$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft File: 594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json) Hash identifier: TNufvplQYwbUFKiGmXQE4jr/oChp4KOFjUyrmGuw354= Subject key identifier: 44:BD:8A:55:8D:E8:5D:0E:75:ED:39:DB:93:16:D4:39:CC:51:BF:91 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0D8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft Manifest number: 0D6B Signing time: Sun 20 Jul 2025 18:00:52 +0000 Manifest this update: Sun 20 Jul 2025 18:00:51 +0000 Manifest next update: Sun 27 Jul 2025 18:00:51 +0000 Files and hashes: 1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: U2OgakvWRMfCXB/tW2wXXt+23fmMc29GRjiKFL+CXcI=) 2: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (hash: 8WU3b7Y/r3U4uy9yNzlOEZ0xCTY6Z02v2SjnlAk9SvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3467 (0xd8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Jul 20 18:00:51 2025 GMT Not After : Jul 27 18:00:51 2025 GMT Subject: CN=687d2ed4-3fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:cf:49:cc:aa:79:5b:83:d5:ea:4a:16:83: a6:39:6b:0c:27:c5:47:04:fc:90:56:8e:c1:7b:ce: d0:a7:ba:62:ce:4e:c2:0f:87:eb:7f:a2:17:c2:00: 81:6e:27:88:b6:71:76:8c:93:12:cf:c0:7d:b8:ed: 0e:e3:24:fb:81:0e:3a:b2:07:52:a7:63:6f:a8:b7: 36:d2:7f:1c:4a:2a:ec:87:b9:8b:0c:e5:79:09:cd: e7:da:81:83:09:0a:4d:ed:2b:bd:a2:8b:c9:4a:3f: b1:db:4d:b3:ad:f3:fc:89:ff:fb:a8:a5:c6:63:e4: 24:0c:13:2c:14:95:b8:c6:81:32:f1:33:b7:5e:74: aa:2a:4e:e8:6e:f6:01:22:73:68:72:40:26:a2:d6: 6d:4d:7b:0e:f6:78:44:85:2b:d9:b7:03:37:a1:16: 86:60:4f:b5:c9:81:b0:3d:2d:85:9a:ab:b3:0f:be: a9:6e:b5:b1:54:21:41:88:cb:f0:1f:52:95:a7:9d: 6a:d8:6f:57:54:a3:1c:8f:24:0b:a7:62:11:3a:2c: 86:76:c5:0e:5b:68:7d:5a:a8:59:1f:f3:a3:ff:3a: 3b:19:a6:86:13:61:f2:73:47:f3:67:90:0c:7b:3e: e3:a1:b0:3e:20:8b:f9:3b:44:3e:9b:60:f5:a8:f9: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BD:8A:55:8D:E8:5D:0E:75:ED:39:DB:93:16:D4:39:CC:51:BF:91 X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b0:0a:f1:52:53:1d:42:c3:74:6f:a4:78:76:ff:1a:b8:b8: 81:03:92:95:e0:a1:6a:ec:60:25:d1:15:dc:09:2a:7b:e3:84: 0b:c6:c3:10:15:b6:37:41:e9:ed:63:c2:8a:cd:47:23:8f:67: a3:96:72:31:4b:2a:cf:bb:39:b7:e3:a4:bd:b0:66:03:e9:3f: d9:96:43:24:36:1f:5f:69:18:87:e3:45:11:05:78:df:a9:8b: 78:ed:55:2a:f0:54:d5:8a:20:01:da:4b:c9:49:6c:72:36:a8: 96:91:63:66:84:33:3e:17:08:86:be:e8:8c:87:bd:ca:bd:4b: b0:62:83:21:d1:32:0a:28:11:31:66:53:d7:c2:81:c4:ed:f7: b1:6e:bc:a3:e2:59:86:06:61:72:0a:8f:d5:6f:ab:67:54:5e: 0d:11:ce:cf:13:e4:22:b0:eb:90:9d:a4:da:e6:f3:39:28:6d: 63:c1:33:6c:68:3b:82:ba:0b:bb:9c:b2:78:64:55:d8:63:eb: 6a:f8:34:dd:dd:f5:0b:90:7b:25:9a:3b:bb:31:88:19:c9:80: 5d:01:66:19:5a:fb:f6:a4:fe:5c:f7:9f:93:20:5b:3f:41:19: c7:5b:6b:46:c6:71:07:8e:ce:7d:23:47:fd:43:1e:cb:fb:70: 64:e1:98:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjUwNzIwMTgwMDUxWhcNMjUwNzI3MTgwMDUxWjAYMRYwFAYD VQQDEw02ODdkMmVkNC0zZmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ7PScyqeVuD1epKFoOmOWsMJ8VHBPyQVo7Be87Qp7pizk7CD4frf6IXwgCB bieItnF2jJMSz8B9uO0O4yT7gQ46sgdSp2NvqLc20n8cSirsh7mLDOV5Cc3n2oGD CQpN7Su9oovJSj+x202zrfP8if/7qKXGY+QkDBMsFJW4xoEy8TO3XnSqKk7obvYB InNockAmotZtTXsO9nhEhSvZtwM3oRaGYE+1yYGwPS2FmquzD76pbrWxVCFBiMvw H1KVp51q2G9XVKMcjyQLp2IROiyGdsUOW2h9WqhZH/Oj/zo7GaaGE2Hyc0fzZ5AM ez7jobA+IIv5O0Q+m2D1qPmLgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFES9ilWN 6F0Ode0525MW1DnMUb+RMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUZGMC85NDMzMEZFNkQ0NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVV Rk5aX3U4OVIyWFpSVGpRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjsArxUlMdQsN0b6R4dv8auLiBA5KV4KFq7GAl0RXcCSp744QLxsMQ FbY3QentY8KKzUcjj2ejlnIxSyrPuzm346S9sGYD6T/ZlkMkNh9faRiH40URBXjf qYt47VUq8FTViiAB2kvJSWxyNqiWkWNmhDM+FwiGvuiMh73KvUuwYoMh0TIKKBEx ZlPXwoHE7fexbryj4lmGBmFyCo/Vb6tnVF4NEc7PE+QisOuQnaTa5vM5KG1jwTNs aDuCugu7nLJ4ZFXYY+tq+DTd3fULkHslmju7MYgZyYBdAWYZWvv2pP5c95+TIFs/ QRnHW2tGxnEHjs59I0f9Qx7L+3Bk4Zgf -----END CERTIFICATE-----Generated at Mon Jul 21 05:50:05 2025 by rpki-client