$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft File: 45n1PPpSq9Wox8HTkpWcOV854n4.mft (raw, json) Hash identifier: fbQZ3aB2mS2fVuxgKE3Eq8xv3CpPgqJxAjR4kIYDzZU= Subject key identifier: FF:A2:9F:03:39:BD:E3:FE:14:0E:7F:F2:4A:50:9D:E7:5C:12:17:14 Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E Certificate issuer: /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Certificate serial: 0EED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft Manifest number: 0ED4 Signing time: Mon 12 May 2025 17:34:47 +0000 Manifest this update: Mon 12 May 2025 17:34:47 +0000 Manifest next update: Mon 19 May 2025 17:34:47 +0000 Files and hashes: 1: 45n1PPpSq9Wox8HTkpWcOV854n4.crl (hash: nsEs+SVgXTI01JyCG8b8Q3GfoAk/JC/pD4EjDvZ56PQ=) 2: 57A86D66553F11EBA47EB279C4F9AE02.roa (hash: TN0DQj5Vs5ytuH5F5DVzodkfR9FeIuALNCosaZRkbvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3821 (0xeed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Validity Not Before: May 12 17:34:47 2025 GMT Not After : May 19 17:34:47 2025 GMT Subject: CN=68223137-4c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d7:88:0c:0e:77:a9:a8:dd:9f:73:84:fe:54: fc:19:ef:34:03:fb:4a:37:32:d0:ae:1b:0c:ae:22: 38:d4:ee:6f:7a:a5:a4:f1:13:2f:dc:80:2a:56:15: 48:bc:a3:08:74:ae:22:46:53:54:c9:cd:05:4b:72: b6:e5:d0:3f:ab:e7:94:22:31:a2:28:fa:93:81:62: ba:00:7d:71:66:c9:80:60:41:50:88:07:36:6c:bf: 7d:8c:13:a6:93:77:f6:6b:cc:3c:42:1e:35:bf:46: d6:40:95:c6:e3:c6:9d:ee:45:b5:b8:0a:04:cb:bf: 3e:78:2c:d5:1c:be:06:aa:35:25:68:f8:04:14:ae: e7:ef:b0:09:91:99:47:bd:32:64:00:78:49:e5:5a: fe:0d:81:af:eb:9f:c4:08:d6:9e:c5:d8:c1:f7:03: a0:c2:71:d1:83:93:f4:51:93:e6:52:af:fb:81:c3: 09:ef:7c:cb:f8:9e:10:d2:f1:ae:c4:7b:d2:38:47: 1d:73:b4:71:ba:83:4c:59:7c:9b:a3:bb:f9:b7:f5: b4:ff:3e:5d:74:3c:bc:86:0d:37:79:38:f1:41:a0: f6:1a:48:2a:1d:59:cb:b2:7b:0d:fb:c3:89:37:4b: 19:59:fd:09:8c:30:bc:de:24:24:41:b6:f8:62:d8: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:9F:03:39:BD:E3:FE:14:0E:7F:F2:4A:50:9D:E7:5C:12:17:14 X509v3 Authority Key Identifier: keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d8:c9:2d:ef:25:a7:71:1a:bb:a7:31:06:85:48:82:a2:c7: 38:2d:83:1f:a3:75:2d:e7:99:77:bb:0b:a8:36:c5:f8:5e:67: 12:20:2e:c0:12:c7:7c:e6:69:98:4b:e2:4e:21:aa:85:2a:c0: 1f:e5:a8:09:3d:e1:1a:52:2b:7f:bc:06:55:02:f0:2c:42:d6: 6d:20:69:6f:bb:14:42:28:71:45:72:62:cd:61:19:09:39:33: e8:44:79:84:8a:9d:cd:92:11:86:dc:b5:be:fa:1e:c9:65:d7: c8:89:1b:6b:4e:8b:a8:16:01:08:6e:df:2a:de:af:6b:b3:c6: 81:a4:b3:ac:07:9b:cc:36:be:21:63:98:86:1e:6b:f3:98:9b: 11:8b:b2:5c:7c:61:c4:ad:d1:ef:ed:17:27:ae:46:e1:2b:94: 10:63:05:44:6e:de:cb:05:d0:37:29:15:5e:2d:04:bd:1f:f5: ec:0c:d4:f4:7d:5b:36:50:b4:00:1a:ff:ad:ff:e3:69:55:51: 70:5e:65:78:6b:45:62:27:aa:6d:cb:cd:02:e5:36:20:6c:48: 74:a1:95:14:cd:e3:45:94:bf:92:b6:16:c0:b1:25:eb:2d:79: a9:cd:5b:17:d6:2c:91:d7:4b:96:b3:eb:ee:8c:dc:4c:4d:bf: f5:cd:0f:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwQjYxMTAvBgNVBAUTKEUzOTlGNTNDRkE1MkFCRDVBOEM3QzFEMzkyOTU5QzM5 NUYzOUUyN0UwHhcNMjUwNTEyMTczNDQ3WhcNMjUwNTE5MTczNDQ3WjAYMRYwFAYD VQQDEw02ODIyMzEzNy00YzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6teIDA53qajdn3OE/lT8Ge80A/tKNzLQrhsMriI41O5veqWk8RMv3IAqVhVI vKMIdK4iRlNUyc0FS3K25dA/q+eUIjGiKPqTgWK6AH1xZsmAYEFQiAc2bL99jBOm k3f2a8w8Qh41v0bWQJXG48ad7kW1uAoEy78+eCzVHL4GqjUlaPgEFK7n77AJkZlH vTJkAHhJ5Vr+DYGv65/ECNaexdjB9wOgwnHRg5P0UZPmUq/7gcMJ73zL+J4Q0vGu xHvSOEcdc7RxuoNMWXybo7v5t/W0/z5ddDy8hg03eTjxQaD2GkgqHVnLsnsN+8OJ N0sZWf0JjDC83iQkQbb4YtgCPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+inwM5 veP+FA5/8kpQnedcEhcUMB8GA1UdIwQYMBaAFOOZ9Tz6UqvVqMfB05KVnDlfOeJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCNi9ENEYxQzUyNjgz NUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5V294OEhUa3BXY09WODU0 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1bjFQUHBTcTlXb3g4SFRrcFdjT1Y4NTRuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBCNi9ENEYxQzUyNjgzNUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5 V294OEhUa3BXY09WODU0bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP2Mkt7yWncRq7pzEGhUiCosc4LYMfo3Ut55l3uwuoNsX4XmcSIC7A Esd85mmYS+JOIaqFKsAf5agJPeEaUit/vAZVAvAsQtZtIGlvuxRCKHFFcmLNYRkJ OTPoRHmEip3NkhGG3LW++h7JZdfIiRtrTouoFgEIbt8q3q9rs8aBpLOsB5vMNr4h Y5iGHmvzmJsRi7JcfGHErdHv7RcnrkbhK5QQYwVEbt7LBdA3KRVeLQS9H/XsDNT0 fVs2ULQAGv+t/+NpVVFwXmV4a0ViJ6pty80C5TYgbEh0oZUUzeNFlL+SthbAsSXr LXmpzVsX1iyR10uWs+vujNxMTb/1zQ/1 -----END CERTIFICATE-----Generated at Tue May 13 05:28:26 2025 by rpki-client