$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json) Hash identifier: mW0yvFrMuqUvi6dEts7B+fA7zXhC5XYSR2LiFa8Rw8c= Subject key identifier: 64:5A:03:B1:4E:93:AB:DF:79:54:17:35:22:DB:52:3E:C9:BF:FD:BA Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft Manifest number: E8 Signing time: Sat 05 Apr 2025 04:44:58 +0000 Manifest this update: Sat 05 Apr 2025 04:44:58 +0000 Manifest next update: Sat 12 Apr 2025 04:44:58 +0000 Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: xXLIp4OSfdwzGQ3A3QNYzCM9QurnlO7i1xHRAT1ISc4=) 2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: KaLq/qLC36FBeVUH4PJULMTUIMWcwgut4EvM5q8D+vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D Validity Not Before: Apr 5 04:44:58 2025 GMT Not After : Apr 12 04:44:58 2025 GMT Subject: CN=67f0b54a-a703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:e6:87:cb:ba:10:51:8e:3c:77:4b:bf:09: 53:96:6b:31:7e:b7:5d:b9:9a:40:b4:11:83:4c:3e: 53:2b:e3:63:5a:56:37:89:90:41:25:50:10:72:0c: 4f:a7:3a:ae:5b:83:0b:fc:d8:4c:f4:2c:7b:95:64: ad:a8:53:1d:5b:d4:c1:1d:01:11:be:d4:40:a6:c3: de:f0:af:67:48:9c:06:d1:93:77:21:45:ed:05:4a: 03:1e:c4:95:2f:b3:9c:e0:f4:73:46:8e:57:af:81: a9:8b:2f:79:c2:3d:c0:cf:a3:5c:70:21:39:81:16: a7:b4:7f:df:44:60:ad:b1:aa:60:e9:72:39:00:f5: 27:ea:c4:7f:47:e3:ec:cd:39:6d:e6:ef:18:48:d4: 42:ed:59:98:51:be:7a:3c:bb:b0:1e:9a:d1:5c:85: e3:cd:61:ae:50:d0:b3:a0:09:cb:f6:96:cd:7e:10: cd:46:ad:91:ba:64:85:d6:a2:e7:81:4d:ba:15:32: d6:90:02:9e:01:49:db:b1:43:66:ad:c9:0d:92:5c: ec:7a:a8:6f:2a:eb:7d:ed:c8:0b:c3:a0:ec:92:91: d4:ed:c1:08:60:cd:f8:68:6c:c1:f1:f4:17:fd:0a: 08:fc:52:3c:a2:6f:77:bd:f1:6c:75:fe:51:b3:e9: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5A:03:B1:4E:93:AB:DF:79:54:17:35:22:DB:52:3E:C9:BF:FD:BA X509v3 Authority Key Identifier: keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:80:32:2d:cc:5c:7f:19:46:c2:1b:c9:ff:3a:35:96:c2:e1: 9b:ae:53:04:22:0b:d5:c9:0f:6d:52:69:0d:6d:39:3e:a9:7d: 7a:a0:da:9d:62:16:9a:b4:07:14:ce:df:f9:c6:62:9d:77:0e: c9:2f:3b:59:1f:0e:19:fd:e2:a6:14:6a:7b:98:ae:ba:08:01: 2c:e3:d5:22:a2:94:81:c6:f8:eb:dd:07:31:86:38:b7:4d:73: c6:b1:16:5e:bf:29:46:6c:22:28:01:a0:fd:95:85:d8:04:7f: 65:be:b7:24:fc:4e:df:df:fb:3d:f0:f7:22:44:c3:64:43:8e: 5d:cf:9a:77:8f:6b:8f:e5:a7:ab:3f:a9:63:1d:f5:21:d0:ea: ab:bd:3d:bb:ba:18:e2:6f:f8:7d:23:a0:57:1b:a5:2a:7c:3d: 3d:68:19:56:3a:3e:52:6c:7e:91:0a:74:ad:90:5d:fa:3c:84: 7a:e7:36:cd:05:29:07:53:54:6e:77:09:a8:7a:36:81:2c:b0: 73:92:a4:b3:2c:8b:38:3e:f5:16:3a:cf:a3:59:5f:b2:4e:10: 94:6e:0c:1c:b9:9c:90:2f:9d:87:9c:b7:6e:07:18:1f:70:69: 80:f6:a1:1b:37:c5:74:e8:e5:3e:df:f4:83:49:1d:8b:cf:1d: b0:2c:26:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEU3ODBGQTM3NzdCODFENENGNkEzNTQwNkVBNUNGNEJF NEY2NUU5RkEwHhcNMjUwNDA1MDQ0NDU4WhcNMjUwNDEyMDQ0NDU4WjAYMRYwFAYD VQQDEw02N2YwYjU0YS1hNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsTmh8u6EFGOPHdLvwlTlmsxfrdduZpAtBGDTD5TK+NjWlY3iZBBJVAQcgxP pzquW4ML/NhM9Cx7lWStqFMdW9TBHQERvtRApsPe8K9nSJwG0ZN3IUXtBUoDHsSV L7Oc4PRzRo5Xr4Gpiy95wj3Az6NccCE5gRantH/fRGCtsapg6XI5APUn6sR/R+Ps zTlt5u8YSNRC7VmYUb56PLuwHprRXIXjzWGuUNCzoAnL9pbNfhDNRq2RumSF1qLn gU26FTLWkAKeAUnbsUNmrckNklzseqhvKut97cgLw6DskpHU7cEIYM34aGzB8fQX /QoI/FI8om93vfFsdf5Rs+nYIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRaA7FO k6vfeVQXNSLbUj7Jv/26MB8GA1UdIwQYMBaAFOeA+jd3uB1M9qNUBupc9L5PZen6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9FNjQwMDFGNEI2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhVejJvMVFHNmx6MHZrOWw2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU0RDZOM2U0SFV6Mm8xUUc2bHowdms5bDZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9FNjQwMDFGNEI2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhV ejJvMVFHNmx6MHZrOWw2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCogDItzFx/GUbCG8n/OjWWwuGbrlMEIgvVyQ9tUmkNbTk+qX16oNqd YhaatAcUzt/5xmKddw7JLztZHw4Z/eKmFGp7mK66CAEs49UiopSBxvjr3Qcxhji3 TXPGsRZevylGbCIoAaD9lYXYBH9lvrck/E7f3/s98PciRMNkQ45dz5p3j2uP5aer P6ljHfUh0OqrvT27uhjib/h9I6BXG6UqfD09aBlWOj5SbH6RCnStkF36PIR65zbN BSkHU1RudwmoejaBLLBzkqSzLIs4PvUWOs+jWV+yThCUbgwcuZyQL52HnLduBxgf cGmA9qEbN8V06OU+3/SDSR2Lzx2wLCat -----END CERTIFICATE-----Generated at Sun Apr 6 13:02:22 2025 by rpki-client