$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json) Hash identifier: MqL63u9dSkLdOwcMq0VDGvvpU0xPJtHjRjyei/fGPhA= Subject key identifier: 73:DB:BB:76:C9:A6:38:8A:4F:F4:A9:1F:1F:EE:AF:DA:1B:DA:C5:29 Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft Manifest number: 0113 Signing time: Tue 01 Jul 2025 05:25:17 +0000 Manifest this update: Tue 01 Jul 2025 05:25:16 +0000 Manifest next update: Tue 08 Jul 2025 05:25:16 +0000 Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: 8JI83mP3uNvhjRlckkIbTWoZZhOstHDm3qe99rZ8Enk=) 2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: KaLq/qLC36FBeVUH4PJULMTUIMWcwgut4EvM5q8D+vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Validity Not Before: Jul 1 05:25:16 2025 GMT Not After : Jul 8 05:25:16 2025 GMT Subject: CN=6863713d-278a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:b5:c6:86:0f:bc:79:f6:40:c8:d3:2e:ce: cf:6a:10:0f:55:9c:f7:ce:b1:0d:bb:2e:38:d7:67: 1d:5b:c1:1c:51:ae:0f:99:60:44:49:63:74:84:d9: 7f:b4:37:e0:e5:e9:cf:44:ce:e5:dd:cd:d6:4d:a9: 8f:12:da:77:06:b0:fd:79:46:a5:96:47:62:a9:51: 5a:3d:51:dd:88:dd:07:36:34:f2:ed:06:31:80:71: 9c:1c:ab:ea:6e:52:c4:8f:7a:46:7a:70:74:a4:31: 27:5b:e7:76:a4:ad:b3:db:36:a3:b9:a5:4a:24:41: 93:74:a0:10:0a:80:96:df:dd:19:5f:e9:8e:e0:91: f4:58:50:e5:4d:4b:92:00:1a:c1:a8:97:d3:a2:d9: 17:b7:bc:e7:77:0f:fc:52:b4:5c:e8:66:df:74:70: 18:6f:45:2e:6b:d3:97:4b:13:7e:0a:21:86:92:0c: ad:8c:6b:46:c9:9f:65:7e:db:50:62:66:ca:3b:eb: a4:59:5d:f1:82:b0:73:d3:03:ff:f0:61:60:a5:95: db:8d:64:e7:6c:e1:79:f1:f7:15:2d:ae:08:c2:e5: d4:a5:3a:6a:47:e5:29:58:f8:7a:78:d4:db:85:d6: b7:fd:54:b4:9f:cf:9c:f0:e5:a8:dc:eb:6a:e2:7b: 1f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DB:BB:76:C9:A6:38:8A:4F:F4:A9:1F:1F:EE:AF:DA:1B:DA:C5:29 X509v3 Authority Key Identifier: keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:35:dd:f5:64:a5:1a:95:01:97:32:48:07:e4:a0:a5:62:1b: 6e:b3:9a:5d:fc:af:4d:fe:11:01:f1:71:3f:f7:52:c4:65:7a: 88:d4:7c:a7:6b:a2:36:3f:91:36:18:b4:16:8a:65:c5:fb:bd: 4d:96:98:e4:46:db:e9:53:d9:c7:9c:68:bf:58:8f:6c:47:fd: ae:f3:4d:4d:bd:d3:f0:f5:7d:12:eb:25:fc:e0:a8:f3:ac:64: 58:86:d5:e0:6f:60:cd:a6:21:aa:c2:56:6b:0e:08:38:f9:83: e4:a8:74:b3:72:ee:f0:b9:b7:74:fb:e3:94:e7:7d:af:8f:78: 44:5b:0f:93:d2:85:d3:75:70:16:46:51:78:73:12:5a:d3:76: c8:3e:c5:de:8b:9e:fc:07:95:ce:e8:40:e4:48:61:83:4c:88: a2:1a:47:fc:70:21:77:dc:f0:f3:32:38:02:32:c1:c3:b3:88: af:f3:bf:04:c8:a2:22:4f:fc:f1:f7:58:97:3b:a7:25:74:36: 7a:f1:b3:ab:95:8b:68:cf:8f:9c:cd:0c:85:af:b8:d8:91:cc: 3b:90:ac:ad:9a:34:ac:db:f5:77:fd:79:7f:a8:a1:1d:ce:f2: 1e:f3:a5:d3:5e:ad:2c:de:d2:5a:ac:98:ee:93:9f:94:60:16: 45:2c:32:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEU3ODBGQTM3NzdCODFENENGNkEzNTQwNkVBNUNGNEJF NEY2NUU5RkEwHhcNMjUwNzAxMDUyNTE2WhcNMjUwNzA4MDUyNTE2WjAYMRYwFAYD VQQDEw02ODYzNzEzZC0yNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzS1xoYPvHn2QMjTLs7PahAPVZz3zrENuy4412cdW8EcUa4PmWBESWN0hNl/ tDfg5enPRM7l3c3WTamPEtp3BrD9eUallkdiqVFaPVHdiN0HNjTy7QYxgHGcHKvq blLEj3pGenB0pDEnW+d2pK2z2zajuaVKJEGTdKAQCoCW390ZX+mO4JH0WFDlTUuS ABrBqJfTotkXt7zndw/8UrRc6GbfdHAYb0Uua9OXSxN+CiGGkgytjGtGyZ9lfttQ YmbKO+ukWV3xgrBz0wP/8GFgpZXbjWTnbOF58fcVLa4IwuXUpTpqR+UpWPh6eNTb hda3/VS0n8+c8OWo3Otq4nsfuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPbu3bJ pjiKT/SpHx/ur9ob2sUpMB8GA1UdIwQYMBaAFOeA+jd3uB1M9qNUBupc9L5PZen6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9FNjQwMDFGNEI2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhVejJvMVFHNmx6MHZrOWw2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU0RDZOM2U0SFV6Mm8xUUc2bHowdms5bDZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9FNjQwMDFGNEI2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhV ejJvMVFHNmx6MHZrOWw2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZNd31ZKUalQGXMkgH5KClYhtus5pd/K9N/hEB8XE/91LEZXqI1Hyn a6I2P5E2GLQWimXF+71NlpjkRtvpU9nHnGi/WI9sR/2u801NvdPw9X0S6yX84Kjz rGRYhtXgb2DNpiGqwlZrDgg4+YPkqHSzcu7wubd0++OU532vj3hEWw+T0oXTdXAW RlF4cxJa03bIPsXei578B5XO6EDkSGGDTIiiGkf8cCF33PDzMjgCMsHDs4iv878E yKIiT/zx91iXO6cldDZ68bOrlYtoz4+czQyFr7jYkcw7kKytmjSs2/V3/Xl/qKEd zvIe86XTXq0s3tJarJjuk5+UYBZFLDIF -----END CERTIFICATE-----Generated at Wed Jul 2 23:23:19 2025 by rpki-client