$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft File: 51IOJIn_YDiw2HmwRxcPnFGs984.mft (raw, json) Hash identifier: eS6gVIRurpTAeagkfh1XK//JKVNyrlOEK+r30oNU2PQ= Subject key identifier: 4C:4E:3F:33:CA:4A:5F:00:A0:E0:AE:0B:82:AA:F4:6A:25:52:FA:C6 Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE Certificate issuer: /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft Manifest number: 01DA Signing time: Sun 11 May 2025 01:48:44 +0000 Manifest this update: Sun 11 May 2025 01:48:44 +0000 Manifest next update: Sun 18 May 2025 01:48:44 +0000 Files and hashes: 1: 51IOJIn_YDiw2HmwRxcPnFGs984.crl (hash: BR95NtNEBLsy6Tl6NDcoDjhrqQC6kn0O7LLd+FSOj/o=) 2: 27C38AF4C0C111EE84A55128C4F9AE02.roa (hash: wIZlMBid+1P+5GWXEfhaHDavI2pP5RgKD6YPhcbCvPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912127A, serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE Validity Not Before: May 11 01:48:44 2025 GMT Not After : May 18 01:48:44 2025 GMT Subject: CN=682001fc-4d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:df:e8:15:6e:7f:6c:e5:41:0b:26:f0:93: 38:f0:23:01:22:67:7a:1b:e8:33:35:bb:eb:2e:20: e0:b5:18:55:cf:5f:a1:65:f0:46:b5:9c:95:4c:e6: ad:71:91:d6:ae:94:cc:84:e1:6c:1a:3f:9b:5f:4f: 1f:fd:6f:82:5d:d0:f3:e8:ce:46:80:74:4c:ea:7e: 45:4a:25:82:86:3d:a1:d0:30:9e:03:c6:bf:87:76: 00:e1:da:e1:9e:d1:4d:0d:a3:19:82:30:92:e0:80: 94:fb:9e:10:69:33:18:4c:22:4c:db:04:eb:fc:49: 1a:aa:9d:2f:8a:a8:18:39:09:fc:84:c6:3e:55:d8: 47:67:c3:83:8f:72:01:24:2d:f3:bb:83:72:7d:98: c8:f3:04:d7:9a:df:4d:e6:c2:15:98:ca:23:f3:bf: 04:f4:e5:84:2e:5c:0d:6c:c2:2f:66:12:d2:03:fb: 21:15:26:db:da:7e:36:b0:6c:b9:82:d8:93:6c:0c: 36:5d:70:50:62:ed:28:4e:41:b6:03:26:c4:c7:d6: 4e:a3:87:82:d2:8a:bd:47:aa:cb:b7:da:55:cf:dc: 77:0a:b2:89:42:85:6c:0d:c9:ba:0d:1d:ce:76:80: 4e:ae:9f:7f:5e:07:a2:5c:25:e5:6b:0f:f0:e1:6f: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4E:3F:33:CA:4A:5F:00:A0:E0:AE:0B:82:AA:F4:6A:25:52:FA:C6 X509v3 Authority Key Identifier: keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ed:d0:ac:3d:1b:76:9b:a5:3d:85:09:f9:27:1a:70:3f:b7: da:3e:ea:8b:ac:df:df:68:b2:01:24:95:9d:6c:2e:f2:a8:ec: 09:ac:d5:50:23:13:6e:b8:d2:71:9e:f2:c6:79:1a:a2:07:a7: c4:af:8f:3c:7f:10:f1:88:43:c5:04:e2:1c:fa:77:5c:35:f8: e0:9f:5f:75:25:f1:94:ee:ad:c3:23:6a:02:3d:7c:56:d3:0f: be:86:6c:6e:8f:2e:f7:d1:e4:30:bb:e3:44:2a:ab:df:ad:67: 3d:0a:b4:2f:c0:4b:1b:e1:bb:b0:fc:d8:e1:49:91:02:9c:86: a8:83:a2:eb:4a:7f:85:d4:1d:94:13:11:75:86:e4:fe:9f:ee: 9e:87:94:e5:5e:5e:3d:cc:38:a1:da:e8:d9:e9:a0:07:50:37: b2:4f:bb:82:e2:13:58:2f:60:69:7d:57:43:29:56:60:0c:84: e1:56:e1:08:66:c4:b2:5b:b6:a3:ae:9b:f5:44:aa:2f:ba:dd: 52:b6:eb:b5:62:0e:75:f9:92:92:27:61:14:d0:f9:16:18:ff: ac:45:25:67:50:25:c4:28:f5:28:c0:c4:10:e0:37:82:27:e1: 5d:0f:50:a2:50:0e:fe:62:ee:e9:aa:94:3b:74:c9:87:6e:1c: 53:9b:66:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEyN0ExMTAvBgNVBAUTKEU3NTIwRTI0ODlGRjYwMzhCMEQ4NzlCMDQ3MTcwRjlD NTFBQ0Y3Q0UwHhcNMjUwNTExMDE0ODQ0WhcNMjUwNTE4MDE0ODQ0WjAYMRYwFAYD VQQDEw02ODIwMDFmYy00ZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgPf6BVuf2zlQQsm8JM48CMBImd6G+gzNbvrLiDgtRhVz1+hZfBGtZyVTOat cZHWrpTMhOFsGj+bX08f/W+CXdDz6M5GgHRM6n5FSiWChj2h0DCeA8a/h3YA4drh ntFNDaMZgjCS4ICU+54QaTMYTCJM2wTr/Ekaqp0viqgYOQn8hMY+VdhHZ8ODj3IB JC3zu4NyfZjI8wTXmt9N5sIVmMoj878E9OWELlwNbMIvZhLSA/shFSbb2n42sGy5 gtiTbAw2XXBQYu0oTkG2AybEx9ZOo4eC0oq9R6rLt9pVz9x3CrKJQoVsDcm6DR3O doBOrp9/XgeiXCXlaw/w4W9sIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExOPzPK Sl8AoOCuC4Kq9GolUvrGMB8GA1UdIwQYMBaAFOdSDiSJ/2A4sNh5sEcXD5xRrPfO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTI3QS85RUIwMDlCNjY2 RTExMUVEODU1MjQ3MUJDNEY5QUUwMi81MUlPSkluX1lEaXcySG13UnhjUG5GR3M5 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUxSU9KSW5fWURpdzJIbXdSeGNQbkZHczk4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTI3QS85RUIwMDlCNjY2RTExMUVEODU1MjQ3MUJDNEY5QUUwMi81MUlPSkluX1lE aXcySG13UnhjUG5GR3M5ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA07dCsPRt2m6U9hQn5JxpwP7faPuqLrN/faLIBJJWdbC7yqOwJrNVQ IxNuuNJxnvLGeRqiB6fEr488fxDxiEPFBOIc+ndcNfjgn191JfGU7q3DI2oCPXxW 0w++hmxujy730eQwu+NEKqvfrWc9CrQvwEsb4buw/NjhSZECnIaog6LrSn+F1B2U ExF1huT+n+6eh5TlXl49zDih2ujZ6aAHUDeyT7uC4hNYL2BpfVdDKVZgDIThVuEI ZsSyW7ajrpv1RKovut1Stuu1Yg51+ZKSJ2EU0PkWGP+sRSVnUCXEKPUowMQQ4DeC J+FdD1CiUA7+Yu7pqpQ7dMmHbhxTm2ZX -----END CERTIFICATE-----Generated at Mon May 12 22:00:21 2025 by rpki-client