$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft File: 594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json) Hash identifier: o7koVE5oRGkl/abv+BK/BC7h5rqnJHQmSpD6c5cML/k= Subject key identifier: F8:DE:87:7B:63:EF:BC:6F:B2:E9:65:54:A4:3B:3A:DF:41:66:C7:80 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0D81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft Manifest number: 0D61 Signing time: Mon 30 Jun 2025 18:11:59 +0000 Manifest this update: Mon 30 Jun 2025 18:11:58 +0000 Manifest next update: Mon 07 Jul 2025 18:11:58 +0000 Files and hashes: 1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: ZhzLSc2zsGTrlmfL7iyhOC8s6vEi9PAV/11bmgHJEIE=) 2: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (hash: 8WU3b7Y/r3U4uy9yNzlOEZ0xCTY6Z02v2SjnlAk9SvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3457 (0xd81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Jun 30 18:11:58 2025 GMT Not After : Jul 7 18:11:58 2025 GMT Subject: CN=6862d36f-f8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:16:0e:38:9a:ff:f8:c9:4e:c6:ba:3d:9d:39: 49:13:d3:1e:dd:c2:2f:ed:51:95:e2:19:1f:46:a1: d5:c8:22:a6:6f:2d:6c:9c:b1:51:4a:c6:8b:c2:6e: 18:c4:a4:79:8f:c1:13:b2:da:f2:b6:f4:6b:17:9b: 02:db:0d:7f:39:8a:e5:a3:ab:d4:02:c3:d1:61:f4: b8:7a:c6:0b:9f:cc:37:e0:c3:fc:b5:dd:e7:c3:92: d2:51:b1:73:91:da:2c:dc:7a:d3:c8:11:be:2e:1e: 21:5a:87:2f:05:be:d0:bd:0e:98:87:ec:45:e6:be: 29:11:1b:d8:f2:f2:06:03:3c:cd:1c:57:f0:be:66: 80:e4:2d:51:e8:7a:7f:62:31:94:9f:16:32:b2:86: dd:68:cf:ed:bb:35:00:2f:01:9f:63:5f:2b:9c:18: 2b:8a:6c:2e:14:05:54:b4:20:68:e7:f0:68:b8:1f: b6:7f:1e:0d:f5:43:4d:1a:0e:c6:42:de:95:17:5c: 77:1a:5d:32:7e:28:5a:0d:ab:2d:18:0c:77:2f:53: 2f:b5:51:ef:44:bb:5a:78:fa:67:49:b5:a9:e4:74: 1b:49:71:80:cb:ce:4b:0a:07:71:3f:80:a3:e5:cb: 2e:10:33:b3:7c:cf:88:0c:b3:02:82:03:4c:1e:7a: b2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DE:87:7B:63:EF:BC:6F:B2:E9:65:54:A4:3B:3A:DF:41:66:C7:80 X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:06:26:e0:2d:a9:22:73:40:6c:d7:4c:71:87:2c:0d:8e:0e: 45:00:aa:e0:be:6e:a4:b7:f3:5e:30:4f:35:d4:91:56:9d:13: 3a:8f:ca:d1:ba:5b:46:24:95:68:24:0f:e2:20:dc:ac:ec:a8: 31:a4:93:92:a2:e5:0c:53:6e:b7:b9:e2:c0:0a:4e:c5:6c:37: 18:87:92:0e:1d:29:8f:aa:bb:20:75:23:5c:97:bc:68:e3:48: 56:ad:eb:c1:a2:05:4f:20:d6:04:f6:32:0a:7f:4f:37:e9:21: 3e:78:01:76:35:fa:34:19:40:cb:0d:26:c0:42:a6:68:b1:d3: b9:ae:08:56:42:94:32:bc:52:ec:1f:52:1b:f0:64:57:c6:ea: d5:7a:a3:9c:a1:4e:04:d3:26:0b:ad:7e:7d:17:e8:aa:76:e8: cc:7f:40:87:7e:fa:35:c2:55:a5:95:d2:b0:79:ff:91:53:71: 1f:ea:0c:af:88:a9:09:c6:2f:4c:3e:97:cf:72:af:00:3c:5b: a8:67:10:47:38:5c:3a:c1:17:ff:1c:f3:ed:aa:e0:cf:2a:49: 66:79:c6:e9:03:ee:4f:b2:9e:53:6b:67:75:4f:64:e6:84:29: b4:b7:09:ac:c8:6c:b3:4b:75:b2:e3:0d:b7:c8:7b:82:d4:7f: aa:67:9c:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjUwNjMwMTgxMTU4WhcNMjUwNzA3MTgxMTU4WjAYMRYwFAYD VQQDEw02ODYyZDM2Zi1mOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RYOOJr/+MlOxro9nTlJE9Me3cIv7VGV4hkfRqHVyCKmby1snLFRSsaLwm4Y xKR5j8ETstrytvRrF5sC2w1/OYrlo6vUAsPRYfS4esYLn8w34MP8td3nw5LSUbFz kdos3HrTyBG+Lh4hWocvBb7QvQ6Yh+xF5r4pERvY8vIGAzzNHFfwvmaA5C1R6Hp/ YjGUnxYysobdaM/tuzUALwGfY18rnBgrimwuFAVUtCBo5/BouB+2fx4N9UNNGg7G Qt6VF1x3Gl0yfihaDastGAx3L1MvtVHvRLtaePpnSbWp5HQbSXGAy85LCgdxP4Cj 5csuEDOzfM+IDLMCggNMHnqyHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjeh3tj 77xvsullVKQ7Ot9BZseAMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUZGMC85NDMzMEZFNkQ0NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVV Rk5aX3U4OVIyWFpSVGpRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABBibgLakic0Bs10xxhywNjg5FAKrgvm6kt/NeME811JFWnRM6j8rR ultGJJVoJA/iINys7KgxpJOSouUMU263ueLACk7FbDcYh5IOHSmPqrsgdSNcl7xo 40hWrevBogVPINYE9jIKf0836SE+eAF2Nfo0GUDLDSbAQqZosdO5rghWQpQyvFLs H1Ib8GRXxurVeqOcoU4E0yYLrX59F+iqdujMf0CHfvo1wlWlldKwef+RU3Ef6gyv iKkJxi9MPpfPcq8APFuoZxBHOFw6wRf/HPPtquDPKklmecbpA+5Psp5Ta2d1T2Tm hCm0twmsyGyzS3Wy4w23yHuC1H+qZ5wn -----END CERTIFICATE-----Generated at Tue Jul 1 16:09:59 2025 by rpki-client