$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft File: M77xZK7T_RPWmutR5aDM85n5QUQ.mft (raw, json) Hash identifier: nWthOG+lM9oS/eAA4uq7dcbtJm8OjauGm9xmK/Jz20A= Subject key identifier: 05:25:BF:D2:3A:ED:39:63:ED:20:3C:76:7D:1F:5A:03:DF:73:C7:39 Authority key identifier: 33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 Certificate issuer: /CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft Manifest number: 0131 Signing time: Thu 21 Aug 2025 04:40:01 +0000 Manifest this update: Thu 21 Aug 2025 04:40:00 +0000 Manifest next update: Thu 28 Aug 2025 04:40:00 +0000 Files and hashes: 1: M77xZK7T_RPWmutR5aDM85n5QUQ.crl (hash: enbCRfAEI1aM9WePJbRdyV5VsICdIujSZKn9slfV0eE=) 2: B4B20B56AA3D11EEA301A133C4F9AE02.roa (hash: 9jZY1z+VdOX3EbpblEw/cnzGPIt1FRo4e67BiqUONWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E37, serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Validity Not Before: Aug 21 04:40:00 2025 GMT Not After : Aug 28 04:40:00 2025 GMT Subject: CN=68a6a321-f4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b7:8c:05:58:e6:2c:86:75:66:27:16:29:e2: 54:89:e8:78:a1:f4:e3:a6:fe:70:c9:b9:a9:dd:15: 33:29:02:07:13:4e:65:f2:07:a9:35:cd:2e:3f:e8: 64:70:1c:5d:35:c2:6d:30:96:38:37:8e:40:be:17: 25:80:55:2e:82:50:8f:38:7a:d4:91:98:84:38:df: 7b:a7:a4:e9:62:32:a8:44:32:3e:8d:04:27:c9:49: 85:f7:e1:27:db:49:c1:cc:7f:0c:75:cf:41:48:14: 9f:55:8f:ad:e0:47:4b:fc:9b:46:ae:22:32:af:9d: 06:9a:80:b4:7c:00:c2:71:5a:51:b1:28:55:eb:41: a3:18:f1:63:32:db:a1:76:cb:a0:f3:f2:15:be:5a: 73:94:1a:4b:c3:0f:23:d4:97:6c:f9:98:0d:8c:84: 48:bd:14:6e:2c:35:b8:0e:db:de:8a:a2:31:e3:a2: e2:c2:d8:7b:90:f3:1a:e8:a6:f1:02:96:9b:54:65: 54:75:a8:ac:f1:e1:eb:b5:3c:6f:19:52:0d:4a:56: 8c:07:62:64:8f:4d:c7:b7:b6:04:d7:01:b3:1d:c6: 02:ad:64:0c:40:93:f8:64:99:51:50:88:d2:57:87: e5:ed:d0:79:70:b2:33:61:a0:f4:c6:74:57:1d:d7: 46:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:25:BF:D2:3A:ED:39:63:ED:20:3C:76:7D:1F:5A:03:DF:73:C7:39 X509v3 Authority Key Identifier: keyid:33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:1b:e4:e4:6a:a0:e4:62:66:bb:d5:40:e8:2d:e1:45:b1:27: 9f:e8:9b:5d:e6:b7:8a:7a:19:17:a7:a2:e2:4f:d0:50:e4:e1: 0d:ce:cd:13:39:90:1e:5a:0e:2f:d2:0d:42:33:26:a5:a2:36: 7e:f9:69:2e:25:d2:1c:f7:57:b4:95:1d:e6:df:0a:9f:f3:1d: 4a:0b:9c:f5:9a:fd:de:94:d7:46:f4:6b:40:58:d4:28:0b:2d: d4:f1:b9:9c:4e:95:5d:b5:c8:d4:e1:dc:a0:df:a4:4c:8d:96: 01:d9:f8:56:3a:87:63:d8:c5:e7:45:8a:93:4a:19:8a:15:81: 2b:18:1c:0d:15:ba:5e:08:66:b4:98:46:12:0b:c6:d2:d1:e5: 55:15:77:34:7c:d4:a1:fa:68:65:db:db:a3:b5:b2:77:b4:7c: 4c:71:74:e7:95:95:76:6d:75:a6:f0:86:30:bb:c5:ec:a1:93: 8b:74:a9:49:9f:6f:e6:a8:fe:4b:57:b7:7f:e8:34:b2:19:94: bc:c6:90:13:2f:38:26:35:06:8e:11:c5:01:23:45:7f:7e:5f: 57:83:a5:75:af:56:2b:f8:4a:f6:84:2f:49:1d:a6:d6:df:25: 64:cf:3c:73:cd:77:0d:c7:8a:eb:3b:eb:8f:a0:c3:62:33:bb: 68:ae:a1:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFMzcxMTAvBgNVBAUTKDMzQkVGMTY0QUVEM0ZEMTNENjlBRUI1MUU1QTBDQ0Yz OTlGOTQxNDQwHhcNMjUwODIxMDQ0MDAwWhcNMjUwODI4MDQ0MDAwWjAYMRYwFAYD VQQDEw02OGE2YTMyMS1mNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27eMBVjmLIZ1ZicWKeJUieh4ofTjpv5wybmp3RUzKQIHE05l8gepNc0uP+hk cBxdNcJtMJY4N45AvhclgFUuglCPOHrUkZiEON97p6TpYjKoRDI+jQQnyUmF9+En 20nBzH8Mdc9BSBSfVY+t4EdL/JtGriIyr50GmoC0fADCcVpRsShV60GjGPFjMtuh dsug8/IVvlpzlBpLww8j1Jds+ZgNjIRIvRRuLDW4DtveiqIx46Liwth7kPMa6Kbx ApabVGVUdais8eHrtTxvGVINSlaMB2Jkj03Ht7YE1wGzHcYCrWQMQJP4ZJlRUIjS V4fl7dB5cLIzYaD0xnRXHddGwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUlv9I6 7Tlj7SA8dn0fWgPfc8c5MB8GA1UdIwQYMBaAFDO+8WSu0/0T1prrUeWgzPOZ+UFE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkUzNy80QUM2OTM4OEFB M0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9SUFdtdXRSNWFETTg1bjVR VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003N3haSzdUX1JQV211dFI1YURNODVuNVFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkUzNy80QUM2OTM4OEFBM0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9S UFdtdXRSNWFETTg1bjVRVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4G+TkaqDkYma71UDoLeFFsSef6Jtd5reKehkXp6LiT9BQ5OENzs0T OZAeWg4v0g1CMyalojZ++WkuJdIc91e0lR3m3wqf8x1KC5z1mv3elNdG9GtAWNQo Cy3U8bmcTpVdtcjU4dyg36RMjZYB2fhWOodj2MXnRYqTShmKFYErGBwNFbpeCGa0 mEYSC8bS0eVVFXc0fNSh+mhl29ujtbJ3tHxMcXTnlZV2bXWm8IYwu8XsoZOLdKlJ n2/mqP5LV7d/6DSyGZS8xpATLzgmNQaOEcUBI0V/fl9Xg6V1r1Yr+Er2hC9JHabW 3yVkzzxzzXcNx4rrO+uPoMNiM7torqF7 -----END CERTIFICATE-----Generated at Fri Aug 22 16:24:14 2025 by rpki-client