$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft File: 51IOJIn_YDiw2HmwRxcPnFGs984.mft (raw, json) Hash identifier: tHlaSBvuqTLQg6LFtsE2+IotuhdNOTViG3fE5KqYo58= Subject key identifier: DD:C9:80:DF:78:5A:73:D6:50:51:75:FA:B3:12:E2:D4:6F:F2:C7:09 Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE Certificate issuer: /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft Manifest number: 0217 Signing time: Tue 09 Sep 2025 02:13:45 +0000 Manifest this update: Tue 09 Sep 2025 02:13:45 +0000 Manifest next update: Tue 16 Sep 2025 02:13:45 +0000 Files and hashes: 1: 51IOJIn_YDiw2HmwRxcPnFGs984.crl (hash: CohCq42PT3g/VpRzWfRWE9yU54EpavfGrJMYERabeUI=) 2: 27C38AF4C0C111EE84A55128C4F9AE02.roa (hash: wIZlMBid+1P+5GWXEfhaHDavI2pP5RgKD6YPhcbCvPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912127A, serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE Validity Not Before: Sep 9 02:13:45 2025 GMT Not After : Sep 16 02:13:45 2025 GMT Subject: CN=68bf8d59-976e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:13:17:7b:22:1d:ab:ba:6a:77:8b:9e:b7: 62:e1:88:a3:8a:58:ec:ed:2c:1c:77:c3:3c:af:9e: ab:85:40:59:05:d7:6b:71:b0:a2:59:cf:c6:b1:6b: 0c:2d:f4:5c:2a:04:f3:e2:ee:52:7d:d7:ac:a5:52: 30:04:f7:df:89:52:8f:f1:a0:18:93:39:12:ab:ad: be:c9:92:5d:f3:32:9e:26:0b:a3:18:0c:50:ae:a0: 37:40:1d:68:58:75:20:63:d1:30:63:cd:4c:36:1f: bb:f7:ae:6a:a0:b3:d4:81:d2:92:a8:37:dd:5c:6c: 6b:35:15:68:ab:00:18:76:5c:dd:40:e8:fa:e3:34: 66:2a:e1:4a:d3:fa:30:18:59:09:61:f7:44:7e:93: 48:92:37:0d:1c:78:8d:bd:71:13:74:8c:75:e8:4c: e5:57:34:69:92:aa:cc:51:2c:18:8d:96:57:8f:68: 87:09:d9:30:7e:55:b9:56:7a:fc:c6:48:c5:48:b4: ed:86:b3:68:5b:d2:1f:82:c1:70:5d:1c:c2:82:fb: 2d:b4:5c:c4:3f:50:09:d2:b6:31:e3:52:d1:bd:7e: 9f:e7:9c:53:05:c5:9f:be:da:17:25:5f:1a:75:6f: 9d:c4:bf:a0:25:5b:3b:61:54:8e:d1:07:a9:14:e7: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C9:80:DF:78:5A:73:D6:50:51:75:FA:B3:12:E2:D4:6F:F2:C7:09 X509v3 Authority Key Identifier: keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a8:c2:8f:70:07:48:77:7b:fe:ec:f8:ea:d6:3a:f9:06:c6: 10:ca:aa:8f:f7:10:d7:56:91:ce:18:1f:c1:1c:84:77:ef:fa: 31:45:18:7b:a3:92:5e:f2:f0:e0:84:2b:11:07:cb:55:35:44: 6b:87:66:12:0f:d1:f4:ad:97:6d:71:0b:52:4a:3f:2c:a4:a9: 89:0b:39:2a:e0:e6:8d:55:c8:ce:9f:d1:36:bf:6a:74:3d:b8: 79:a8:42:c7:92:2b:98:ac:7b:49:08:e8:9c:70:0f:8a:9a:fa: 54:17:d0:f3:48:3d:66:43:26:04:b4:04:e3:c4:d1:b7:1f:09: 0c:fd:11:84:ab:9e:bd:84:84:75:2d:56:16:2b:93:bb:ac:76: 18:af:76:42:76:d4:40:bf:fa:6b:c2:03:ff:86:3d:ac:1e:e6: 1a:94:19:0a:46:62:ab:3c:8e:13:48:1f:51:7b:f0:09:44:9c: 02:c4:da:15:32:c9:c3:64:4c:19:2c:5e:e0:9a:c8:29:df:5c: 78:ad:97:0b:59:b5:5f:94:79:a5:d0:cb:bd:fe:25:ab:79:db: ab:23:29:7b:2b:68:0a:d4:2d:b1:32:46:a7:68:7e:47:19:fe: ad:99:4d:e6:50:ef:00:f6:7d:e9:d6:47:58:6f:df:9f:58:31: b9:f7:07:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEyN0ExMTAvBgNVBAUTKEU3NTIwRTI0ODlGRjYwMzhCMEQ4NzlCMDQ3MTcwRjlD NTFBQ0Y3Q0UwHhcNMjUwOTA5MDIxMzQ1WhcNMjUwOTE2MDIxMzQ1WjAYMRYwFAYD VQQDEw02OGJmOGQ1OS05NzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWcTF3siHau6aneLnrdi4Yijiljs7Swcd8M8r56rhUBZBddrcbCiWc/GsWsM LfRcKgTz4u5SfdespVIwBPffiVKP8aAYkzkSq62+yZJd8zKeJgujGAxQrqA3QB1o WHUgY9EwY81MNh+7965qoLPUgdKSqDfdXGxrNRVoqwAYdlzdQOj64zRmKuFK0/ow GFkJYfdEfpNIkjcNHHiNvXETdIx16EzlVzRpkqrMUSwYjZZXj2iHCdkwflW5Vnr8 xkjFSLTthrNoW9IfgsFwXRzCgvsttFzEP1AJ0rYx41LRvX6f55xTBcWfvtoXJV8a dW+dxL+gJVs7YVSO0QepFOd1YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3JgN94 WnPWUFF1+rMS4tRv8scJMB8GA1UdIwQYMBaAFOdSDiSJ/2A4sNh5sEcXD5xRrPfO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTI3QS85RUIwMDlCNjY2 RTExMUVEODU1MjQ3MUJDNEY5QUUwMi81MUlPSkluX1lEaXcySG13UnhjUG5GR3M5 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUxSU9KSW5fWURpdzJIbXdSeGNQbkZHczk4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTI3QS85RUIwMDlCNjY2RTExMUVEODU1MjQ3MUJDNEY5QUUwMi81MUlPSkluX1lE aXcySG13UnhjUG5GR3M5ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkqMKPcAdId3v+7Pjq1jr5BsYQyqqP9xDXVpHOGB/BHIR37/oxRRh7 o5Je8vDghCsRB8tVNURrh2YSD9H0rZdtcQtSSj8spKmJCzkq4OaNVcjOn9E2v2p0 Pbh5qELHkiuYrHtJCOiccA+KmvpUF9DzSD1mQyYEtATjxNG3HwkM/RGEq569hIR1 LVYWK5O7rHYYr3ZCdtRAv/prwgP/hj2sHuYalBkKRmKrPI4TSB9Re/AJRJwCxNoV MsnDZEwZLF7gmsgp31x4rZcLWbVflHml0Mu9/iWredurIyl7K2gK1C2xMkanaH5H Gf6tmU3mUO8A9n3p1kdYb9+fWDG59wdt -----END CERTIFICATE-----Generated at Tue Sep 9 18:26:31 2025 by rpki-client