$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft File: 45n1PPpSq9Wox8HTkpWcOV854n4.mft (raw, json) Hash identifier: rQn3aNWa1CQTJLwHEg7mU5y+jqLVKXl8STReSzRuKFM= Subject key identifier: 2E:70:69:79:9A:67:C7:94:BB:BA:59:5E:7B:F8:0A:97:06:D1:40:83 Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E Certificate issuer: /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Certificate serial: 0F06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft Manifest number: 0EED Signing time: Wed 02 Jul 2025 17:51:30 +0000 Manifest this update: Wed 02 Jul 2025 17:51:29 +0000 Manifest next update: Wed 09 Jul 2025 17:51:29 +0000 Files and hashes: 1: 45n1PPpSq9Wox8HTkpWcOV854n4.crl (hash: LdobksWwnqS3QnjbUaY6eJWoHeHb56/6+keXWlCcqxM=) 2: 57A86D66553F11EBA47EB279C4F9AE02.roa (hash: TN0DQj5Vs5ytuH5F5DVzodkfR9FeIuALNCosaZRkbvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3846 (0xf06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Validity Not Before: Jul 2 17:51:29 2025 GMT Not After : Jul 9 17:51:29 2025 GMT Subject: CN=686571a2-4536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:f9:a1:57:27:14:ef:6a:02:ec:24:bd:fa: fa:4f:e8:0d:35:47:ac:92:e4:91:99:ad:1f:64:df: 1c:b5:56:fd:96:44:bf:ac:42:64:4e:59:6f:63:38: 72:d7:1f:40:02:cb:86:e2:42:d7:1e:4a:d2:8b:81: 79:15:b5:26:03:9f:ab:f2:02:4a:f9:8f:72:15:e4: 35:51:0b:de:c9:1a:f4:01:d6:db:da:fb:55:af:38: 28:5b:26:65:2c:a7:2c:22:a2:b0:bd:b4:f3:48:e8: 9c:e4:b1:f6:7e:a9:84:ea:94:b1:84:b9:da:bc:a1: 98:37:bd:d5:7a:d1:f3:b7:07:17:8a:30:a4:5a:63: 3e:7b:f9:e3:62:4b:7f:b4:f6:8a:60:4c:10:81:8b: 8d:ff:64:95:6f:2a:46:d1:bb:ae:62:48:4f:4a:17: cf:1a:56:ba:6f:8b:d9:33:d4:ef:8d:77:c9:9f:98: 15:d5:a8:fb:28:48:f6:50:d3:a7:95:6a:f8:a1:12: c8:b3:cc:f5:de:e2:eb:42:59:3f:e7:b7:a1:89:35: cf:b1:2c:60:1d:12:d7:4e:a3:74:cf:55:42:d0:3e: f1:26:f5:92:ec:cb:18:03:4a:d3:88:d6:23:21:36: 97:80:d1:d5:6c:5e:66:c9:30:d7:0e:ef:71:14:49: 31:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:70:69:79:9A:67:C7:94:BB:BA:59:5E:7B:F8:0A:97:06:D1:40:83 X509v3 Authority Key Identifier: keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:f2:9f:7f:e6:ac:30:80:8c:67:21:f5:32:d5:93:a7:7c:9a: 66:e0:3a:03:5d:14:f2:9e:8f:20:24:8a:f1:6a:a8:83:cc:d9: a7:eb:64:54:69:46:7c:98:85:12:e4:72:5b:67:4e:59:52:79: 5e:54:b6:b3:29:ba:09:95:b6:5c:c0:d5:5a:ef:a2:03:52:62: 2b:53:8f:d8:a8:a0:50:c5:71:d1:8b:95:b4:dc:c7:64:35:2f: e9:d6:c4:dd:82:a6:93:62:94:85:f6:7e:b4:20:18:51:28:ae: 1e:61:48:1d:6b:62:77:57:1c:28:6b:c0:46:0a:07:14:82:c1: d4:9c:60:cd:8c:bc:6b:c8:79:c2:24:8e:16:c0:19:c0:c7:6b: c5:b2:42:a4:4c:3e:67:68:d5:a9:da:0e:3f:b0:e1:6b:88:e5: 2b:7c:20:73:fe:9d:cc:4b:a6:ed:0f:fd:0c:c1:90:bc:f0:a2: 43:16:e8:43:99:ff:62:f8:6b:cf:4c:71:a3:d9:ee:a6:4f:5a: 00:32:ec:a0:4a:34:60:08:5e:29:61:a5:ba:66:c9:76:c9:64: 8c:47:0b:e2:80:1f:e6:61:ab:9b:90:f3:5f:e9:90:c8:ee:02: ba:3e:2b:e2:2e:2e:ad:a9:41:25:0b:00:66:d5:35:cc:82:43: 01:18:d6:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwQjYxMTAvBgNVBAUTKEUzOTlGNTNDRkE1MkFCRDVBOEM3QzFEMzkyOTU5QzM5 NUYzOUUyN0UwHhcNMjUwNzAyMTc1MTI5WhcNMjUwNzA5MTc1MTI5WjAYMRYwFAYD VQQDEw02ODY1NzFhMi00NTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBX5oVcnFO9qAuwkvfr6T+gNNUeskuSRma0fZN8ctVb9lkS/rEJkTllvYzhy 1x9AAsuG4kLXHkrSi4F5FbUmA5+r8gJK+Y9yFeQ1UQveyRr0Adbb2vtVrzgoWyZl LKcsIqKwvbTzSOic5LH2fqmE6pSxhLnavKGYN73VetHztwcXijCkWmM+e/njYkt/ tPaKYEwQgYuN/2SVbypG0buuYkhPShfPGla6b4vZM9TvjXfJn5gV1aj7KEj2UNOn lWr4oRLIs8z13uLrQlk/57ehiTXPsSxgHRLXTqN0z1VC0D7xJvWS7MsYA0rTiNYj ITaXgNHVbF5myTDXDu9xFEkx2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5waXma Z8eUu7pZXnv4CpcG0UCDMB8GA1UdIwQYMBaAFOOZ9Tz6UqvVqMfB05KVnDlfOeJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCNi9ENEYxQzUyNjgz NUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5V294OEhUa3BXY09WODU0 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1bjFQUHBTcTlXb3g4SFRrcFdjT1Y4NTRuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBCNi9ENEYxQzUyNjgzNUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5 V294OEhUa3BXY09WODU0bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn8p9/5qwwgIxnIfUy1ZOnfJpm4DoDXRTyno8gJIrxaqiDzNmn62RU aUZ8mIUS5HJbZ05ZUnleVLazKboJlbZcwNVa76IDUmIrU4/YqKBQxXHRi5W03Mdk NS/p1sTdgqaTYpSF9n60IBhRKK4eYUgda2J3Vxwoa8BGCgcUgsHUnGDNjLxryHnC JI4WwBnAx2vFskKkTD5naNWp2g4/sOFriOUrfCBz/p3MS6btD/0MwZC88KJDFuhD mf9i+GvPTHGj2e6mT1oAMuygSjRgCF4pYaW6Zsl2yWSMRwvigB/mYaubkPNf6ZDI 7gK6PiviLi6tqUElCwBm1TXMgkMBGNZt -----END CERTIFICATE-----Generated at Wed Jul 2 21:11:55 2025 by rpki-client