$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft File: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft (raw, json) Hash identifier: LjAEojxCyz2Qj7/HuywTXcjp7AYnTAGXrpOTl7RkPsI= Subject key identifier: C5:6E:03:C5:1F:31:48:7A:9B:7B:1D:1F:95:EE:73:47:6E:61:86:6C Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D Certificate issuer: /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D Certificate serial: 1BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft Manifest number: 1BA3 Signing time: Sun 24 Aug 2025 16:14:07 +0000 Manifest this update: Sun 24 Aug 2025 16:14:06 +0000 Manifest next update: Sun 31 Aug 2025 16:14:06 +0000 Files and hashes: 1: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl (hash: Qf9m630Wgt2TwPw+p4qic11Qvwj5d154dBKSyNt7mLE=) 2: B6FD84CE54F611E79DF7E643C4F9AE02.roa (hash: YQFMKBF60xX3PieFKAIG2OCODzb9u3iqyawtkqXWSC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7087 (0x1baf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D Validity Not Before: Aug 24 16:14:06 2025 GMT Not After : Aug 31 16:14:06 2025 GMT Subject: CN=68ab3a4f-ee71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:b3:55:a7:cf:85:a6:7d:63:9f:c4:80:2e: 13:8a:b6:9f:dc:84:c9:f5:0d:38:3b:be:c7:93:64: 67:4a:46:76:b0:5b:ec:4b:4b:ad:1e:ad:35:c3:9b: 44:29:e3:cc:5b:2e:d8:45:a5:8e:ea:27:38:20:b1: 9c:c2:7d:01:7a:ff:83:53:bb:9a:f7:0a:4a:fc:3e: 88:22:be:29:5a:f8:e1:88:f1:30:0f:1d:35:21:93: b4:47:5e:fe:81:93:41:31:ca:cd:43:08:f1:43:fd: 5b:62:44:5d:a7:e9:bc:ac:22:f3:66:0c:6e:46:d8: d3:16:b2:8d:bb:68:25:c0:dd:65:65:bd:f4:1f:9e: 7d:87:60:f7:53:25:00:6f:e9:8b:c7:42:a8:39:73: 1e:59:2c:4c:1f:50:3b:75:66:b8:e5:a1:ee:e7:47: 56:68:35:6a:11:a7:ca:93:6a:1b:5a:2f:5b:d7:8c: 64:84:c2:d2:e0:6a:7e:32:0d:85:41:cf:75:07:5c: 4f:62:bc:2e:fa:e2:f1:51:57:5e:70:fb:f7:50:1c: 55:75:ce:ff:f4:fc:1d:f8:62:32:e2:64:fe:3a:2a: 55:55:ff:e0:d3:c9:a4:4e:d7:03:f3:60:26:59:21: 5b:2f:bf:de:f0:4b:f1:25:3d:d8:a0:4c:eb:1f:7f: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6E:03:C5:1F:31:48:7A:9B:7B:1D:1F:95:EE:73:47:6E:61:86:6C X509v3 Authority Key Identifier: keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b4:cc:b3:8a:e4:e4:1f:84:9a:3f:6f:a7:fd:35:dc:89:19: c1:00:8b:01:41:f3:03:b4:43:27:41:20:49:c4:50:83:59:39: c4:2e:09:47:c7:62:f2:94:43:c8:33:15:23:4e:ba:f8:69:f9: a3:b7:be:3a:cc:5c:17:a2:82:69:d4:a9:d9:8f:ed:80:bf:c0: f0:91:6c:29:84:4e:48:b9:66:bd:a0:fe:5d:63:7e:dd:8d:9c: 76:8d:11:82:69:2f:9e:43:12:95:9d:d7:f8:73:bf:01:02:76: ec:ea:c6:4f:0c:7f:4d:21:c9:ab:39:03:1d:7a:e3:c1:33:99: bb:00:31:5e:ac:75:5e:0c:5e:38:8e:a7:70:a8:bc:e5:48:0c: 72:05:89:d9:b4:d9:ce:01:37:56:88:6b:49:3c:c0:0d:01:b9: 8b:3c:ff:b8:27:24:80:44:f8:7d:07:03:ae:31:81:86:b1:f9: e3:48:fe:d5:a8:c1:f4:88:b5:84:44:23:56:11:ce:57:c5:24: 94:5f:8b:45:df:cd:c5:8c:8b:ab:83:33:85:99:86:15:8d:73: 4e:60:36:ac:e7:c7:3e:c9:d3:c1:8f:b6:a0:0b:40:56:eb:d2: e9:a1:3e:66:0c:20:90:b7:71:57:0d:30:ea:1a:6d:1e:4d:7d: e7:f1:69:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwNjMxMTAvBgNVBAUTKEU3NTg0Rjk1OUEwODFBNEREOTQ4MDkzNTMwNTFEMjM1 OTM5QzM5MUQwHhcNMjUwODI0MTYxNDA2WhcNMjUwODMxMTYxNDA2WjAYMRYwFAYD VQQDEw02OGFiM2E0Zi1lZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsx+zVafPhaZ9Y5/EgC4Tiraf3ITJ9Q04O77Hk2RnSkZ2sFvsS0utHq01w5tE KePMWy7YRaWO6ic4ILGcwn0Bev+DU7ua9wpK/D6IIr4pWvjhiPEwDx01IZO0R17+ gZNBMcrNQwjxQ/1bYkRdp+m8rCLzZgxuRtjTFrKNu2glwN1lZb30H559h2D3UyUA b+mLx0KoOXMeWSxMH1A7dWa45aHu50dWaDVqEafKk2obWi9b14xkhMLS4Gp+Mg2F Qc91B1xPYrwu+uLxUVdecPv3UBxVdc7/9Pwd+GIy4mT+OipVVf/g08mkTtcD82Am WSFbL7/e8EvxJT3YoEzrH39E9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVuA8Uf MUh6m3sdH5Xuc0duYYZsMB8GA1UdIwQYMBaAFOdYT5WaCBpN2UgJNTBR0jWTnDkd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA2My8xMTg2QjZCQzA5 M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdrM1pTQWsxTUZIU05aT2NP UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUxaFBsWm9JR2szWlNBazFNRkhTTlpPY09SMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjA2My8xMTg2QjZCQzA5M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdr M1pTQWsxTUZIU05aT2NPUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCetMyziuTkH4SaP2+n/TXciRnBAIsBQfMDtEMnQSBJxFCDWTnELglH x2LylEPIMxUjTrr4afmjt746zFwXooJp1KnZj+2Av8DwkWwphE5IuWa9oP5dY37d jZx2jRGCaS+eQxKVndf4c78BAnbs6sZPDH9NIcmrOQMdeuPBM5m7ADFerHVeDF44 jqdwqLzlSAxyBYnZtNnOATdWiGtJPMANAbmLPP+4JySARPh9BwOuMYGGsfnjSP7V qMH0iLWERCNWEc5XxSSUX4tF383FjIurgzOFmYYVjXNOYDas58c+ydPBj7agC0BW 69LpoT5mDCCQt3FXDTDqGm0eTX3n8WkD -----END CERTIFICATE-----Generated at Sun Aug 24 21:40:52 2025 by rpki-client