$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json) Hash identifier: Zl18Lgq5OnSvHEs0RIUlFq/XFHW6Fq3oEr5vif7p0Q0= Subject key identifier: A1:92:93:45:D4:EB:4E:95:47:04:11:E6:4F:A9:C8:5C:07:03:D8:04 Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Certificate serial: 34EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft Manifest number: 34D0 Signing time: Fri 22 Aug 2025 14:43:53 +0000 Manifest this update: Fri 22 Aug 2025 14:43:52 +0000 Manifest next update: Fri 29 Aug 2025 14:43:52 +0000 Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: xZYW81+aaMtyC7PreCUcHdhgZct1pyAGHHmKSTAQ2Ok=) 2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: o3Ceb2MSjRakfXXsxsrz1v3BRN+sMCeTig6Z0QGV2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13547 (0x34eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Validity Not Before: Aug 22 14:43:52 2025 GMT Not After : Aug 29 14:43:52 2025 GMT Subject: CN=68a88228-a728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:33:49:02:b1:fb:21:3e:57:58:09:82:fa: 4c:b7:6c:8d:54:6a:81:8c:03:a1:bd:76:12:48:91: 59:a6:a9:44:c2:c7:78:f5:17:51:e5:21:f8:20:39: 90:df:bc:5e:d8:58:3b:b7:40:b4:de:82:c7:7e:11: 33:6f:7a:c7:47:c3:77:8a:c8:67:10:4e:cc:05:2b: 15:93:df:3b:67:d3:cb:bc:bb:41:58:81:42:3b:c5: c6:91:4d:b7:06:3f:fc:b5:2b:c1:82:6a:a4:4b:f3: 05:fe:4a:9d:cf:31:19:b8:51:89:ab:04:95:12:7d: 79:3d:c1:f5:37:de:eb:2a:90:ce:27:d4:89:70:8a: 39:3f:69:a2:61:2b:72:65:90:ca:48:9c:50:8a:ed: 5d:09:02:58:66:e9:29:45:3e:d8:41:e9:43:30:72: dc:17:6a:07:64:c3:5f:45:c1:ef:2e:7f:eb:99:f4: a1:6a:f3:0f:52:5e:61:c8:7e:84:47:1f:83:f8:05: bb:36:26:17:d1:72:db:1c:89:ae:8c:95:9e:27:5e: 61:68:08:26:e0:cd:72:47:7c:ab:89:e3:39:a3:43: c2:27:66:6e:e4:14:cf:69:b1:7e:f6:aa:8c:3f:1c: 60:f5:6b:10:27:ad:d1:07:f5:e3:ec:df:59:f3:4d: 15:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:92:93:45:D4:EB:4E:95:47:04:11:E6:4F:A9:C8:5C:07:03:D8:04 X509v3 Authority Key Identifier: keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ed:d9:00:3c:30:0e:32:9e:99:92:73:69:9c:fe:b5:35:e2: 1d:e7:3b:aa:bc:cc:44:71:d6:4b:25:86:5f:72:2d:bc:dd:76: 5c:8b:a8:3a:41:6d:aa:b6:e4:e4:ca:5a:e7:16:5e:c3:94:db: d4:7e:89:7f:27:e5:0f:8f:4b:9c:d7:b2:9d:b3:7d:bd:a9:29: f2:c9:f1:ed:1f:40:98:34:a0:f7:33:0d:ce:c0:95:04:2e:16: af:a7:c7:ef:d0:81:dc:8c:a3:0e:26:dc:19:16:41:55:62:60: 84:a6:52:e4:63:ac:cf:ba:83:d5:28:61:1b:5e:a3:aa:e7:c4: 6e:d2:e0:b7:2f:0d:73:fe:85:48:1d:5d:6c:ea:b1:ae:b0:d5: e9:05:8d:ee:67:70:9c:4b:63:30:09:ec:01:22:8a:1d:17:fe: 8b:e7:b7:28:96:18:75:97:9f:5f:72:66:56:ca:8f:bf:e1:47: 5a:8c:ac:ab:f3:ed:63:a6:36:07:c4:d6:14:9a:e9:b7:bd:fb: 6b:47:7d:93:45:ad:09:05:eb:d4:71:86:a3:ef:b3:b9:47:2c: d5:07:a9:05:ea:79:fa:f7:2f:4f:e9:68:1e:18:b6:68:e1:42: 9c:76:54:4f:f6:dc:88:cb:34:c0:74:f0:7d:46:a3:fd:ea:03: 4b:84:74:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF MEE0MTkzMjEwHhcNMjUwODIyMTQ0MzUyWhcNMjUwODI5MTQ0MzUyWjAYMRYwFAYD VQQDEw02OGE4ODIyOC1hNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0IzSQKx+yE+V1gJgvpMt2yNVGqBjAOhvXYSSJFZpqlEwsd49RdR5SH4IDmQ 37xe2Fg7t0C03oLHfhEzb3rHR8N3ishnEE7MBSsVk987Z9PLvLtBWIFCO8XGkU23 Bj/8tSvBgmqkS/MF/kqdzzEZuFGJqwSVEn15PcH1N97rKpDOJ9SJcIo5P2miYSty ZZDKSJxQiu1dCQJYZukpRT7YQelDMHLcF2oHZMNfRcHvLn/rmfShavMPUl5hyH6E Rx+D+AW7NiYX0XLbHImujJWeJ15haAgm4M1yR3yrieM5o0PCJ2Zu5BTPabF+9qqM Pxxg9WsQJ63RB/Xj7N9Z800V+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGSk0XU 606VRwQR5k+pyFwHA9gEMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5 b2h5MHZ1djAzMHpncEJreUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN7dkAPDAOMp6ZknNpnP61NeId5zuqvMxEcdZLJYZfci283XZci6g6 QW2qtuTkylrnFl7DlNvUfol/J+UPj0uc17Kds329qSnyyfHtH0CYNKD3Mw3OwJUE Lhavp8fv0IHcjKMOJtwZFkFVYmCEplLkY6zPuoPVKGEbXqOq58Ru0uC3Lw1z/oVI HV1s6rGusNXpBY3uZ3CcS2MwCewBIoodF/6L57colhh1l59fcmZWyo+/4UdajKyr 8+1jpjYHxNYUmum3vftrR32TRa0JBevUcYaj77O5RyzVB6kF6nn69y9P6WgeGLZo 4UKcdlRP9tyIyzTAdPB9RqP96gNLhHQt -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:08 2025 by rpki-client