$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: 7/Hns4uegG9QQ4sQoXuHguiXvpj8PHJCYqvSsgEPHc8= Subject key identifier: 08:22:99:11:E4:EE:47:9F:EE:E1:68:FD:38:D8:00:3F:F6:EF:F6:96 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0C6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0C61 Signing time: Fri 20 Jun 2025 18:17:17 +0000 Manifest this update: Fri 20 Jun 2025 18:17:17 +0000 Manifest next update: Fri 27 Jun 2025 18:17:17 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: Wj6Ip65mlvAmG4BavK/nXLSRI0dPVZUx5z0LcSjHdcU=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: piFKgRXnTnbtckt4LeKFN1ZClSmPRiBrS7xYW+uNn8I=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: rZ1tio+6QezB4AheRQ3p4ioAeh5nGSWbvjYyZdr2msE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 18:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3182 (0xc6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Jun 20 18:17:17 2025 GMT Not After : Jun 27 18:17:17 2025 GMT Subject: CN=6855a5ad-4743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:63:41:82:e7:da:40:92:2b:89:bf:23:7c:bd: 1c:65:d9:5d:55:03:37:03:78:1a:de:d8:87:2f:0f: 85:97:af:94:83:a4:14:3a:f8:67:47:2b:05:08:19: 34:68:47:80:3e:d7:8c:7f:78:7b:91:09:aa:07:43: 6d:c0:cf:93:c3:4c:d1:fa:0c:59:75:7a:ad:3e:f0: 13:97:4d:53:97:39:de:19:50:5c:a8:d9:1c:74:5f: df:e9:5b:90:d4:e2:55:49:24:d1:99:94:f5:67:50: 95:48:a6:e6:59:30:f6:2a:57:7f:7c:7c:bb:61:6a: bc:a1:b5:51:3d:61:46:d9:aa:6b:26:ab:7a:86:47: fe:b2:f2:87:7c:67:b0:b3:77:c0:7d:e9:6d:22:07: cd:e4:93:89:65:cd:6d:cd:4c:85:65:3f:57:02:8f: 86:75:16:76:b2:a4:bc:f8:bd:4d:de:1b:3a:bf:1d: f7:f8:a1:2f:86:f6:47:2b:06:aa:94:ad:bd:aa:f8: a2:c1:29:0e:d3:d3:05:b4:19:6b:61:92:ba:6c:d7: f1:fd:bb:51:0b:28:e5:57:1c:f2:16:dd:88:b4:61: 3f:87:5a:a9:cc:0a:93:64:36:45:33:e6:24:41:e6: 6e:58:b2:79:c6:ea:b1:1d:41:84:fa:be:43:82:93: ce:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:22:99:11:E4:EE:47:9F:EE:E1:68:FD:38:D8:00:3F:F6:EF:F6:96 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0a:06:f8:1c:b6:1f:e8:45:73:0d:9e:7e:d2:31:02:68:c9: ad:e5:d9:12:6f:c4:75:e9:4a:a4:d8:b7:44:8c:3a:9e:e5:e9: 6b:89:eb:8d:3d:6b:f3:c5:fd:0f:5d:27:57:eb:4d:5e:a4:b6: 0f:17:d1:10:78:33:7d:c5:df:f1:15:13:8b:7e:52:e9:64:d8: 76:40:9e:3a:21:fa:f3:0a:99:f3:a5:3a:08:be:97:d6:cc:8d: 16:7c:34:cc:a9:06:c8:09:7b:03:f5:58:2b:bc:12:50:60:22: 8f:cc:d5:8d:80:54:4c:0c:9e:6c:97:6e:ea:d4:70:a9:a6:1f: 1a:cb:87:94:b7:d0:38:05:66:71:29:75:ed:90:4c:42:8f:04: ba:bc:1d:16:8a:c9:78:6a:b2:d7:a4:94:f4:20:62:a4:0c:55: a2:fa:1c:24:49:87:bc:45:7e:73:9b:73:4a:87:e3:30:67:c3: 46:1b:b0:ce:b0:a1:f9:24:c2:04:8a:66:8c:58:ae:38:f3:27: bc:a0:4d:82:09:ed:54:9f:7f:ba:5e:6f:84:81:9a:38:ab:ab: 1f:4a:54:94:53:ee:5a:c8:ac:c7:de:02:17:10:66:ff:b3:1c: a1:b7:55:0c:95:d7:4e:80:a3:37:39:77:bc:9b:77:ac:db:51: 41:24:a7:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjUwNjIwMTgxNzE3WhcNMjUwNjI3MTgxNzE3WjAYMRYwFAYD VQQDEw02ODU1YTVhZC00NzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6GNBgufaQJIrib8jfL0cZdldVQM3A3ga3tiHLw+Fl6+Ug6QUOvhnRysFCBk0 aEeAPteMf3h7kQmqB0NtwM+Tw0zR+gxZdXqtPvATl01TlzneGVBcqNkcdF/f6VuQ 1OJVSSTRmZT1Z1CVSKbmWTD2Kld/fHy7YWq8obVRPWFG2aprJqt6hkf+svKHfGew s3fAfeltIgfN5JOJZc1tzUyFZT9XAo+GdRZ2sqS8+L1N3hs6vx33+KEvhvZHKwaq lK29qviiwSkO09MFtBlrYZK6bNfx/btRCyjlVxzyFt2ItGE/h1qpzAqTZDZFM+Yk QeZuWLJ5xuqxHUGE+r5DgpPOEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgimRHk 7kef7uFo/TjYAD/27/aWMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASCgb4HLYf6EVzDZ5+0jECaMmt5dkSb8R16Uqk2LdEjDqe5elrieuN PWvzxf0PXSdX601epLYPF9EQeDN9xd/xFROLflLpZNh2QJ46IfrzCpnzpToIvpfW zI0WfDTMqQbICXsD9VgrvBJQYCKPzNWNgFRMDJ5sl27q1HCpph8ay4eUt9A4BWZx KXXtkExCjwS6vB0Wisl4arLXpJT0IGKkDFWi+hwkSYe8RX5zm3NKh+MwZ8NGG7DO sKH5JMIEimaMWK448ye8oE2CCe1Un3+6Xm+EgZo4q6sfSlSUU+5ayKzH3gIXEGb/ sxyht1UMlddOgKM3OXe8m3es21FBJKd6 -----END CERTIFICATE-----Generated at Sun Jun 22 14:36:21 2025 by rpki-client