$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft File: 45n1PPpSq9Wox8HTkpWcOV854n4.mft (raw, json) Hash identifier: hTyf+xMnzk/CXEPBPSl7yauJPh3UINPow4LjHZp0Qm8= Subject key identifier: 6E:C6:78:AD:BA:FA:F3:BA:38:2B:05:9D:2F:74:E5:6B:69:84:39:78 Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E Certificate issuer: /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Certificate serial: 0F20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft Manifest number: 0F07 Signing time: Fri 22 Aug 2025 17:44:57 +0000 Manifest this update: Fri 22 Aug 2025 17:44:57 +0000 Manifest next update: Fri 29 Aug 2025 17:44:57 +0000 Files and hashes: 1: 45n1PPpSq9Wox8HTkpWcOV854n4.crl (hash: nEhx55uoVGAZ+9f4OYH7/2H6f7eUe/g044qtp7DjJSM=) 2: 57A86D66553F11EBA47EB279C4F9AE02.roa (hash: TN0DQj5Vs5ytuH5F5DVzodkfR9FeIuALNCosaZRkbvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3872 (0xf20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Validity Not Before: Aug 22 17:44:57 2025 GMT Not After : Aug 29 17:44:57 2025 GMT Subject: CN=68a8ac99-0662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:09:6d:92:df:20:e2:d9:21:bc:af:0c:ce: ee:87:c5:34:bb:e1:93:9c:b1:93:5b:d3:6f:64:93: 6b:a4:1b:6e:65:17:0a:5c:95:18:bb:63:d1:f3:bf: 74:1c:ff:ca:5e:4d:17:7f:6d:e4:cf:fa:a7:98:47: 69:79:e8:ad:22:84:5e:82:15:16:6e:de:23:00:d6: b3:e4:20:05:ba:16:a7:00:0c:87:0b:fd:f0:3a:48: bf:68:08:dc:90:3f:73:aa:48:bb:e4:06:ff:6e:fc: ab:1c:95:de:cb:84:bd:df:9c:aa:45:c5:11:2c:cc: 42:46:c2:2c:cb:c5:0d:8f:6c:8a:70:34:82:e1:8e: 43:35:19:f8:f3:a1:45:98:fb:c0:50:6b:29:9f:97: 87:57:72:42:1a:d3:c4:37:db:0d:94:9b:20:66:3f: 95:27:8a:cd:b4:ff:33:c6:ba:26:43:e4:6e:87:34: 1b:24:c5:a9:ae:20:38:d5:5e:84:6e:35:35:40:e1: 05:07:66:6c:65:38:62:6b:19:ac:59:25:49:3a:60: 42:6e:fa:53:43:73:96:4a:22:23:10:4d:e3:c2:68: 7f:00:af:97:0f:38:52:03:41:8c:1c:4c:11:f9:74: 3f:01:72:ec:98:36:bc:22:ef:07:8a:9a:ff:48:0e: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C6:78:AD:BA:FA:F3:BA:38:2B:05:9D:2F:74:E5:6B:69:84:39:78 X509v3 Authority Key Identifier: keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:fa:7f:29:a3:26:bd:d1:2c:09:89:3e:3e:43:db:1b:24:5c: a6:0a:a4:6a:63:9d:5f:85:2c:a5:0f:f3:a2:30:1b:e8:48:c4: b1:53:50:b3:2c:1a:cf:13:44:07:c3:31:98:03:d4:8b:eb:63: 2f:54:07:66:1a:0b:eb:e3:91:6e:e8:f3:ce:02:fd:d2:b5:46: 72:b0:62:60:85:cd:3e:6b:9a:5d:05:2d:e6:f8:73:c3:ab:2c: da:3c:26:63:23:27:b0:bf:c6:fd:13:36:41:a1:a1:49:16:80: 58:51:99:4f:3f:91:4b:c4:c0:1d:09:20:f2:62:5e:80:cc:11: b8:89:5e:4a:34:6a:fd:cb:00:b4:b8:9b:d2:9a:98:c8:85:17: 8a:a5:88:e6:30:7a:00:0e:6c:a9:20:59:02:c7:a6:61:27:24: 3f:9d:ac:b9:00:53:4a:8a:60:2c:d4:6d:92:83:71:3b:d5:87: 13:25:78:fb:38:67:b4:20:9e:eb:e5:fd:f6:6e:d6:a6:00:ea: 7c:2b:1e:df:6f:c6:f5:33:b2:94:da:c3:b4:58:4a:d9:4e:0c: d3:2d:ae:c1:2d:aa:b3:71:53:f1:e9:b8:52:7f:a5:9c:00:22: 4a:0e:1a:24:f5:83:e5:a8:14:e7:09:cc:1c:b4:33:50:4f:0d: 56:08:a6:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwQjYxMTAvBgNVBAUTKEUzOTlGNTNDRkE1MkFCRDVBOEM3QzFEMzkyOTU5QzM5 NUYzOUUyN0UwHhcNMjUwODIyMTc0NDU3WhcNMjUwODI5MTc0NDU3WjAYMRYwFAYD VQQDEw02OGE4YWM5OS0wNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxAJbZLfIOLZIbyvDM7uh8U0u+GTnLGTW9NvZJNrpBtuZRcKXJUYu2PR8790 HP/KXk0Xf23kz/qnmEdpeeitIoReghUWbt4jANaz5CAFuhanAAyHC/3wOki/aAjc kD9zqki75Ab/bvyrHJXey4S935yqRcURLMxCRsIsy8UNj2yKcDSC4Y5DNRn486FF mPvAUGspn5eHV3JCGtPEN9sNlJsgZj+VJ4rNtP8zxromQ+RuhzQbJMWpriA41V6E bjU1QOEFB2ZsZThiaxmsWSVJOmBCbvpTQ3OWSiIjEE3jwmh/AK+XDzhSA0GMHEwR +XQ/AXLsmDa8Iu8Hipr/SA4XRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7GeK26 +vO6OCsFnS905WtphDl4MB8GA1UdIwQYMBaAFOOZ9Tz6UqvVqMfB05KVnDlfOeJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCNi9ENEYxQzUyNjgz NUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5V294OEhUa3BXY09WODU0 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1bjFQUHBTcTlXb3g4SFRrcFdjT1Y4NTRuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBCNi9ENEYxQzUyNjgzNUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5 V294OEhUa3BXY09WODU0bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp+n8poya90SwJiT4+Q9sbJFymCqRqY51fhSylD/OiMBvoSMSxU1Cz LBrPE0QHwzGYA9SL62MvVAdmGgvr45Fu6PPOAv3StUZysGJghc0+a5pdBS3m+HPD qyzaPCZjIyewv8b9EzZBoaFJFoBYUZlPP5FLxMAdCSDyYl6AzBG4iV5KNGr9ywC0 uJvSmpjIhReKpYjmMHoADmypIFkCx6ZhJyQ/nay5AFNKimAs1G2Sg3E71YcTJXj7 OGe0IJ7r5f32btamAOp8Kx7fb8b1M7KU2sO0WErZTgzTLa7BLaqzcVPx6bhSf6Wc ACJKDhok9YPlqBTnCcwctDNQTw1WCKZO -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:02 2025 by rpki-client