$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft File: 594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json) Hash identifier: rcpu6PkyMC4P3yAf89vVCc+wJcuqXRwAryR503Swq4w= Subject key identifier: 03:C6:EC:A4:67:76:C6:28:3C:63:A9:82:84:B5:10:6B:F6:DC:FD:F9 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0DAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft Manifest number: 0D8C Signing time: Thu 18 Sep 2025 18:08:19 +0000 Manifest this update: Thu 18 Sep 2025 18:08:17 +0000 Manifest next update: Thu 25 Sep 2025 18:08:17 +0000 Files and hashes: 1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: 6IjnOY8VWNDEflPjuoA5S2AD30OQdoGwoidEIa+dhl4=) 2: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (hash: znRSUO3caPihB9pwLwMc1O8NeSvwB5D6pWui44HfBSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3501 (0xdad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Sep 18 18:08:17 2025 GMT Not After : Sep 25 18:08:17 2025 GMT Subject: CN=68cc4a92-b523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:c2:ec:ee:63:8e:f3:4a:70:5c:14:6d:24: a5:46:44:02:66:22:60:2b:74:7e:2b:02:2d:ed:97: dd:b7:89:4e:19:fc:f5:0b:b0:00:6a:0c:f2:d8:e1: dd:24:ad:0c:c4:bc:11:83:0f:5b:18:72:b8:22:e1: 50:dc:eb:7d:fe:93:96:ab:80:89:af:fd:c9:21:21: f1:0c:a6:da:c5:79:d0:b3:50:33:a2:f1:3e:12:c7: 96:a7:a7:64:18:84:1c:a4:20:7c:4b:51:ad:0b:d4: fd:6d:bc:63:02:12:02:47:20:96:af:1a:9a:1e:df: 9e:d3:dd:73:2b:c7:1d:bb:97:ad:17:91:13:6e:0b: f6:ed:d2:14:c8:57:3f:70:cd:bd:ac:99:32:ff:b5: e3:00:aa:e7:cb:95:94:4b:90:c3:cb:f3:d9:77:3f: ef:c7:64:73:47:c2:17:43:df:e1:f8:a4:f3:66:f9: 28:8e:ee:c4:50:8a:2f:7f:02:c6:7d:ea:2e:8e:20: 8b:53:70:f6:2a:9b:14:3a:08:ad:81:47:bf:ee:df: e6:23:63:42:ae:3f:ee:d2:fd:72:75:38:12:26:02: 34:ca:dd:32:5e:b1:81:4a:68:75:9d:a0:2e:76:1e: 18:05:a2:db:17:15:3c:07:66:94:44:27:ad:b4:1e: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C6:EC:A4:67:76:C6:28:3C:63:A9:82:84:B5:10:6B:F6:DC:FD:F9 X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:38:43:b0:ef:6c:28:ff:c8:ed:a0:2f:e4:56:29:f4:b0:0b: b5:70:8a:80:ee:3b:b2:0f:ab:8a:1c:3b:c2:94:41:0f:10:55: 69:66:36:f5:9c:8b:4b:1e:72:2c:3a:eb:5e:dc:a1:7c:74:27: 3c:28:a7:f0:ca:52:08:c4:58:4e:8a:c2:a2:b8:73:6d:b4:0a: 78:81:a8:ff:69:27:ef:76:6f:dd:1c:4c:af:18:36:6f:3b:7a: 66:4e:87:ef:31:ad:43:10:07:75:2d:fd:de:4b:ba:6f:6b:b2: ae:7d:b8:ed:5b:34:60:25:82:03:0c:05:6a:67:fa:a1:6d:2b: ab:47:5c:bb:eb:3f:0f:cc:bd:cc:6a:dc:41:01:3a:12:e6:a6: 87:32:1d:61:93:b1:96:92:2b:44:84:67:35:0b:11:94:94:2f: e9:15:2d:29:20:4e:02:f9:6d:eb:20:13:63:3b:64:bb:fc:08: a3:39:37:36:a9:f3:f3:71:92:b0:ce:30:a5:cd:df:3c:75:8c: 90:74:45:d9:c8:fa:5b:7f:df:4b:e9:3a:d0:81:a8:3d:53:51: d4:38:05:53:77:ae:fe:79:e7:16:82:b4:48:90:c4:66:96:21: 53:f8:76:82:4d:67:b4:9e:3b:c9:da:0f:f4:40:41:f0:38:d4: 56:f8:db:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjUwOTE4MTgwODE3WhcNMjUwOTI1MTgwODE3WjAYMRYwFAYD VQQDEw02OGNjNGE5Mi1iNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzfC7O5jjvNKcFwUbSSlRkQCZiJgK3R+KwIt7Zfdt4lOGfz1C7AAagzy2OHd JK0MxLwRgw9bGHK4IuFQ3Ot9/pOWq4CJr/3JISHxDKbaxXnQs1AzovE+EseWp6dk GIQcpCB8S1GtC9T9bbxjAhICRyCWrxqaHt+e091zK8cdu5etF5ETbgv27dIUyFc/ cM29rJky/7XjAKrny5WUS5DDy/PZdz/vx2RzR8IXQ9/h+KTzZvkoju7EUIovfwLG feoujiCLU3D2KpsUOgitgUe/7t/mI2NCrj/u0v1ydTgSJgI0yt0yXrGBSmh1naAu dh4YBaLbFxU8B2aURCettB43zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPG7KRn dsYoPGOpgoS1EGv23P35MB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUZGMC85NDMzMEZFNkQ0NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVV Rk5aX3U4OVIyWFpSVGpRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2OEOw72wo/8jtoC/kVin0sAu1cIqA7juyD6uKHDvClEEPEFVpZjb1 nItLHnIsOute3KF8dCc8KKfwylIIxFhOisKiuHNttAp4gaj/aSfvdm/dHEyvGDZv O3pmTofvMa1DEAd1Lf3eS7pva7KufbjtWzRgJYIDDAVqZ/qhbSurR1y76z8PzL3M atxBAToS5qaHMh1hk7GWkitEhGc1CxGUlC/pFS0pIE4C+W3rIBNjO2S7/AijOTc2 qfPzcZKwzjClzd88dYyQdEXZyPpbf99L6TrQgag9U1HUOAVTd67+eecWgrRIkMRm liFT+HaCTWe0njvJ2g/0QEHwONRW+Ntz -----END CERTIFICATE-----Generated at Thu Sep 18 23:24:03 2025 by rpki-client