$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: raJlrMeXKRtC7x0OXYF+IRC2qjpE4XctVdq0v40+/s0= Subject key identifier: F0:35:8E:90:4C:C0:91:70:79:42:45:2A:D9:E1:FD:6F:FC:7F:57:46 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0C88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0C7B Signing time: Sun 10 Aug 2025 18:18:30 +0000 Manifest this update: Sun 10 Aug 2025 18:18:30 +0000 Manifest next update: Sun 17 Aug 2025 18:18:30 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: xK9ng4vymwpf5hl2Lmsq8LYNtpGSNg+0X0Fqh0PPGiY=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: piFKgRXnTnbtckt4LeKFN1ZClSmPRiBrS7xYW+uNn8I=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: rZ1tio+6QezB4AheRQ3p4ioAeh5nGSWbvjYyZdr2msE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Aug 10 18:18:30 2025 GMT Not After : Aug 17 18:18:30 2025 GMT Subject: CN=6898e276-64ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:6c:77:a3:c4:7b:7c:94:0c:b7:42:af:56: 39:59:0f:9f:94:6c:45:f4:5e:55:39:29:97:7a:c8: fc:5b:c5:fd:7d:06:6e:8d:73:78:6b:0f:17:2f:f9: 37:2c:43:18:31:c6:eb:bd:24:32:1d:39:db:65:91: 7b:04:9b:88:09:3f:2a:3d:1a:03:3a:6e:46:fe:10: 5d:c9:19:cd:7e:26:eb:24:3d:80:90:7f:a3:ee:a9: da:17:b9:86:8a:07:c5:3c:fb:47:f9:66:ba:35:01: 8e:a6:d2:a6:db:2b:7a:cb:91:e3:bb:83:4e:cd:6e: 8f:e4:5d:c4:d9:9e:08:87:bf:0f:51:82:3d:a9:42: 00:8b:38:f1:43:08:a9:2e:5e:3c:ef:5f:e4:cd:6e: 0e:02:e7:57:9c:26:ca:1d:2b:9b:12:22:ec:f2:55: 88:b5:44:3d:2c:da:5a:f0:0d:82:6c:70:8e:b4:a6: 28:23:d3:9b:bb:48:ba:1b:3c:98:9a:b3:ec:ae:a4: 12:37:62:1b:0c:71:0b:5c:84:c8:ef:dd:b9:f8:9d: b9:0f:19:83:aa:fe:ea:da:5c:e1:6f:73:3d:0e:4e: af:79:c6:b8:c1:46:c0:f4:6b:4d:0d:e0:26:88:9c: dd:b9:80:c4:1a:3a:3b:9e:f5:cb:75:d3:16:ea:02: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:35:8E:90:4C:C0:91:70:79:42:45:2A:D9:E1:FD:6F:FC:7F:57:46 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:14:35:95:b1:89:4c:01:2b:29:12:ae:0d:a9:c8:02:64:70: 4c:e4:b2:a3:d7:e3:f6:f0:2c:3c:ce:94:2d:70:f1:ae:bd:57: ff:f1:72:85:c1:02:93:b1:cf:26:05:5f:32:f8:b0:9e:21:35: cf:97:a7:b4:52:5f:ce:fc:47:73:17:2c:f9:5b:89:4a:8f:a6: 01:96:96:d6:c9:f2:40:51:5b:01:8d:f8:ac:0e:4d:e6:4e:2e: 43:b9:82:c3:d1:0f:74:4b:ca:5a:64:35:a0:53:ec:7e:e6:50: 73:44:80:92:17:68:1d:24:82:99:9e:fb:9e:1d:92:0a:c7:50: 27:4b:e6:81:a9:00:60:67:95:f0:bd:f9:3d:35:6a:1a:b3:e8: 55:59:fc:3c:86:83:41:fa:a9:24:7e:85:0e:9a:63:44:b2:45: 46:50:37:3f:0b:dd:44:cd:6d:27:3e:92:0f:72:37:9d:c0:ba: 9a:8e:6d:ef:f1:5a:73:94:a7:70:52:a3:f4:2c:02:43:8d:11: 6d:fd:88:b3:3d:14:80:55:46:e1:09:fc:86:bf:d1:48:42:ba: 09:89:11:40:c8:c5:02:23:79:74:74:ba:ed:8a:db:a1:fd:e7: 38:82:5a:9b:6a:2c:fd:06:10:86:a9:da:0f:2a:19:3e:76:49: 97:6f:c5:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjUwODEwMTgxODMwWhcNMjUwODE3MTgxODMwWjAYMRYwFAYD VQQDEw02ODk4ZTI3Ni02NGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXJsd6PEe3yUDLdCr1Y5WQ+flGxF9F5VOSmXesj8W8X9fQZujXN4aw8XL/k3 LEMYMcbrvSQyHTnbZZF7BJuICT8qPRoDOm5G/hBdyRnNfibrJD2AkH+j7qnaF7mG igfFPPtH+Wa6NQGOptKm2yt6y5Hju4NOzW6P5F3E2Z4Ih78PUYI9qUIAizjxQwip Ll4871/kzW4OAudXnCbKHSubEiLs8lWItUQ9LNpa8A2CbHCOtKYoI9Obu0i6GzyY mrPsrqQSN2IbDHELXITI7925+J25DxmDqv7q2lzhb3M9Dk6veca4wUbA9GtNDeAm iJzduYDEGjo7nvXLddMW6gLbxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPA1jpBM wJFweUJFKtnh/W/8f1dGMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZFDWVsYlMASspEq4NqcgCZHBM5LKj1+P28Cw8zpQtcPGuvVf/8XKF wQKTsc8mBV8y+LCeITXPl6e0Ul/O/EdzFyz5W4lKj6YBlpbWyfJAUVsBjfisDk3m Ti5DuYLD0Q90S8paZDWgU+x+5lBzRICSF2gdJIKZnvueHZIKx1AnS+aBqQBgZ5Xw vfk9NWoas+hVWfw8hoNB+qkkfoUOmmNEskVGUDc/C91EzW0nPpIPcjedwLqajm3v 8VpzlKdwUqP0LAJDjRFt/YizPRSAVUbhCfyGv9FIQroJiRFAyMUCI3l0dLrtituh /ec4glqbaiz9BhCGqdoPKhk+dkmXb8UY -----END CERTIFICATE-----Generated at Mon Aug 11 07:33:37 2025 by rpki-client