$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json) Hash identifier: 71B4KEpAI500UaFlUjy3VjeodRac3C+q0cELffGtavw= Subject key identifier: A2:27:80:74:19:E4:B4:D7:07:99:E2:10:AC:FA:AA:6E:B9:67:45:45 Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft Manifest number: 0150 Signing time: Sat 19 Jul 2025 04:27:16 +0000 Manifest this update: Sat 19 Jul 2025 04:27:15 +0000 Manifest next update: Sat 26 Jul 2025 04:27:15 +0000 Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: n4UxUw4N+I6ZmOLvMPLJJX7iHbXfzKVS2mNg3FJ+CPE=) 2: 624C3E865DB011F0875D570FC4F9AE02.roa (hash: JGVNpZteQ5T3+mgqyzy1RfZ+6XHn9hRsWK2EBifvsJ8=) 3: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: /SYnf8xCqV4M9ZyljYxcqSyU1MxH8Hs1CHdh62/lPpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Jul 19 04:27:15 2025 GMT Not After : Jul 26 04:27:15 2025 GMT Subject: CN=687b1ea3-df2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:bd:ed:2f:18:f9:be:1a:d0:b7:4a:71:37: fc:91:27:fe:63:a2:df:47:30:e3:e5:18:ee:5b:24: 4b:b8:b5:75:55:a4:a6:05:59:73:29:97:dd:7f:08: 51:b4:26:7a:8d:e0:87:d6:02:9d:78:9c:28:78:ce: e1:8f:e7:83:4b:ea:45:7c:0a:93:ae:00:cf:38:4c: 75:10:6e:bd:5a:63:f3:0b:74:fc:9c:6e:32:e8:ae: cf:6a:cc:f5:72:76:9b:c7:4c:a6:ac:78:df:5d:26: 95:c1:37:f8:cb:fe:62:5a:d2:7d:a1:32:1d:30:47: 6d:ea:04:a8:19:cb:74:39:29:18:4a:6f:48:b5:72: 6e:da:14:1f:e5:15:a2:d0:26:22:ce:de:b1:14:a4: 2f:67:41:2b:29:9d:62:ce:f4:cb:37:2b:ef:d1:bb: 24:3a:37:03:d3:e2:55:89:9b:26:eb:23:e1:9a:75: 32:c1:33:15:43:2b:9e:29:e9:9d:a8:f4:d8:b1:28: 6e:6c:2e:c2:30:e8:03:f7:84:7a:dc:7e:64:04:0e: 5f:ff:cb:e8:c6:dc:6e:5a:98:dd:c8:f7:e1:fe:7c: b9:23:9b:6c:47:be:e7:16:14:d0:c8:2f:bf:0a:c2: c2:55:53:b6:69:a2:a7:12:43:44:9f:e9:a1:7f:0d: 1d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:27:80:74:19:E4:B4:D7:07:99:E2:10:AC:FA:AA:6E:B9:67:45:45 X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0d:e6:d3:37:51:d8:de:32:0e:23:61:c0:e0:92:06:c9:64: 02:05:41:32:26:8c:ab:e8:cd:6d:bb:40:40:76:b1:7e:65:02: 00:c8:34:d6:02:af:40:28:cb:c5:d0:57:69:fd:89:6e:fd:93: f4:78:c5:3f:df:d6:6f:a1:8a:78:ea:00:e6:02:12:7e:51:d0: 1e:25:e6:ae:ec:66:28:2f:98:d9:31:bc:a8:38:ac:22:be:7f: 03:14:17:10:29:46:c1:5a:10:19:78:93:27:d3:9c:81:14:ae: 45:3f:2d:d3:8c:26:37:db:45:94:18:34:40:2e:e6:1f:b4:c0: d4:b7:2d:e4:bd:d0:2a:e0:61:19:7d:f0:2d:59:ec:7d:d3:53: 55:dc:95:10:6d:9f:d0:af:63:f2:1d:42:f5:2e:33:ab:50:97: d6:9e:84:65:96:b5:09:62:20:a0:0d:72:06:13:c6:1b:02:5d: dd:af:d8:e7:84:e2:18:c4:d3:d5:c8:68:db:84:7b:21:7f:aa: 4e:14:6d:36:f4:82:9a:3f:bb:6f:92:34:e3:8d:72:02:93:6e: c6:09:1d:56:30:b1:9c:cc:d5:b3:57:5a:14:96:7e:c6:d9:be: 0e:68:68:0e:58:0f:b9:3c:c7:87:0a:ef:c2:2d:28:4e:7c:88: d9:b8:a6:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjUwNzE5MDQyNzE1WhcNMjUwNzI2MDQyNzE1WjAYMRYwFAYD VQQDEw02ODdiMWVhMy1kZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWe97S8Y+b4a0LdKcTf8kSf+Y6LfRzDj5RjuWyRLuLV1VaSmBVlzKZfdfwhR tCZ6jeCH1gKdeJwoeM7hj+eDS+pFfAqTrgDPOEx1EG69WmPzC3T8nG4y6K7Pasz1 cnabx0ymrHjfXSaVwTf4y/5iWtJ9oTIdMEdt6gSoGct0OSkYSm9ItXJu2hQf5RWi 0CYizt6xFKQvZ0ErKZ1izvTLNyvv0bskOjcD0+JViZsm6yPhmnUywTMVQyueKemd qPTYsShubC7CMOgD94R63H5kBA5f/8voxtxuWpjdyPfh/ny5I5tsR77nFhTQyC+/ CsLCVVO2aaKnEkNEn+mhfw0dIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIngHQZ 5LTXB5niEKz6qm65Z0VFMB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTdBMi9CM0RGQzg4NDZENjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZp X2Z6dEFlMEIxQXNfWTlzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTDebTN1HY3jIOI2HA4JIGyWQCBUEyJoyr6M1tu0BAdrF+ZQIAyDTW Aq9AKMvF0Fdp/Ylu/ZP0eMU/39ZvoYp46gDmAhJ+UdAeJeau7GYoL5jZMbyoOKwi vn8DFBcQKUbBWhAZeJMn05yBFK5FPy3TjCY320WUGDRALuYftMDUty3kvdAq4GEZ ffAtWex901NV3JUQbZ/Qr2PyHUL1LjOrUJfWnoRllrUJYiCgDXIGE8YbAl3dr9jn hOIYxNPVyGjbhHshf6pOFG029IKaP7tvkjTjjXICk27GCR1WMLGczNWzV1oUln7G 2b4OaGgOWA+5PMeHCu/CLShOfIjZuKZw -----END CERTIFICATE-----Generated at Sun Jul 20 15:17:07 2025 by rpki-client