$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft File: 75-XzrKSdlHWT6oC452-DaO3H5U.mft (raw, json) Hash identifier: fF19alHoQ+339VGGOAr6KcinHxNGd4qLAui2b8f/+7o= Subject key identifier: D5:C4:14:4A:8A:63:D2:EC:86:07:99:0E:17:35:2A:8A:FF:A2:10:F1 Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 Certificate issuer: /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft Manifest number: 36 Signing time: Tue 03 Jun 2025 07:33:22 +0000 Manifest this update: Tue 03 Jun 2025 07:33:22 +0000 Manifest next update: Tue 10 Jun 2025 07:33:22 +0000 Files and hashes: 1: 75-XzrKSdlHWT6oC452-DaO3H5U.crl (hash: Eg0j8SBDBbbVQbV85AQp32g3q9iHYXy2UzOvgiOAegY=) 2: C405E494FCBF11EF8E586B7AC4F9AE02.roa (hash: 8p+dYc7w4P5cdTWL4po8oK48UBPSJ7b6JBGkywZrPZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Validity Not Before: Jun 3 07:33:22 2025 GMT Not After : Jun 10 07:33:22 2025 GMT Subject: CN=683ea542-a1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:48:6c:3b:be:bb:31:18:c5:d9:2f:8f:b2: 36:ef:f2:b1:1a:c9:05:52:c6:8c:66:24:6a:3f:16: 00:b2:8a:24:3b:ae:ed:98:6c:94:1f:c7:12:b5:39: 24:9c:9f:cc:d2:de:34:5f:85:95:9a:04:56:5b:b2: 6e:a7:6f:68:ba:15:10:42:84:ba:95:b7:8e:f2:84: 05:3e:29:41:d4:76:74:0d:d9:12:cc:9f:7a:a8:4e: 24:45:3c:21:ca:ce:63:b1:c0:95:a0:ad:d2:ab:8c: f1:a0:6b:04:ea:f7:d5:58:36:9d:c7:31:24:3c:28: 7b:67:9c:e2:a0:07:b1:56:de:2d:ed:55:cb:c4:a9: 4c:5e:98:9c:24:1e:0a:c5:f2:ab:80:5d:41:7b:e6: a1:68:a9:9f:ab:1b:b0:fa:fb:eb:f5:ae:45:90:f3: 94:ad:d2:ed:da:51:ad:7e:9a:24:e1:66:a2:5c:d0: 9b:f2:f2:ee:58:cb:ba:cd:ea:ac:3f:45:af:5e:a4: 51:87:18:01:0c:de:4b:e3:ea:20:0f:d4:a8:8c:4d: 7e:e9:06:24:b8:b6:87:e6:12:f7:92:a3:53:94:d3: 3a:cb:d4:e2:0b:b1:6d:d2:de:e9:f2:a1:91:d4:63: 92:bb:7e:4f:76:35:00:09:57:d7:8d:52:f9:3a:8e: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C4:14:4A:8A:63:D2:EC:86:07:99:0E:17:35:2A:8A:FF:A2:10:F1 X509v3 Authority Key Identifier: keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:50:ae:d4:a2:06:2b:e4:29:d3:fe:88:3a:92:e9:d4:e1:69: 95:50:d5:11:e6:76:35:a0:d3:2d:cf:c4:7f:5c:90:25:e1:43: c7:45:46:8e:bd:f7:e0:c5:0d:e6:84:1b:1e:bb:78:1d:48:ce: b6:c8:42:a9:91:03:26:66:68:5b:7e:4f:5c:40:cc:fd:9a:80: d0:27:51:72:d5:ed:c5:c1:53:7c:d1:0a:51:b8:14:82:85:3e: 20:f7:1a:3c:d6:31:57:3a:27:62:c5:b0:54:5a:e7:54:d7:46: 12:22:6b:2f:70:4a:63:3a:b4:17:0a:74:48:8c:b6:8c:d6:22: 55:6b:85:0b:28:7f:f8:27:5a:56:65:b9:69:62:cf:f5:69:61: fa:33:f5:7c:05:2d:0e:66:1e:c1:24:51:76:be:2d:97:70:ab: c2:27:5f:e8:79:e7:0f:62:5e:c9:df:62:80:4e:4e:87:9b:f7: 26:74:7a:5b:7d:21:7d:9f:2f:b8:a0:fd:27:a6:42:43:68:58: b0:8c:01:ec:52:59:8f:e7:dc:64:9f:c4:c2:33:6e:63:c4:9f: de:b1:67:63:48:22:22:cb:a9:a5:03:47:2b:27:d4:29:fb:9d: 2e:00:0d:de:9c:75:ca:73:a9:e2:78:d4:28:84:79:38:4d:32: 6b:27:56:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTU4ODExMC8GA1UEBRMoRUY5Rjk3Q0VCMjkyNzY1MUQ2NEZBQTAyRTM5REJFMERB M0I3MUY5NTAeFw0yNTA2MDMwNzMzMjJaFw0yNTA2MTAwNzMzMjJaMBgxFjAUBgNV BAMTDTY4M2VhNTQyLWExZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC53UhsO767MRjF2S+Psjbv8rEayQVSxoxmJGo/FgCyiiQ7ru2YbJQfxxK1OSSc n8zS3jRfhZWaBFZbsm6nb2i6FRBChLqVt47yhAU+KUHUdnQN2RLMn3qoTiRFPCHK zmOxwJWgrdKrjPGgawTq99VYNp3HMSQ8KHtnnOKgB7FW3i3tVcvEqUxemJwkHgrF 8quAXUF75qFoqZ+rG7D6++v1rkWQ85St0u3aUa1+miThZqJc0Jvy8u5Yy7rN6qw/ Ra9epFGHGAEM3kvj6iAP1KiMTX7pBiS4tofmEveSo1OU0zrL1OILsW3S3unyoZHU Y5K7fk92NQAJV9eNUvk6jgC9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1cQUSopj 0uyGB5kOFzUqiv+iEPEwHwYDVR0jBBgwFoAU75+XzrKSdlHWT6oC452+DaO3H5Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NTg4LzY5NDUzMUYyRkE4 NzExRUY4M0VERUMyREM0RjlBRTAyLzc1LVh6cktTZGxIV1Q2b0M0NTItRGFPM0g1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzUtWHpyS1NkbEhXVDZvQzQ1Mi1EYU8zSDVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NTg4LzY5NDUzMUYyRkE4NzExRUY4M0VERUMyREM0RjlBRTAyLzc1LVh6cktTZGxI V1Q2b0M0NTItRGFPM0g1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIBQrtSiBivkKdP+iDqS6dThaZVQ1RHmdjWg0y3PxH9ckCXhQ8dFRo69 9+DFDeaEGx67eB1IzrbIQqmRAyZmaFt+T1xAzP2agNAnUXLV7cXBU3zRClG4FIKF PiD3GjzWMVc6J2LFsFRa51TXRhIiay9wSmM6tBcKdEiMtozWIlVrhQsof/gnWlZl uWliz/VpYfoz9XwFLQ5mHsEkUXa+LZdwq8InX+h55w9iXsnfYoBOToeb9yZ0elt9 IX2fL7ig/SemQkNoWLCMAexSWY/n3GSfxMIzbmPEn96xZ2NIIiLLqaUDRysn1Cn7 nS4ADd6cdcpzqeJ41CiEeThNMmsnVjM= -----END CERTIFICATE-----Generated at Wed Jun 4 11:28:31 2025 by rpki-client