$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft File: t45_48stS1oeuSimkLxled-IG-k.mft (raw, json) Hash identifier: wnGbHBP5WTjzN3sa0bUT2n07leLzKG757cnls3Fzvq4= Subject key identifier: CD:54:52:D6:A7:3B:FF:3E:FE:4F:17:E9:53:1E:50:9C:40:5E:52:BB Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 Certificate issuer: /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft Manifest number: CF Signing time: Thu 19 Jun 2025 05:03:38 +0000 Manifest this update: Thu 19 Jun 2025 05:03:38 +0000 Manifest next update: Thu 26 Jun 2025 05:03:38 +0000 Files and hashes: 1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: YEgWUPwM9/tKDpvGbGAtcM27V4DoTpx441SEw6XPPnc=) 2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: 0tGMxqd+nrlGxUWseUpDWpwKJjNQ5GQu0j7Ro3HieYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Validity Not Before: Jun 19 05:03:38 2025 GMT Not After : Jun 26 05:03:38 2025 GMT Subject: CN=68539a2a-b114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ed:b4:d7:74:17:bc:10:50:3e:60:b9:bc:99: e9:1c:81:0c:3b:2c:52:e2:98:57:b2:27:60:e5:8b: d4:94:92:12:9d:44:e7:d6:a8:3f:d0:93:74:12:d0: 91:54:8e:0d:fb:62:e0:de:ae:bb:bd:ba:33:80:7e: ae:b0:8e:60:f0:d9:f3:3c:c8:24:3f:c2:97:54:29: 3b:7e:2d:ba:58:42:41:74:4c:4e:05:14:25:89:03: c5:ba:ff:0f:c2:63:5b:b0:fc:93:97:97:e2:58:5d: f5:06:17:34:f4:19:82:17:2f:69:a6:7b:73:25:4e: 18:46:98:33:09:d5:61:ff:ca:95:af:76:e3:00:c7: ad:f6:cb:75:73:b3:5b:42:eb:0e:03:23:7c:db:21: 2b:15:b8:55:8f:d6:18:b5:1a:f9:34:37:0b:c1:88: 08:7f:e2:fd:f8:ce:35:5d:4f:29:97:75:ab:e4:70: f1:97:78:ea:9c:04:f1:80:2c:87:20:f8:f3:5b:e6: f3:0c:99:f1:4b:24:5b:2a:ef:90:ff:5e:4e:40:d6: 0c:15:36:46:cd:6b:bf:86:f1:ee:ff:04:56:22:c6: 8f:de:a0:1c:35:5f:d0:f3:e8:7c:d7:b0:81:3e:dc: cc:e1:cb:e7:ca:65:cc:2d:50:cc:ad:cf:ea:a1:b7: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:54:52:D6:A7:3B:FF:3E:FE:4F:17:E9:53:1E:50:9C:40:5E:52:BB X509v3 Authority Key Identifier: keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ee:4e:c9:ce:e3:ce:e4:47:72:8d:01:d4:f6:a6:de:ae:59: 17:84:a9:da:d4:20:d8:75:17:f7:27:f5:8d:24:b2:ad:8e:0d: 10:51:2c:41:70:eb:de:7e:0c:06:ad:dd:ce:75:c2:b3:a1:9a: 17:f3:e6:b6:a1:03:8a:bc:7e:64:c5:02:83:87:09:e1:56:0b: db:05:5c:55:fb:36:0b:58:a8:4f:43:89:2c:19:3a:0e:ac:d9: da:c6:47:98:7a:6c:36:c5:d0:01:fe:59:94:58:9d:f8:62:98: 95:dd:ed:c2:e7:ad:b4:d9:fc:cd:12:2a:bd:94:3b:ee:a3:fc: 58:cf:c0:49:08:0c:17:45:b0:9f:48:a7:f3:91:c9:e2:48:3a: e0:29:1b:31:84:20:bc:bf:cd:9e:2c:dc:fd:68:a0:ce:e7:fd: fa:c7:a1:b8:e9:63:a0:63:ff:37:bb:51:48:8d:3c:a4:f2:42: a9:83:7f:53:24:ea:ff:6b:d4:3d:2c:78:f5:09:a8:91:b3:78: 3e:61:0f:63:38:33:12:7d:fd:c4:d1:69:f1:d8:cd:7b:cc:33: 2b:76:8b:08:34:0c:16:39:fd:eb:ce:39:5c:12:31:15:59:fe: 41:11:59:9f:51:65:bb:a6:27:a4:63:90:30:3b:31:7a:0b:17: 5b:c6:0b:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKEI3OEU3RkUzQ0IyRDRCNUExRUI5MjhBNjkwQkM2NTc5 REY4ODFCRTkwHhcNMjUwNjE5MDUwMzM4WhcNMjUwNjI2MDUwMzM4WjAYMRYwFAYD VQQDEw02ODUzOWEyYS1iMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+2013QXvBBQPmC5vJnpHIEMOyxS4phXsidg5YvUlJISnUTn1qg/0JN0EtCR VI4N+2Lg3q67vbozgH6usI5g8NnzPMgkP8KXVCk7fi26WEJBdExOBRQliQPFuv8P wmNbsPyTl5fiWF31Bhc09BmCFy9ppntzJU4YRpgzCdVh/8qVr3bjAMet9st1c7Nb QusOAyN82yErFbhVj9YYtRr5NDcLwYgIf+L9+M41XU8pl3Wr5HDxl3jqnATxgCyH IPjzW+bzDJnxSyRbKu+Q/15OQNYMFTZGzWu/hvHu/wRWIsaP3qAcNV/Q8+h817CB PtzM4cvnymXMLVDMrc/qobcTMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1UUtan O/8+/k8X6VMeUJxAXlK7MB8GA1UdIwQYMBaAFLeOf+PLLUtaHrkoppC8ZXnfiBvp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy83QUE4OTQzRTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMxb2V1U2lta0x4bGVkLUlH LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Q0NV80OHN0UzFvZXVTaW1rTHhsZWQtSUctay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy83QUE4OTQzRTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMx b2V1U2lta0x4bGVkLUlHLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh7k7JzuPO5EdyjQHU9qberlkXhKna1CDYdRf3J/WNJLKtjg0QUSxB cOvefgwGrd3OdcKzoZoX8+a2oQOKvH5kxQKDhwnhVgvbBVxV+zYLWKhPQ4ksGToO rNnaxkeYemw2xdAB/lmUWJ34YpiV3e3C56202fzNEiq9lDvuo/xYz8BJCAwXRbCf SKfzkcniSDrgKRsxhCC8v82eLNz9aKDO5/36x6G46WOgY/83u1FIjTyk8kKpg39T JOr/a9Q9LHj1CaiRs3g+YQ9jODMSff3E0Wnx2M17zDMrdosINAwWOf3rzjlcEjEV Wf5BEVmfUWW7piekY5AwOzF6Cxdbxgu6 -----END CERTIFICATE-----Generated at Fri Jun 20 17:43:42 2025 by rpki-client