$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft File: 45n1PPpSq9Wox8HTkpWcOV854n4.mft (raw, json) Hash identifier: IXosCF+l4RVviIQWbIbO/MQAYX6ABQ6Z6rkj/hMzpps= Subject key identifier: 8B:7F:1D:50:E0:3B:FD:3B:68:17:66:9A:13:AD:38:94:81:0F:2E:42 Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E Certificate issuer: /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Certificate serial: 0EFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft Manifest number: 0EE4 Signing time: Sat 14 Jun 2025 17:34:44 +0000 Manifest this update: Sat 14 Jun 2025 17:34:43 +0000 Manifest next update: Sat 21 Jun 2025 17:34:43 +0000 Files and hashes: 1: 45n1PPpSq9Wox8HTkpWcOV854n4.crl (hash: bcuEJt0UUQ6kSZufGFdcrYMXKq7CdgD1NXmw01a1Hf4=) 2: 57A86D66553F11EBA47EB279C4F9AE02.roa (hash: TN0DQj5Vs5ytuH5F5DVzodkfR9FeIuALNCosaZRkbvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3837 (0xefd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Validity Not Before: Jun 14 17:34:43 2025 GMT Not After : Jun 21 17:34:43 2025 GMT Subject: CN=684db2b4-9329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:42:ef:bc:85:93:f6:4c:21:14:17:b3:89: d9:55:ef:17:fa:03:e4:b4:e1:5e:6c:24:11:19:88: c9:6e:15:14:24:65:e8:7d:75:46:70:7d:62:e2:b9: d3:5f:ec:ee:83:34:76:27:8c:f1:8f:1f:b8:22:8b: 04:b5:ba:ff:cf:a8:4d:15:c2:a3:5b:8f:da:f4:73: 4e:1f:c8:89:47:5e:8a:a1:70:86:37:c7:66:db:6d: 83:e3:6f:94:83:b7:b0:9f:c1:2a:54:79:e5:47:e0: 5a:41:23:fb:99:7a:5a:fe:3e:6f:5c:2a:14:bd:7d: 22:c1:c6:a1:91:f0:fd:0f:61:1e:8d:8c:35:39:b5: 51:83:fe:c6:48:b7:dc:ec:e1:21:7b:b4:97:d6:ee: 1b:3a:48:51:93:fa:0b:f6:03:09:5f:02:ba:29:c6: dd:9a:b3:db:49:8f:37:6c:53:e1:06:62:e6:ff:a5: f9:2a:14:bf:0f:ec:fd:b1:0d:49:e8:e5:38:e0:f5: 92:95:79:3d:ab:01:59:77:97:db:e1:52:d0:e7:71: c8:69:e7:39:29:9b:36:77:c4:9a:af:8e:29:a8:65: 5e:09:20:ed:49:df:d2:2b:13:5f:69:7d:d9:3f:0e: f9:35:a6:07:2d:32:2a:70:05:38:b0:5b:b5:2e:ca: 9d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7F:1D:50:E0:3B:FD:3B:68:17:66:9A:13:AD:38:94:81:0F:2E:42 X509v3 Authority Key Identifier: keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0d:40:c5:80:a3:6c:32:5b:a5:67:ff:ff:cf:e8:34:8f:01: 9e:5b:6b:78:6b:a1:f4:d9:87:83:08:31:45:2d:39:ef:ba:e8: a1:23:5b:55:0b:2f:0d:8e:0f:a8:2a:32:78:25:9e:ea:7c:a2: 51:35:b2:bc:6b:7b:b0:4b:e0:46:09:d5:11:f4:49:c3:77:07: b4:17:76:bb:21:e4:fb:97:0b:fb:bd:54:41:dc:68:f9:c8:2c: 21:ba:0e:18:e6:f1:1f:69:bd:eb:98:be:34:5a:1e:0f:81:bd: 2c:23:e7:83:f8:48:88:bd:81:00:8d:32:a9:02:82:c9:5a:ba: e4:ce:6a:03:dc:a7:7a:f1:a5:cb:8b:66:68:db:15:63:6e:e6: e9:b8:7f:3b:0d:16:a6:4f:d2:97:84:0d:65:0c:07:3a:29:2d: 10:b1:83:de:2f:d3:05:32:72:6e:c6:4c:d6:a4:e6:0f:19:2d: 5f:a4:6a:6c:e2:c5:22:3d:5f:4c:1a:e2:fe:57:2c:d7:55:8f: f8:3d:16:86:af:5b:20:7d:f9:fe:3d:3a:b9:ad:ea:f9:80:13: b5:0c:c7:c6:2b:5c:df:48:a9:e8:d6:7f:53:2a:ce:b7:9f:f9: 35:95:53:82:57:5f:7a:02:b1:b4:10:76:3b:c0:d4:7c:3b:2f: 74:d0:6b:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwQjYxMTAvBgNVBAUTKEUzOTlGNTNDRkE1MkFCRDVBOEM3QzFEMzkyOTU5QzM5 NUYzOUUyN0UwHhcNMjUwNjE0MTczNDQzWhcNMjUwNjIxMTczNDQzWjAYMRYwFAYD VQQDEw02ODRkYjJiNC05MzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmtC77yFk/ZMIRQXs4nZVe8X+gPktOFebCQRGYjJbhUUJGXofXVGcH1i4rnT X+zugzR2J4zxjx+4IosEtbr/z6hNFcKjW4/a9HNOH8iJR16KoXCGN8dm222D42+U g7ewn8EqVHnlR+BaQSP7mXpa/j5vXCoUvX0iwcahkfD9D2EejYw1ObVRg/7GSLfc 7OEhe7SX1u4bOkhRk/oL9gMJXwK6KcbdmrPbSY83bFPhBmLm/6X5KhS/D+z9sQ1J 6OU44PWSlXk9qwFZd5fb4VLQ53HIaec5KZs2d8Sar44pqGVeCSDtSd/SKxNfaX3Z Pw75NaYHLTIqcAU4sFu1LsqdgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt/HVDg O/07aBdmmhOtOJSBDy5CMB8GA1UdIwQYMBaAFOOZ9Tz6UqvVqMfB05KVnDlfOeJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCNi9ENEYxQzUyNjgz NUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5V294OEhUa3BXY09WODU0 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1bjFQUHBTcTlXb3g4SFRrcFdjT1Y4NTRuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBCNi9ENEYxQzUyNjgzNUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5 V294OEhUa3BXY09WODU0bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuDUDFgKNsMlulZ///z+g0jwGeW2t4a6H02YeDCDFFLTnvuuihI1tV Cy8Njg+oKjJ4JZ7qfKJRNbK8a3uwS+BGCdUR9EnDdwe0F3a7IeT7lwv7vVRB3Gj5 yCwhug4Y5vEfab3rmL40Wh4Pgb0sI+eD+EiIvYEAjTKpAoLJWrrkzmoD3Kd68aXL i2Zo2xVjbubpuH87DRamT9KXhA1lDAc6KS0QsYPeL9MFMnJuxkzWpOYPGS1fpGps 4sUiPV9MGuL+VyzXVY/4PRaGr1sgffn+PTq5rer5gBO1DMfGK1zfSKno1n9TKs63 n/k1lVOCV196ArG0EHY7wNR8Oy900Gtp -----END CERTIFICATE-----Generated at Sun Jun 15 08:36:03 2025 by rpki-client