$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft File: v54NeIhwkRvVdMDs1KBcKQoJtf8.mft (raw, json) Hash identifier: qnKcF86d3BJVmQXfntgqt+zNvomgJSMtaSUYfcmpiOE= Subject key identifier: 52:8B:79:67:15:6D:47:CE:F3:47:00:87:C3:24:3A:F9:84:7D:2C:A1 Authority key identifier: BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF Certificate issuer: /CN=A91E2391/serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft Manifest number: 2A Signing time: Sat 23 Aug 2025 07:58:53 +0000 Manifest this update: Sat 23 Aug 2025 07:58:53 +0000 Manifest next update: Sat 30 Aug 2025 07:58:53 +0000 Files and hashes: 1: v54NeIhwkRvVdMDs1KBcKQoJtf8.crl (hash: dz+Xpw5mzqux7jhgYRFeoIWTDneEznPhneN/MJESE78=) 2: CE833D6041CD11F088FC5360C4F9AE02.roa (hash: O15QErBCIgPZsXbySjYZJc/Lui6vvCcRiPy5b+jKZ40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.crl rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2391, serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF Validity Not Before: Aug 23 07:58:53 2025 GMT Not After : Aug 30 07:58:53 2025 GMT Subject: CN=68a974bd-ec7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:84:db:c2:a3:b1:d6:8c:f7:73:2a:cf:b0: 1d:15:14:a9:46:bc:33:7f:e9:03:cd:4d:8c:e6:1b: 73:40:03:7d:41:d0:e1:bb:6f:19:99:51:a8:77:6b: 06:99:ce:ee:5a:09:1c:56:58:83:36:1d:27:57:49: cd:ec:d9:f3:c3:4f:8c:30:1d:d7:0b:ae:20:fb:cf: 7f:67:fa:56:b6:13:cf:09:c8:30:16:a5:19:3d:a2: 97:82:f2:d0:d0:17:8a:ee:f4:6e:2a:4b:71:ab:c4: 8d:7b:c0:6b:ab:57:a2:be:48:bf:40:f5:d4:0c:9e: 12:bf:da:49:1c:8e:cb:b1:97:d1:f3:0f:41:7b:a0: e9:d9:14:35:23:d5:12:b1:12:9e:8d:15:7c:04:e8: b9:a5:e8:95:ae:49:b9:a6:3e:cc:36:0c:5f:30:cf: 56:cf:5a:2e:0b:b2:3c:1f:ec:47:77:36:5e:f3:7b: de:ca:40:42:8a:04:32:67:4d:93:33:8a:07:9f:b1: b8:e1:65:cf:8c:7d:92:8c:74:24:1a:32:68:dd:11: 11:c3:dd:65:5c:5b:9e:99:48:78:77:a8:de:f0:e5: bd:28:40:46:7c:f8:ec:e5:36:0e:0a:9d:58:66:c3: b5:6c:a6:93:3e:fc:0f:71:09:47:82:4b:5d:3a:eb: 09:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8B:79:67:15:6D:47:CE:F3:47:00:87:C3:24:3A:F9:84:7D:2C:A1 X509v3 Authority Key Identifier: keyid:BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bf:b2:fd:c6:38:c7:68:f1:f2:41:b6:73:e8:8d:df:7c:64: 94:04:aa:62:c9:27:ed:b7:4d:8a:29:3d:bc:4f:26:d0:d2:13: 90:6c:f3:63:53:03:be:1c:2b:cf:c7:fb:2c:e9:10:92:cf:2b: 01:49:f6:67:3d:5b:ba:1f:0c:68:9e:e5:23:d8:77:df:4f:7e: 7a:2b:80:63:b2:de:d6:3d:9b:84:26:64:2d:e9:c0:80:25:84: 72:0b:32:ba:43:08:4b:8d:a5:e6:10:9c:7f:b8:11:a6:ea:b8: 0f:77:23:0c:97:c9:08:89:ed:b1:58:16:25:53:3f:15:69:34: e8:aa:33:c7:a4:fe:05:dc:66:31:15:96:88:41:02:19:e3:fc: 7b:1e:1d:85:8a:d3:ab:33:1e:d2:fc:e3:2a:68:b3:da:10:b2: c7:3d:19:9d:a2:8e:ac:bd:a4:72:5d:b0:39:be:64:e0:61:81: 47:11:8a:38:4e:63:fd:98:52:9a:ae:8f:9d:57:e3:7b:01:61: d7:e2:1c:be:74:ec:f0:14:60:c9:ef:f0:b5:a3:84:35:e1:21: c9:2f:97:13:d3:36:62:0d:b6:e1:b7:f3:83:2a:34:64:b7:cd: 2a:10:cb:09:6a:42:14:4e:75:ba:72:1e:7c:b9:e3:97:14:63: b4:cb:bd:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MjM5MTExMC8GA1UEBRMoQkY5RTBENzg4ODcwOTExQkQ1NzRDMEVDRDRBMDVDMjkw QTA5QjVGRjAeFw0yNTA4MjMwNzU4NTNaFw0yNTA4MzAwNzU4NTNaMBgxFjAUBgNV BAMTDTY4YTk3NGJkLWVjN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC57ITbwqOx1oz3cyrPsB0VFKlGvDN/6QPNTYzmG3NAA31B0OG7bxmZUah3awaZ zu5aCRxWWIM2HSdXSc3s2fPDT4wwHdcLriD7z39n+la2E88JyDAWpRk9opeC8tDQ F4ru9G4qS3GrxI17wGurV6K+SL9A9dQMnhK/2kkcjsuxl9HzD0F7oOnZFDUj1RKx Ep6NFXwE6Lml6JWuSbmmPsw2DF8wz1bPWi4Lsjwf7Ed3Nl7ze97KQEKKBDJnTZMz igefsbjhZc+MfZKMdCQaMmjdERHD3WVcW56ZSHh3qN7w5b0oQEZ8+OzlNg4KnVhm w7VsppM+/A9xCUeCS1066wnhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUot5ZxVt R87zRwCHwyQ6+YR9LKEwHwYDVR0jBBgwFoAUv54NeIhwkRvVdMDs1KBcKQoJtf8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyMzkxLzYwNzU1MkQ2NDFD RDExRjA5REY2RjM1RUM0RjlBRTAyL3Y1NE5lSWh3a1J2VmRNRHMxS0JjS1FvSnRm OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjU0TmVJaHdrUnZWZE1EczFLQmNLUW9KdGY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy MzkxLzYwNzU1MkQ2NDFDRDExRjA5REY2RjM1RUM0RjlBRTAyL3Y1NE5lSWh3a1J2 VmRNRHMxS0JjS1FvSnRmOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAy/sv3GOMdo8fJBtnPojd98ZJQEqmLJJ+23TYopPbxPJtDSE5Bs82NT A74cK8/H+yzpEJLPKwFJ9mc9W7ofDGie5SPYd99PfnorgGOy3tY9m4QmZC3pwIAl hHILMrpDCEuNpeYQnH+4EabquA93IwyXyQiJ7bFYFiVTPxVpNOiqM8ek/gXcZjEV lohBAhnj/HseHYWK06szHtL84ypos9oQssc9GZ2ijqy9pHJdsDm+ZOBhgUcRijhO Y/2YUpquj51X43sBYdfiHL507PAUYMnv8LWjhDXhIckvlxPTNmINtuG384MqNGS3 zSoQywlqQhROdbpyHny545cUY7TLvT0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:36:45 2025 by rpki-client