$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft File: 51IOJIn_YDiw2HmwRxcPnFGs984.mft (raw, json) Hash identifier: 67+lc/QU0Om6lPrcMsz7btp34hmS7Q55xsV0hg6K4L8= Subject key identifier: 1F:BD:2A:7A:80:1E:85:0A:3D:57:04:75:BF:F9:83:B2:00:5F:42:26 Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE Certificate issuer: /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft Manifest number: 020E Signing time: Sat 23 Aug 2025 02:23:11 +0000 Manifest this update: Sat 23 Aug 2025 02:23:10 +0000 Manifest next update: Sat 30 Aug 2025 02:23:10 +0000 Files and hashes: 1: 51IOJIn_YDiw2HmwRxcPnFGs984.crl (hash: KNfFh3n9f+ZMaUqHMPUQBvam8V4136SXSoc3GSaRw38=) 2: 27C38AF4C0C111EE84A55128C4F9AE02.roa (hash: wIZlMBid+1P+5GWXEfhaHDavI2pP5RgKD6YPhcbCvPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912127A, serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE Validity Not Before: Aug 23 02:23:10 2025 GMT Not After : Aug 30 02:23:10 2025 GMT Subject: CN=68a9260e-af08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3f:fc:ca:2d:72:87:a3:60:0f:51:25:39:e8: b4:1b:18:8c:ef:41:6d:bf:7b:3c:a2:ff:59:4f:01: 46:ca:70:ff:fc:0d:d1:9c:a1:d9:be:e9:32:07:62: 96:44:0e:1b:97:1b:9a:46:9f:47:9e:82:26:04:a4: 92:92:9c:4d:da:91:0f:8f:67:c7:ac:5c:97:28:16: be:c0:88:f2:1b:3a:9f:34:ef:56:b5:9f:c4:62:0a: 7a:e9:9e:e0:9a:fb:d1:24:ef:f8:cd:d8:ce:14:e9: 38:2a:e2:1a:5c:b8:11:e7:62:49:21:6d:27:4f:ef: 10:30:bc:41:e2:a0:3b:d4:04:51:0a:ae:3c:78:b5: 84:5d:ff:86:ba:16:3e:5d:65:ac:ab:d6:fa:a2:8e: da:04:82:7e:b4:9f:ba:82:c7:e2:ff:29:65:c7:a2: ec:34:11:a3:c6:e2:a9:72:6a:27:61:f5:6e:fd:6f: 84:b1:85:2c:45:cf:bf:68:29:c8:b0:ab:3c:5e:16: 8f:00:1f:93:72:44:a5:ed:45:d4:e2:22:9e:31:49: 7a:fb:3f:95:33:18:ab:fe:01:a5:e5:e0:a1:fa:5b: e9:4e:38:ae:de:c4:ca:50:b9:1e:44:90:e5:db:67: 1d:1c:b8:77:16:c6:94:00:c1:70:3f:d0:62:4f:44: b4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BD:2A:7A:80:1E:85:0A:3D:57:04:75:BF:F9:83:B2:00:5F:42:26 X509v3 Authority Key Identifier: keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:64:c6:ed:18:44:a6:e8:ed:50:ca:2b:7e:a0:8a:41:bb:f4: e2:88:be:14:43:ce:9f:ee:86:e9:53:00:ee:66:ab:6b:8d:f5: a1:d3:ea:d1:66:a9:22:f4:10:74:3b:64:03:57:ee:b6:65:f6: e6:42:cb:09:9e:e1:38:63:ce:b5:de:b3:4e:0b:7c:f6:9d:26: d1:d7:84:62:35:13:05:42:40:15:b9:c8:c3:55:35:9e:31:ee: e2:8e:8d:bf:dd:6b:e8:b8:41:ad:53:f4:e5:ad:09:06:0b:3f: 7f:7e:1e:3c:d1:32:e7:88:c0:3b:64:b5:16:ef:95:33:bd:46: 92:d5:fd:0d:b2:4a:4c:bd:b3:fb:d8:c9:45:51:a5:97:88:a0: c5:39:3c:5f:50:69:a9:44:06:b5:6d:96:4c:31:fa:e8:81:53: 99:2f:e8:93:2a:e6:49:50:b4:e1:80:82:eb:e6:48:9b:9c:ae: 72:0b:56:c0:7a:62:65:26:7a:84:3f:45:7b:48:4d:8b:a1:8d: 9f:21:a3:9a:e8:d2:c1:a3:da:18:9e:c8:56:c0:e6:b5:8f:27: 4d:51:8a:36:ee:f1:c6:bc:7b:66:ff:cf:89:a1:b0:77:7a:07: 11:5b:41:11:ef:75:2f:89:c3:40:08:fd:54:59:8f:13:9c:e3: 7f:05:3d:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEyN0ExMTAvBgNVBAUTKEU3NTIwRTI0ODlGRjYwMzhCMEQ4NzlCMDQ3MTcwRjlD NTFBQ0Y3Q0UwHhcNMjUwODIzMDIyMzEwWhcNMjUwODMwMDIyMzEwWjAYMRYwFAYD VQQDEw02OGE5MjYwZS1hZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D/8yi1yh6NgD1ElOei0GxiM70Ftv3s8ov9ZTwFGynD//A3RnKHZvukyB2KW RA4blxuaRp9HnoImBKSSkpxN2pEPj2fHrFyXKBa+wIjyGzqfNO9WtZ/EYgp66Z7g mvvRJO/4zdjOFOk4KuIaXLgR52JJIW0nT+8QMLxB4qA71ARRCq48eLWEXf+GuhY+ XWWsq9b6oo7aBIJ+tJ+6gsfi/yllx6LsNBGjxuKpcmonYfVu/W+EsYUsRc+/aCnI sKs8XhaPAB+TckSl7UXU4iKeMUl6+z+VMxir/gGl5eCh+lvpTjiu3sTKULkeRJDl 22cdHLh3FsaUAMFwP9BiT0S0ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+9KnqA HoUKPVcEdb/5g7IAX0ImMB8GA1UdIwQYMBaAFOdSDiSJ/2A4sNh5sEcXD5xRrPfO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTI3QS85RUIwMDlCNjY2 RTExMUVEODU1MjQ3MUJDNEY5QUUwMi81MUlPSkluX1lEaXcySG13UnhjUG5GR3M5 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUxSU9KSW5fWURpdzJIbXdSeGNQbkZHczk4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTI3QS85RUIwMDlCNjY2RTExMUVEODU1MjQ3MUJDNEY5QUUwMi81MUlPSkluX1lE aXcySG13UnhjUG5GR3M5ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFZMbtGESm6O1Qyit+oIpBu/TiiL4UQ86f7obpUwDuZqtrjfWh0+rR Zqki9BB0O2QDV+62ZfbmQssJnuE4Y8613rNOC3z2nSbR14RiNRMFQkAVucjDVTWe Me7ijo2/3WvouEGtU/TlrQkGCz9/fh480TLniMA7ZLUW75UzvUaS1f0NskpMvbP7 2MlFUaWXiKDFOTxfUGmpRAa1bZZMMfrogVOZL+iTKuZJULThgILr5kibnK5yC1bA emJlJnqEP0V7SE2LoY2fIaOa6NLBo9oYnshWwOa1jydNUYo27vHGvHtm/8+JobB3 egcRW0ER73UvicNACP1UWY8TnON/BT3y -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:33 2025 by rpki-client