$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json) Hash identifier: fwcgW4ndIP6hHEYLIebx9cJMHBzXIktTHMy9kIpvmVk= Subject key identifier: E5:DA:23:21:F1:45:4C:E8:6A:53:D6:12:00:02:A7:90:72:17:0C:3E Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft Manifest number: 0103 Signing time: Sat 31 May 2025 04:44:12 +0000 Manifest this update: Sat 31 May 2025 04:44:11 +0000 Manifest next update: Sat 07 Jun 2025 04:44:11 +0000 Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: z/sWpJlOIU25mzJ1LLnNZZame7LaDKcn/uTB8F9Dqr4=) 2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: KaLq/qLC36FBeVUH4PJULMTUIMWcwgut4EvM5q8D+vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Validity Not Before: May 31 04:44:11 2025 GMT Not After : Jun 7 04:44:11 2025 GMT Subject: CN=683a891c-0bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8b:2b:36:87:cb:df:07:f9:42:f6:3b:61:3b: 68:ab:0b:58:be:51:54:b3:b5:f6:f1:96:26:31:91: 2d:74:35:f8:ea:6c:14:15:d0:0e:a5:42:30:49:0e: fc:8f:fe:55:99:74:71:8f:74:2a:68:65:47:40:3e: 18:81:f8:8b:09:97:ff:ec:f4:cb:88:f7:de:e2:4f: 7e:f5:e4:9d:5c:32:7f:bd:29:4c:13:39:cb:8b:66: 8d:ed:2d:18:18:6f:a5:26:92:9c:00:b2:7d:9c:06: 52:2b:b0:f4:2d:c8:e3:ba:eb:1b:74:11:31:fd:f7: e6:dc:9e:64:66:fd:a8:13:82:a8:86:1e:e8:bd:1d: 21:34:dc:a1:a1:08:77:51:41:fd:c8:fb:a3:aa:d7: 25:b8:21:6d:7d:4f:67:be:69:2c:f2:c6:5d:bf:66: 73:d3:30:2b:df:da:91:fd:5e:81:c8:f6:96:2f:12: 26:65:2c:23:26:33:87:63:e5:f5:46:21:b1:fd:52: 57:1c:71:19:a5:d7:93:b2:77:49:47:1c:9d:af:1d: 12:8c:b7:fa:37:b7:99:15:8b:97:c7:96:00:40:b4: b3:3f:23:84:ba:c8:fa:fe:5f:ab:90:ad:6c:dc:22: 00:94:8d:f6:96:a2:ea:a5:92:53:a0:3b:1f:9d:ac: e6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DA:23:21:F1:45:4C:E8:6A:53:D6:12:00:02:A7:90:72:17:0C:3E X509v3 Authority Key Identifier: keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:0c:0e:be:e9:1d:aa:06:54:ad:35:8f:0e:f6:e7:84:40:f0: b2:8f:51:58:12:cd:13:64:d4:37:62:2e:47:1d:a0:dd:8f:cb: 19:1d:15:fe:bd:f3:7c:2c:3f:05:bc:c9:d8:99:db:df:34:05: 2d:a6:1e:3b:dc:9f:ca:cb:18:a3:7a:69:f9:ae:4e:21:e5:a4: a6:10:18:3e:2c:5c:80:de:39:05:df:0e:c0:aa:cf:83:2b:1a: 5f:41:f7:76:28:3a:84:bc:b3:49:3c:aa:fb:d7:29:a6:3b:d2: 53:a0:aa:86:86:12:1e:1e:2c:36:81:9b:95:e8:4f:54:71:cc: 34:5f:26:1d:aa:7a:38:11:77:21:51:ca:57:0e:a2:f9:b6:e4: 10:ec:ce:6a:07:3b:c0:06:23:91:ab:b4:5b:24:29:bc:f3:d9: e8:cd:cd:3d:c0:df:da:18:4d:67:91:b0:f1:67:f9:cd:c8:a4: d7:d4:97:ce:59:06:84:84:74:c8:fb:4d:39:0b:65:6d:25:55: 82:3c:79:e9:1a:81:ae:a2:32:dc:6e:a2:3f:29:77:6d:8b:e1: 1c:37:8e:93:40:a3:0a:9e:08:cc:83:bf:a9:96:64:1b:6e:04: fb:25:4a:90:e5:39:7d:81:24:4f:c3:a8:0c:0b:6a:d5:8c:d8: 65:65:9f:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEU3ODBGQTM3NzdCODFENENGNkEzNTQwNkVBNUNGNEJF NEY2NUU5RkEwHhcNMjUwNTMxMDQ0NDExWhcNMjUwNjA3MDQ0NDExWjAYMRYwFAYD VQQDEw02ODNhODkxYy0wYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8osrNofL3wf5QvY7YTtoqwtYvlFUs7X28ZYmMZEtdDX46mwUFdAOpUIwSQ78 j/5VmXRxj3QqaGVHQD4YgfiLCZf/7PTLiPfe4k9+9eSdXDJ/vSlMEznLi2aN7S0Y GG+lJpKcALJ9nAZSK7D0LcjjuusbdBEx/ffm3J5kZv2oE4Kohh7ovR0hNNyhoQh3 UUH9yPujqtcluCFtfU9nvmks8sZdv2Zz0zAr39qR/V6ByPaWLxImZSwjJjOHY+X1 RiGx/VJXHHEZpdeTsndJRxydrx0SjLf6N7eZFYuXx5YAQLSzPyOEusj6/l+rkK1s 3CIAlI32lqLqpZJToDsfnazmpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXaIyHx RUzoalPWEgACp5ByFww+MB8GA1UdIwQYMBaAFOeA+jd3uB1M9qNUBupc9L5PZen6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9FNjQwMDFGNEI2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhVejJvMVFHNmx6MHZrOWw2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU0RDZOM2U0SFV6Mm8xUUc2bHowdms5bDZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9FNjQwMDFGNEI2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhV ejJvMVFHNmx6MHZrOWw2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGDA6+6R2qBlStNY8O9ueEQPCyj1FYEs0TZNQ3Yi5HHaDdj8sZHRX+ vfN8LD8FvMnYmdvfNAUtph473J/Kyxijemn5rk4h5aSmEBg+LFyA3jkF3w7Aqs+D KxpfQfd2KDqEvLNJPKr71ymmO9JToKqGhhIeHiw2gZuV6E9Uccw0XyYdqno4EXch UcpXDqL5tuQQ7M5qBzvABiORq7RbJCm889nozc09wN/aGE1nkbDxZ/nNyKTX1JfO WQaEhHTI+005C2VtJVWCPHnpGoGuojLcbqI/KXdti+EcN46TQKMKngjMg7+plmQb bgT7JUqQ5Tl9gSRPw6gMC2rVjNhlZZ/y -----END CERTIFICATE-----Generated at Sat May 31 17:11:22 2025 by rpki-client