$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json) Hash identifier: DC9O3ZB+Ew/0bOLxkiRSr6JX2Ogem7OtuwEvNb+kuIk= Subject key identifier: A6:B8:14:DB:1C:23:62:41:57:3E:41:03:49:4C:AE:67:12:1D:8D:86 Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Certificate serial: 051E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft Manifest number: 051A Signing time: Fri 22 Aug 2025 23:46:27 +0000 Manifest this update: Fri 22 Aug 2025 23:46:26 +0000 Manifest next update: Fri 29 Aug 2025 23:46:26 +0000 Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: YXuBAlXo1CzknDJW/VNQrt7jqObHsdEBWqd3Dj9W8hk=) 2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: ECduF6HgxTLoDLFAm0PdDIfSdNYqt9EVcY+nm8e4XyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1310 (0x51e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Validity Not Before: Aug 22 23:46:26 2025 GMT Not After : Aug 29 23:46:26 2025 GMT Subject: CN=68a90153-b7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:db:62:85:98:fd:7a:4d:68:f9:8e:6d:1c: ff:f7:38:93:69:30:4b:96:df:cc:77:48:af:d0:f3: c7:bf:7b:f7:c7:23:e6:a8:56:48:c0:d7:d4:83:ba: cd:15:5c:34:a3:ce:e6:c5:37:b1:1c:e9:ac:03:0b: ab:e7:e9:62:50:44:65:44:62:22:7a:14:47:1d:8e: 66:a3:64:11:e4:99:9f:8c:50:7c:cd:89:fa:84:aa: ad:e7:25:d7:fb:41:cd:be:61:98:9c:71:ce:97:f8: 02:0f:ed:47:32:53:72:3b:da:2d:21:ba:47:26:f7: be:8c:68:29:fb:9f:24:c7:16:ac:86:0c:dd:b6:c6: cd:91:1d:e3:70:19:52:7b:58:29:4c:38:a7:0f:e4: ab:2a:54:93:d9:b7:6d:be:86:46:d4:58:23:1c:c2: e6:0b:fd:79:dd:95:0a:24:40:51:30:90:69:eb:07: 21:6a:4a:01:45:be:c5:69:c2:bd:79:c3:d3:ae:73: fe:e7:47:fa:59:d1:c2:ab:37:52:93:06:04:4c:0c: 26:65:02:e7:0f:0d:8f:5b:85:be:62:2b:a5:ee:4f: 44:bc:75:b0:3c:e5:6f:47:a6:27:d6:9f:2e:98:7d: 63:38:8e:00:32:8b:a9:66:e3:61:fe:e8:1c:af:e4: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B8:14:DB:1C:23:62:41:57:3E:41:03:49:4C:AE:67:12:1D:8D:86 X509v3 Authority Key Identifier: keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:57:2f:58:5e:63:fd:14:a6:a3:0e:9f:4c:9a:03:0b:aa:c1: 29:08:ea:9f:30:a3:a1:b8:d7:61:14:b1:2b:10:61:33:bd:0a: 5c:90:71:2f:c1:9e:8e:2f:b1:e4:38:96:a7:6e:2c:14:de:ce: af:9e:50:4e:4b:aa:f0:75:f1:8d:38:fd:2b:6e:b2:6b:9f:a8: 93:6c:8c:26:29:66:7a:65:57:6a:d6:46:52:79:d0:b1:6a:4c: 30:a9:59:e7:16:8b:d3:0a:c4:bf:ad:5d:98:c9:0e:84:48:c1: 9f:a7:05:fa:e0:77:bc:a8:f3:02:d3:9d:d1:5f:81:c3:94:04: 3f:f2:a0:e1:90:b3:dd:fa:60:7e:4c:4a:d0:89:43:61:c3:de: 1a:e6:d2:ca:e9:c8:54:89:33:a6:3d:ee:d1:69:57:59:e9:c1: 56:2e:2a:56:ac:3f:c3:43:4b:8e:12:5c:a1:25:70:08:39:15: 9b:98:0f:ac:5d:0e:c2:6f:30:3f:aa:52:1a:1a:9d:24:c0:a3: 54:ef:0c:78:42:7d:2d:ca:25:a2:c4:eb:78:b7:12:43:d0:b7: 4b:0c:83:fc:62:f2:33:0e:2d:49:06:46:4a:3d:02:bc:67:bd: ee:ed:ac:a3:73:09:38:3f:0a:40:59:41:06:2c:34:a3:82:b1: cd:7c:b7:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ1MUMxMTAvBgNVBAUTKDNGRDUzMTYwMjU3REIwMUIyRUUwRUYwMTNDMUUyRDQy RUIxQTI4OEQwHhcNMjUwODIyMjM0NjI2WhcNMjUwODI5MjM0NjI2WjAYMRYwFAYD VQQDEw02OGE5MDE1My1iN2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLnbYoWY/XpNaPmObRz/9ziTaTBLlt/Md0iv0PPHv3v3xyPmqFZIwNfUg7rN FVw0o87mxTexHOmsAwur5+liUERlRGIiehRHHY5mo2QR5JmfjFB8zYn6hKqt5yXX +0HNvmGYnHHOl/gCD+1HMlNyO9otIbpHJve+jGgp+58kxxashgzdtsbNkR3jcBlS e1gpTDinD+SrKlST2bdtvoZG1FgjHMLmC/153ZUKJEBRMJBp6wchakoBRb7FacK9 ecPTrnP+50f6WdHCqzdSkwYETAwmZQLnDw2PW4W+Yiul7k9EvHWwPOVvR6Yn1p8u mH1jOI4AMoupZuNh/ugcr+SgKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKa4FNsc I2JBVz5BA0lMrmcSHY2GMB8GA1UdIwQYMBaAFD/VMWAlfbAbLuDvATweLULrGiiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDUxQy9CRDMxMjcxNjE0 NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNCc3U0TzhCUEI0dFF1c2FL STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5VXhZQ1Y5c0JzdTRPOEJQQjR0UXVzYUtJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDUxQy9CRDMxMjcxNjE0NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNC c3U0TzhCUEI0dFF1c2FLSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCVy9YXmP9FKajDp9MmgMLqsEpCOqfMKOhuNdhFLErEGEzvQpckHEv wZ6OL7HkOJanbiwU3s6vnlBOS6rwdfGNOP0rbrJrn6iTbIwmKWZ6ZVdq1kZSedCx akwwqVnnFovTCsS/rV2YyQ6ESMGfpwX64He8qPMC053RX4HDlAQ/8qDhkLPd+mB+ TErQiUNhw94a5tLK6chUiTOmPe7RaVdZ6cFWLipWrD/DQ0uOElyhJXAIORWbmA+s XQ7CbzA/qlIaGp0kwKNU7wx4Qn0tyiWixOt4txJD0LdLDIP8YvIzDi1JBkZKPQK8 Z73u7ayjcwk4PwpAWUEGLDSjgrHNfLdM -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:18 2025 by rpki-client