$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft File: 45n1PPpSq9Wox8HTkpWcOV854n4.mft (raw, json) Hash identifier: nYUFsId6pvlfD47iRKfGYUFZQMJ6CmF1Xn5nvdPM9K8= Subject key identifier: 80:6C:27:75:FC:2B:DC:8C:C5:1D:70:4A:CE:3B:0B:E5:06:A9:A9:F3 Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E Certificate issuer: /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Certificate serial: 0F19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft Manifest number: 0F00 Signing time: Fri 08 Aug 2025 17:50:21 +0000 Manifest this update: Fri 08 Aug 2025 17:50:20 +0000 Manifest next update: Fri 15 Aug 2025 17:50:20 +0000 Files and hashes: 1: 45n1PPpSq9Wox8HTkpWcOV854n4.crl (hash: OBrLvBkaHLUfcBOtEKzy6ltH8iYjCsPJO033PeU5o2M=) 2: 57A86D66553F11EBA47EB279C4F9AE02.roa (hash: TN0DQj5Vs5ytuH5F5DVzodkfR9FeIuALNCosaZRkbvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3865 (0xf19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Validity Not Before: Aug 8 17:50:20 2025 GMT Not After : Aug 15 17:50:20 2025 GMT Subject: CN=689638dc-20fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:8b:15:e4:5d:70:44:a2:d5:d3:fe:1f:60: f6:c8:7b:e3:85:6f:7c:b8:5b:9f:83:d7:7b:40:2d: 12:56:46:34:a1:98:40:e4:4b:17:4b:30:ae:d8:f8: d8:0d:9b:33:0e:e6:6b:45:04:c8:88:d0:db:6d:cc: 29:da:33:b8:57:5e:51:0a:36:c2:56:bf:51:14:ec: 4f:88:07:9e:69:e3:2a:04:d9:5f:4a:9b:b1:75:4b: 2b:67:06:bf:64:6b:f2:a2:92:fa:69:12:0f:c3:e9: b7:2c:48:5a:b2:8f:89:0f:2a:ab:90:96:17:3b:75: ea:de:cb:2b:6d:8c:a8:3f:88:67:f7:0d:34:a4:1a: 58:bd:6d:f0:99:95:bf:31:b9:47:f0:21:10:63:9f: 04:a7:b3:b4:6a:30:27:bc:c9:07:f2:71:b4:41:2d: 2f:46:93:d0:be:54:e0:d6:22:f0:74:d2:91:b5:bc: 87:ea:c4:a0:2b:71:ad:7a:e3:48:60:4f:bc:29:87: aa:5d:74:19:ec:3e:b3:2d:12:bb:1d:5b:80:ad:84: 29:dc:00:52:1d:c2:e3:06:72:ae:a4:e8:d1:7b:45: 26:3e:81:82:37:31:46:65:77:6f:fb:52:67:5c:cd: 41:05:e7:93:68:66:0a:16:34:3d:1a:f8:44:af:e8: ac:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6C:27:75:FC:2B:DC:8C:C5:1D:70:4A:CE:3B:0B:E5:06:A9:A9:F3 X509v3 Authority Key Identifier: keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:1c:75:d1:41:4f:30:41:c6:55:4b:4c:3b:4d:18:43:f5:1a: e3:53:7d:6b:e2:3f:89:1a:ec:08:72:3d:30:7d:cb:f9:d7:7a: 15:f4:11:41:96:86:de:8e:7c:c7:dd:a8:15:80:62:d7:0c:4b: 3f:c1:43:8a:52:c8:a0:61:1c:b3:a4:df:6b:47:10:92:cc:b4: d3:88:66:71:51:0c:7b:2c:bc:49:a7:db:f9:1b:0f:f6:6b:37: 37:83:d2:c9:9a:b6:f9:77:70:1c:f3:8c:7b:48:fc:a3:b5:8d: 72:a4:57:71:45:aa:4c:25:1d:da:f2:a9:d1:ea:17:4b:ea:bc: e4:f3:c8:9c:2e:c3:c2:60:63:c4:16:ca:a8:ce:db:b0:68:af: e6:34:ce:55:f4:9b:37:8d:a9:bb:2b:42:35:ed:3c:5c:2a:5a: 2c:b4:25:cd:ff:b7:7f:bd:17:0d:64:fc:60:75:c1:41:ab:9f: f0:2a:95:e2:4a:c7:39:c5:23:4c:2a:51:de:90:41:e7:ae:46: 1c:a9:e6:73:8d:3d:ec:a7:f7:de:57:27:ad:dd:50:26:c0:8d: 39:1a:00:68:19:7c:ce:d2:df:50:5c:b4:47:fe:7e:f6:04:cb: e8:ae:11:31:eb:3c:86:8d:eb:a2:eb:2c:0d:c8:e6:ca:d0:28: 8a:4e:d5:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwQjYxMTAvBgNVBAUTKEUzOTlGNTNDRkE1MkFCRDVBOEM3QzFEMzkyOTU5QzM5 NUYzOUUyN0UwHhcNMjUwODA4MTc1MDIwWhcNMjUwODE1MTc1MDIwWjAYMRYwFAYD VQQDEw02ODk2MzhkYy0yMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTWLFeRdcESi1dP+H2D2yHvjhW98uFufg9d7QC0SVkY0oZhA5EsXSzCu2PjY DZszDuZrRQTIiNDbbcwp2jO4V15RCjbCVr9RFOxPiAeeaeMqBNlfSpuxdUsrZwa/ ZGvyopL6aRIPw+m3LEhaso+JDyqrkJYXO3Xq3ssrbYyoP4hn9w00pBpYvW3wmZW/ MblH8CEQY58Ep7O0ajAnvMkH8nG0QS0vRpPQvlTg1iLwdNKRtbyH6sSgK3GteuNI YE+8KYeqXXQZ7D6zLRK7HVuArYQp3ABSHcLjBnKupOjRe0UmPoGCNzFGZXdv+1Jn XM1BBeeTaGYKFjQ9GvhEr+islwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBsJ3X8 K9yMxR1wSs47C+UGqanzMB8GA1UdIwQYMBaAFOOZ9Tz6UqvVqMfB05KVnDlfOeJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCNi9ENEYxQzUyNjgz NUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5V294OEhUa3BXY09WODU0 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1bjFQUHBTcTlXb3g4SFRrcFdjT1Y4NTRuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBCNi9ENEYxQzUyNjgzNUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5 V294OEhUa3BXY09WODU0bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWHHXRQU8wQcZVS0w7TRhD9RrjU31r4j+JGuwIcj0wfcv513oV9BFB lobejnzH3agVgGLXDEs/wUOKUsigYRyzpN9rRxCSzLTTiGZxUQx7LLxJp9v5Gw/2 azc3g9LJmrb5d3Ac84x7SPyjtY1ypFdxRapMJR3a8qnR6hdL6rzk88icLsPCYGPE FsqoztuwaK/mNM5V9Js3jam7K0I17TxcKlostCXN/7d/vRcNZPxgdcFBq5/wKpXi Ssc5xSNMKlHekEHnrkYcqeZzjT3sp/feVyet3VAmwI05GgBoGXzO0t9QXLRH/n72 BMvorhEx6zyGjeui6ywNyObK0CiKTtWr -----END CERTIFICATE-----Generated at Sat Aug 9 14:33:13 2025 by rpki-client