$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft File: 594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json) Hash identifier: PgYJEbDPTB7/EcuqRLD27YD5RTDmtQSWrKJ2+MefYRw= Subject key identifier: BA:C8:D8:22:80:04:DC:18:E7:73:8A:D0:4B:95:F6:5D:33:35:30:6C Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0D79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft Manifest number: 0D59 Signing time: Sat 14 Jun 2025 17:54:02 +0000 Manifest this update: Sat 14 Jun 2025 17:54:01 +0000 Manifest next update: Sat 21 Jun 2025 17:54:01 +0000 Files and hashes: 1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: mPJC3nQja1XVJKnwdxJVFNMoNdTo/sxB7XLYi932PXI=) 2: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (hash: 8WU3b7Y/r3U4uy9yNzlOEZ0xCTY6Z02v2SjnlAk9SvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3449 (0xd79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Jun 14 17:54:01 2025 GMT Not After : Jun 21 17:54:01 2025 GMT Subject: CN=684db739-455d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1c:dd:41:6f:7e:6c:8c:2b:70:b7:9b:fa:b0: d9:ad:42:3c:1b:64:c2:4c:f5:b1:4e:2d:95:e9:d5: 75:c2:f0:68:82:f5:20:82:aa:01:f6:f2:c5:80:fc: 62:a9:c5:e9:50:cf:05:b5:fd:e1:fc:df:28:e7:ae: 53:d6:ca:5e:19:cb:1f:72:53:8f:38:1d:65:6b:4e: 5f:97:dc:c5:c6:c1:42:32:c5:d0:ca:c0:31:14:d1: 91:64:b5:f0:42:5f:f5:32:d8:05:f5:b3:29:fc:72: be:e7:2c:2c:78:86:50:56:02:5a:bf:a7:1b:fe:de: 91:69:52:8e:55:7b:42:be:86:7f:49:d8:3d:37:29: a4:30:9f:c8:1f:42:10:f3:2c:96:bd:f4:b0:05:f7: 65:c9:0b:6a:84:f9:e7:8c:54:d4:da:6c:55:5e:d8: d0:ae:9b:60:1c:f8:86:a8:6a:be:96:df:47:8a:40: f0:f3:64:4b:42:31:3a:86:16:b0:a6:b2:09:fa:8a: 21:12:6a:e2:88:b7:14:36:09:85:77:66:13:14:3c: 74:24:5e:54:da:5f:7e:7f:34:cf:75:b2:54:bd:e3: 97:e9:05:a5:4b:42:56:e6:d8:20:ac:d1:27:85:ea: 2f:25:bd:70:aa:c3:a0:0c:2f:3f:b9:4b:c6:04:ac: 7e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C8:D8:22:80:04:DC:18:E7:73:8A:D0:4B:95:F6:5D:33:35:30:6C X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:a5:0a:25:ce:52:51:39:60:75:34:8b:52:5d:84:78:12:ff: 74:fc:c1:5a:5c:25:2e:d0:4b:43:55:d5:8a:50:7c:07:d3:66: 01:b8:13:2b:70:27:32:42:29:e0:08:8f:18:75:75:32:f1:cb: 87:d5:6e:b2:53:5c:a3:58:e5:d0:cd:a8:a4:ef:4c:19:6a:8b: 72:34:c3:38:7e:f2:10:a0:e7:4b:c9:22:95:97:9f:23:36:98: 90:69:a9:ba:98:fc:06:c4:58:d5:58:a7:d3:19:11:89:56:4e: d9:4c:a6:6c:59:db:65:49:84:40:0d:11:9b:4f:1e:c2:82:98: 7b:cc:31:a1:ef:94:79:8e:b2:92:81:ea:b1:81:ba:e5:80:45: a0:4a:45:08:06:92:c9:2d:10:58:64:b2:21:34:c5:2a:16:6c: 79:34:c0:fc:21:aa:43:70:22:69:74:f4:f0:b8:76:35:8f:ec: 58:0d:6d:05:17:8e:29:fc:2c:1a:e5:d4:a4:b0:85:2a:60:a9: 3a:8b:7b:b3:12:f2:5b:3b:d8:9e:9d:f0:35:16:12:c5:e5:ca: ff:58:64:28:7d:57:cc:84:a0:26:02:9a:1a:69:81:6e:d3:a9: ed:60:a2:49:04:9b:2b:e0:fb:e4:a7:6b:7a:bd:89:29:52:6f: fa:d3:46:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjUwNjE0MTc1NDAxWhcNMjUwNjIxMTc1NDAxWjAYMRYwFAYD VQQDEw02ODRkYjczOS00NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BzdQW9+bIwrcLeb+rDZrUI8G2TCTPWxTi2V6dV1wvBogvUggqoB9vLFgPxi qcXpUM8Ftf3h/N8o565T1speGcsfclOPOB1la05fl9zFxsFCMsXQysAxFNGRZLXw Ql/1MtgF9bMp/HK+5ywseIZQVgJav6cb/t6RaVKOVXtCvoZ/Sdg9NymkMJ/IH0IQ 8yyWvfSwBfdlyQtqhPnnjFTU2mxVXtjQrptgHPiGqGq+lt9HikDw82RLQjE6hhaw prIJ+oohEmriiLcUNgmFd2YTFDx0JF5U2l9+fzTPdbJUveOX6QWlS0JW5tggrNEn heovJb1wqsOgDC8/uUvGBKx++wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrI2CKA BNwY53OK0EuV9l0zNTBsMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUZGMC85NDMzMEZFNkQ0NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVV Rk5aX3U4OVIyWFpSVGpRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFpQolzlJROWB1NItSXYR4Ev90/MFaXCUu0EtDVdWKUHwH02YBuBMr cCcyQingCI8YdXUy8cuH1W6yU1yjWOXQzaik70wZaotyNMM4fvIQoOdLySKVl58j NpiQaam6mPwGxFjVWKfTGRGJVk7ZTKZsWdtlSYRADRGbTx7Cgph7zDGh75R5jrKS geqxgbrlgEWgSkUIBpLJLRBYZLIhNMUqFmx5NMD8IapDcCJpdPTwuHY1j+xYDW0F F44p/Cwa5dSksIUqYKk6i3uzEvJbO9ienfA1FhLF5cr/WGQofVfMhKAmApoaaYFu 06ntYKJJBJsr4Pvkp2t6vYkpUm/600ZV -----END CERTIFICATE-----Generated at Sun Jun 15 05:58:22 2025 by rpki-client