$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json) Hash identifier: YGL0d+88FS/njE9kVSBBa+J2M1zcqGU33ygTYye24RU= Subject key identifier: C4:BF:D2:EA:FB:E0:39:B4:C1:8C:00:06:18:4C:91:BB:83:2A:65:1D Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft Manifest number: 012E Signing time: Sat 23 Aug 2025 04:45:50 +0000 Manifest this update: Sat 23 Aug 2025 04:45:49 +0000 Manifest next update: Sat 30 Aug 2025 04:45:49 +0000 Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: JrbVgb+XfYez7YyDRkJ/dVp5vhodQ+AMmP4X8eR2qcc=) 2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: KaLq/qLC36FBeVUH4PJULMTUIMWcwgut4EvM5q8D+vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Validity Not Before: Aug 23 04:45:49 2025 GMT Not After : Aug 30 04:45:49 2025 GMT Subject: CN=68a9477d-4e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:73:38:26:96:27:02:24:a2:b5:3a:f6:8d: 3e:cc:b2:c4:5a:09:46:ef:45:43:69:bd:2b:13:e4: 81:6d:47:d4:ed:a0:bf:0d:d3:b7:e9:62:26:67:17: 51:e2:0c:67:9d:25:ae:8a:d0:06:58:0c:ec:44:93: d5:0a:16:2b:61:96:c1:fb:c7:59:01:0f:58:34:4f: 2a:c6:f1:9d:36:8b:5e:ad:f7:c0:35:dc:cd:bb:99: 9f:92:3d:a7:12:aa:49:0d:ad:91:b3:2b:17:17:01: 7a:65:48:8a:53:c2:ef:25:71:1f:fc:36:51:6b:4f: ab:6f:d0:0c:9e:fe:1d:71:e7:d9:73:26:0d:4d:b1: c3:fe:58:07:16:a6:d8:f5:86:23:37:b6:59:be:7a: 07:2f:64:71:c5:78:ab:97:97:ea:66:4d:86:fe:a8: 59:06:33:4e:81:b9:29:00:47:bf:1f:f2:0a:54:48: ef:70:40:ff:ff:be:06:8e:9f:72:a8:6b:89:d6:05: 6e:55:56:d6:7c:3f:ca:f2:57:57:51:8d:70:cd:45: 9b:42:04:88:3b:14:31:16:16:85:7b:22:07:96:62: d1:32:10:f9:79:33:c0:2e:2d:4f:5d:d5:d2:49:6b: dd:9c:04:9f:c8:b7:c1:90:e5:05:36:5b:5d:7d:38: 32:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BF:D2:EA:FB:E0:39:B4:C1:8C:00:06:18:4C:91:BB:83:2A:65:1D X509v3 Authority Key Identifier: keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:26:96:1d:f9:87:1e:5e:97:c4:de:9e:cb:bf:5c:fd:93:75: 38:b8:50:5b:2d:87:99:d4:ec:59:f8:df:51:4e:e4:da:23:72: 99:05:04:13:e9:96:ed:18:ee:e4:2d:81:b1:1e:fc:19:0e:a2: 40:8e:da:30:e0:ec:70:f9:c7:d5:ff:b6:a0:52:aa:ba:60:7c: 3c:ed:08:67:99:39:cb:ba:02:41:4f:1e:f1:bb:d1:5e:77:5e: 9d:1d:e4:76:26:34:98:4e:16:ca:b9:bd:7b:d7:ea:e0:6a:fb: 89:2f:ee:28:ba:be:b5:0b:d9:3e:b9:b0:9b:80:09:a1:e5:53: c9:bb:4c:df:2a:ce:2a:6c:8b:23:2a:09:ee:d9:49:15:89:37: 0a:2b:cd:3d:38:3d:7d:f6:1d:58:3d:15:ad:81:67:06:75:77: f7:9d:e4:91:2b:a9:57:c0:cf:75:d5:24:ec:ba:70:2d:6c:ae: a3:6d:87:ae:6b:25:66:a0:49:a8:1c:9e:d9:71:0b:60:41:af: d2:ec:b1:eb:e4:ac:8e:6d:2c:ab:2a:24:d9:14:7d:99:75:63: 4f:cd:d2:45:96:68:1d:96:ad:58:63:7f:2d:00:40:3d:ae:cc: c7:ee:46:48:ca:0b:60:56:42:4d:58:92:3a:29:45:d0:9a:15: 32:ce:cb:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEU3ODBGQTM3NzdCODFENENGNkEzNTQwNkVBNUNGNEJF NEY2NUU5RkEwHhcNMjUwODIzMDQ0NTQ5WhcNMjUwODMwMDQ0NTQ5WjAYMRYwFAYD VQQDEw02OGE5NDc3ZC00ZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsS9zOCaWJwIkorU69o0+zLLEWglG70VDab0rE+SBbUfU7aC/DdO36WImZxdR 4gxnnSWuitAGWAzsRJPVChYrYZbB+8dZAQ9YNE8qxvGdNoterffANdzNu5mfkj2n EqpJDa2RsysXFwF6ZUiKU8LvJXEf/DZRa0+rb9AMnv4dcefZcyYNTbHD/lgHFqbY 9YYjN7ZZvnoHL2RxxXirl5fqZk2G/qhZBjNOgbkpAEe/H/IKVEjvcED//74Gjp9y qGuJ1gVuVVbWfD/K8ldXUY1wzUWbQgSIOxQxFhaFeyIHlmLRMhD5eTPALi1PXdXS SWvdnASfyLfBkOUFNltdfTgyewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS/0ur7 4Dm0wYwABhhMkbuDKmUdMB8GA1UdIwQYMBaAFOeA+jd3uB1M9qNUBupc9L5PZen6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9FNjQwMDFGNEI2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhVejJvMVFHNmx6MHZrOWw2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU0RDZOM2U0SFV6Mm8xUUc2bHowdms5bDZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9FNjQwMDFGNEI2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhV ejJvMVFHNmx6MHZrOWw2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoJpYd+YceXpfE3p7Lv1z9k3U4uFBbLYeZ1OxZ+N9RTuTaI3KZBQQT 6ZbtGO7kLYGxHvwZDqJAjtow4Oxw+cfV/7agUqq6YHw87QhnmTnLugJBTx7xu9Fe d16dHeR2JjSYThbKub171+rgavuJL+4our61C9k+ubCbgAmh5VPJu0zfKs4qbIsj Kgnu2UkViTcKK809OD199h1YPRWtgWcGdXf3neSRK6lXwM911STsunAtbK6jbYeu ayVmoEmoHJ7ZcQtgQa/S7LHr5KyObSyrKiTZFH2ZdWNPzdJFlmgdlq1YY38tAEA9 rszH7kZIygtgVkJNWJI6KUXQmhUyzsty -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:15 2025 by rpki-client