$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft File: 53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json) Hash identifier: GwrZnQ5h5k3EajVn4/KRkg3JkmqrFCEOVJGXzbl9/2U= Subject key identifier: 93:37:3B:FF:9E:2F:10:12:41:F1:AB:12:70:37:1B:A8:9E:A9:F5:45 Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C Certificate issuer: /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft Manifest number: 7C Signing time: Tue 05 Aug 2025 07:22:14 +0000 Manifest this update: Tue 05 Aug 2025 07:22:13 +0000 Manifest next update: Tue 12 Aug 2025 07:22:13 +0000 Files and hashes: 1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: UDS++hkX1qq0fjVANkeg+/7qiTK3H/S7A18NAjSZe+o=) 2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: PmWdGEFbgxUM5JARv+3955i+yLCgnSi8KLnrb7A4Hd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914530B, serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C Validity Not Before: Aug 5 07:22:13 2025 GMT Not After : Aug 12 07:22:13 2025 GMT Subject: CN=6891b126-f67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:0c:17:56:38:86:45:e3:fa:72:74:d3:ca: e9:c4:41:3b:d0:5b:bc:0b:29:5e:c8:83:07:39:3a: ad:e4:95:18:7c:bc:38:9f:0f:84:a3:5c:ae:02:5d: 01:b4:bc:e1:2c:f9:81:bd:9c:f1:82:f3:cd:2d:b1: ea:64:df:5f:34:43:b1:d4:66:f9:15:97:bb:a3:25: da:63:9e:d5:6b:f8:29:1b:07:97:07:46:66:8a:8c: c4:83:d5:1f:9d:21:e0:53:c0:fe:e4:1f:bf:1e:00: 0b:39:ae:17:56:00:98:e2:c1:50:86:38:54:2a:c1: 51:47:2f:da:0a:a0:7f:51:6b:a9:30:ee:b2:e7:9b: c0:92:c7:c1:18:9e:82:9e:dd:88:86:25:34:65:9d: 9f:4e:0f:60:35:72:f9:7a:6e:50:35:a8:27:33:dc: 7d:f3:ad:27:1c:3e:ab:35:fe:3c:a9:e0:98:70:f9: 22:38:d6:0e:d2:31:73:08:d7:98:b0:65:b2:0c:9c: bd:1f:17:8a:da:19:09:8c:8a:fa:9c:da:2d:da:da: 75:be:41:e3:9c:3f:c7:0d:a7:9e:71:36:81:6b:e2: 3b:72:9a:34:e5:d5:78:a7:1c:69:c7:f0:3e:f9:04: 66:72:16:f0:e4:c4:ba:8e:24:fd:f7:f8:43:09:94: b2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:37:3B:FF:9E:2F:10:12:41:F1:AB:12:70:37:1B:A8:9E:A9:F5:45 X509v3 Authority Key Identifier: keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:87:c6:96:04:5f:a8:d8:fa:a9:c3:1d:1a:d6:d6:a2:66:ac: c2:41:db:c7:05:ae:d3:fc:fb:33:18:b2:9c:ca:17:df:e5:08: b3:96:21:91:db:d2:79:9f:9c:ee:4c:66:83:e6:ca:2f:8c:16: 11:f7:83:bc:cb:c2:0c:1d:aa:d0:43:a4:8a:17:63:8f:45:39: 2f:5b:b3:9d:23:e1:15:1f:4a:4f:10:f8:04:f5:f6:c9:59:44: ff:ea:d7:94:e6:e1:c0:fa:76:4c:5d:d2:e8:13:79:42:72:55: f1:32:01:7e:cb:6a:65:17:a2:ff:9d:6b:42:9b:eb:de:fa:d9: 71:1c:66:ad:15:67:e1:2f:f9:2f:f2:f7:cc:88:19:76:b3:98: d0:a9:7c:e1:54:ab:38:65:a4:4a:bf:a4:0a:93:d4:a2:bf:bb: 29:37:77:69:d3:c8:9c:54:81:c2:9a:8e:6b:a0:6b:eb:0c:e7: 95:d9:1e:11:58:39:17:41:77:5d:9d:0d:a8:fe:17:26:65:4f: ef:6e:2a:bb:2b:93:9d:af:ff:11:11:68:e9:f2:c8:ed:cc:61: a0:41:5e:6e:38:26:80:d4:54:31:1a:f0:e8:be:6e:44:0b:2c: ce:90:c8:a2:94:f5:85:11:de:f6:4b:24:28:60:ed:0c:e4:46: 4d:cc:67:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTMwQjExMC8GA1UEBRMoRTc3QTc5ODQxOUIzRjM4QzhCMDI1OTBBMjk0QzdCMzVG N0MzNDQ0QzAeFw0yNTA4MDUwNzIyMTNaFw0yNTA4MTIwNzIyMTNaMBgxFjAUBgNV BAMTDTY4OTFiMTI2LWY2N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/vAwXVjiGReP6cnTTyunEQTvQW7wLKV7Igwc5Oq3klRh8vDifD4SjXK4CXQG0 vOEs+YG9nPGC880tsepk3180Q7HUZvkVl7ujJdpjntVr+CkbB5cHRmaKjMSD1R+d IeBTwP7kH78eAAs5rhdWAJjiwVCGOFQqwVFHL9oKoH9Ra6kw7rLnm8CSx8EYnoKe 3YiGJTRlnZ9OD2A1cvl6blA1qCcz3H3zrSccPqs1/jyp4Jhw+SI41g7SMXMI15iw ZbIMnL0fF4raGQmMivqc2i3a2nW+QeOcP8cNp55xNoFr4jtymjTl1XinHGnH8D75 BGZyFvDkxLqOJP33+EMJlLJBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkzc7/54v EBJB8asScDcbqJ6p9UUwHwYDVR0jBBgwFoAU53p5hBmz84yLAlkKKUx7NffDREww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1MzBCLzlFNzVEREI2Qjc5 QTExRUZBMEQ2OTc1REM0RjlBRTAyLzUzcDVoQm16ODR5TEFsa0tLVXg3TmZmRFJF dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNTNwNWhCbXo4NHlMQWxrS0tVeDdOZmZEUkV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 MzBCLzlFNzVEREI2Qjc5QTExRUZBMEQ2OTc1REM0RjlBRTAyLzUzcDVoQm16ODR5 TEFsa0tLVXg3TmZmRFJFdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANOHxpYEX6jY+qnDHRrW1qJmrMJB28cFrtP8+zMYspzKF9/lCLOWIZHb 0nmfnO5MZoPmyi+MFhH3g7zLwgwdqtBDpIoXY49FOS9bs50j4RUfSk8Q+AT19slZ RP/q15Tm4cD6dkxd0ugTeUJyVfEyAX7LamUXov+da0Kb69762XEcZq0VZ+Ev+S/y 98yIGXazmNCpfOFUqzhlpEq/pAqT1KK/uyk3d2nTyJxUgcKajmuga+sM55XZHhFY ORdBd12dDaj+FyZlT+9uKrsrk52v/xERaOnyyO3MYaBBXm44JoDUVDEa8Oi+bkQL LM6QyKKU9YUR3vZLJChg7QzkRk3MZ/I= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:45 2025 by rpki-client