 Manifest next update: Sun 31 Aug 2025 18:34:28 +0000 Files and hashes: 1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: rJnGS/C8F5Bau+KTj6Q/rqEkervxUE2Y6u6zME0JWo0=) 2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: WgtMqOXutoCTVgnfA2uL+HiTE6KoWpCNsapDLYeBrco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Validity Not Before: Aug 24 18:34:28 2025 GMT Not After : Aug 31 18:34:28 2025 GMT Subject: CN=68ab5b34-326c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d9:d1:b3:41:50:42:c1:00:f5:f5:5a:50:58: ac:29:21:37:08:ad:d8:2f:ce:e9:3d:bb:64:cf:af: 5b:b0:f3:72:0a:05:4b:76:00:21:3b:b7:2f:5b:20: e7:44:a5:be:ad:0a:8c:38:d6:bc:f2:08:de:57:14: 8f:7f:e1:d8:57:59:7a:77:9c:5c:fa:61:d3:fa:06: d8:78:cf:42:1d:19:c0:9d:aa:4b:f7:40:bc:3c:89: 5c:b0:00:51:f8:2a:4c:1e:89:c9:fb:46:ab:96:f7: 25:57:a1:85:d4:46:71:52:be:60:2d:dc:17:de:e8: 8b:3d:61:87:2d:f8:0c:b0:6f:dc:b7:ed:a0:54:13: 9e:a6:fd:2a:0d:eb:ae:2a:cd:d0:cd:23:6d:a3:0e: b3:b7:97:9c:47:40:46:ed:18:ab:b6:1e:8d:67:dd: 71:17:3b:03:37:a8:3f:85:4f:40:e4:56:cd:a1:93: c3:97:6a:7c:bd:12:63:bb:7d:6f:2b:2f:7b:76:e1: a6:27:a8:72:f7:cc:17:bd:f9:7c:1e:ff:6d:1a:f4: db:74:3f:39:05:6f:fc:e6:7b:43:2b:b3:5b:6b:c1: 0a:8c:d1:f8:74:60:43:7b:7b:86:3c:80:9d:22:02: 03:b6:a7:9b:75:d5:02:e4:14:a0:79:38:c5:65:24: 86:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CF:D2:96:8B:65:1A:83:27:1C:8E:7C:EB:91:32:16:A8:1B:49:CA X509v3 Authority Key Identifier: keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:61:7e:bb:da:49:ae:1d:bb:12:f2:bf:50:79:6f:ca:22:e9: 8b:b2:f8:04:a5:52:b2:20:94:d4:d0:ea:80:2e:b1:fb:94:4e: f1:20:10:4e:99:42:40:7e:05:6f:ce:97:0b:f1:cd:38:b2:b3: c0:27:b4:c8:45:80:c0:75:d0:5b:db:10:fd:42:be:2c:cb:db: 7e:0c:b0:11:26:4e:ea:bd:9a:19:98:bc:26:12:07:0a:97:02: 97:04:67:95:0b:ed:29:88:96:0a:5f:b0:e7:20:eb:5b:ae:34: aa:30:dc:7a:a5:9c:f1:a0:0e:e0:d0:09:92:c4:79:ac:10:13: 0b:2d:7f:4f:f8:4f:b6:f7:9d:99:93:2f:ba:b8:62:9c:a2:f7: 3e:8d:3d:2e:a3:7a:6b:fa:55:6a:b7:a0:b6:e6:6a:91:10:f8: 20:cd:e2:c8:6b:81:c6:d2:80:d2:70:a7:32:d2:b7:13:44:f9: a7:38:de:61:f9:dc:05:bf:cd:fe:b7:11:b2:15:21:0c:bb:00: f1:6e:41:17:54:4b:45:71:c9:25:4f:96:23:02:a6:45:69:b5: 0f:1d:c3:c9:de:69:a5:32:32:9c:6c:6f:c1:89:6a:61:28:21: e6:e7:25:ba:c5:2c:a6:ba:dc:f5:84:9e:74:94:4c:e8:2e:11: 8a:a6:38:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM1OUUxMTAvBgNVBAUTKEVGQjY5MDcwRTJDNDAxQTVGNzcxMzNEMkRCQjFCQTM0 MUQxN0U2MUUwHhcNMjUwODI0MTgzNDI4WhcNMjUwODMxMTgzNDI4WjAYMRYwFAYD VQQDEw02OGFiNWIzNC0zMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39nRs0FQQsEA9fVaUFisKSE3CK3YL87pPbtkz69bsPNyCgVLdgAhO7cvWyDn RKW+rQqMONa88gjeVxSPf+HYV1l6d5xc+mHT+gbYeM9CHRnAnapL90C8PIlcsABR +CpMHonJ+0arlvclV6GF1EZxUr5gLdwX3uiLPWGHLfgMsG/ct+2gVBOepv0qDeuu Ks3QzSNtow6zt5ecR0BG7Rirth6NZ91xFzsDN6g/hU9A5FbNoZPDl2p8vRJju31v Ky97duGmJ6hy98wXvfl8Hv9tGvTbdD85BW/85ntDK7Nba8EKjNH4dGBDe3uGPICd IgIDtqebddUC5BSgeTjFZSSGXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7P0paL ZRqDJxyOfOuRMhaoG0nKMB8GA1UdIwQYMBaAFO+2kHDixAGl93Ez0tuxujQdF+Ye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzU5RS82QTQ5ODhCNjBE RUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFhWDNjVFBTMjdHNk5CMFg1 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3YVFjT0xFQWFYM2NUUFMyN0c2TkIwWDVoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzU5RS82QTQ5ODhCNjBERUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFh WDNjVFBTMjdHNk5CMFg1aDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgYX672kmuHbsS8r9QeW/KIumLsvgEpVKyIJTU0OqALrH7lE7xIBBO mUJAfgVvzpcL8c04srPAJ7TIRYDAddBb2xD9Qr4sy9t+DLARJk7qvZoZmLwmEgcK lwKXBGeVC+0piJYKX7DnIOtbrjSqMNx6pZzxoA7g0AmSxHmsEBMLLX9P+E+2952Z ky+6uGKcovc+jT0uo3pr+lVqt6C25mqREPggzeLIa4HG0oDScKcy0rcTRPmnON5h +dwFv83+txGyFSEMuwDxbkEXVEtFccklT5YjAqZFabUPHcPJ3mmlMjKcbG/BiWph KCHm5yW6xSymutz1hJ50lEzoLhGKpjhb -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:14 2025 by rpki-client