$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft File: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft (raw, json) Hash identifier: uz8tLiyYY+YellLHtASGRUYGnoYUG0+CHJeg7ql/N2w= Subject key identifier: 47:11:9F:86:03:FD:EB:61:E8:66:12:5F:23:1D:4A:CF:1F:1E:B1:85 Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D Certificate issuer: /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D Certificate serial: 1B71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft Manifest number: 1B65 Signing time: Thu 24 Apr 2025 16:16:54 +0000 Manifest this update: Thu 24 Apr 2025 16:16:53 +0000 Manifest next update: Thu 01 May 2025 16:16:53 +0000 Files and hashes: 1: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl (hash: 2trg8nETnvAK6DFAuVReYtt0HCtWICPp3ESskbpwAec=) 2: B6FD84CE54F611E79DF7E643C4F9AE02.roa (hash: YQFMKBF60xX3PieFKAIG2OCODzb9u3iqyawtkqXWSC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7025 (0x1b71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D Validity Not Before: Apr 24 16:16:53 2025 GMT Not After : May 1 16:16:53 2025 GMT Subject: CN=680a63f6-a653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:6b:81:0c:bc:bf:1e:7b:d0:e0:83:c7:d8: 6f:08:bf:f7:67:0b:b1:84:69:a0:06:15:96:a3:a8: 64:a1:22:df:20:09:ce:bf:bf:8d:ce:e4:47:8a:d4: c5:9b:8d:e2:50:ef:7f:a1:06:0b:26:3d:d9:17:f1: 16:6c:0b:e7:5c:1d:6a:56:e3:7b:af:71:2c:5b:ed: 15:11:b3:28:df:ad:f2:9a:6b:54:7a:eb:ab:81:73: 0d:0e:37:7a:7a:03:fc:a0:72:59:04:9a:cc:99:9f: f1:97:36:5f:02:a1:3a:89:4b:5a:61:e5:f6:a5:62: e1:39:b2:38:22:31:37:06:ee:cd:de:90:18:bd:17: 96:eb:f9:d4:9c:3e:85:4b:70:a2:d8:b4:a7:49:9a: 01:87:f1:71:37:2a:dc:8b:eb:20:ab:7c:0e:ea:5e: e8:77:0d:3f:e3:d5:57:30:34:50:58:c5:c5:e2:6c: e3:86:1e:ed:b7:b9:29:99:6a:15:b8:58:35:65:e9: 3c:ef:b8:b1:cd:ce:1c:cd:2e:34:c2:2e:8a:39:68: e7:27:19:b7:d2:b8:30:f1:01:f6:ec:ef:93:30:43: 96:97:e7:b0:c4:25:46:fc:df:02:bf:12:39:58:1c: 4f:f4:84:63:07:2b:68:4a:40:87:81:47:f9:87:fa: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:11:9F:86:03:FD:EB:61:E8:66:12:5F:23:1D:4A:CF:1F:1E:B1:85 X509v3 Authority Key Identifier: keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a0:93:ae:91:ff:27:ba:7b:1e:70:f1:8b:32:14:bb:09:0d: f4:31:a4:62:11:91:a0:32:73:f6:72:27:43:3b:7a:1a:6f:2a: 99:81:dd:4f:57:97:a8:3d:08:07:3d:ab:cd:f3:b6:36:74:36: 20:9b:75:a7:d6:56:46:08:88:6f:b4:a8:be:6a:08:8c:f4:8b: d7:94:32:83:89:e8:6e:fa:6d:d9:87:7a:b1:aa:c7:f2:3d:d4: 88:5f:93:cb:5c:89:ba:53:2c:9e:05:41:0e:ac:11:be:92:08: 6d:52:7a:72:1f:95:84:77:27:1c:45:22:49:ee:03:28:f2:06: 46:f9:84:15:e4:c1:58:d2:e2:85:83:16:45:f8:fe:11:3f:ee: 15:28:51:b1:90:38:c1:12:fa:1f:eb:ef:5a:9b:c9:da:5e:39: 7f:48:a5:3f:2f:41:5b:85:d0:ac:d4:d1:1e:de:9a:85:9c:c7: c5:9f:29:c2:5a:ef:2d:16:96:23:3e:3d:6b:59:78:3f:00:76: 59:bc:1e:f1:20:5d:9d:9a:94:2f:96:91:25:0a:52:2f:c4:f5: 26:16:11:03:ec:ab:85:69:07:02:b6:97:dd:b2:4f:71:fb:a6: 6b:67:e1:b2:31:4a:2b:17:e5:8a:71:6b:6b:f9:69:1b:c9:14: 21:69:e7:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwNjMxMTAvBgNVBAUTKEU3NTg0Rjk1OUEwODFBNEREOTQ4MDkzNTMwNTFEMjM1 OTM5QzM5MUQwHhcNMjUwNDI0MTYxNjUzWhcNMjUwNTAxMTYxNjUzWjAYMRYwFAYD VQQDEw02ODBhNjNmNi1hNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4J9rgQy8vx570OCDx9hvCL/3ZwuxhGmgBhWWo6hkoSLfIAnOv7+NzuRHitTF m43iUO9/oQYLJj3ZF/EWbAvnXB1qVuN7r3EsW+0VEbMo363ymmtUeuurgXMNDjd6 egP8oHJZBJrMmZ/xlzZfAqE6iUtaYeX2pWLhObI4IjE3Bu7N3pAYvReW6/nUnD6F S3Ci2LSnSZoBh/FxNyrci+sgq3wO6l7odw0/49VXMDRQWMXF4mzjhh7tt7kpmWoV uFg1Zek877ixzc4czS40wi6KOWjnJxm30rgw8QH27O+TMEOWl+ewxCVG/N8CvxI5 WBxP9IRjBytoSkCHgUf5h/pmwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcRn4YD /eth6GYSXyMdSs8fHrGFMB8GA1UdIwQYMBaAFOdYT5WaCBpN2UgJNTBR0jWTnDkd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA2My8xMTg2QjZCQzA5 M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdrM1pTQWsxTUZIU05aT2NP UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUxaFBsWm9JR2szWlNBazFNRkhTTlpPY09SMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjA2My8xMTg2QjZCQzA5M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdr M1pTQWsxTUZIU05aT2NPUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPoJOukf8nunsecPGLMhS7CQ30MaRiEZGgMnP2cidDO3oabyqZgd1P V5eoPQgHPavN87Y2dDYgm3Wn1lZGCIhvtKi+agiM9IvXlDKDiehu+m3Zh3qxqsfy PdSIX5PLXIm6UyyeBUEOrBG+kghtUnpyH5WEdyccRSJJ7gMo8gZG+YQV5MFY0uKF gxZF+P4RP+4VKFGxkDjBEvof6+9am8naXjl/SKU/L0FbhdCs1NEe3pqFnMfFnynC Wu8tFpYjPj1rWXg/AHZZvB7xIF2dmpQvlpElClIvxPUmFhED7KuFaQcCtpfdsk9x +6ZrZ+GyMUorF+WKcWtr+WkbyRQhaecs -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:07 2025 by rpki-client