$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft File: t45_48stS1oeuSimkLxled-IG-k.mft (raw, json) Hash identifier: x+aUYvU9T45d8mAIqFLdaKFR2Oub15N7zVMCiDUfkKo= Subject key identifier: 2E:9C:F7:41:61:50:CD:D9:6A:2C:DE:1D:09:FA:A2:E4:1E:4D:74:69 Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 Certificate issuer: /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft Manifest number: E9 Signing time: Sat 09 Aug 2025 05:48:34 +0000 Manifest this update: Sat 09 Aug 2025 05:48:33 +0000 Manifest next update: Sat 16 Aug 2025 05:48:33 +0000 Files and hashes: 1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: VY+70xrzRgPPVRnHW+wOWx7T8f7kmw4FSI+FOLCt7rw=) 2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: 0tGMxqd+nrlGxUWseUpDWpwKJjNQ5GQu0j7Ro3HieYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Validity Not Before: Aug 9 05:48:33 2025 GMT Not After : Aug 16 05:48:33 2025 GMT Subject: CN=6896e132-a257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5d:6d:d6:3d:76:ce:f4:ef:d6:54:3b:05:28: 18:e4:b0:4d:23:e3:8f:8f:86:62:8c:5b:49:c4:e2: 35:68:5b:5f:f6:14:c4:d7:c7:4b:13:63:74:cc:fd: e1:8d:44:a1:dd:ba:99:21:c8:52:57:39:24:f3:b7: a3:d6:87:5c:12:96:95:48:4a:02:f0:8a:8c:66:05: 1a:bb:3a:6f:31:29:f0:9c:9d:7d:31:ed:76:6e:7c: 81:dd:1d:35:20:0a:4e:9e:df:da:44:0c:64:46:14: 9d:45:d3:80:9d:bf:8b:08:e0:00:8d:6f:66:0a:33: 21:02:54:4f:ee:5f:bc:bd:26:cb:59:d5:80:63:52: 6f:27:2d:2a:ee:0b:96:20:d8:8d:3d:45:be:28:75: 14:6a:58:8e:3a:8f:33:1d:94:28:c9:fa:2a:70:4a: a5:aa:55:0c:7e:41:a5:5a:d4:60:f2:62:7b:01:78: 81:ba:ee:ac:96:8b:83:75:ef:08:0a:09:94:80:d6: f6:73:41:e2:1e:53:09:58:12:7f:74:91:71:46:52: 1f:e5:0a:52:74:ef:e0:7b:5d:50:d6:26:44:d4:99: d9:16:bf:5e:73:8b:e5:a3:73:05:e2:a1:98:28:26: 6b:d2:f5:67:7c:c4:99:50:ba:82:6f:02:b4:67:3d: 71:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9C:F7:41:61:50:CD:D9:6A:2C:DE:1D:09:FA:A2:E4:1E:4D:74:69 X509v3 Authority Key Identifier: keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:15:cd:71:35:c0:08:28:b3:ee:9f:e3:e7:7b:73:ee:d7:be: a1:26:36:df:56:ca:33:08:20:ec:31:f7:3e:7b:31:15:b1:84: 09:a8:98:c9:5d:1b:70:26:62:ca:ca:09:f0:0b:43:98:8d:9e: b7:f8:f3:f8:80:96:4a:0c:87:17:32:86:a1:6c:f8:a3:bd:2a: 2a:d9:2c:79:20:48:3f:6f:da:08:9d:af:73:fc:eb:dd:fe:11: a2:7a:7d:fd:6c:0e:3b:23:7f:a3:8e:09:f0:d4:0c:26:a8:f3: 89:66:0f:a3:7d:c8:9b:98:6b:3f:bf:c3:68:e4:71:d8:0c:0f: 0a:0d:89:4d:f3:7d:49:16:ba:a4:c8:36:2f:8d:66:1c:25:df: a6:4d:5b:be:03:5b:a7:b0:d9:6b:a4:4b:96:69:3c:a4:c5:6b: 04:b7:25:eb:b8:55:2e:e8:aa:f2:30:12:91:09:5e:eb:2a:08: 12:a5:98:a2:20:6e:01:e3:7b:4c:40:bb:c2:9b:fd:6e:92:3b: 3f:d1:b2:70:65:0b:31:b6:b7:34:fb:06:2e:73:9f:fe:80:1e: d8:1f:be:a1:89:be:9b:b0:3f:e0:26:87:3a:bc:99:c0:b6:e5: f9:e9:8f:71:4e:2d:ac:46:6b:fd:02:b3:11:e0:20:40:b5:44: 9a:98:60:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKEI3OEU3RkUzQ0IyRDRCNUExRUI5MjhBNjkwQkM2NTc5 REY4ODFCRTkwHhcNMjUwODA5MDU0ODMzWhcNMjUwODE2MDU0ODMzWjAYMRYwFAYD VQQDEw02ODk2ZTEzMi1hMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsl1t1j12zvTv1lQ7BSgY5LBNI+OPj4ZijFtJxOI1aFtf9hTE18dLE2N0zP3h jUSh3bqZIchSVzkk87ej1odcEpaVSEoC8IqMZgUauzpvMSnwnJ19Me12bnyB3R01 IApOnt/aRAxkRhSdRdOAnb+LCOAAjW9mCjMhAlRP7l+8vSbLWdWAY1JvJy0q7guW INiNPUW+KHUUaliOOo8zHZQoyfoqcEqlqlUMfkGlWtRg8mJ7AXiBuu6slouDde8I CgmUgNb2c0HiHlMJWBJ/dJFxRlIf5QpSdO/ge11Q1iZE1JnZFr9ec4vlo3MF4qGY KCZr0vVnfMSZULqCbwK0Zz1xoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6c90Fh UM3ZaizeHQn6ouQeTXRpMB8GA1UdIwQYMBaAFLeOf+PLLUtaHrkoppC8ZXnfiBvp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy83QUE4OTQzRTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMxb2V1U2lta0x4bGVkLUlH LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Q0NV80OHN0UzFvZXVTaW1rTHhsZWQtSUctay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy83QUE4OTQzRTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMx b2V1U2lta0x4bGVkLUlHLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUFc1xNcAIKLPun+Pne3Pu176hJjbfVsozCCDsMfc+ezEVsYQJqJjJ XRtwJmLKygnwC0OYjZ63+PP4gJZKDIcXMoahbPijvSoq2Sx5IEg/b9oIna9z/Ovd /hGien39bA47I3+jjgnw1AwmqPOJZg+jfcibmGs/v8No5HHYDA8KDYlN831JFrqk yDYvjWYcJd+mTVu+A1unsNlrpEuWaTykxWsEtyXruFUu6KryMBKRCV7rKggSpZii IG4B43tMQLvCm/1ukjs/0bJwZQsxtrc0+wYuc5/+gB7YH76hib6bsD/gJoc6vJnA tuX56Y9xTi2sRmv9ArMR4CBAtUSamGCA -----END CERTIFICATE-----Generated at Mon Aug 11 04:21:59 2025 by rpki-client