$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft File: 45n1PPpSq9Wox8HTkpWcOV854n4.mft (raw, json) Hash identifier: z6n8Ox9ugjIe2VlX+1yj35fWDZYKiNneQhqk8PcJL+U= Subject key identifier: 94:BC:E7:72:9E:28:FE:50:64:9B:C4:02:74:D3:84:93:66:86:4F:3D Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E Certificate issuer: /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Certificate serial: 0F0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft Manifest number: 0EF5 Signing time: Fri 18 Jul 2025 17:48:28 +0000 Manifest this update: Fri 18 Jul 2025 17:48:28 +0000 Manifest next update: Fri 25 Jul 2025 17:48:28 +0000 Files and hashes: 1: 45n1PPpSq9Wox8HTkpWcOV854n4.crl (hash: lEOj8RLNevSH6qD12deSPs7xz8aQqJKcZdDZuSoufRI=) 2: 57A86D66553F11EBA47EB279C4F9AE02.roa (hash: TN0DQj5Vs5ytuH5F5DVzodkfR9FeIuALNCosaZRkbvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3854 (0xf0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Validity Not Before: Jul 18 17:48:28 2025 GMT Not After : Jul 25 17:48:28 2025 GMT Subject: CN=687a88ec-cd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:87:f2:94:c5:aa:e8:68:97:28:ef:db:77: 85:8d:d7:5d:95:7a:e1:d3:94:71:73:91:90:c7:69: 1c:8e:56:04:b7:3c:e7:f6:ec:c3:54:3a:2c:47:3f: 8e:b2:94:4b:64:f8:1d:12:ae:f4:f8:ee:ed:df:19: 42:3d:ae:8c:aa:31:ae:82:a2:7b:5f:ac:c7:fc:06: 49:7b:f6:ad:99:56:60:45:22:e0:e1:1e:88:4f:43: 21:73:44:14:74:80:6d:6d:c2:36:99:84:33:be:5f: e5:bb:17:2b:f6:74:50:6b:c5:aa:1f:41:5d:64:02: 98:cb:1e:a6:8c:9d:98:c8:9c:6a:eb:d9:fc:f7:0f: cf:b8:c7:45:ad:f9:86:16:95:a6:18:69:3f:4c:fe: 02:cc:ff:69:9d:64:ec:94:81:41:bc:49:ad:30:97: 88:94:2b:ab:07:84:1f:96:bd:75:59:02:77:48:08: fb:bd:46:ad:af:0f:99:39:7d:b3:2a:1d:23:bd:51: 1b:b5:11:e0:a5:0c:cd:c4:0b:1d:93:cb:93:2c:c8: 63:59:25:c1:cb:37:81:e7:58:29:6c:0e:c4:0f:48: 96:f0:d9:71:46:bc:1f:a1:9f:fc:0d:4d:b8:63:cc: 14:f6:c5:3c:37:69:d4:01:13:ad:13:fa:91:15:af: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BC:E7:72:9E:28:FE:50:64:9B:C4:02:74:D3:84:93:66:86:4F:3D X509v3 Authority Key Identifier: keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:9e:58:e9:c6:e5:94:6b:a2:bd:f4:6f:66:2e:c2:fe:1a:49: 2e:e2:a0:c5:48:a0:7e:68:11:33:e1:5e:e6:75:08:e5:7f:a7: 1d:a3:e8:25:66:12:4c:f5:df:ca:94:20:31:b2:8d:d1:76:3d: 39:6e:13:51:60:03:14:b7:d2:1d:ac:4b:c3:e6:f1:d6:ee:74: 77:0f:20:f1:41:e5:70:08:ef:5d:53:fa:78:d8:26:81:31:d4: 69:ed:0e:0b:ef:c0:c4:ef:42:91:73:31:37:8a:37:fd:4e:0a: af:f7:a4:86:49:57:72:9b:19:ca:c3:da:eb:c5:b0:8f:51:37: e2:3f:52:fd:fc:31:f2:a2:7f:05:16:d1:24:7c:f2:86:05:72: 36:c2:f9:e0:10:ad:1b:76:2a:35:96:ae:47:25:b8:91:45:ce: b4:e6:2c:bf:09:0e:b5:09:93:16:d9:a2:43:15:1c:5b:15:c4: 96:9a:9d:4c:2a:fd:a9:97:26:49:68:59:43:e3:63:94:4d:0f: d6:64:88:31:08:ea:92:4b:81:bd:9a:cf:b2:57:b8:e1:39:39: 5b:1e:bb:49:e8:b5:c6:60:71:5a:0b:7c:7a:f9:d8:69:2c:7c: 24:d7:7b:38:7c:67:35:70:33:34:6f:b6:9f:fc:2d:1b:98:93: b0:fe:df:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwQjYxMTAvBgNVBAUTKEUzOTlGNTNDRkE1MkFCRDVBOEM3QzFEMzkyOTU5QzM5 NUYzOUUyN0UwHhcNMjUwNzE4MTc0ODI4WhcNMjUwNzI1MTc0ODI4WjAYMRYwFAYD VQQDEw02ODdhODhlYy1jZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohKH8pTFquholyjv23eFjdddlXrh05Rxc5GQx2kcjlYEtzzn9uzDVDosRz+O spRLZPgdEq70+O7t3xlCPa6MqjGugqJ7X6zH/AZJe/atmVZgRSLg4R6IT0Mhc0QU dIBtbcI2mYQzvl/luxcr9nRQa8WqH0FdZAKYyx6mjJ2YyJxq69n89w/PuMdFrfmG FpWmGGk/TP4CzP9pnWTslIFBvEmtMJeIlCurB4Qflr11WQJ3SAj7vUatrw+ZOX2z Kh0jvVEbtRHgpQzNxAsdk8uTLMhjWSXByzeB51gpbA7ED0iW8NlxRrwfoZ/8DU24 Y8wU9sU8N2nUAROtE/qRFa/MMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS853Ke KP5QZJvEAnTThJNmhk89MB8GA1UdIwQYMBaAFOOZ9Tz6UqvVqMfB05KVnDlfOeJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCNi9ENEYxQzUyNjgz NUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5V294OEhUa3BXY09WODU0 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1bjFQUHBTcTlXb3g4SFRrcFdjT1Y4NTRuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBCNi9ENEYxQzUyNjgzNUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5 V294OEhUa3BXY09WODU0bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBknljpxuWUa6K99G9mLsL+Gkku4qDFSKB+aBEz4V7mdQjlf6cdo+gl ZhJM9d/KlCAxso3Rdj05bhNRYAMUt9IdrEvD5vHW7nR3DyDxQeVwCO9dU/p42CaB MdRp7Q4L78DE70KRczE3ijf9Tgqv96SGSVdymxnKw9rrxbCPUTfiP1L9/DHyon8F FtEkfPKGBXI2wvngEK0bdio1lq5HJbiRRc605iy/CQ61CZMW2aJDFRxbFcSWmp1M Kv2plyZJaFlD42OUTQ/WZIgxCOqSS4G9ms+yV7jhOTlbHrtJ6LXGYHFaC3x6+dhp LHwk13s4fGc1cDM0b7af/C0bmJOw/t8u -----END CERTIFICATE-----Generated at Sun Jul 20 16:30:41 2025 by rpki-client