$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json) Hash identifier: VQL0tgwJSRmA8ZIOiKuNQc2lzSfjwiKUPd37hZXR/FU= Subject key identifier: A5:18:2D:46:8A:E6:91:85:46:08:E1:F9:7D:75:35:1F:82:3A:59:0D Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft Manifest number: 0127 Signing time: Sat 09 Aug 2025 05:05:37 +0000 Manifest this update: Sat 09 Aug 2025 05:05:37 +0000 Manifest next update: Sat 16 Aug 2025 05:05:37 +0000 Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: BzR+MHpECfFxkX0raG+MdPDhcsOBQQoISqfZ5KbiU4k=) 2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: KaLq/qLC36FBeVUH4PJULMTUIMWcwgut4EvM5q8D+vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Validity Not Before: Aug 9 05:05:37 2025 GMT Not After : Aug 16 05:05:37 2025 GMT Subject: CN=6896d721-fdd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:9d:ee:79:41:72:48:05:1d:37:aa:77:e3: 64:91:0c:de:82:c0:f1:ff:c8:ef:87:c5:bb:bb:9b: e9:15:63:61:f8:c7:b7:62:5b:b3:ab:3a:55:61:04: 80:fa:1c:f7:47:25:4d:0e:fb:dd:7a:47:49:ee:8a: 78:d2:e4:03:8d:1c:8f:28:2d:9f:99:ea:a3:15:69: 59:fc:7d:0a:af:1e:df:c2:b6:35:4f:78:49:40:6f: 55:8d:b3:15:b4:2f:36:03:4f:3d:a2:7c:14:b1:10: 23:fe:d8:cb:77:0b:d1:40:04:9f:56:b0:a8:22:f3: b5:46:6a:96:1c:1e:c7:2f:9f:44:31:36:a7:11:59: 73:24:7e:b8:3b:57:0c:fa:2b:78:c2:e7:c2:8a:a8: 35:a4:2b:cf:5d:fe:fb:0c:33:4e:d4:2e:9f:f8:5a: bd:ec:9b:31:c2:78:8b:94:70:66:91:b1:9d:75:ae: a1:f8:de:de:35:a9:31:fd:52:90:9e:38:b3:66:81: e8:d1:2c:f9:33:0d:bb:90:d7:1e:1c:0e:e4:61:ae: cb:16:55:58:83:b9:73:78:ed:6b:d1:9b:d2:bd:89: cf:3f:3f:68:6b:ef:cd:4c:f9:8b:95:9d:6b:64:1d: c0:43:0b:3d:a8:bd:a9:bd:a7:51:a8:61:ef:b4:6e: 69:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:18:2D:46:8A:E6:91:85:46:08:E1:F9:7D:75:35:1F:82:3A:59:0D X509v3 Authority Key Identifier: keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c9:09:0d:61:4d:a0:f6:2b:fb:74:2e:5e:bb:47:6e:45:d7: df:f2:7f:e5:29:cc:ee:3a:14:05:8f:a9:21:5d:5f:49:55:f7: 05:c1:b5:c3:6a:79:00:45:81:e8:58:3e:18:14:4e:ce:f7:aa: fb:71:b6:66:2a:46:e7:ae:28:d5:59:9c:39:56:49:93:78:92: da:f9:9e:b7:a0:e8:f0:e9:7a:6e:fa:1a:ed:7c:28:0d:82:b4: 78:72:62:65:8b:47:6a:6c:6f:57:98:32:97:f1:f8:7f:40:36: ae:44:2f:e2:df:a7:7b:e4:8a:34:91:03:09:7f:bb:e4:78:f8: 7d:5a:f5:c3:85:56:b9:95:02:33:4d:b3:6f:40:49:2a:6a:6b: 1e:bd:d8:09:2f:b3:14:43:ed:f7:c5:ed:bb:65:00:d6:db:f0: 62:28:f7:93:0d:4c:26:cc:c1:7a:94:4c:47:19:ec:32:ea:f6: 9a:eb:84:38:ef:69:e2:17:2c:d3:05:5f:a1:f8:a7:97:2b:d9: 83:8b:ce:e3:6c:bf:8d:9b:bf:1c:4b:9a:62:9e:6c:2f:ee:4c: b7:3c:bf:63:91:3a:bf:29:d1:c3:2c:d6:57:f9:2c:1b:10:ba: 55:69:07:cb:bc:82:19:e9:81:4f:d7:5f:2f:07:f3:71:54:9d: 12:14:ad:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEU3ODBGQTM3NzdCODFENENGNkEzNTQwNkVBNUNGNEJF NEY2NUU5RkEwHhcNMjUwODA5MDUwNTM3WhcNMjUwODE2MDUwNTM3WjAYMRYwFAYD VQQDEw02ODk2ZDcyMS1mZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypSd7nlBckgFHTeqd+NkkQzegsDx/8jvh8W7u5vpFWNh+Me3YluzqzpVYQSA +hz3RyVNDvvdekdJ7op40uQDjRyPKC2fmeqjFWlZ/H0Krx7fwrY1T3hJQG9VjbMV tC82A089onwUsRAj/tjLdwvRQASfVrCoIvO1RmqWHB7HL59EMTanEVlzJH64O1cM +it4wufCiqg1pCvPXf77DDNO1C6f+Fq97JsxwniLlHBmkbGdda6h+N7eNakx/VKQ njizZoHo0Sz5Mw27kNceHA7kYa7LFlVYg7lzeO1r0ZvSvYnPPz9oa+/NTPmLlZ1r ZB3AQws9qL2pvadRqGHvtG5piQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUYLUaK 5pGFRgjh+X11NR+COlkNMB8GA1UdIwQYMBaAFOeA+jd3uB1M9qNUBupc9L5PZen6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9FNjQwMDFGNEI2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhVejJvMVFHNmx6MHZrOWw2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU0RDZOM2U0SFV6Mm8xUUc2bHowdms5bDZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9FNjQwMDFGNEI2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhV ejJvMVFHNmx6MHZrOWw2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANyQkNYU2g9iv7dC5eu0duRdff8n/lKczuOhQFj6khXV9JVfcFwbXD ankARYHoWD4YFE7O96r7cbZmKkbnrijVWZw5VkmTeJLa+Z63oOjw6Xpu+hrtfCgN grR4cmJli0dqbG9XmDKX8fh/QDauRC/i36d75Io0kQMJf7vkePh9WvXDhVa5lQIz TbNvQEkqamsevdgJL7MUQ+33xe27ZQDW2/BiKPeTDUwmzMF6lExHGewy6vaa64Q4 72niFyzTBV+h+KeXK9mDi87jbL+Nm78cS5pinmwv7ky3PL9jkTq/KdHDLNZX+Swb ELpVaQfLvIIZ6YFP118vB/NxVJ0SFK0t -----END CERTIFICATE-----Generated at Sun Aug 10 04:15:21 2025 by rpki-client