$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json) Hash identifier: l0endpa/ROg4kom4E3tuYsswkE3FstRTpGVkRjQSwqU= Subject key identifier: 1D:5D:28:1A:AE:7A:14:11:0D:E4:20:AF:47:D8:9C:4C:14:37:EB:3C Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft Manifest number: 0145 Signing time: Thu 03 Jul 2025 04:27:00 +0000 Manifest this update: Thu 03 Jul 2025 04:26:59 +0000 Manifest next update: Thu 10 Jul 2025 04:26:59 +0000 Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: oQQn5tPjh0lIkpArunGspMYVFtL/Zjd5kptkNK33bQE=) 2: 3802AF56829811EEB7C3F322C4F9AE02.roa (hash: /dryDqRy0DH6c/gZr4MBN4BosfeqNmHeRwKmrIx/CX8=) 3: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: ZuM6BVmH6niQKuKQ1eCiPR55KnpBaOjGce45jTQXxyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Jul 3 04:26:59 2025 GMT Not After : Jul 10 04:26:59 2025 GMT Subject: CN=68660694-88b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6a:1d:0c:9b:63:b9:08:ed:4b:42:87:50:84: c9:6c:95:f3:bc:dc:38:1a:ad:db:27:7a:a6:c1:66: ee:d6:53:4a:0d:ef:c2:26:5e:7d:c2:68:a4:53:4e: e0:43:f5:cc:34:f2:15:46:ce:e6:22:d7:1f:58:15: 2b:a6:dd:74:74:39:e0:fa:70:86:7a:b2:b2:e2:aa: 10:43:68:ec:78:d3:b9:d6:f6:69:bf:99:56:49:cd: 64:bd:10:b7:ee:ba:65:ad:2a:1a:bf:a5:07:05:7d: fb:5e:5c:9a:c9:2e:e7:c6:d4:68:80:35:71:52:66: 24:68:35:e3:e5:58:98:78:78:35:dc:11:e5:e2:67: 5c:48:18:6f:06:ae:2a:ba:4c:02:c9:9f:e5:41:67: 54:60:20:ee:2e:32:7e:eb:24:05:81:3a:65:e6:99: c8:90:18:01:b6:d0:30:65:fe:72:06:57:48:a3:88: 28:7b:c6:ad:2d:ae:53:7b:6b:7c:30:0c:73:d6:e9: 1a:84:68:cd:cd:0b:70:a0:08:73:ae:0b:af:d5:ce: c7:33:d2:00:31:44:76:23:7b:f2:a5:7f:12:e4:28: ac:ff:80:72:79:4f:f8:34:af:bb:ae:19:2b:56:8c: 66:29:ed:b2:7c:4c:f8:8c:57:fd:e0:a2:54:bd:53: d9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5D:28:1A:AE:7A:14:11:0D:E4:20:AF:47:D8:9C:4C:14:37:EB:3C X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1a:d7:84:78:46:ca:46:83:98:3c:30:66:37:13:ef:af:93: 48:14:e6:9b:a5:12:af:49:c9:92:56:54:b2:ed:58:bc:b3:60: 32:59:39:5a:89:ec:2f:70:b2:36:e9:12:45:49:61:45:3e:65: 05:b1:a9:ad:a6:0b:61:44:af:69:0a:9e:f0:80:d2:f1:18:a1: 56:90:c8:6d:e1:2d:a2:a6:b7:dd:d5:0b:23:6c:f4:5d:85:97: 77:40:5b:5b:3a:bd:02:fb:f4:30:a2:34:1a:a7:53:d3:12:95: dd:3c:0d:55:2e:95:84:63:71:f8:73:cb:3a:a0:54:4a:f1:c4: 46:1e:fb:9c:76:37:07:9d:d9:06:2c:46:62:b4:5e:24:04:15: be:70:c6:10:64:f1:7f:c5:2a:07:d0:57:3d:00:e7:b5:9d:48: c0:17:e6:08:cc:92:db:1b:8f:26:18:b1:5d:7e:c0:8e:31:15: 22:4a:3d:ec:8c:be:ec:eb:97:d9:ff:76:3f:dd:c8:8c:09:85: 1b:e1:f3:7e:56:7d:53:2c:c9:17:02:c8:f4:f6:1b:a3:06:cd: a4:9d:93:92:29:96:3a:ef:f7:41:56:6c:d7:df:e8:37:45:8d: 30:63:b9:1a:56:52:3c:5e:19:11:34:8d:8c:e3:5f:c9:ec:27: df:24:82:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjUwNzAzMDQyNjU5WhcNMjUwNzEwMDQyNjU5WjAYMRYwFAYD VQQDEw02ODY2MDY5NC04OGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2modDJtjuQjtS0KHUITJbJXzvNw4Gq3bJ3qmwWbu1lNKDe/CJl59wmikU07g Q/XMNPIVRs7mItcfWBUrpt10dDng+nCGerKy4qoQQ2jseNO51vZpv5lWSc1kvRC3 7rplrSoav6UHBX37XlyayS7nxtRogDVxUmYkaDXj5ViYeHg13BHl4mdcSBhvBq4q ukwCyZ/lQWdUYCDuLjJ+6yQFgTpl5pnIkBgBttAwZf5yBldIo4goe8atLa5Te2t8 MAxz1ukahGjNzQtwoAhzrguv1c7HM9IAMUR2I3vypX8S5Cis/4ByeU/4NK+7rhkr VoxmKe2yfEz4jFf94KJUvVPZswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1dKBqu ehQRDeQgr0fYnEwUN+s8MB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTdBMi9CM0RGQzg4NDZENjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZp X2Z6dEFlMEIxQXNfWTlzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACGteEeEbKRoOYPDBmNxPvr5NIFOabpRKvScmSVlSy7Vi8s2AyWTla iewvcLI26RJFSWFFPmUFsamtpgthRK9pCp7wgNLxGKFWkMht4S2iprfd1QsjbPRd hZd3QFtbOr0C+/QwojQap1PTEpXdPA1VLpWEY3H4c8s6oFRK8cRGHvucdjcHndkG LEZitF4kBBW+cMYQZPF/xSoH0Fc9AOe1nUjAF+YIzJLbG48mGLFdfsCOMRUiSj3s jL7s65fZ/3Y/3ciMCYUb4fN+Vn1TLMkXAsj09hujBs2knZOSKZY67/dBVmzX3+g3 RY0wY7kaVlI8XhkRNI2M41/J7CffJIIN -----END CERTIFICATE-----Generated at Fri Jul 4 04:27:42 2025 by rpki-client