$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json) Hash identifier: +i0rHiP7SVseJTeeIR39d8GuLhEeiYMLT510js59zXw= Subject key identifier: 76:1B:72:C9:39:5B:74:39:78:33:1C:A9:1E:03:83:4E:F7:3F:6C:5E Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft Manifest number: F2 Signing time: Fri 25 Apr 2025 04:22:28 +0000 Manifest this update: Fri 25 Apr 2025 04:22:27 +0000 Manifest next update: Fri 02 May 2025 04:22:27 +0000 Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: 3B4/AAlIZM7klxMQhw9v5BA3iXdnhZxCdXRYQLHp1QU=) 2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: KaLq/qLC36FBeVUH4PJULMTUIMWcwgut4EvM5q8D+vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Validity Not Before: Apr 25 04:22:27 2025 GMT Not After : May 2 04:22:27 2025 GMT Subject: CN=680b0e04-a7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:df:7b:c6:e2:c2:42:ee:ec:13:a9:c2:a2:21: 75:1d:16:d7:f6:3d:6e:97:ec:bd:8f:6b:7a:44:90: ff:d8:66:df:65:90:47:b1:0b:a1:d6:e1:23:30:61: df:bd:e5:35:57:17:87:02:45:d7:a2:3d:25:bd:2a: ba:76:a3:44:4a:fc:14:16:d6:4e:d6:06:03:e6:2a: f5:6c:ac:7a:e1:4f:1f:dc:04:5f:60:3e:c0:b1:88: 3b:7c:02:78:86:85:db:d9:b5:1d:7d:a0:6a:21:03: 27:cf:f7:7a:ce:b7:1a:66:46:27:eb:c5:b3:fc:73: 93:ca:c8:63:8d:d1:6c:1f:31:8e:c6:67:c6:a7:b4: 94:00:d9:06:64:c5:e0:ec:63:12:3b:87:ff:8e:4c: 9b:bd:ad:88:a9:87:76:49:b2:6a:78:00:e8:09:aa: 48:c7:7c:45:b1:63:f3:6f:fc:05:1c:bc:d0:4d:a9: 65:29:e4:83:99:38:98:0b:06:17:d8:83:e1:69:01: 7a:dd:87:59:5b:f0:7a:d0:5c:60:92:cd:20:e3:86: fe:62:3b:2a:3b:ad:f9:2b:02:ec:a1:d5:20:b6:33: 83:d7:62:8b:8e:fa:d1:2a:2b:8a:27:83:c5:58:f5: 01:7f:46:e7:ee:f0:ef:d9:89:51:35:6f:c2:00:28: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1B:72:C9:39:5B:74:39:78:33:1C:A9:1E:03:83:4E:F7:3F:6C:5E X509v3 Authority Key Identifier: keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a5:2d:27:4f:41:65:72:13:62:ac:6c:5c:a3:62:ff:f7:fe: fb:f3:1d:0f:f1:7e:f3:aa:46:f5:a2:29:b0:dc:f2:a4:46:ce: 65:95:60:e6:94:28:bd:37:5e:b9:de:d9:f0:28:f7:3b:f7:bb: 16:4b:13:b7:4e:ca:d5:ef:65:b1:ba:20:5b:79:42:fe:ce:a6: 04:9b:c7:e9:f9:fc:e1:11:b9:b2:8c:03:c6:8b:da:78:82:40: bb:40:90:55:61:73:76:cb:b3:09:e8:c0:2e:6d:cf:1f:be:ec: cc:95:52:de:9a:8b:24:c2:d9:26:be:29:45:36:df:ed:18:04: 0e:8a:ab:b9:0e:eb:59:60:aa:f0:d5:1c:05:10:e2:28:7a:21: 80:d5:9b:ee:63:32:8c:1f:10:5e:b3:61:7e:56:9b:f1:7f:64: de:d2:51:14:b8:f1:fa:41:aa:c6:ed:b7:79:7b:d2:97:78:ce: 5e:dc:b2:4d:36:85:b5:9f:bf:7f:c2:f8:37:9c:fc:67:03:41: 2a:66:ed:31:38:74:55:a5:51:06:66:7b:ad:84:b9:7a:41:d4: 7c:3e:0a:a8:ea:50:67:cd:c2:fb:39:93:1d:32:2a:53:7c:31: 16:d2:03:0a:46:f5:52:eb:20:67:3f:99:53:69:ed:84:e8:38: 86:40:49:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEU3ODBGQTM3NzdCODFENENGNkEzNTQwNkVBNUNGNEJF NEY2NUU5RkEwHhcNMjUwNDI1MDQyMjI3WhcNMjUwNTAyMDQyMjI3WjAYMRYwFAYD VQQDEw02ODBiMGUwNC1hN2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAod97xuLCQu7sE6nCoiF1HRbX9j1ul+y9j2t6RJD/2GbfZZBHsQuh1uEjMGHf veU1VxeHAkXXoj0lvSq6dqNESvwUFtZO1gYD5ir1bKx64U8f3ARfYD7AsYg7fAJ4 hoXb2bUdfaBqIQMnz/d6zrcaZkYn68Wz/HOTyshjjdFsHzGOxmfGp7SUANkGZMXg 7GMSO4f/jkybva2IqYd2SbJqeADoCapIx3xFsWPzb/wFHLzQTallKeSDmTiYCwYX 2IPhaQF63YdZW/B60Fxgks0g44b+YjsqO635KwLsodUgtjOD12KLjvrRKiuKJ4PF WPUBf0bn7vDv2YlRNW/CACgCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYbcsk5 W3Q5eDMcqR4Dg073P2xeMB8GA1UdIwQYMBaAFOeA+jd3uB1M9qNUBupc9L5PZen6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9FNjQwMDFGNEI2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhVejJvMVFHNmx6MHZrOWw2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU0RDZOM2U0SFV6Mm8xUUc2bHowdms5bDZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9FNjQwMDFGNEI2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhV ejJvMVFHNmx6MHZrOWw2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKpS0nT0FlchNirGxco2L/9/778x0P8X7zqkb1oimw3PKkRs5llWDm lCi9N1653tnwKPc797sWSxO3TsrV72WxuiBbeUL+zqYEm8fp+fzhEbmyjAPGi9p4 gkC7QJBVYXN2y7MJ6MAubc8fvuzMlVLemoskwtkmvilFNt/tGAQOiqu5DutZYKrw 1RwFEOIoeiGA1ZvuYzKMHxBes2F+Vpvxf2Te0lEUuPH6QarG7bd5e9KXeM5e3LJN NoW1n79/wvg3nPxnA0EqZu0xOHRVpVEGZnuthLl6QdR8Pgqo6lBnzcL7OZMdMipT fDEW0gMKRvVS6yBnP5lTae2E6DiGQEmp -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:28 2025 by rpki-client