$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json) Hash identifier: l91zkDEZ3WiXvk0F1L9ziF0ZX4DXoIebTInM4LFMPKo= Subject key identifier: D5:75:A3:18:B1:66:B8:1D:DF:85:68:E6:DA:99:FF:0F:22:25:D6:85 Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft Manifest number: FC Signing time: Thu 15 May 2025 04:32:52 +0000 Manifest this update: Thu 15 May 2025 04:32:52 +0000 Manifest next update: Thu 22 May 2025 04:32:52 +0000 Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: Ka+IEDAD7Pi3SjsDctZulkujde8tt3+BAJ1TTLFSwok=) 2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: KaLq/qLC36FBeVUH4PJULMTUIMWcwgut4EvM5q8D+vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Validity Not Before: May 15 04:32:52 2025 GMT Not After : May 22 04:32:52 2025 GMT Subject: CN=68256e74-415d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:20:47:94:bd:dd:e9:ba:85:8b:f8:09:fc: fb:62:16:99:d3:76:ca:9e:e9:6e:b3:23:bf:3c:f6: d4:af:01:49:43:5b:a6:bd:97:14:e5:86:c7:f7:47: d6:6e:f4:03:17:95:46:52:f1:c1:b3:b5:c1:50:75: 89:2b:51:79:4c:7d:d5:5d:af:15:cb:e6:c5:5f:45: 12:09:20:37:5a:1c:43:f7:61:77:1b:f5:0e:7f:1f: 65:84:ee:c1:39:01:52:4a:bf:22:6e:af:6e:40:a8: d4:d3:6d:f4:f7:35:7e:89:af:8f:df:5a:02:39:05: 36:9f:24:45:b5:dd:2d:1b:89:17:46:32:7b:85:27: 2a:0a:e8:ea:45:7d:54:5b:1d:46:a9:e2:79:f5:bb: 59:dd:65:56:8e:c1:85:63:0f:83:60:5b:8c:6c:a8: d9:14:e0:7c:ce:f4:93:c6:ab:c0:93:d5:ea:56:63: 6f:fc:40:d5:fc:ac:9f:3d:da:7d:92:f9:f7:5c:1e: d2:11:79:22:cd:c6:7d:53:97:2e:c6:99:ce:b9:70: 11:69:32:b8:8a:0f:b3:91:3a:80:58:0e:9c:0b:0b: 11:0e:f2:d7:12:fd:a1:bf:8a:d0:14:e4:06:37:08: ac:2b:7b:4f:ee:f3:98:cb:97:96:79:ce:de:47:ca: 8d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:75:A3:18:B1:66:B8:1D:DF:85:68:E6:DA:99:FF:0F:22:25:D6:85 X509v3 Authority Key Identifier: keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f5:e1:38:de:c0:ff:82:9d:f6:28:a5:42:14:85:08:a6:95: e6:2f:d9:68:77:96:3e:eb:04:61:10:75:93:7d:d3:a1:cb:be: b1:76:81:2e:b0:fa:d9:8f:1b:af:9c:3a:b1:61:74:56:2a:a7: f1:fc:49:3a:69:f6:20:81:e4:5c:70:67:54:a0:51:b9:c6:43: e4:8e:cd:4a:9d:86:f4:05:03:63:03:69:c7:cd:e8:fa:7a:ea: a1:ed:a2:56:22:c7:e2:80:45:a1:4a:3d:7c:3e:d4:89:ff:a5: 69:d6:84:6b:4c:47:00:29:de:f9:7e:ae:cc:5c:3a:5e:5e:ae: 62:9f:b1:94:2c:6e:a9:e3:f0:c9:18:e2:e2:1b:8e:9b:95:ca: d2:ca:81:df:83:77:2a:fe:63:d9:f7:ca:47:0e:2b:d8:b3:3f: 55:ea:b5:53:db:5a:50:eb:cb:ba:82:02:e0:b2:17:fe:3b:5c: bd:01:58:a1:e6:21:84:97:4c:8d:44:d8:94:17:f0:43:f4:4e: db:fa:6d:8f:14:39:68:4d:d1:5e:0d:9e:97:7e:41:0f:c5:80: 45:65:bf:a9:7a:8b:fe:c2:96:de:4c:60:66:10:7a:5b:ea:d2: dd:65:ac:52:ec:11:6b:2a:d0:4b:8d:94:34:72:cf:b1:42:44: 00:4a:25:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEU3ODBGQTM3NzdCODFENENGNkEzNTQwNkVBNUNGNEJF NEY2NUU5RkEwHhcNMjUwNTE1MDQzMjUyWhcNMjUwNTIyMDQzMjUyWjAYMRYwFAYD VQQDEw02ODI1NmU3NC00MTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs98gR5S93em6hYv4Cfz7YhaZ03bKnulusyO/PPbUrwFJQ1umvZcU5YbH90fW bvQDF5VGUvHBs7XBUHWJK1F5TH3VXa8Vy+bFX0USCSA3WhxD92F3G/UOfx9lhO7B OQFSSr8ibq9uQKjU02309zV+ia+P31oCOQU2nyRFtd0tG4kXRjJ7hScqCujqRX1U Wx1GqeJ59btZ3WVWjsGFYw+DYFuMbKjZFOB8zvSTxqvAk9XqVmNv/EDV/KyfPdp9 kvn3XB7SEXkizcZ9U5cuxpnOuXARaTK4ig+zkTqAWA6cCwsRDvLXEv2hv4rQFOQG NwisK3tP7vOYy5eWec7eR8qNBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNV1oxix Zrgd34Vo5tqZ/w8iJdaFMB8GA1UdIwQYMBaAFOeA+jd3uB1M9qNUBupc9L5PZen6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9FNjQwMDFGNEI2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhVejJvMVFHNmx6MHZrOWw2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU0RDZOM2U0SFV6Mm8xUUc2bHowdms5bDZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9FNjQwMDFGNEI2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhV ejJvMVFHNmx6MHZrOWw2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt9eE43sD/gp32KKVCFIUIppXmL9lod5Y+6wRhEHWTfdOhy76xdoEu sPrZjxuvnDqxYXRWKqfx/Ek6afYggeRccGdUoFG5xkPkjs1KnYb0BQNjA2nHzej6 euqh7aJWIsfigEWhSj18PtSJ/6Vp1oRrTEcAKd75fq7MXDpeXq5in7GULG6p4/DJ GOLiG46blcrSyoHfg3cq/mPZ98pHDivYsz9V6rVT21pQ68u6ggLgshf+O1y9AVih 5iGEl0yNRNiUF/BD9E7b+m2PFDloTdFeDZ6XfkEPxYBFZb+peov+wpbeTGBmEHpb 6tLdZaxS7BFrKtBLjZQ0cs+xQkQASiU4 -----END CERTIFICATE-----Generated at Fri May 16 08:09:40 2025 by rpki-client