$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft File: 45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json) Hash identifier: lEy7LvIy0I6o/jMjtEcGPExmxnI47wpPSYh3aBNLSRs= Subject key identifier: 1F:F7:7B:33:41:D2:FD:EA:14:67:ED:97:94:CB:87:74:53:C9:8B:52 Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft Manifest number: 3484 Signing time: Sat 10 May 2025 15:09:44 +0000 Manifest this update: Sat 10 May 2025 15:09:44 +0000 Manifest next update: Sat 17 May 2025 15:09:44 +0000 Files and hashes: 1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: P1A5t7Ub5X9clhbhsMalpFLEVG77BZHBMH5JWo1jdU8=) 2: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: cqg+DSKnyJEQ2eZBDWRlzFwbq68PCAP4lP7BZ9uGoSY=) 3: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: 48skWMAdj9drhHu2eh7bahmOkoZkfvFChpuIgM6+7w8=) 4: AAF9A7AC41AC11EA9BD8CB25C4F9AE02.roa (hash: wZnaCk/gJYbevnAK1yVFsEKeXrhTNDea/rw+miTZiyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: May 10 15:09:44 2025 GMT Not After : May 17 15:09:44 2025 GMT Subject: CN=681f6c38-de24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:e7:8b:44:dc:9c:12:da:29:e0:61:ff:c3: 75:5c:d9:42:1a:32:7e:3b:95:26:68:26:c0:40:54: 2a:ff:8b:ce:fc:63:39:bf:44:2d:36:e6:a3:53:17: e1:cc:8c:a7:ab:1d:5d:f4:4b:8b:ce:be:86:c9:5a: 3b:99:2a:52:7d:1e:7d:ea:42:46:54:19:6e:21:38: 40:39:49:ff:9a:c1:4a:e8:33:25:a7:b9:a1:7e:ea: 72:f0:41:68:5b:01:2c:59:a1:00:c2:7e:40:9d:08: f8:0d:69:c7:02:a9:0f:f7:e9:76:f1:fd:c5:99:0b: 29:db:6c:42:02:9c:58:43:33:46:6c:66:a5:9d:b4: 96:33:40:b1:88:d8:10:57:9f:e2:d9:59:af:06:17: 95:e3:2e:00:92:8e:72:b7:7f:8a:ce:fc:1b:39:a3: ec:e4:ee:4e:30:07:b8:26:a5:a5:53:97:52:a1:04: fa:fc:0c:5f:42:4b:8f:0a:9d:86:92:8d:44:f4:9b: 70:ba:86:d7:46:c7:54:c3:90:bf:93:e0:ed:ce:49: b4:fd:99:b9:f9:39:08:18:f7:66:0e:29:f3:bd:a3: 6f:1e:06:97:32:2d:83:d5:b2:a7:a3:9a:27:20:63: 64:e2:98:4e:7b:79:4f:56:1a:47:55:13:5d:38:52: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F7:7B:33:41:D2:FD:EA:14:67:ED:97:94:CB:87:74:53:C9:8B:52 X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:c4:20:a2:cb:39:d6:9a:d2:0b:25:79:1b:43:ce:3d:4c:1f: 57:18:10:2f:9f:50:b0:7d:b8:10:38:3e:06:5e:f8:0b:b5:c0: 5d:e0:1b:91:2d:a2:b1:18:0a:db:6a:eb:bb:0a:e9:61:89:e5: 2b:f1:15:49:fc:4a:7b:8f:6a:f0:20:4a:12:e0:ab:33:ec:bb: 22:e3:8f:42:19:73:b8:d2:3b:d7:87:bc:83:a5:97:c3:58:e1: d8:35:88:09:1d:bd:22:31:8b:8e:f4:9d:8c:7d:a6:2a:78:02: d4:ed:dc:df:2d:b5:ce:97:cf:4e:31:ad:5d:93:0d:d7:44:de: 33:07:15:36:5a:29:8c:cb:38:1b:de:c9:37:e5:89:28:80:c5: 84:61:fc:50:62:e9:c7:67:cd:74:02:26:02:a6:67:e1:75:b2: 75:56:07:44:99:42:40:c0:ca:90:e8:f0:6e:f1:60:74:d3:78: ce:be:f3:5c:2f:e0:a8:b5:15:97:c6:c1:26:30:75:20:5a:b4: 87:7b:cc:e7:3c:b5:d5:38:36:26:6c:9e:dd:de:89:7a:15:16: fb:d4:da:e8:11:0f:ab:13:d4:fa:a0:4c:d4:9a:57:2c:b0:4a: 2b:9f:32:53:cc:47:14:cd:b3:58:b4:96:9e:76:52:9b:ad:94: 88:f5:5c:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjUwNTEwMTUwOTQ0WhcNMjUwNTE3MTUwOTQ0WjAYMRYwFAYD VQQDEw02ODFmNmMzOC1kZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlXni0TcnBLaKeBh/8N1XNlCGjJ+O5UmaCbAQFQq/4vO/GM5v0QtNuajUxfh zIynqx1d9EuLzr6GyVo7mSpSfR596kJGVBluIThAOUn/msFK6DMlp7mhfupy8EFo WwEsWaEAwn5AnQj4DWnHAqkP9+l28f3FmQsp22xCApxYQzNGbGalnbSWM0CxiNgQ V5/i2VmvBheV4y4Ako5yt3+KzvwbOaPs5O5OMAe4JqWlU5dSoQT6/AxfQkuPCp2G ko1E9JtwuobXRsdUw5C/k+Dtzkm0/Zm5+TkIGPdmDinzvaNvHgaXMi2D1bKno5on IGNk4phOe3lPVhpHVRNdOFLU2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/3ezNB 0v3qFGftl5TLh3RTyYtSMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEUwMy8zRjQ4RjIyNDFEQTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3 bXI0c3RSelpzZU9scUZSU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvxCCiyznWmtILJXkbQ849TB9XGBAvn1CwfbgQOD4GXvgLtcBd4BuR LaKxGArbauu7CulhieUr8RVJ/Ep7j2rwIEoS4Ksz7Lsi449CGXO40jvXh7yDpZfD WOHYNYgJHb0iMYuO9J2MfaYqeALU7dzfLbXOl89OMa1dkw3XRN4zBxU2WimMyzgb 3sk35YkogMWEYfxQYunHZ810AiYCpmfhdbJ1VgdEmUJAwMqQ6PBu8WB003jOvvNc L+CotRWXxsEmMHUgWrSHe8znPLXVODYmbJ7d3ol6FRb71NroEQ+rE9T6oEzUmlcs sEornzJTzEcUzbNYtJaedlKbrZSI9VwC -----END CERTIFICATE-----Generated at Mon May 12 13:02:41 2025 by rpki-client