$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft File: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft (raw, json) Hash identifier: h0Br5SjqcKbyyHAYHXDZ9I21utADoD6O9e0EbAd4uV4= Subject key identifier: 79:0C:88:3A:56:56:E5:98:6D:A7:DF:15:05:BF:4C:E4:70:12:E1:A1 Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D Certificate issuer: /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D Certificate serial: 1B83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft Manifest number: 1B77 Signing time: Fri 30 May 2025 16:26:43 +0000 Manifest this update: Fri 30 May 2025 16:26:42 +0000 Manifest next update: Fri 06 Jun 2025 16:26:42 +0000 Files and hashes: 1: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl (hash: n3F7+TkvEeZMlMic8SUMjAFmxyuzH2j4n4ZHludre0A=) 2: B6FD84CE54F611E79DF7E643C4F9AE02.roa (hash: YQFMKBF60xX3PieFKAIG2OCODzb9u3iqyawtkqXWSC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7043 (0x1b83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D Validity Not Before: May 30 16:26:42 2025 GMT Not After : Jun 6 16:26:42 2025 GMT Subject: CN=6839dc42-6ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:3a:b0:5a:da:e2:02:4d:c8:14:c9:20:1a: 23:b9:93:4d:b5:97:46:4f:ce:6e:69:7e:d5:d9:c8: da:65:7f:d8:20:d7:86:1d:43:65:76:43:9a:df:77: 27:9d:bc:21:65:07:ce:9f:ee:03:84:80:a1:eb:1b: a1:84:cb:00:c9:71:2c:55:cc:60:03:a0:a0:97:d9: a4:8c:bb:c0:9b:68:33:a7:1b:3d:12:28:0b:c5:23: cb:8b:3d:01:ef:6a:34:27:e3:8e:2a:53:eb:0b:5a: 9a:15:f1:3b:c4:37:bc:2c:71:b7:4c:6c:42:65:35: 94:8c:c4:86:2a:30:60:64:70:e3:d9:be:e9:86:50: 63:eb:60:1d:40:46:7b:fd:fe:65:02:8b:44:36:64: 2c:92:54:7b:20:74:cf:ac:4e:19:29:c5:d3:2c:8e: 3f:7f:42:c9:e3:80:70:fd:8e:53:39:f8:06:24:03: e9:4e:8a:01:bc:63:90:6c:73:bf:de:2c:24:8b:80: 8f:04:db:b7:85:ef:a8:e1:41:52:ef:db:6b:01:08: 42:be:b8:98:68:3e:c0:d1:83:6f:33:19:5d:38:89: 4c:df:3f:61:e1:65:69:45:cf:a8:ae:f7:7d:a8:2e: fa:de:9d:c2:18:92:f2:06:4d:d4:c3:68:a0:df:90: b3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0C:88:3A:56:56:E5:98:6D:A7:DF:15:05:BF:4C:E4:70:12:E1:A1 X509v3 Authority Key Identifier: keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:7d:d4:4b:bd:6d:50:d4:10:c3:68:81:b9:e0:a2:53:9d:0e: 28:b9:2a:82:24:12:a2:1d:6b:99:d3:e2:d4:0d:ae:4f:0b:4d: dc:5e:80:a0:fe:70:22:56:c8:1d:22:63:a9:72:f4:8a:be:ec: 8f:a7:53:63:21:5a:5e:dc:69:d8:95:2e:63:54:fd:28:b0:7a: 56:79:d5:f0:1e:dc:1d:c4:0b:a7:0f:18:a9:67:ba:35:15:df: e4:4a:ee:fd:84:a8:b9:6e:17:ee:cc:f0:32:ff:0f:99:11:b5: b4:e4:e3:9b:cf:38:79:a4:3f:9a:e8:c7:da:81:86:dd:55:a2: 17:70:6b:5f:a5:03:17:5c:bf:0c:e1:09:e1:37:7c:7c:4c:39: 90:3a:ae:77:7b:20:46:75:2f:4e:98:ba:40:36:78:93:5f:50: 3a:62:00:ff:e2:ab:fb:01:a5:f3:08:5c:b6:6a:4f:05:f6:01: e5:02:69:42:ba:b9:e4:1d:25:14:99:e5:de:93:5f:0a:64:7f: df:48:78:29:a7:bf:28:34:a1:40:24:f2:8b:dd:62:7f:67:82: f5:1e:4a:31:db:25:34:11:f5:8b:ab:5f:3a:cf:26:b0:0b:cc: 00:7f:ae:01:38:0f:96:5a:d2:e7:60:5f:75:39:0a:aa:92:c6: 40:2c:81:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwNjMxMTAvBgNVBAUTKEU3NTg0Rjk1OUEwODFBNEREOTQ4MDkzNTMwNTFEMjM1 OTM5QzM5MUQwHhcNMjUwNTMwMTYyNjQyWhcNMjUwNjA2MTYyNjQyWjAYMRYwFAYD VQQDEw02ODM5ZGM0Mi02YmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndM6sFra4gJNyBTJIBojuZNNtZdGT85uaX7V2cjaZX/YINeGHUNldkOa33cn nbwhZQfOn+4DhICh6xuhhMsAyXEsVcxgA6Cgl9mkjLvAm2gzpxs9EigLxSPLiz0B 72o0J+OOKlPrC1qaFfE7xDe8LHG3TGxCZTWUjMSGKjBgZHDj2b7phlBj62AdQEZ7 /f5lAotENmQsklR7IHTPrE4ZKcXTLI4/f0LJ44Bw/Y5TOfgGJAPpTooBvGOQbHO/ 3iwki4CPBNu3he+o4UFS79trAQhCvriYaD7A0YNvMxldOIlM3z9h4WVpRc+orvd9 qC763p3CGJLyBk3Uw2ig35CzzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkMiDpW VuWYbaffFQW/TORwEuGhMB8GA1UdIwQYMBaAFOdYT5WaCBpN2UgJNTBR0jWTnDkd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA2My8xMTg2QjZCQzA5 M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdrM1pTQWsxTUZIU05aT2NP UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUxaFBsWm9JR2szWlNBazFNRkhTTlpPY09SMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjA2My8xMTg2QjZCQzA5M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdr M1pTQWsxTUZIU05aT2NPUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJfdRLvW1Q1BDDaIG54KJTnQ4ouSqCJBKiHWuZ0+LUDa5PC03cXoCg /nAiVsgdImOpcvSKvuyPp1NjIVpe3GnYlS5jVP0osHpWedXwHtwdxAunDxipZ7o1 Fd/kSu79hKi5bhfuzPAy/w+ZEbW05OObzzh5pD+a6MfagYbdVaIXcGtfpQMXXL8M 4QnhN3x8TDmQOq53eyBGdS9OmLpANniTX1A6YgD/4qv7AaXzCFy2ak8F9gHlAmlC urnkHSUUmeXek18KZH/fSHgpp78oNKFAJPKL3WJ/Z4L1Hkox2yU0EfWLq186zyaw C8wAf64BOA+WWtLnYF91OQqqksZALIHJ -----END CERTIFICATE-----Generated at Sat May 31 16:44:56 2025 by rpki-client