$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft File: v54NeIhwkRvVdMDs1KBcKQoJtf8.mft (raw, json) Hash identifier: 4nIqrsu+lSJ6ZOnDmebpTH1YrEuBwxOryzCNOLG+erc= Subject key identifier: C1:53:8D:A3:22:02:FA:4D:46:D0:7A:D6:B6:32:23:F0:0D:1F:1F:0E Authority key identifier: BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF Certificate issuer: /CN=A91E2391/serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft Manifest number: 21 Signing time: Tue 05 Aug 2025 08:32:04 +0000 Manifest this update: Tue 05 Aug 2025 08:32:04 +0000 Manifest next update: Tue 12 Aug 2025 08:32:04 +0000 Files and hashes: 1: v54NeIhwkRvVdMDs1KBcKQoJtf8.crl (hash: EN3zNjOyZosr+SMPiYVesUq5P4OpWT8GPdrwdQzq7f4=) 2: CE833D6041CD11F088FC5360C4F9AE02.roa (hash: O15QErBCIgPZsXbySjYZJc/Lui6vvCcRiPy5b+jKZ40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.crl rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2391, serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF Validity Not Before: Aug 5 08:32:04 2025 GMT Not After : Aug 12 08:32:04 2025 GMT Subject: CN=6891c184-c318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fc:86:dd:0c:8c:95:ca:e1:5a:9d:de:4c:40: cf:cf:54:74:7b:0a:20:f6:2c:9a:dd:e6:35:1d:fc: be:e9:cc:b5:8c:ba:27:f8:a7:9b:d0:0f:53:a3:3d: cb:ac:61:79:bc:af:37:b5:04:e7:43:d3:d1:5d:86: a2:c8:83:90:1e:18:7b:f1:10:0e:86:fe:cf:c1:92: 41:41:62:09:7f:d6:46:b9:f7:61:66:f4:af:67:f9: 89:d4:49:0d:9a:d2:1e:f7:55:30:bb:a5:df:3a:91: fe:51:11:26:65:65:27:48:7a:4c:ee:0c:c2:c3:3c: 98:34:91:94:41:c0:d9:e0:bb:a1:59:b7:d2:bd:3c: 96:8f:b6:dd:d9:9e:d8:c5:3d:63:f6:2e:cf:74:f0: 22:89:89:17:d8:7a:6f:9c:89:fb:e5:c3:38:56:9e: 87:b5:72:27:62:ef:52:25:2e:46:e9:ea:be:02:4b: af:82:e6:d4:7b:13:93:ff:1e:8d:16:b1:62:40:d4: c8:ab:cb:c9:b8:ae:a4:77:49:3f:48:95:23:06:f3: 09:a1:e7:93:2d:6c:e2:e4:9b:df:8d:c3:57:7b:ac: b7:e2:e3:92:d5:72:de:a0:19:12:a9:25:87:46:ce: 26:ea:d4:48:3f:d0:d2:87:40:79:1e:b6:24:39:99: 22:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:53:8D:A3:22:02:FA:4D:46:D0:7A:D6:B6:32:23:F0:0D:1F:1F:0E X509v3 Authority Key Identifier: keyid:BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b9:e3:a6:2f:c6:8f:e3:bf:5d:6c:85:5f:da:b8:7c:d9:d1: f9:80:c1:8d:f9:c7:ff:f8:92:9b:e7:5b:23:17:3f:db:25:f0: 22:c8:dd:a4:49:0e:08:af:47:8a:c9:70:1e:a3:b6:10:5e:c0: b3:fb:05:46:aa:da:7e:75:85:47:68:b2:18:a4:30:ad:83:2a: 5c:9c:bb:45:f8:d2:3a:b8:7d:1f:b8:25:dc:43:3a:2d:77:59: d4:ef:f0:6f:75:63:80:14:e1:60:4c:87:d4:fb:43:43:fc:2f: 64:52:c2:95:de:74:a4:b4:aa:18:e4:42:ac:d2:35:a1:c2:bc: 69:bd:27:02:22:42:e6:b0:6a:ab:ed:4b:83:b1:73:9f:d3:aa: 83:f5:49:bd:cb:84:f6:11:2e:86:91:22:5b:7a:05:4b:39:ca: 09:de:06:36:2f:1a:73:62:21:34:bc:d1:a8:bf:46:9e:09:bc: 34:d7:9f:00:74:f3:58:62:cc:a8:07:b0:be:e9:be:23:cd:1f: 8b:99:4d:51:b2:fa:3b:19:b8:83:ec:66:fc:7e:ae:49:26:35: 7d:9d:2d:65:72:f5:38:a3:f3:e9:a6:f7:2e:0e:3f:7a:82:f2: 5d:09:27:38:88:4d:d3:ef:de:ad:71:d7:09:4a:e2:16:3e:0d: 1e:f9:5c:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MjM5MTExMC8GA1UEBRMoQkY5RTBENzg4ODcwOTExQkQ1NzRDMEVDRDRBMDVDMjkw QTA5QjVGRjAeFw0yNTA4MDUwODMyMDRaFw0yNTA4MTIwODMyMDRaMBgxFjAUBgNV BAMTDTY4OTFjMTg0LWMzMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc/IbdDIyVyuFand5MQM/PVHR7CiD2LJrd5jUd/L7pzLWMuif4p5vQD1OjPcus YXm8rze1BOdD09FdhqLIg5AeGHvxEA6G/s/BkkFBYgl/1ka592Fm9K9n+YnUSQ2a 0h73VTC7pd86kf5RESZlZSdIekzuDMLDPJg0kZRBwNngu6FZt9K9PJaPtt3ZntjF PWP2Ls908CKJiRfYem+cifvlwzhWnoe1cidi71IlLkbp6r4CS6+C5tR7E5P/Ho0W sWJA1Miry8m4rqR3ST9IlSMG8wmh55MtbOLkm9+Nw1d7rLfi45LVct6gGRKpJYdG zibq1Eg/0NKHQHketiQ5mSJNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwVONoyIC +k1G0HrWtjIj8A0fHw4wHwYDVR0jBBgwFoAUv54NeIhwkRvVdMDs1KBcKQoJtf8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyMzkxLzYwNzU1MkQ2NDFD RDExRjA5REY2RjM1RUM0RjlBRTAyL3Y1NE5lSWh3a1J2VmRNRHMxS0JjS1FvSnRm OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjU0TmVJaHdrUnZWZE1EczFLQmNLUW9KdGY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy MzkxLzYwNzU1MkQ2NDFDRDExRjA5REY2RjM1RUM0RjlBRTAyL3Y1NE5lSWh3a1J2 VmRNRHMxS0JjS1FvSnRmOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALK546Yvxo/jv11shV/auHzZ0fmAwY35x//4kpvnWyMXP9sl8CLI3aRJ DgivR4rJcB6jthBewLP7BUaq2n51hUdoshikMK2DKlycu0X40jq4fR+4JdxDOi13 WdTv8G91Y4AU4WBMh9T7Q0P8L2RSwpXedKS0qhjkQqzSNaHCvGm9JwIiQuawaqvt S4Oxc5/TqoP1Sb3LhPYRLoaRIlt6BUs5ygneBjYvGnNiITS80ai/Rp4JvDTXnwB0 81hizKgHsL7pviPNH4uZTVGy+jsZuIPsZvx+rkkmNX2dLWVy9Tij8+mm9y4OP3qC 8l0JJziITdPv3q1x1wlK4hY+DR75XH0= -----END CERTIFICATE-----Generated at Thu Aug 7 04:02:33 2025 by rpki-client