$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json) Hash identifier: WHsElt0IM5UwWtb7OWvRt4Bq+e92bn5ekhLWZFpXe2M= Subject key identifier: 87:6B:8E:6D:43:96:22:8D:AC:84:10:D0:BE:BB:48:2C:2C:D7:32:06 Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft Manifest number: 013B Signing time: Wed 17 Sep 2025 05:03:28 +0000 Manifest this update: Wed 17 Sep 2025 05:03:27 +0000 Manifest next update: Wed 24 Sep 2025 05:03:27 +0000 Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: o6yIw9gTYl4JkcRubGHdYFVNVyto0gN50iee+gdxHfw=) 2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: KaLq/qLC36FBeVUH4PJULMTUIMWcwgut4EvM5q8D+vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Validity Not Before: Sep 17 05:03:27 2025 GMT Not After : Sep 24 05:03:27 2025 GMT Subject: CN=68ca4120-14fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6e:2e:ce:7f:e0:33:41:c3:23:1a:4b:79:12: ca:7d:50:c2:0f:c3:88:7c:74:f8:6a:85:e6:a6:a3: 5e:2e:e2:a5:d1:08:da:f1:7c:db:4d:e8:cb:5b:ba: 29:e9:e9:68:ff:23:eb:4f:7b:8c:8d:87:d3:45:6b: 22:06:2a:3d:23:92:73:ed:73:3a:f1:af:4d:0c:fd: aa:a3:c2:7f:05:4c:95:18:d6:e4:20:e8:ba:52:93: af:ed:3b:bd:94:4c:af:ad:09:0d:85:0c:f1:03:10: 4e:a2:e8:88:c8:70:40:09:d5:81:82:51:67:e7:f6: 46:75:cf:e7:2c:77:8d:a4:3b:b2:c7:eb:13:26:2e: 03:04:df:f9:54:76:4a:b7:8a:91:cc:bb:c9:8c:c4: c0:ed:a4:de:d5:aa:26:4c:2c:af:34:92:71:c1:e0: a6:e5:fc:02:35:c3:20:c5:6f:8b:3b:2d:ab:81:0b: 5a:9c:00:ee:41:9b:70:c5:d1:b7:d9:af:be:13:1c: b6:2b:13:93:ce:ce:9f:a0:6b:78:aa:71:91:f3:3e: 84:33:f0:d0:99:f5:d4:dc:cf:35:f9:48:ec:83:f8: 46:a7:84:51:37:5c:f7:24:33:7c:02:ed:f7:9a:d3: d6:f4:f8:45:7e:fd:7e:00:13:69:49:47:59:1f:fe: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6B:8E:6D:43:96:22:8D:AC:84:10:D0:BE:BB:48:2C:2C:D7:32:06 X509v3 Authority Key Identifier: keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:84:e7:90:36:4b:64:c0:35:e0:e3:fc:30:e7:eb:34:95:15: 37:03:c3:22:a5:96:66:2a:c5:68:28:ae:06:23:b2:e8:d5:35: 57:80:91:e1:37:c3:91:61:7c:0e:70:21:3a:6b:6e:40:a3:df: 4b:d7:cb:fe:f9:8c:87:4a:e9:04:1b:79:84:0b:c0:70:e2:9f: b1:05:51:ab:7e:9f:fb:db:6c:f8:73:53:ab:d3:d9:d8:3f:b3: 3a:6b:46:60:1a:aa:7f:0b:60:6c:41:e9:23:34:51:c2:bd:9c: 49:d1:c1:31:0b:25:67:5b:02:8a:ca:f0:1a:76:81:66:7f:0d: 0a:98:5d:0b:06:1a:87:6c:16:f0:84:1b:aa:d2:05:75:13:0b: 87:43:9c:50:5c:94:41:24:6a:37:d1:10:d2:be:37:14:01:67: 8a:ee:8d:f6:25:6d:5a:d9:d0:47:09:a1:6b:67:9a:31:c8:c7: 6b:8e:15:eb:6f:32:5f:e9:aa:6c:13:ba:6b:54:9e:99:24:6a: 99:1d:6d:4c:21:76:4a:18:6d:17:09:aa:03:64:d5:c7:56:47: 11:69:0f:cf:db:4d:29:fe:33:b9:e2:f1:23:cf:29:b6:4b:80: 9d:dd:c3:4b:0a:ac:8b:98:39:e2:f4:6d:09:d2:70:d4:cd:73: e6:66:aa:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEU3ODBGQTM3NzdCODFENENGNkEzNTQwNkVBNUNGNEJF NEY2NUU5RkEwHhcNMjUwOTE3MDUwMzI3WhcNMjUwOTI0MDUwMzI3WjAYMRYwFAYD VQQDEw02OGNhNDEyMC0xNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsW4uzn/gM0HDIxpLeRLKfVDCD8OIfHT4aoXmpqNeLuKl0Qja8XzbTejLW7op 6elo/yPrT3uMjYfTRWsiBio9I5Jz7XM68a9NDP2qo8J/BUyVGNbkIOi6UpOv7Tu9 lEyvrQkNhQzxAxBOouiIyHBACdWBglFn5/ZGdc/nLHeNpDuyx+sTJi4DBN/5VHZK t4qRzLvJjMTA7aTe1aomTCyvNJJxweCm5fwCNcMgxW+LOy2rgQtanADuQZtwxdG3 2a++Exy2KxOTzs6foGt4qnGR8z6EM/DQmfXU3M81+Ujsg/hGp4RRN1z3JDN8Au33 mtPW9PhFfv1+ABNpSUdZH/4qywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdrjm1D liKNrIQQ0L67SCws1zIGMB8GA1UdIwQYMBaAFOeA+jd3uB1M9qNUBupc9L5PZen6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9FNjQwMDFGNEI2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhVejJvMVFHNmx6MHZrOWw2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU0RDZOM2U0SFV6Mm8xUUc2bHowdms5bDZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9FNjQwMDFGNEI2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhV ejJvMVFHNmx6MHZrOWw2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJhOeQNktkwDXg4/ww5+s0lRU3A8MipZZmKsVoKK4GI7Lo1TVXgJHh N8ORYXwOcCE6a25Ao99L18v++YyHSukEG3mEC8Bw4p+xBVGrfp/722z4c1Or09nY P7M6a0ZgGqp/C2BsQekjNFHCvZxJ0cExCyVnWwKKyvAadoFmfw0KmF0LBhqHbBbw hBuq0gV1EwuHQ5xQXJRBJGo30RDSvjcUAWeK7o32JW1a2dBHCaFrZ5oxyMdrjhXr bzJf6apsE7prVJ6ZJGqZHW1MIXZKGG0XCaoDZNXHVkcRaQ/P200p/jO54vEjzym2 S4Cd3cNLCqyLmDni9G0J0nDUzXPmZqoA -----END CERTIFICATE-----Generated at Thu Sep 18 21:55:18 2025 by rpki-client