$ rpki-client -vvf rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft File: K51tfdq8UiVfPM15zup2289DW50.mft (raw, json) Hash identifier: wKrK5waHHz8Bf165085xjA549SBAoCERIhbBBTEGiaA= Subject key identifier: 95:F8:CC:4E:D8:C6:69:B2:BB:C5:31:76:C1:D7:F3:47:AE:11:1D:97 Authority key identifier: 2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D Certificate issuer: /CN=A915CD63/serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D Certificate serial: 03B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft Manifest number: 03B2 Signing time: Thu 03 Jul 2025 01:03:23 +0000 Manifest this update: Thu 03 Jul 2025 01:03:23 +0000 Manifest next update: Thu 10 Jul 2025 01:03:23 +0000 Files and hashes: 1: K51tfdq8UiVfPM15zup2289DW50.crl (hash: 9DOu/g5gQUkxDSLUEp0Th4ABPQ6PDkJfPKHrevLmeaA=) 2: FA7C5B6C996611EC8E565E60C4F9AE02.roa (hash: XzEbPA3uShAOXIqZil6uWiVPTCssA6N1a5UaV/DTwa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CD63, serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D Validity Not Before: Jul 3 01:03:23 2025 GMT Not After : Jul 10 01:03:23 2025 GMT Subject: CN=6865d6db-e33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:60:62:2a:76:22:85:9c:b6:d3:2a:77:4d:3b: a7:48:46:c1:41:dc:ae:31:f0:ad:18:6d:01:51:b9: 75:17:89:3a:af:73:58:b1:9e:b9:95:91:0d:77:bc: 44:92:2d:9c:d1:d3:b6:db:e6:ec:56:65:84:b9:76: a9:98:40:cd:63:94:1c:68:a8:e9:93:6b:3b:7a:7e: a1:ad:49:53:07:60:3d:9d:69:0f:40:5c:40:95:92: 00:a2:1e:bc:f4:a9:4b:4f:9e:0d:9a:b2:11:b6:9a: b0:07:8e:1b:f7:25:9f:23:16:af:27:6e:5e:d9:d6: 91:be:a7:86:39:04:d0:c3:53:ae:cc:9d:8a:dc:15: 4a:ff:66:68:6e:af:d6:75:4d:2d:dc:46:48:2b:83: 07:cf:86:64:ac:ee:75:04:b9:95:f8:bc:9b:98:d5: eb:25:48:9b:c6:ae:ac:4f:b8:cb:04:ba:6f:28:64: 2e:5f:f4:24:2d:ff:00:44:e1:d8:e0:54:e6:ea:a9: 1b:06:84:60:ec:3f:77:1b:94:55:31:0d:ee:46:ce: 24:ac:24:ed:a3:73:e8:23:de:95:18:99:3d:ef:03: ba:45:2b:6d:8c:34:96:98:aa:7c:9a:6e:bb:dd:f1: d3:4a:52:68:2e:05:7a:e5:25:17:67:39:12:fe:ec: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F8:CC:4E:D8:C6:69:B2:BB:C5:31:76:C1:D7:F3:47:AE:11:1D:97 X509v3 Authority Key Identifier: keyid:2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0e:0d:4f:b9:4e:92:58:e4:da:4e:0e:2a:f4:e9:98:5a:d4: 0b:ac:c3:3b:8c:3a:45:0a:26:cb:b6:36:90:51:b8:74:cb:c4: 84:e9:9f:3b:8c:b8:1a:b4:40:32:81:92:e0:16:61:10:bb:7c: 40:cb:e5:6e:83:ec:26:e6:e3:a1:27:0b:78:47:21:1b:cc:d8: 53:27:56:00:88:dc:48:6c:02:1c:ee:87:b6:c3:ff:cd:b3:5a: e4:f0:03:f5:c9:8f:a9:c5:e9:c7:d1:0f:26:b1:d9:09:83:d2: d8:b8:c6:cd:d5:30:fe:a0:67:69:d6:06:16:6e:76:5b:2c:5f: e0:fa:28:f4:f3:bf:9e:a5:75:1a:52:4c:3c:ee:91:1f:39:23: 77:7f:62:8c:ec:65:a5:e7:2a:3b:be:eb:79:d2:15:77:e2:48: 51:f0:d0:d5:83:b9:ad:03:87:cf:8b:7d:59:58:41:62:9c:cf: f3:19:fd:94:17:03:eb:68:2a:15:0b:0e:1c:af:4e:40:c8:59: a9:70:19:00:0c:a0:eb:0b:f1:8c:9b:96:78:6a:5b:2f:af:de: b8:fd:12:bb:15:84:3f:ce:b3:55:bc:ca:b6:fb:9c:dd:04:a8: f0:67:73:29:80:b9:db:30:61:ea:2c:13:4a:a3:54:bb:7f:b5: 4c:fb:cf:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNENjMxMTAvBgNVBAUTKDJCOUQ2RDdEREFCQzUyMjU1RjNDQ0Q3OUNFRUE3NkRC Q0Y0MzVCOUQwHhcNMjUwNzAzMDEwMzIzWhcNMjUwNzEwMDEwMzIzWjAYMRYwFAYD VQQDEw02ODY1ZDZkYi1lMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGBiKnYihZy20yp3TTunSEbBQdyuMfCtGG0BUbl1F4k6r3NYsZ65lZENd7xE ki2c0dO22+bsVmWEuXapmEDNY5QcaKjpk2s7en6hrUlTB2A9nWkPQFxAlZIAoh68 9KlLT54NmrIRtpqwB44b9yWfIxavJ25e2daRvqeGOQTQw1OuzJ2K3BVK/2Zobq/W dU0t3EZIK4MHz4ZkrO51BLmV+LybmNXrJUibxq6sT7jLBLpvKGQuX/QkLf8AROHY 4FTm6qkbBoRg7D93G5RVMQ3uRs4krCTto3PoI96VGJk97wO6RSttjDSWmKp8mm67 3fHTSlJoLgV65SUXZzkS/uyxCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJX4zE7Y xmmyu8UxdsHX80euER2XMB8GA1UdIwQYMBaAFCudbX3avFIlXzzNec7qdtvPQ1ud MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0Q2My84QUYwNjdDNDk5 NjIxMUVDQkI2NjFBNTdDNEY5QUUwMi9LNTF0ZmRxOFVpVmZQTTE1enVwMjI4OURX NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1MXRmZHE4VWlWZlBNMTV6dXAyMjg5RFc1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0Q2My84QUYwNjdDNDk5NjIxMUVDQkI2NjFBNTdDNEY5QUUwMi9LNTF0ZmRxOFVp VmZQTTE1enVwMjI4OURXNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCODg1PuU6SWOTaTg4q9OmYWtQLrMM7jDpFCibLtjaQUbh0y8SE6Z87 jLgatEAygZLgFmEQu3xAy+Vug+wm5uOhJwt4RyEbzNhTJ1YAiNxIbAIc7oe2w//N s1rk8AP1yY+pxenH0Q8msdkJg9LYuMbN1TD+oGdp1gYWbnZbLF/g+ij087+epXUa Ukw87pEfOSN3f2KM7GWl5yo7vut50hV34khR8NDVg7mtA4fPi31ZWEFinM/zGf2U FwPraCoVCw4cr05AyFmpcBkADKDrC/GMm5Z4alsvr964/RK7FYQ/zrNVvMq2+5zd BKjwZ3MpgLnbMGHqLBNKo1S7f7VM+8+m -----END CERTIFICATE-----Generated at Fri Jul 4 00:03:01 2025 by rpki-client