$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft File: 75-XzrKSdlHWT6oC452-DaO3H5U.mft (raw, json) Hash identifier: SOxvmZRAwpXITFMukoyFHXjE74wNKjRPl13ygMzg9Dg= Subject key identifier: 06:82:6E:B8:37:5F:1F:BD:90:17:ED:C1:40:3D:A1:A2:A5:62:0F:49 Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 Certificate issuer: /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft Manifest number: 45 Signing time: Thu 03 Jul 2025 07:44:23 +0000 Manifest this update: Thu 03 Jul 2025 07:44:22 +0000 Manifest next update: Thu 10 Jul 2025 07:44:22 +0000 Files and hashes: 1: 75-XzrKSdlHWT6oC452-DaO3H5U.crl (hash: ZR7ThBq3NHbKkRYip/cTD18DbuPy6O7NGfyF+V6kC8U=) 2: C405E494FCBF11EF8E586B7AC4F9AE02.roa (hash: 8p+dYc7w4P5cdTWL4po8oK48UBPSJ7b6JBGkywZrPZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Validity Not Before: Jul 3 07:44:22 2025 GMT Not After : Jul 10 07:44:22 2025 GMT Subject: CN=686634d6-f518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:c1:5b:c4:73:58:f0:27:99:49:a9:ff:0e: f2:81:eb:19:b8:51:82:dc:9d:95:5f:35:c6:ea:d6: 66:cf:da:67:fe:07:17:cb:b2:85:50:c1:3a:9a:87: 7d:eb:c1:c3:21:0d:84:f2:e5:f4:d8:d9:eb:dc:a1: 60:d6:25:d1:f1:68:85:a2:c6:83:7b:b7:2a:d8:8b: ee:2c:13:e8:52:5f:35:d3:2c:28:1e:f7:0e:3f:76: 2c:02:71:90:3e:14:fe:e6:8b:05:38:08:b3:6e:47: bb:fa:91:6a:d0:61:2f:26:60:c7:9a:31:90:f6:a4: 1c:87:11:a1:c2:91:11:ac:b2:7f:7e:90:c8:bc:47: a6:5f:bd:9d:f4:f1:51:c0:0e:f1:f2:d7:67:88:b1: 20:89:78:99:cf:57:4d:e8:e7:f5:29:e4:cb:f0:8b: 1f:71:4f:9e:45:8d:1c:b6:76:36:44:4d:f9:a7:71: ab:2d:93:71:42:b3:e7:2e:1c:34:a2:1f:87:45:05: 88:96:36:34:61:ca:f7:d9:78:89:78:d6:b2:0f:09: df:f7:f7:ab:a1:90:64:29:2a:4c:71:ba:08:1b:03: 69:c1:f0:b9:c9:35:67:02:b6:68:4f:1b:29:36:46: 85:75:ee:43:05:53:37:e8:b2:fb:bd:f6:47:e9:c2: 20:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:82:6E:B8:37:5F:1F:BD:90:17:ED:C1:40:3D:A1:A2:A5:62:0F:49 X509v3 Authority Key Identifier: keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:38:44:5f:a1:c2:01:85:e5:f4:ff:51:75:16:b3:60:c1:ee: 07:92:91:ef:62:e0:d2:da:55:67:61:5b:c6:b3:6d:d9:0e:cc: 5a:4c:58:58:20:fd:fe:ee:ff:a0:36:37:7a:e2:f4:29:df:a0: 4c:52:58:b2:8f:3f:19:36:89:55:67:3d:62:d6:ba:70:77:0a: 4a:56:56:eb:05:50:9e:2b:09:b0:50:73:5e:e0:0a:a1:b1:8f: bf:a4:6d:6d:88:17:33:77:62:3e:d7:a1:51:43:64:37:7c:0d: fc:53:c8:97:29:97:14:b1:69:0c:41:ab:7b:69:25:29:ff:7d: 82:77:64:28:1c:4d:5f:0b:00:53:4b:e0:c0:82:5a:e5:a3:eb: 2f:72:7b:95:f8:a2:c6:21:fe:d8:0e:db:2a:82:04:2d:b9:ef: 33:56:05:96:6f:6d:a5:04:f0:9f:14:e0:06:17:e5:e7:bb:a3: 7c:38:40:26:af:c2:e6:76:9d:49:cb:e5:82:4a:55:dd:f0:fc: f9:d4:3e:34:40:c2:95:94:88:e7:01:52:03:85:14:24:de:81: 1f:38:14:c0:c1:9d:00:1f:a4:7d:2d:d7:fa:05:8b:0d:63:38: 0d:e5:6b:f1:11:2d:f4:8c:ec:df:17:dc:43:47:14:c5:ea:07: 5a:bf:b0:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTU4ODExMC8GA1UEBRMoRUY5Rjk3Q0VCMjkyNzY1MUQ2NEZBQTAyRTM5REJFMERB M0I3MUY5NTAeFw0yNTA3MDMwNzQ0MjJaFw0yNTA3MTAwNzQ0MjJaMBgxFjAUBgNV BAMTDTY4NjYzNGQ2LWY1MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfLMFbxHNY8CeZSan/DvKB6xm4UYLcnZVfNcbq1mbP2mf+BxfLsoVQwTqah33r wcMhDYTy5fTY2evcoWDWJdHxaIWixoN7tyrYi+4sE+hSXzXTLCge9w4/diwCcZA+ FP7miwU4CLNuR7v6kWrQYS8mYMeaMZD2pByHEaHCkRGssn9+kMi8R6ZfvZ308VHA DvHy12eIsSCJeJnPV03o5/Up5Mvwix9xT55FjRy2djZETfmncastk3FCs+cuHDSi H4dFBYiWNjRhyvfZeIl41rIPCd/396uhkGQpKkxxuggbA2nB8LnJNWcCtmhPGyk2 RoV17kMFUzfosvu99kfpwiAXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBoJuuDdf H72QF+3BQD2hoqViD0kwHwYDVR0jBBgwFoAU75+XzrKSdlHWT6oC452+DaO3H5Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NTg4LzY5NDUzMUYyRkE4 NzExRUY4M0VERUMyREM0RjlBRTAyLzc1LVh6cktTZGxIV1Q2b0M0NTItRGFPM0g1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzUtWHpyS1NkbEhXVDZvQzQ1Mi1EYU8zSDVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NTg4LzY5NDUzMUYyRkE4NzExRUY4M0VERUMyREM0RjlBRTAyLzc1LVh6cktTZGxI V1Q2b0M0NTItRGFPM0g1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHM4RF+hwgGF5fT/UXUWs2DB7geSke9i4NLaVWdhW8azbdkOzFpMWFgg /f7u/6A2N3ri9CnfoExSWLKPPxk2iVVnPWLWunB3CkpWVusFUJ4rCbBQc17gCqGx j7+kbW2IFzN3Yj7XoVFDZDd8DfxTyJcplxSxaQxBq3tpJSn/fYJ3ZCgcTV8LAFNL 4MCCWuWj6y9ye5X4osYh/tgO2yqCBC257zNWBZZvbaUE8J8U4AYX5ee7o3w4QCav wuZ2nUnL5YJKVd3w/PnUPjRAwpWUiOcBUgOFFCTegR84FMDBnQAfpH0t1/oFiw1j OA3la/ERLfSM7N8X3ENHFMXqB1q/sLA= -----END CERTIFICATE-----Generated at Thu Jul 3 10:15:12 2025 by rpki-client