$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft File: 45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json) Hash identifier: yrIsD00BzElgiF1RyeO9jtFlKCsb/WJWaIY+kGEb9IY= Subject key identifier: 6A:79:F7:F8:01:4F:AD:A7:E9:E9:6C:BA:F0:C0:79:51:7D:7F:B8:3C Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft Manifest number: 3493 Signing time: Sun 08 Jun 2025 15:10:22 +0000 Manifest this update: Sun 08 Jun 2025 15:10:21 +0000 Manifest next update: Sun 15 Jun 2025 15:10:21 +0000 Files and hashes: 1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: Pva7F/v0o13ZGF89qTFnh6kQf/HtnxVWzUfuoW6x6HE=) 2: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: cqg+DSKnyJEQ2eZBDWRlzFwbq68PCAP4lP7BZ9uGoSY=) 3: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: 48skWMAdj9drhHu2eh7bahmOkoZkfvFChpuIgM6+7w8=) 4: AAF9A7AC41AC11EA9BD8CB25C4F9AE02.roa (hash: wZnaCk/gJYbevnAK1yVFsEKeXrhTNDea/rw+miTZiyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 15:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Jun 8 15:10:21 2025 GMT Not After : Jun 15 15:10:21 2025 GMT Subject: CN=6845a7de-e845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:3c:a6:3f:df:0e:68:d7:d6:67:af:9c:7a: bd:c4:78:01:ca:c8:9a:57:71:4d:c3:f7:03:b8:74: b3:fd:e1:4e:fd:e7:16:fc:e9:f7:b7:ca:11:af:f7: 7c:36:9d:e7:a8:c7:b7:f6:9a:b6:11:e5:a2:0b:34: 6d:d2:b5:af:99:ad:ae:5f:5d:62:6c:e5:b1:e2:66: c0:04:f9:30:14:31:13:fb:f5:b4:5d:cf:33:8e:75: 5e:52:00:e2:0e:e9:5e:86:50:2c:bf:74:82:42:ff: 3b:42:10:d9:af:d8:4b:a6:71:12:7c:14:19:24:d8: ce:06:4a:68:94:29:03:fe:32:9c:c3:dd:20:a4:dd: 8c:08:93:8d:9d:84:39:f4:66:b4:b0:e8:19:3e:a9: 87:b1:ea:61:c1:e0:79:20:90:f1:9c:de:8a:6e:bf: a4:65:ee:80:97:cb:4d:c5:b5:65:21:6e:e6:78:f2: 2f:a2:6f:d9:6a:0e:d8:98:88:60:42:24:4e:4a:40: 49:56:65:10:f8:f5:64:65:79:91:a0:80:24:9e:1a: 3a:88:0d:73:0d:ad:3a:de:c5:d6:39:74:b5:1b:d7: 8d:6f:99:f9:75:14:f7:db:b0:61:84:e8:d4:48:9b: fb:52:4b:e2:b2:40:2e:ed:92:60:d4:2a:af:d0:84: 57:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:79:F7:F8:01:4F:AD:A7:E9:E9:6C:BA:F0:C0:79:51:7D:7F:B8:3C X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:2e:02:ac:d9:b2:de:75:8f:42:0d:8d:e7:93:a1:cc:3e:5c: ad:37:a7:5e:e3:a7:de:1c:61:30:5c:07:72:67:fc:64:d7:aa: bc:98:39:54:4f:05:4d:b4:3b:84:32:24:d4:07:4c:43:fc:a7: 0c:32:39:bd:70:5b:d5:5b:a8:b2:51:2e:67:47:ba:68:25:ba: 9e:d5:6c:59:19:e3:3b:32:ec:46:02:60:9f:d3:1f:2c:e5:c1: 04:7e:1c:37:5e:5c:b2:61:57:e7:eb:b1:f1:63:5d:87:c3:a3: 68:4e:cd:c4:67:93:87:0c:97:b2:3a:b5:34:f2:5c:63:fd:d4: 35:ee:ce:93:e4:63:63:81:94:d0:24:6f:33:bd:4a:30:50:07: bc:c6:25:05:c1:99:cc:d0:cd:1d:14:95:7e:9b:7c:a3:76:3d: 88:cf:e3:6a:51:ce:ba:78:f1:7e:79:58:ee:c8:b3:fc:8f:69: 90:5a:47:d6:46:95:f5:8e:74:c4:40:19:70:73:e3:82:7b:67: fe:c5:20:1a:ac:53:84:ee:ec:ca:93:b7:b6:47:90:82:c5:b9: e4:57:29:ad:22:26:9e:c3:d6:94:3b:09:72:1e:35:11:3a:53: 3a:9e:b9:a6:6f:a0:09:55:d2:ca:b0:f1:77:fb:fa:43:0d:55: 1c:21:b6:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjUwNjA4MTUxMDIxWhcNMjUwNjE1MTUxMDIxWjAYMRYwFAYD VQQDEw02ODQ1YTdkZS1lODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAM8pj/fDmjX1mevnHq9xHgBysiaV3FNw/cDuHSz/eFO/ecW/On3t8oRr/d8 Np3nqMe39pq2EeWiCzRt0rWvma2uX11ibOWx4mbABPkwFDET+/W0Xc8zjnVeUgDi DulehlAsv3SCQv87QhDZr9hLpnESfBQZJNjOBkpolCkD/jKcw90gpN2MCJONnYQ5 9Ga0sOgZPqmHsephweB5IJDxnN6Kbr+kZe6Al8tNxbVlIW7mePIvom/Zag7YmIhg QiROSkBJVmUQ+PVkZXmRoIAknho6iA1zDa063sXWOXS1G9eNb5n5dRT327BhhOjU SJv7UkviskAu7ZJg1Cqv0IRX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGp59/gB T62n6elsuvDAeVF9f7g8MB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEUwMy8zRjQ4RjIyNDFEQTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3 bXI0c3RSelpzZU9scUZSU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpLgKs2bLedY9CDY3nk6HMPlytN6de46feHGEwXAdyZ/xk16q8mDlU TwVNtDuEMiTUB0xD/KcMMjm9cFvVW6iyUS5nR7poJbqe1WxZGeM7MuxGAmCf0x8s 5cEEfhw3XlyyYVfn67HxY12Hw6NoTs3EZ5OHDJeyOrU08lxj/dQ17s6T5GNjgZTQ JG8zvUowUAe8xiUFwZnM0M0dFJV+m3yjdj2Iz+NqUc66ePF+eVjuyLP8j2mQWkfW RpX1jnTEQBlwc+OCe2f+xSAarFOE7uzKk7e2R5CCxbnkVymtIiaew9aUOwlyHjUR OlM6nrmmb6AJVdLKsPF3+/pDDVUcIbac -----END CERTIFICATE-----Generated at Mon Jun 9 01:30:25 2025 by rpki-client