$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: XvfUVOBdm23+0V6el2NDoDvoDH3BLJL+Bx417RwtCHA= Subject key identifier: B6:0B:FC:29:04:83:6D:A4:92:3A:85:38:8E:35:CC:CC:EA:88:D4:25 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0C56 Signing time: Fri 30 May 2025 18:32:53 +0000 Manifest this update: Fri 30 May 2025 18:32:52 +0000 Manifest next update: Fri 06 Jun 2025 18:32:52 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: EAOoEkzHv1qBXXTnytzqTe8lWODoRHCC3gLNY7QBTDY=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: piFKgRXnTnbtckt4LeKFN1ZClSmPRiBrS7xYW+uNn8I=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: rZ1tio+6QezB4AheRQ3p4ioAeh5nGSWbvjYyZdr2msE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: May 30 18:32:52 2025 GMT Not After : Jun 6 18:32:52 2025 GMT Subject: CN=6839f9d4-a294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:77:78:37:19:aa:f9:dd:19:03:8a:06:3f:9b: 27:f3:12:6e:83:1f:b0:b0:87:2a:24:c0:cf:57:24: cf:83:8d:52:68:f1:be:38:ee:7d:33:3f:7e:49:d6: df:73:ca:31:7e:16:ed:19:f9:90:da:5b:4c:ba:15: c2:fe:20:f6:cc:f3:97:7e:63:36:36:4a:5d:6c:41: cb:df:4a:c7:72:ff:eb:d5:ef:22:58:99:d2:c7:ef: 87:27:80:64:fb:13:2a:35:fd:de:11:e1:55:24:bf: 9c:ee:38:87:73:f1:42:70:3d:6e:07:e5:b6:a7:da: fa:34:73:78:7f:a5:cb:04:93:fe:9f:54:d5:26:63: 22:dd:a7:7d:be:9c:05:97:18:ed:fe:96:9d:a7:fe: 08:11:8a:05:d3:81:b3:ec:89:4c:b4:30:fa:f6:06: 2e:d9:4a:fd:ef:7e:95:93:40:5a:50:68:60:7f:a6: b9:0d:20:9a:e7:94:1b:9c:c5:1d:48:70:56:fd:47: 1d:62:2f:dc:a1:43:39:64:dc:ac:e8:3c:62:bf:27: db:6f:b4:47:ad:6e:cd:44:ac:04:fa:c6:2e:3d:8f: 78:69:b5:8a:91:f0:b0:88:ca:c3:2f:d3:65:bb:66: 5e:cf:8a:16:7f:63:6c:bd:8d:10:79:28:c4:17:bc: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0B:FC:29:04:83:6D:A4:92:3A:85:38:8E:35:CC:CC:EA:88:D4:25 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b4:5c:0f:db:87:29:30:5b:b2:07:32:34:1d:b8:48:a3:09: 7d:71:0b:c8:43:98:58:d3:b4:3b:ce:64:f5:be:20:9b:51:09: 75:a2:96:2d:7c:f1:fb:83:8d:44:b1:2c:3e:93:cb:1e:45:8b: d7:74:44:62:48:c0:3b:5a:f5:8d:43:9c:a0:28:ba:a1:fa:3a: 35:67:ef:ed:51:f6:bd:d5:d1:b6:95:ad:62:98:11:d7:66:7d: 79:2f:9e:9e:ed:93:04:f9:c9:5b:81:7b:8f:4c:e6:68:a6:21: c6:58:47:df:00:4d:38:c8:77:84:6f:fd:d9:dd:d9:24:75:68: 22:3e:39:2d:12:7d:08:df:c9:6a:83:34:e8:4f:e1:16:a6:b4: 77:d0:bf:7c:0f:44:70:85:2c:c3:2d:ae:4c:34:84:f8:cd:c4: 3d:d0:41:1a:03:53:7b:1f:e5:b6:a6:f6:fe:80:fb:3e:42:6e: cc:3a:0b:c5:90:90:f8:fa:92:c0:4b:64:53:90:78:c3:95:bd: 8e:3b:ca:ea:62:da:d7:5f:1c:14:e9:ad:b3:72:96:03:1f:72: 2b:59:aa:ac:24:c6:ff:77:40:5d:c2:f6:88:ea:f5:ac:50:31: 07:50:7c:60:4a:c3:f6:6c:1d:a6:2c:34:33:9e:2d:26:c2:3b: 5e:08:37:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjUwNTMwMTgzMjUyWhcNMjUwNjA2MTgzMjUyWjAYMRYwFAYD VQQDEw02ODM5ZjlkNC1hMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Hd4Nxmq+d0ZA4oGP5sn8xJugx+wsIcqJMDPVyTPg41SaPG+OO59Mz9+Sdbf c8oxfhbtGfmQ2ltMuhXC/iD2zPOXfmM2NkpdbEHL30rHcv/r1e8iWJnSx++HJ4Bk +xMqNf3eEeFVJL+c7jiHc/FCcD1uB+W2p9r6NHN4f6XLBJP+n1TVJmMi3ad9vpwF lxjt/padp/4IEYoF04Gz7IlMtDD69gYu2Ur9736Vk0BaUGhgf6a5DSCa55QbnMUd SHBW/UcdYi/coUM5ZNys6Dxivyfbb7RHrW7NRKwE+sYuPY94abWKkfCwiMrDL9Nl u2Zez4oWf2NsvY0QeSjEF7zbawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYL/CkE g22kkjqFOI41zMzqiNQlMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjtFwP24cpMFuyBzI0HbhIowl9cQvIQ5hY07Q7zmT1viCbUQl1opYt fPH7g41EsSw+k8seRYvXdERiSMA7WvWNQ5ygKLqh+jo1Z+/tUfa91dG2la1imBHX Zn15L56e7ZME+clbgXuPTOZopiHGWEffAE04yHeEb/3Z3dkkdWgiPjktEn0I38lq gzToT+EWprR30L98D0RwhSzDLa5MNIT4zcQ90EEaA1N7H+W2pvb+gPs+Qm7MOgvF kJD4+pLAS2RTkHjDlb2OO8rqYtrXXxwU6a2zcpYDH3IrWaqsJMb/d0BdwvaI6vWs UDEHUHxgSsP2bB2mLDQzni0mwjteCDfe -----END CERTIFICATE-----Generated at Sat May 31 17:54:47 2025 by rpki-client