$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft File: 45Npup3YgJmHsja0d6144Vx1qxw.mft (raw, json) Hash identifier: v6HlmAO73o7u1pdPtN1d1GPg+HvwMshMzk9jqRw0BwM= Subject key identifier: FA:27:14:07:16:B1:C4:AD:E0:AE:74:E0:95:83:B4:51:A4:68:5F:6E Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C Certificate issuer: /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft Manifest number: 0223 Signing time: Wed 11 Jun 2025 01:52:30 +0000 Manifest this update: Wed 11 Jun 2025 01:52:30 +0000 Manifest next update: Wed 18 Jun 2025 01:52:30 +0000 Files and hashes: 1: 45Npup3YgJmHsja0d6144Vx1qxw.crl (hash: 1OAsfW8fgq8GtaFQV2AVKciWGzi79BsECfJmP7pkepY=) 2: 3728DA229A8611EFA824F73BC4F9AE02.roa (hash: s/TAy9epcEKTC12lHA/WIlwW4b4QaIyA/jvIAJ5W4eQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C73, serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C Validity Not Before: Jun 11 01:52:30 2025 GMT Not After : Jun 18 01:52:30 2025 GMT Subject: CN=6848e15e-dec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:41:aa:32:a4:c7:db:8a:84:5e:48:83:8f: 73:a7:15:12:2b:ac:8b:d4:d0:ca:f4:c7:33:8f:01: 41:97:24:7a:c6:00:8c:6a:d2:95:56:dd:77:b6:d7: 8a:22:14:51:91:dd:ed:cc:d6:5f:66:23:06:7c:10: a8:f9:b2:e4:cd:34:b8:cb:3e:64:35:8a:b7:72:67: f0:9a:22:e5:82:84:e8:4b:10:49:7f:31:63:d4:a8: be:51:68:d6:0e:51:c6:3e:af:37:d1:8a:1f:ee:86: dc:80:28:17:3b:83:6d:7b:27:e7:0a:66:c6:f3:92: c7:84:b2:2d:b3:de:c9:9d:b2:0f:d0:47:9c:36:a9: e3:99:d6:57:4b:01:10:ad:38:fd:e3:64:d7:c1:ab: a3:fa:db:3c:63:1f:89:00:50:c7:20:9b:27:ae:de: f0:56:b4:13:94:d0:97:bd:aa:0f:68:e9:0b:62:d5: 01:7a:19:01:d1:72:92:42:ba:17:ef:1e:98:fa:4b: d6:3f:3d:11:e9:ba:58:18:1d:7b:5e:e0:5d:ce:c9: bc:70:c4:0e:7c:69:e7:ea:a1:c1:60:ae:c4:c7:ac: 0a:1c:1b:98:b7:a4:4c:e2:64:62:40:af:e4:46:08: 7e:13:ab:98:de:34:d7:39:6e:b8:38:f6:24:1c:70: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:27:14:07:16:B1:C4:AD:E0:AE:74:E0:95:83:B4:51:A4:68:5F:6E X509v3 Authority Key Identifier: keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:7c:a7:38:66:25:4f:18:87:36:05:be:70:07:30:7f:48:40: 17:87:0d:e6:57:61:93:9a:a7:d2:89:1a:b0:d6:3c:0c:8c:73: 98:33:ee:7f:8e:cb:ca:76:83:11:28:3b:28:72:ca:f6:3b:59: f3:4e:43:5a:38:1b:dd:89:9c:d9:90:58:70:25:3d:b5:a4:f8: 9c:9a:03:13:e9:6e:03:da:63:c0:2d:d1:27:12:49:0f:dc:7d: 86:26:83:f7:d1:60:1f:10:8b:51:f1:4e:67:f1:4e:5c:e7:f2: a3:53:62:bb:2d:28:2e:2d:a4:8c:57:cb:59:96:a3:8f:70:63: 85:8e:7a:a6:88:b0:8f:1c:3c:58:c1:2b:50:3b:f1:7f:ee:97: 4e:80:81:c4:7c:a7:43:b6:97:ef:7a:ee:25:f7:32:59:23:ae: a4:10:c0:2e:0d:5a:24:62:70:84:31:9f:99:fa:00:ec:58:2b: c1:8d:25:43:37:f2:15:66:8a:b9:e9:31:6f:51:b8:08:77:3b: 4c:b7:d2:bb:f4:48:6c:8e:7b:00:8d:98:89:b6:3a:5c:0e:59: 54:52:5c:28:8b:bb:7d:df:50:83:75:61:c0:e9:b6:1b:70:b8: 37:98:fe:09:54:9b:43:60:ad:e7:f3:23:f0:0c:cc:dd:69:5c: 06:1c:00:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDNzMxMTAvBgNVBAUTKEUzOTM2OUJBOUREODgwOTk4N0IyMzZCNDc3QUQ3OEUx NUM3NUFCMUMwHhcNMjUwNjExMDE1MjMwWhcNMjUwNjE4MDE1MjMwWjAYMRYwFAYD VQQDEw02ODQ4ZTE1ZS1kZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RpBqjKkx9uKhF5Ig49zpxUSK6yL1NDK9MczjwFBlyR6xgCMatKVVt13tteK IhRRkd3tzNZfZiMGfBCo+bLkzTS4yz5kNYq3cmfwmiLlgoToSxBJfzFj1Ki+UWjW DlHGPq830Yof7obcgCgXO4NteyfnCmbG85LHhLIts97JnbIP0EecNqnjmdZXSwEQ rTj942TXwauj+ts8Yx+JAFDHIJsnrt7wVrQTlNCXvaoPaOkLYtUBehkB0XKSQroX 7x6Y+kvWPz0R6bpYGB17XuBdzsm8cMQOfGnn6qHBYK7Ex6wKHBuYt6RM4mRiQK/k Rgh+E6uY3jTXOW64OPYkHHD/bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPonFAcW scSt4K504JWDtFGkaF9uMB8GA1UdIwQYMBaAFOOTabqd2ICZh7I2tHeteOFcdasc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM3My8yMTVFNUQzQTM2 NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdKbUhzamEwZDYxNDRWeDFx eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1TnB1cDNZZ0ptSHNqYTBkNjE0NFZ4MXF4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM3My8yMTVFNUQzQTM2NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdK bUhzamEwZDYxNDRWeDFxeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhfKc4ZiVPGIc2Bb5wBzB/SEAXhw3mV2GTmqfSiRqw1jwMjHOYM+5/ jsvKdoMRKDsocsr2O1nzTkNaOBvdiZzZkFhwJT21pPicmgMT6W4D2mPALdEnEkkP 3H2GJoP30WAfEItR8U5n8U5c5/KjU2K7LSguLaSMV8tZlqOPcGOFjnqmiLCPHDxY wStQO/F/7pdOgIHEfKdDtpfveu4l9zJZI66kEMAuDVokYnCEMZ+Z+gDsWCvBjSVD N/IVZoq56TFvUbgIdztMt9K79EhsjnsAjZiJtjpcDllUUlwoi7t931CDdWHA6bYb cLg3mP4JVJtDYK3n8yPwDMzdaVwGHADH -----END CERTIFICATE-----Generated at Wed Jun 11 22:32:46 2025 by rpki-client