$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft File: t45_48stS1oeuSimkLxled-IG-k.mft (raw, json) Hash identifier: thkRePc5O7bv23xPoPgxy+tjOG6/QHS744AV8RZIdr0= Subject key identifier: 5C:0F:9A:36:D9:A5:6F:5C:41:8A:26:17:13:6F:3A:B4:A5:FE:3E:C9 Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 Certificate issuer: /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft Manifest number: BE Signing time: Thu 15 May 2025 05:13:35 +0000 Manifest this update: Thu 15 May 2025 05:13:34 +0000 Manifest next update: Thu 22 May 2025 05:13:34 +0000 Files and hashes: 1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: ubXcQvmu9BBpi/iJv+CmA08FuO32PPsqJc18nC/IZg8=) 2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: 0tGMxqd+nrlGxUWseUpDWpwKJjNQ5GQu0j7Ro3HieYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Validity Not Before: May 15 05:13:34 2025 GMT Not After : May 22 05:13:34 2025 GMT Subject: CN=682577ff-750c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:8c:07:c5:e2:5b:3f:8d:f4:b9:6d:7d:9c: 78:9c:27:f9:22:43:ef:f5:18:d0:d2:ee:56:a7:0f: c8:3a:38:cb:e7:2e:ed:e5:80:4c:95:bb:07:dc:09: 5b:03:e1:1b:93:15:cf:07:85:13:a6:43:75:28:c0: 1c:a2:52:fa:5f:e6:e6:fe:b9:74:3c:b9:64:25:a6: 1f:5e:d4:8b:88:08:20:00:f6:8c:c4:b8:db:9b:9b: ae:d1:96:76:a6:19:f2:01:79:78:a9:d1:6a:ee:27: 46:3e:cc:38:f2:db:56:63:2c:c8:cb:0b:d3:30:85: ce:08:8e:c0:62:f9:b0:26:fd:43:8a:e3:a3:96:ca: ab:c5:2e:ec:3c:67:e3:15:45:a7:72:f6:72:1c:c9: 5e:54:87:e9:bb:7a:c1:b8:0e:f8:0e:59:d8:3d:53: c0:4f:c6:d5:e0:84:be:cc:e9:4b:78:8c:4f:d0:47: df:d2:58:0a:63:6a:ad:23:8c:a4:ca:97:a7:56:ad: d0:b6:40:5c:9c:b4:ff:bc:7e:23:f9:78:2c:61:af: 83:b0:b0:62:e6:8a:b7:0d:12:44:3b:0e:69:c6:f4: 3f:fb:86:0a:d4:74:d0:8e:a0:06:84:9d:cd:5a:90: 2e:2f:c1:ac:82:85:af:ae:0b:32:d5:ab:77:21:5d: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0F:9A:36:D9:A5:6F:5C:41:8A:26:17:13:6F:3A:B4:A5:FE:3E:C9 X509v3 Authority Key Identifier: keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ba:28:4f:a3:19:f5:51:9a:4c:b9:1e:c9:4a:3e:88:b8:84: 20:1b:ff:79:6b:ab:46:76:9e:ba:43:79:f6:6c:aa:18:f4:eb: c9:27:6f:8a:6f:8a:5b:4b:4c:a6:ff:a2:a8:29:2c:48:07:f0: cd:ef:81:87:8e:95:75:3b:43:d7:e4:e1:44:dd:e2:c4:85:08: 91:12:3a:33:7f:b1:8a:40:84:cd:98:0c:9b:0e:fd:b7:20:fb: b7:ee:a5:d0:2a:cd:fb:fa:74:3c:ed:bd:22:cd:07:5f:ed:cf: 12:b2:1b:db:d8:29:9e:dd:62:01:d6:d0:2b:53:dc:8a:d1:1c: f4:06:84:d4:80:c0:7a:32:88:79:8e:bd:c5:f2:01:d9:c9:91: b1:1a:98:79:bd:65:87:e4:1b:a7:bf:da:14:91:5f:59:f2:2d: 3e:2a:a6:1c:99:e3:ec:fe:dd:7f:29:1f:e2:17:98:2f:1f:cd: 38:dd:23:9e:e2:85:35:bd:70:33:4e:d9:f6:8d:a1:07:15:2a: 53:50:be:51:83:81:ab:48:22:07:c0:60:9d:e1:1c:45:b1:88: 20:80:65:5e:4a:a2:f3:d2:9b:d4:40:7a:0f:f0:4d:cb:a8:45: 84:64:a3:eb:d8:9e:be:26:36:02:fc:f9:30:cc:cd:55:80:12: 88:d6:70:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKEI3OEU3RkUzQ0IyRDRCNUExRUI5MjhBNjkwQkM2NTc5 REY4ODFCRTkwHhcNMjUwNTE1MDUxMzM0WhcNMjUwNTIyMDUxMzM0WjAYMRYwFAYD VQQDEw02ODI1NzdmZi03NTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9+MB8XiWz+N9LltfZx4nCf5IkPv9RjQ0u5Wpw/IOjjL5y7t5YBMlbsH3Alb A+EbkxXPB4UTpkN1KMAcolL6X+bm/rl0PLlkJaYfXtSLiAggAPaMxLjbm5uu0ZZ2 phnyAXl4qdFq7idGPsw48ttWYyzIywvTMIXOCI7AYvmwJv1DiuOjlsqrxS7sPGfj FUWncvZyHMleVIfpu3rBuA74DlnYPVPAT8bV4IS+zOlLeIxP0Eff0lgKY2qtI4yk ypenVq3QtkBcnLT/vH4j+XgsYa+DsLBi5oq3DRJEOw5pxvQ/+4YK1HTQjqAGhJ3N WpAuL8GsgoWvrgsy1at3IV1yvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwPmjbZ pW9cQYomFxNvOrSl/j7JMB8GA1UdIwQYMBaAFLeOf+PLLUtaHrkoppC8ZXnfiBvp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy83QUE4OTQzRTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMxb2V1U2lta0x4bGVkLUlH LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Q0NV80OHN0UzFvZXVTaW1rTHhsZWQtSUctay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy83QUE4OTQzRTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMx b2V1U2lta0x4bGVkLUlHLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNuihPoxn1UZpMuR7JSj6IuIQgG/95a6tGdp66Q3n2bKoY9OvJJ2+K b4pbS0ym/6KoKSxIB/DN74GHjpV1O0PX5OFE3eLEhQiREjozf7GKQITNmAybDv23 IPu37qXQKs37+nQ87b0izQdf7c8Sshvb2Cme3WIB1tArU9yK0Rz0BoTUgMB6Moh5 jr3F8gHZyZGxGph5vWWH5Bunv9oUkV9Z8i0+KqYcmePs/t1/KR/iF5gvH8043SOe 4oU1vXAzTtn2jaEHFSpTUL5Rg4GrSCIHwGCd4RxFsYgggGVeSqLz0pvUQHoP8E3L qEWEZKPr2J6+JjYC/PkwzM1VgBKI1nCn -----END CERTIFICATE-----Generated at Fri May 16 09:26:55 2025 by rpki-client