$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft File: t45_48stS1oeuSimkLxled-IG-k.mft (raw, json) Hash identifier: CBWnZWaN+6mwG6rb3vO2AGC/3ZMBtnvgVExUJ/Ybgc8= Subject key identifier: 35:A7:63:59:E7:70:BC:C8:97:65:78:9D:20:3D:39:74:08:44:F7:BF Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 Certificate issuer: /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft Manifest number: B8 Signing time: Sat 03 May 2025 05:18:41 +0000 Manifest this update: Sat 03 May 2025 05:18:41 +0000 Manifest next update: Sat 10 May 2025 05:18:41 +0000 Files and hashes: 1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: tgbzlpwGUZM1JYSaT7ZISWfP/OOFHhp+MXKCK8byETU=) 2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: 0tGMxqd+nrlGxUWseUpDWpwKJjNQ5GQu0j7Ro3HieYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Validity Not Before: May 3 05:18:41 2025 GMT Not After : May 10 05:18:41 2025 GMT Subject: CN=6815a731-f7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:3c:91:41:60:6e:18:11:78:7b:9a:7f:6e: b0:3e:ca:4e:7d:88:00:6c:33:53:16:31:39:98:b3: fa:d4:d6:f1:2b:f1:87:af:e8:66:5e:85:83:18:ad: f2:9d:c0:5f:68:00:cb:34:2d:87:39:b7:c6:2c:be: 8c:cb:80:a7:2e:bc:45:a9:7f:0d:5f:6f:ec:a6:ae: 95:47:fd:43:fa:ac:68:3f:71:69:aa:41:61:68:5b: ff:c3:44:99:2a:b5:14:12:43:1b:33:53:c4:37:c0: 7a:19:ec:72:b9:1e:45:b9:ea:aa:82:25:6e:fe:27: 6d:e9:bb:aa:16:86:09:92:b7:ad:e8:9c:91:8a:89: 58:44:cf:f2:09:b4:c6:b3:c0:62:0c:a2:1b:cb:2b: f8:1e:a8:8a:09:bb:3e:46:96:ce:ef:d3:da:84:88: c2:59:51:dc:38:2b:a5:fa:d3:f7:ad:cc:47:f8:95: b4:81:7c:47:7b:41:24:dc:0c:ff:ed:12:fb:ea:4c: c1:2b:5d:12:d1:19:7b:f4:a9:e4:dc:0a:c9:fe:af: 93:ed:4f:f7:79:1c:ec:e7:df:43:07:5a:07:d8:78: a5:77:6f:88:c5:8e:ab:19:e8:9a:2b:5c:27:3c:35: e3:42:5d:f5:de:9d:bb:3f:32:3a:73:83:c2:d6:22: c6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A7:63:59:E7:70:BC:C8:97:65:78:9D:20:3D:39:74:08:44:F7:BF X509v3 Authority Key Identifier: keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:79:8b:56:f4:3d:f5:db:79:ba:2f:23:fb:b7:85:7d:cb:f6: 5f:b1:ab:f3:4a:bd:91:13:d6:03:ad:85:34:5b:05:d5:e2:ba: 81:68:a0:a7:0e:8d:56:ae:19:c2:99:53:53:12:4a:1d:35:d5: 67:78:12:80:67:5f:c3:09:da:ca:7d:25:81:a5:3f:d6:51:8c: 6f:7e:93:02:63:cb:44:4b:3b:01:cd:5c:85:42:70:ad:a0:ee: b9:4f:61:b4:ee:3f:d5:4a:42:ec:94:77:f9:3c:f7:7f:25:91: d4:5b:86:29:af:c0:0a:f7:24:e8:e8:ba:66:a0:2f:2a:04:79: 1e:0c:a9:0e:27:1d:7f:05:e4:a7:a4:30:a1:01:a1:9e:52:53: 9b:db:5a:7d:f8:7e:04:a0:06:c9:87:27:2d:13:ac:b8:f1:9d: b8:f2:17:6c:43:b1:e8:c9:f7:32:3d:6f:5a:65:98:69:8e:a5: 7d:c9:01:01:4d:38:60:24:52:70:fe:e2:4c:67:8b:aa:12:b5: cd:fd:d1:6d:3e:a0:0f:f4:15:bd:56:0d:75:aa:96:36:b2:5a: f6:76:b3:0a:e8:9a:3f:29:78:76:61:17:a3:a6:ff:ce:8b:9a: 57:be:31:b1:1a:0b:c2:e0:05:ed:3e:b9:05:55:60:61:d1:a4: bd:1b:a8:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKEI3OEU3RkUzQ0IyRDRCNUExRUI5MjhBNjkwQkM2NTc5 REY4ODFCRTkwHhcNMjUwNTAzMDUxODQxWhcNMjUwNTEwMDUxODQxWjAYMRYwFAYD VQQDEw02ODE1YTczMS1mN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Mo8kUFgbhgReHuaf26wPspOfYgAbDNTFjE5mLP61NbxK/GHr+hmXoWDGK3y ncBfaADLNC2HObfGLL6My4CnLrxFqX8NX2/spq6VR/1D+qxoP3FpqkFhaFv/w0SZ KrUUEkMbM1PEN8B6GexyuR5FueqqgiVu/idt6buqFoYJkret6JyRiolYRM/yCbTG s8BiDKIbyyv4HqiKCbs+RpbO79PahIjCWVHcOCul+tP3rcxH+JW0gXxHe0Ek3Az/ 7RL76kzBK10S0Rl79Knk3ArJ/q+T7U/3eRzs599DB1oH2Hild2+IxY6rGeiaK1wn PDXjQl313p27PzI6c4PC1iLGbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWnY1nn cLzIl2V4nSA9OXQIRPe/MB8GA1UdIwQYMBaAFLeOf+PLLUtaHrkoppC8ZXnfiBvp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy83QUE4OTQzRTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMxb2V1U2lta0x4bGVkLUlH LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Q0NV80OHN0UzFvZXVTaW1rTHhsZWQtSUctay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy83QUE4OTQzRTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMx b2V1U2lta0x4bGVkLUlHLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoeYtW9D3123m6LyP7t4V9y/ZfsavzSr2RE9YDrYU0WwXV4rqBaKCn Do1WrhnCmVNTEkodNdVneBKAZ1/DCdrKfSWBpT/WUYxvfpMCY8tESzsBzVyFQnCt oO65T2G07j/VSkLslHf5PPd/JZHUW4Ypr8AK9yTo6LpmoC8qBHkeDKkOJx1/BeSn pDChAaGeUlOb21p9+H4EoAbJhyctE6y48Z248hdsQ7HoyfcyPW9aZZhpjqV9yQEB TThgJFJw/uJMZ4uqErXN/dFtPqAP9BW9Vg11qpY2slr2drMK6Jo/KXh2YRejpv/O i5pXvjGxGgvC4AXtPrkFVWBh0aS9G6jF -----END CERTIFICATE-----Generated at Sun May 4 22:22:13 2025 by rpki-client