$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft File: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft (raw, json) Hash identifier: q+4YWmvNSy4+TPxWnrPuTAziugCA2+7DV+9F/7P3rBM= Subject key identifier: 6B:A7:B4:08:AA:87:E7:CF:55:7E:70:D8:7E:48:B8:5B:42:B5:D3:52 Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D Certificate issuer: /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D Certificate serial: 1B8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft Manifest number: 1B80 Signing time: Mon 16 Jun 2025 16:20:30 +0000 Manifest this update: Mon 16 Jun 2025 16:20:30 +0000 Manifest next update: Mon 23 Jun 2025 16:20:30 +0000 Files and hashes: 1: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl (hash: GvzEI3lYoJZJXMwW2K+opPMKGEcbSjj3kYzCsyIXVaA=) 2: B6FD84CE54F611E79DF7E643C4F9AE02.roa (hash: YQFMKBF60xX3PieFKAIG2OCODzb9u3iqyawtkqXWSC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7052 (0x1b8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D Validity Not Before: Jun 16 16:20:30 2025 GMT Not After : Jun 23 16:20:30 2025 GMT Subject: CN=6850444e-4372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:1f:45:ae:25:ba:34:73:26:b3:80:7d:e9: 41:e2:de:02:99:4a:d4:86:a0:ca:a0:2f:7a:99:7b: 74:5e:f8:fe:27:37:92:38:29:6e:54:72:ba:78:ae: 84:ae:83:bd:03:e7:16:a0:26:47:b5:b4:3c:d1:82: 11:f7:93:cd:10:2b:39:02:99:88:10:61:ab:7e:1f: 42:04:8e:60:33:60:9e:f7:8a:23:68:51:22:6f:7f: a2:d9:f1:99:43:78:f1:36:20:de:3c:4c:a8:63:02: b2:e3:f4:a3:5f:5a:69:1f:27:33:06:7d:04:78:3c: 6c:96:3f:b5:33:2b:7d:30:73:67:8c:2f:85:c2:28: d3:33:d3:2e:d3:15:76:da:cc:9d:c3:e0:fa:ef:2e: fd:c1:22:1a:3c:c9:3b:3d:2e:9c:b7:2a:87:f8:91: 07:00:2f:62:cb:f1:75:f0:19:8d:88:1b:f1:d5:14: 01:72:98:cc:0b:ff:9c:8d:fb:94:07:ec:a2:79:a3: d4:a1:07:38:64:04:a5:9a:06:34:f7:b4:cc:ec:0b: 52:a7:62:9d:29:cb:e7:1c:a5:84:2e:c2:6c:d3:31: 89:df:6b:dc:c2:0b:3b:fc:cc:3b:7b:f8:4a:8a:be: 6c:0c:ca:19:89:a3:82:fd:62:11:b6:5f:1d:5e:67: d7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A7:B4:08:AA:87:E7:CF:55:7E:70:D8:7E:48:B8:5B:42:B5:D3:52 X509v3 Authority Key Identifier: keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e9:91:07:82:d2:86:cc:a3:27:79:4c:9e:78:b0:f5:b2:44: ca:f8:41:f9:1a:72:e5:ed:b6:68:0b:11:38:be:26:26:80:85: 60:77:ff:bf:1c:e2:bb:54:a5:ab:a9:4a:eb:e6:99:12:93:00: f2:75:ea:2d:f4:a9:e4:d9:70:d1:76:06:d1:0b:ca:35:eb:a3: 52:b3:26:9b:e3:11:73:db:7d:94:d0:f4:1c:a3:ec:66:ab:19: b5:66:71:91:6e:1c:88:2a:8b:21:c9:8a:d1:fd:48:56:53:20: 0d:89:07:57:7d:80:31:57:55:e0:bc:9d:80:fd:9f:76:b5:5f: 0b:1b:3a:33:07:91:35:25:eb:58:84:a0:41:03:d9:61:e8:c9: 23:57:68:6b:a8:fe:a0:24:8f:50:cc:27:13:11:d0:86:b8:26: 10:bd:ac:8b:53:98:af:4e:4b:1a:8c:29:0e:fa:3a:9a:f2:97: 2c:c4:de:36:8c:45:74:e6:9b:d9:2e:13:20:a4:74:f9:ca:70: c1:d6:a4:d3:68:d4:12:2d:88:f6:9a:74:65:db:e7:b9:3f:8f: 57:bc:a3:bc:a3:03:a8:7e:96:11:79:9e:f8:db:58:05:ac:3d: 87:d0:26:00:19:c2:19:e4:17:5e:ac:f7:ad:61:6a:d0:78:30: dc:06:a2:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwNjMxMTAvBgNVBAUTKEU3NTg0Rjk1OUEwODFBNEREOTQ4MDkzNTMwNTFEMjM1 OTM5QzM5MUQwHhcNMjUwNjE2MTYyMDMwWhcNMjUwNjIzMTYyMDMwWjAYMRYwFAYD VQQDEw02ODUwNDQ0ZS00MzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxUfRa4lujRzJrOAfelB4t4CmUrUhqDKoC96mXt0Xvj+JzeSOCluVHK6eK6E roO9A+cWoCZHtbQ80YIR95PNECs5ApmIEGGrfh9CBI5gM2Ce94ojaFEib3+i2fGZ Q3jxNiDePEyoYwKy4/SjX1ppHyczBn0EeDxslj+1Myt9MHNnjC+FwijTM9Mu0xV2 2sydw+D67y79wSIaPMk7PS6ctyqH+JEHAC9iy/F18BmNiBvx1RQBcpjMC/+cjfuU B+yieaPUoQc4ZASlmgY097TM7AtSp2KdKcvnHKWELsJs0zGJ32vcwgs7/Mw7e/hK ir5sDMoZiaOC/WIRtl8dXmfXwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuntAiq h+fPVX5w2H5IuFtCtdNSMB8GA1UdIwQYMBaAFOdYT5WaCBpN2UgJNTBR0jWTnDkd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA2My8xMTg2QjZCQzA5 M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdrM1pTQWsxTUZIU05aT2NP UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUxaFBsWm9JR2szWlNBazFNRkhTTlpPY09SMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjA2My8xMTg2QjZCQzA5M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdr M1pTQWsxTUZIU05aT2NPUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn6ZEHgtKGzKMneUyeeLD1skTK+EH5GnLl7bZoCxE4viYmgIVgd/+/ HOK7VKWrqUrr5pkSkwDydeot9Knk2XDRdgbRC8o166NSsyab4xFz232U0PQco+xm qxm1ZnGRbhyIKoshyYrR/UhWUyANiQdXfYAxV1XgvJ2A/Z92tV8LGzozB5E1JetY hKBBA9lh6MkjV2hrqP6gJI9QzCcTEdCGuCYQvayLU5ivTksajCkO+jqa8pcsxN42 jEV05pvZLhMgpHT5ynDB1qTTaNQSLYj2mnRl2+e5P49XvKO8owOofpYReZ7421gF rD2H0CYAGcIZ5BderPetYWrQeDDcBqLn -----END CERTIFICATE-----Generated at Wed Jun 18 01:34:09 2025 by rpki-client