$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft File: 594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json) Hash identifier: Uki+5X6MBfiLraRZ8dHw/X0iWmz6ZoDFgylalpm6hjQ= Subject key identifier: 32:D8:F2:A7:E2:35:D8:29:18:CE:DC:56:48:5B:8B:6A:9C:AF:43:C9 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0D96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft Manifest number: 0D75 Signing time: Mon 04 Aug 2025 18:11:08 +0000 Manifest this update: Mon 04 Aug 2025 18:11:08 +0000 Manifest next update: Mon 11 Aug 2025 18:11:08 +0000 Files and hashes: 1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: kF4KpE+S+/hHa+WwOCfxOf9mG53zdDO/jmXGHljGjew=) 2: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (hash: znRSUO3caPihB9pwLwMc1O8NeSvwB5D6pWui44HfBSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3478 (0xd96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Aug 4 18:11:08 2025 GMT Not After : Aug 11 18:11:08 2025 GMT Subject: CN=6890f7bc-7689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:69:38:16:30:f4:16:50:bb:db:a4:26:ac: ee:c8:dd:c8:22:d5:d2:12:a6:ec:4b:bc:7a:2e:4b: e3:94:cc:48:65:ce:ab:3a:af:10:a2:40:f5:c3:ff: 31:0b:e3:23:38:af:5f:d8:f5:45:8c:f3:38:fd:a1: 59:3f:dd:fc:b9:f0:75:9e:7e:77:86:4b:98:65:96: a1:8a:3b:2d:52:5c:67:45:d2:9f:77:1c:2e:8b:0e: 8d:e1:b7:de:d2:f8:8f:60:eb:5c:a0:31:50:ed:fc: 37:b8:d5:92:85:1d:1c:98:c0:6d:8f:e7:d3:7c:f6: a6:af:f8:1a:04:23:a5:90:cf:81:99:b8:ea:73:f9: 86:e3:1b:73:4c:67:00:1e:0f:27:d4:39:84:a9:be: d9:46:e0:1b:21:c3:30:6a:b7:62:76:7b:a7:f2:9e: 5e:48:90:87:ab:92:6a:46:72:cc:62:1f:34:cc:a1: b4:96:56:ce:cc:84:8c:97:4a:42:2e:f3:ed:25:10: 5b:73:ec:7c:70:17:31:66:96:e7:65:11:3c:fb:07: 7a:72:95:72:fa:74:d3:66:fe:bd:9f:95:88:4f:f6: ef:5c:81:a1:28:e6:17:9b:06:02:12:28:61:29:91: 05:55:29:39:9c:0b:60:5c:e6:1d:20:4b:ea:f1:ea: c0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D8:F2:A7:E2:35:D8:29:18:CE:DC:56:48:5B:8B:6A:9C:AF:43:C9 X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:4c:e9:cc:e9:cc:8c:ed:96:63:88:d7:2c:a4:5f:e6:b5:a5: d5:33:0b:ec:58:70:d2:70:c0:4d:c7:b2:e8:c7:2e:b7:92:17: ee:62:74:61:c9:77:ed:55:81:7f:1d:91:87:83:64:b8:09:a3: b7:52:1a:8a:e1:27:7e:e9:8c:40:a7:b9:35:2d:00:e7:8d:9b: dc:e6:bf:8f:e3:b6:f5:c9:0c:07:ef:cf:4c:b7:46:47:05:bc: d9:7b:9f:b6:5a:01:1f:d1:9e:bf:15:1b:cd:83:e7:1f:13:a9: e3:97:37:13:09:90:0a:4c:0e:fb:19:0a:7e:2b:ac:12:13:82: d0:19:2c:a2:da:52:f3:f0:30:da:95:f1:b4:cd:f2:5c:76:94: 6f:96:c6:f4:55:8d:d4:ea:7c:a8:86:ac:a7:e2:93:e7:29:fa: 9c:91:e6:b6:8c:91:87:70:9a:21:14:86:24:59:40:d5:d8:73: 91:2b:1f:fc:72:b6:ff:95:a3:ca:f7:c9:23:fd:81:fa:7f:f6: a5:e5:6a:dd:22:45:ed:99:1e:e6:00:25:f4:24:ae:5c:e8:ed: 48:c5:c7:6e:d7:f5:ec:5d:40:9d:31:74:8e:d3:6a:43:c6:d3: ae:0a:6e:2d:e7:2e:93:a6:1a:34:76:dc:1f:43:14:a2:e7:c2: df:06:a2:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjUwODA0MTgxMTA4WhcNMjUwODExMTgxMTA4WjAYMRYwFAYD VQQDEw02ODkwZjdiYy03Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPFpOBYw9BZQu9ukJqzuyN3IItXSEqbsS7x6LkvjlMxIZc6rOq8QokD1w/8x C+MjOK9f2PVFjPM4/aFZP938ufB1nn53hkuYZZahijstUlxnRdKfdxwuiw6N4bfe 0viPYOtcoDFQ7fw3uNWShR0cmMBtj+fTfPamr/gaBCOlkM+Bmbjqc/mG4xtzTGcA Hg8n1DmEqb7ZRuAbIcMwardidnun8p5eSJCHq5JqRnLMYh80zKG0llbOzISMl0pC LvPtJRBbc+x8cBcxZpbnZRE8+wd6cpVy+nTTZv69n5WIT/bvXIGhKOYXmwYCEihh KZEFVSk5nAtgXOYdIEvq8erAPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLY8qfi NdgpGM7cVkhbi2qcr0PJMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUZGMC85NDMzMEZFNkQ0NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVV Rk5aX3U4OVIyWFpSVGpRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmTOnM6cyM7ZZjiNcspF/mtaXVMwvsWHDScMBNx7Loxy63khfuYnRh yXftVYF/HZGHg2S4CaO3UhqK4Sd+6YxAp7k1LQDnjZvc5r+P47b1yQwH789Mt0ZH BbzZe5+2WgEf0Z6/FRvNg+cfE6njlzcTCZAKTA77GQp+K6wSE4LQGSyi2lLz8DDa lfG0zfJcdpRvlsb0VY3U6nyohqyn4pPnKfqckea2jJGHcJohFIYkWUDV2HORKx/8 crb/laPK98kj/YH6f/al5WrdIkXtmR7mACX0JK5c6O1Ixcdu1/XsXUCdMXSO02pD xtOuCm4t5y6Tpho0dtwfQxSi58LfBqLq -----END CERTIFICATE-----Generated at Wed Aug 6 14:10:50 2025 by rpki-client