$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft File: 594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json) Hash identifier: Ef5dCxZDAZuUqFIL+EN02hVNkEQ0rj0xH+YEkr1MkiM= Subject key identifier: 26:E5:EE:30:43:DE:EE:7D:CA:B6:1D:98:30:EC:C5:F8:F4:E5:F7:13 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0D60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft Manifest number: 0D40 Signing time: Thu 24 Apr 2025 17:58:48 +0000 Manifest this update: Thu 24 Apr 2025 17:58:48 +0000 Manifest next update: Thu 01 May 2025 17:58:48 +0000 Files and hashes: 1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: x95K9aa758xRRttK6dcm8eOryHoN6O8k4xwUUBjo6/c=) 2: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (hash: 8WU3b7Y/r3U4uy9yNzlOEZ0xCTY6Z02v2SjnlAk9SvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3424 (0xd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Apr 24 17:58:48 2025 GMT Not After : May 1 17:58:48 2025 GMT Subject: CN=680a7bd8-6d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:5e:1e:13:4a:69:dd:c0:ea:5a:bf:b9:23: bd:49:a8:9e:ac:e0:b8:ef:ee:c4:77:98:33:a5:69: 14:7b:03:4f:b2:b9:b2:00:5a:57:77:8d:2b:3e:8b: 81:d3:06:2a:12:00:dc:4b:ed:97:78:52:79:4c:65: c6:12:95:15:7c:80:d5:30:64:55:a0:c3:8e:9f:15: a9:15:44:74:26:21:69:1c:1e:1a:15:a1:64:c7:04: 70:4c:9c:86:1f:80:de:36:74:e3:65:89:4a:6c:87: 8f:af:be:68:62:aa:e8:ff:27:54:0e:ca:57:f6:c6: 31:37:66:75:a5:58:ae:7e:de:15:a7:57:51:c4:0f: 4e:16:40:2f:55:e5:09:8b:7b:08:51:72:a3:67:8b: ef:e9:61:76:bf:d4:74:6d:b4:0d:bf:ad:42:52:a7: b1:a3:55:36:50:3e:6c:2f:08:5f:1b:72:fa:fe:97: e5:f4:88:26:6c:53:0f:87:2d:ca:ff:08:61:1d:51: f4:98:83:07:a3:06:e1:24:20:57:81:67:a5:73:06: 81:67:f6:47:b5:ce:0d:30:60:09:a8:11:eb:ea:ef: b6:eb:9a:06:c4:36:06:51:99:62:d3:ec:91:07:ab: 76:b3:af:48:47:1c:a8:a9:b1:b8:9e:52:a6:be:c6: f5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E5:EE:30:43:DE:EE:7D:CA:B6:1D:98:30:EC:C5:F8:F4:E5:F7:13 X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8e:91:8d:c3:39:86:68:45:a1:a6:72:c8:97:c8:06:ec:6c: cb:e2:ef:93:0c:d8:e2:4e:83:3f:bd:77:15:79:46:8e:4a:9e: c0:b6:1b:66:8e:bf:64:08:57:f6:05:31:4d:aa:21:e4:a4:d7: 1e:21:29:36:3b:81:83:f7:78:6b:11:f7:8b:32:fa:01:43:22: e3:1d:d2:4f:30:85:55:6e:bd:4a:eb:70:be:06:29:10:01:79: 15:00:eb:81:f0:ea:ca:c8:eb:c7:fd:1e:37:78:d2:cf:37:61: 12:af:46:36:58:39:95:68:2f:6d:28:48:74:0b:41:e2:b4:14: a4:12:3d:89:2c:c5:0b:45:c8:74:fb:f0:4a:04:d7:42:69:8d: d5:8c:5e:ce:d9:80:99:08:f7:44:aa:a5:45:c0:78:2f:7d:35: 3b:b4:93:2e:7b:24:23:28:78:9f:cb:a1:da:67:a3:f8:dd:13: 47:77:10:87:01:49:e9:ed:04:8b:20:f6:17:ab:98:57:ae:e4: 59:51:a0:7e:8c:04:be:a6:e6:5c:6f:57:bf:ca:09:5c:3b:d9: f4:f4:81:3d:64:f6:17:1c:18:81:e3:b5:e7:e1:ca:5c:57:46: 99:7e:68:c6:23:3f:1e:1e:dd:f8:d6:4f:f8:5d:67:ad:c4:07: 6f:12:bf:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjUwNDI0MTc1ODQ4WhcNMjUwNTAxMTc1ODQ4WjAYMRYwFAYD VQQDEw02ODBhN2JkOC02ZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6JeHhNKad3A6lq/uSO9SaierOC47+7Ed5gzpWkUewNPsrmyAFpXd40rPouB 0wYqEgDcS+2XeFJ5TGXGEpUVfIDVMGRVoMOOnxWpFUR0JiFpHB4aFaFkxwRwTJyG H4DeNnTjZYlKbIePr75oYqro/ydUDspX9sYxN2Z1pViuft4Vp1dRxA9OFkAvVeUJ i3sIUXKjZ4vv6WF2v9R0bbQNv61CUqexo1U2UD5sLwhfG3L6/pfl9IgmbFMPhy3K /whhHVH0mIMHowbhJCBXgWelcwaBZ/ZHtc4NMGAJqBHr6u+265oGxDYGUZli0+yR B6t2s69IRxyoqbG4nlKmvsb1HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbl7jBD 3u59yrYdmDDsxfj05fcTMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUZGMC85NDMzMEZFNkQ0NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVV Rk5aX3U4OVIyWFpSVGpRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBejpGNwzmGaEWhpnLIl8gG7GzL4u+TDNjiToM/vXcVeUaOSp7Athtm jr9kCFf2BTFNqiHkpNceISk2O4GD93hrEfeLMvoBQyLjHdJPMIVVbr1K63C+BikQ AXkVAOuB8OrKyOvH/R43eNLPN2ESr0Y2WDmVaC9tKEh0C0HitBSkEj2JLMULRch0 +/BKBNdCaY3VjF7O2YCZCPdEqqVFwHgvfTU7tJMueyQjKHify6HaZ6P43RNHdxCH AUnp7QSLIPYXq5hXruRZUaB+jAS+puZcb1e/yglcO9n09IE9ZPYXHBiB47Xn4cpc V0aZfmjGIz8eHt341k/4XWetxAdvEr9H -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:47 2025 by rpki-client