$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft File: 755Sv59IZcr4eHrZXObeT2R2hA0.mft (raw, json) Hash identifier: 8gKUi++iLME6F3jPYgbhsIlFl/PKdd84gsVObWJrp6c= Subject key identifier: 81:9D:BB:D4:A0:6F:25:07:02:84:45:0D:75:90:AE:5E:E7:93:92:78 Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D Certificate issuer: /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Certificate serial: 0A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft Manifest number: 0A81 Signing time: Fri 30 May 2025 19:47:19 +0000 Manifest this update: Fri 30 May 2025 19:47:19 +0000 Manifest next update: Fri 06 Jun 2025 19:47:19 +0000 Files and hashes: 1: 755Sv59IZcr4eHrZXObeT2R2hA0.crl (hash: W1/M750fb2viUjjATI3Ekk7xpBApVyv9qM1dp+uk750=) 2: 9E1721445CFB11EAA377D527C4F9AE02.roa (hash: DDWfC2SDa6mkLERH2fLjEnqKEWrtJ+AhIE6qZcqqt1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2697 (0xa89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA4B, serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Validity Not Before: May 30 19:47:19 2025 GMT Not After : Jun 6 19:47:19 2025 GMT Subject: CN=683a0b47-10f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:86:71:5f:9b:8e:b1:00:6f:39:ea:8a:24: 90:ba:a5:a8:2d:72:b1:d2:ca:c3:a4:df:3b:74:3a: 06:1a:e6:20:20:09:af:1f:89:25:74:44:67:d5:c5: db:51:f2:2b:45:41:62:69:60:a8:4d:2b:03:30:49: cb:10:99:90:e8:a4:16:a1:a1:d0:7f:45:c2:f5:21: cd:18:0e:01:26:ff:5a:82:ef:0d:89:8a:0a:b9:08: 54:a5:58:10:a2:db:99:df:ca:da:b0:33:f9:f9:a1: ea:80:ad:98:59:0e:2f:fe:a8:56:d7:8a:e8:59:22: 0c:42:ff:e4:b8:9b:d5:e9:96:d9:19:44:88:1d:b6: 32:5d:b3:bb:8e:3f:2d:fa:c9:2d:ad:8c:5e:ce:ef: 46:07:f7:a4:a9:d6:e2:99:d8:37:ad:0d:19:30:ae: 8c:a8:8b:77:1d:b2:84:8d:16:ab:0b:03:0e:3c:f0: be:64:4b:45:4d:b6:d3:29:b6:45:a8:8d:dd:a2:b9: 24:11:3a:c3:29:9f:4f:9c:f0:ac:97:7f:09:54:d7: ec:97:36:1b:db:59:64:8f:b2:ea:1e:8a:88:33:3f: 57:8d:4e:1d:8c:04:20:c4:04:ee:56:af:fc:a2:65: 81:0a:11:e7:18:76:6c:5a:a7:fb:3c:c1:cc:94:cb: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9D:BB:D4:A0:6F:25:07:02:84:45:0D:75:90:AE:5E:E7:93:92:78 X509v3 Authority Key Identifier: keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:c3:45:aa:d3:00:6f:22:e6:32:27:6a:aa:81:73:7c:40:1b: 89:b0:11:89:45:ab:56:ab:40:67:ba:25:8c:9a:d3:34:82:0e: c8:a4:89:83:14:a2:36:e6:93:10:a7:64:5e:de:81:0d:fe:b8: ae:9e:04:06:cd:8c:f7:fc:2d:d4:66:db:fa:ea:dd:b1:0f:cf: ee:bb:d1:68:49:03:11:ea:ac:9e:5c:45:cb:38:2b:bc:d2:ac: 54:b7:85:76:85:f8:69:80:29:92:c5:58:56:23:4e:4d:ff:d1: e2:9e:bc:3f:7c:6a:e1:1b:1f:1d:7e:3e:61:b4:cb:37:11:8c: 66:fe:d3:a3:04:20:72:c1:c6:57:47:d1:03:2f:de:e5:44:7a: 20:1a:b3:2b:af:93:b3:28:df:13:b7:65:d2:0a:f2:38:72:bf: f8:21:62:28:1f:04:bd:b4:3a:fa:44:72:ff:57:ce:a2:7b:6d: 27:6c:96:c0:a5:45:90:fe:ea:1e:ce:f8:e8:e1:5e:b9:9c:54: f4:a4:b5:b9:a7:37:af:92:ff:cc:54:28:b8:5e:37:3b:2a:b8: fd:fc:3d:22:45:98:1d:27:44:23:dc:ff:61:3f:09:ce:36:f0: e0:91:33:ce:6b:4c:6a:ea:82:c4:bd:9b:64:bf:cc:5e:2e:a4: e3:ec:07:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBNEIxMTAvBgNVBAUTKEVGOUU1MkJGOUY0ODY1Q0FGODc4N0FEOTVDRTZERTRG NjQ3Njg0MEQwHhcNMjUwNTMwMTk0NzE5WhcNMjUwNjA2MTk0NzE5WjAYMRYwFAYD VQQDEw02ODNhMGI0Ny0xMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y6GcV+bjrEAbznqiiSQuqWoLXKx0srDpN87dDoGGuYgIAmvH4kldERn1cXb UfIrRUFiaWCoTSsDMEnLEJmQ6KQWoaHQf0XC9SHNGA4BJv9agu8NiYoKuQhUpVgQ otuZ38rasDP5+aHqgK2YWQ4v/qhW14roWSIMQv/kuJvV6ZbZGUSIHbYyXbO7jj8t +sktrYxezu9GB/ekqdbimdg3rQ0ZMK6MqIt3HbKEjRarCwMOPPC+ZEtFTbbTKbZF qI3dorkkETrDKZ9PnPCsl38JVNfslzYb21lkj7LqHoqIMz9XjU4djAQgxATuVq/8 omWBChHnGHZsWqf7PMHMlMvhRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGdu9Sg byUHAoRFDXWQrl7nk5J4MB8GA1UdIwQYMBaAFO+eUr+fSGXK+Hh62Vzm3k9kdoQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0E0Qi82RTY0QzQxMDVD RUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpjcjRlSHJaWE9iZVQyUjJo QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1NVN2NTlJWmNyNGVIclpYT2JlVDJSMmhBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0E0Qi82RTY0QzQxMDVDRUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpj cjRlSHJaWE9iZVQyUjJoQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQw0Wq0wBvIuYyJ2qqgXN8QBuJsBGJRatWq0BnuiWMmtM0gg7IpImD FKI25pMQp2Re3oEN/riungQGzYz3/C3UZtv66t2xD8/uu9FoSQMR6qyeXEXLOCu8 0qxUt4V2hfhpgCmSxVhWI05N/9Hinrw/fGrhGx8dfj5htMs3EYxm/tOjBCBywcZX R9EDL97lRHogGrMrr5OzKN8Tt2XSCvI4cr/4IWIoHwS9tDr6RHL/V86ie20nbJbA pUWQ/uoezvjo4V65nFT0pLW5pzevkv/MVCi4Xjc7Krj9/D0iRZgdJ0Qj3P9hPwnO NvDgkTPOa0xq6oLEvZtkv8xeLqTj7AdD -----END CERTIFICATE-----Generated at Sat May 31 16:55:09 2025 by rpki-client