$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json) Hash identifier: Pr6b9pNUA9wnODeNGnhDlPfMhCh+0cSZsYv6pGnsGjU= Subject key identifier: 86:71:66:D0:48:CE:7D:95:35:78:41:55:2A:C6:AF:2C:41:1D:80:3B Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft Manifest number: 0162 Signing time: Sat 23 Aug 2025 04:11:29 +0000 Manifest this update: Sat 23 Aug 2025 04:11:29 +0000 Manifest next update: Sat 30 Aug 2025 04:11:29 +0000 Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: 1Qv26LXFh6SST0JU2B1lP3KSzdvit8bId5iEQ+o60dc=) 2: 624C3E865DB011F0875D570FC4F9AE02.roa (hash: JGVNpZteQ5T3+mgqyzy1RfZ+6XHn9hRsWK2EBifvsJ8=) 3: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: /SYnf8xCqV4M9ZyljYxcqSyU1MxH8Hs1CHdh62/lPpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Aug 23 04:11:29 2025 GMT Not After : Aug 30 04:11:29 2025 GMT Subject: CN=68a93f71-fc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:33:0d:ad:0f:bd:2e:39:9e:36:07:cc:5b:95: dd:48:c1:bb:79:f0:6a:6f:77:ef:32:4f:c6:64:83: 05:f9:04:f8:06:76:fb:69:34:a2:eb:4f:14:6d:ec: 76:64:da:db:ad:ff:37:da:50:39:26:26:83:5e:db: 7c:b2:9c:1b:56:d0:fa:44:fb:06:4f:f6:05:e7:d7: f0:c5:85:c8:f0:a2:98:7b:e5:6d:b3:2d:ce:5d:95: 01:9d:70:62:73:9e:73:c6:ac:29:d9:ef:8c:67:46: f9:db:31:fd:8b:9b:43:d3:c1:e2:65:02:b2:27:c9: c6:43:ab:3c:91:6c:e7:05:06:24:ee:b8:35:f0:ea: d7:45:c0:49:c5:5b:8f:22:f5:78:78:47:03:1c:03: 3e:75:82:7f:e3:ce:58:3d:9a:25:f9:99:91:d6:c8: df:84:92:06:ed:69:63:e1:51:86:51:59:56:9d:b3: 3e:03:d4:e3:c8:05:c6:06:a8:a3:e8:c7:d7:7f:29: 7d:72:7d:82:cb:94:5f:51:88:18:b1:cc:30:40:25: f4:ff:7b:5a:51:c8:f7:48:1d:53:fb:44:bc:c0:c7: 10:a2:15:87:fc:33:ac:e2:db:bd:b0:a2:54:a3:06: db:b3:a1:c6:ff:95:b1:a0:12:08:9d:e9:60:ae:d1: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:71:66:D0:48:CE:7D:95:35:78:41:55:2A:C6:AF:2C:41:1D:80:3B X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:b1:bf:62:6f:60:76:ba:50:74:14:63:ed:e2:59:b0:1b:bf: 74:2f:44:d8:16:12:21:0f:56:19:91:57:97:bd:4f:7b:a3:4c: 15:d5:ab:a1:00:f2:8e:52:52:b1:58:d3:9c:3a:a5:ad:a6:b7: eb:b3:d0:0a:7e:dc:86:09:16:21:80:52:84:98:50:ab:8c:7f: 41:e5:e8:47:9a:a7:e4:88:e5:31:b6:b8:51:c2:84:14:2d:e2: 44:36:cc:ea:36:84:ef:e2:0c:65:28:8a:f6:da:8a:b0:32:57: 62:bd:7e:b3:db:74:6f:e9:ca:d0:bd:bf:e5:e3:44:84:a6:6f: 24:cc:a4:74:70:2c:2c:52:4d:6d:e8:5e:4f:c7:d6:e7:8f:fa: d8:85:4d:cc:f2:6e:01:00:ae:97:af:9f:7e:3e:27:be:83:eb: da:a8:db:31:78:b4:d6:aa:a1:0f:a8:9a:a5:a3:56:63:b8:be: 28:b0:43:80:e9:f1:37:0a:21:c9:b4:c6:dc:71:de:5a:e1:f2: 56:7b:f2:e4:ae:b1:0c:e2:0a:da:ff:0d:e1:89:07:a8:f7:4d: d5:ec:45:9a:95:12:6d:db:d9:f9:ac:2f:d2:bc:17:e6:1a:36: 20:9d:09:75:ed:06:60:73:ca:51:d5:c4:8d:d2:7a:9d:74:2a: 17:4f:03:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjUwODIzMDQxMTI5WhcNMjUwODMwMDQxMTI5WjAYMRYwFAYD VQQDEw02OGE5M2Y3MS1mYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jMNrQ+9LjmeNgfMW5XdSMG7efBqb3fvMk/GZIMF+QT4Bnb7aTSi608Ubex2 ZNrbrf832lA5JiaDXtt8spwbVtD6RPsGT/YF59fwxYXI8KKYe+Vtsy3OXZUBnXBi c55zxqwp2e+MZ0b52zH9i5tD08HiZQKyJ8nGQ6s8kWznBQYk7rg18OrXRcBJxVuP IvV4eEcDHAM+dYJ/485YPZol+ZmR1sjfhJIG7Wlj4VGGUVlWnbM+A9TjyAXGBqij 6MfXfyl9cn2Cy5RfUYgYscwwQCX0/3taUcj3SB1T+0S8wMcQohWH/DOs4tu9sKJU owbbs6HG/5WxoBIInelgrtHqfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZxZtBI zn2VNXhBVSrGryxBHYA7MB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTdBMi9CM0RGQzg4NDZENjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZp X2Z6dEFlMEIxQXNfWTlzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpsb9ib2B2ulB0FGPt4lmwG790L0TYFhIhD1YZkVeXvU97o0wV1auh APKOUlKxWNOcOqWtprfrs9AKftyGCRYhgFKEmFCrjH9B5ehHmqfkiOUxtrhRwoQU LeJENszqNoTv4gxlKIr22oqwMldivX6z23Rv6crQvb/l40SEpm8kzKR0cCwsUk1t 6F5Px9bnj/rYhU3M8m4BAK6Xr59+Pie+g+vaqNsxeLTWqqEPqJqlo1ZjuL4osEOA 6fE3CiHJtMbccd5a4fJWe/LkrrEM4gra/w3hiQeo903V7EWalRJt29n5rC/SvBfm GjYgnQl17QZgc8pR1cSN0nqddCoXTwOM -----END CERTIFICATE-----Generated at Sat Aug 23 20:39:22 2025 by rpki-client