$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json) Hash identifier: H6/MXxW40jWxSHfeQJraT5eZEMlRcFHLnIm8l6JSj1w= Subject key identifier: 49:01:75:34:C2:01:5C:26:B8:60:3F:26:29:54:32:86:0F:41:5F:4A Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Certificate serial: 0598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft Manifest number: 058D Signing time: Sun 19 Oct 2025 00:55:13 +0000 Manifest this update: Sun 19 Oct 2025 00:55:12 +0000 Manifest next update: Sun 26 Oct 2025 00:55:12 +0000 Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: v71ZQZXvMqVQejJrESHqUQdkqtrMbeFeo4ao+YGJups=) 2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: nnEDrBs5N1TINTxavJXzYMTFVmRpWUpTfX0eoMA2f+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1432 (0x598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Validity Not Before: Oct 19 00:55:12 2025 GMT Not After : Oct 26 00:55:12 2025 GMT Subject: CN=68f436f1-6b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:89:a2:68:73:df:a9:51:c1:61:2d:32:45:7f: c8:0d:07:18:4a:d0:47:ac:35:87:4f:59:54:82:50: f2:9f:c0:7d:65:9a:f5:13:6f:7e:13:f7:95:f2:2a: c6:59:1b:4c:c8:fc:3d:12:f8:86:8f:03:c1:c0:50: 33:42:e2:fa:8e:d7:e8:aa:6f:5f:37:ce:c8:27:59: ef:f3:7d:cc:fc:c7:5d:54:39:cb:58:f0:83:33:80: d3:6b:12:ed:1c:bd:79:fb:07:2b:ae:b5:88:e5:3c: 92:95:ef:2b:ba:12:b1:49:dc:39:f6:40:fe:e7:b7: 89:09:29:45:94:70:36:21:a0:3c:bc:3f:0b:fb:29: 93:f8:73:96:06:32:1b:c4:38:21:1c:fa:bc:f5:da: 80:78:21:f0:d4:04:9a:c7:31:5e:00:09:21:b7:55: 57:7c:45:b7:91:35:8d:d6:ee:aa:3b:b9:84:84:97: 3c:c6:db:6b:29:6f:5d:bd:2f:b3:35:11:9f:40:bd: 59:5e:55:db:21:cb:d7:da:02:5a:15:0f:87:4d:ee: 9c:26:db:42:17:ed:d8:67:89:78:9c:0c:a4:50:a9: d7:c9:59:3b:c4:2f:ee:47:94:10:c0:9d:41:40:ec: aa:07:f2:e4:9e:3d:09:ab:a2:d7:61:c3:cb:55:95: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:01:75:34:C2:01:5C:26:B8:60:3F:26:29:54:32:86:0F:41:5F:4A X509v3 Authority Key Identifier: keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:6d:f2:eb:df:f6:db:33:41:d3:52:4f:38:03:26:d0:84:f6: 28:cd:80:69:22:5d:03:79:f1:4d:0a:71:82:a0:df:a1:55:66: 24:e5:8b:b0:a7:4d:e3:e3:25:03:1c:83:23:d7:43:59:4c:1b: c6:d1:1b:e0:ee:ae:a0:1f:5e:c2:73:b3:a8:60:17:cd:6b:9d: e3:1c:a9:9d:9f:ac:32:f6:44:95:ab:f7:48:f3:24:44:2a:c5: c4:26:0c:43:3b:01:2a:e9:0b:dc:38:ba:40:8d:2d:b4:82:aa: 0b:fb:8e:c8:a0:fd:a8:b9:04:5f:75:c3:68:a8:d1:4e:82:78: f7:81:38:36:1c:ad:d3:62:30:31:66:0c:63:33:98:7c:60:71: 19:b3:70:42:9e:fd:ec:c8:69:db:d4:bc:a9:ad:00:93:44:ed: 6a:ce:ce:bd:96:e0:64:5a:0d:e3:32:95:17:0a:08:2e:b3:74: e0:22:cc:94:2c:e9:40:13:0d:9e:e7:dc:b0:41:4a:f8:fb:35: 90:83:af:99:98:56:95:29:34:74:cb:71:46:25:e8:0e:77:3d: 46:f1:96:a6:fd:65:f6:ca:9a:5b:06:16:de:b6:b8:34:b1:37: 92:85:41:a6:86:e8:e9:bc:fe:fb:7a:2d:a6:aa:9f:fc:88:9c: 5c:25:45:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QzMxMTAvBgNVBAUTKDAxMDgwRTI0MkU0NTA0NjA2NTZGRkZGOUU2QUE0MzJF MUQ0MEUyNUMwHhcNMjUxMDE5MDA1NTEyWhcNMjUxMDI2MDA1NTEyWjAYMRYwFAYD VQQDEw02OGY0MzZmMS02Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44miaHPfqVHBYS0yRX/IDQcYStBHrDWHT1lUglDyn8B9ZZr1E29+E/eV8irG WRtMyPw9EviGjwPBwFAzQuL6jtfoqm9fN87IJ1nv833M/MddVDnLWPCDM4DTaxLt HL15+wcrrrWI5TySle8ruhKxSdw59kD+57eJCSlFlHA2IaA8vD8L+ymT+HOWBjIb xDghHPq89dqAeCHw1ASaxzFeAAkht1VXfEW3kTWN1u6qO7mEhJc8xttrKW9dvS+z NRGfQL1ZXlXbIcvX2gJaFQ+HTe6cJttCF+3YZ4l4nAykUKnXyVk7xC/uR5QQwJ1B QOyqB/Lknj0Jq6LXYcPLVZUSkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkBdTTC AVwmuGA/JilUMoYPQV9KMB8GA1UdIwQYMBaAFAEIDiQuRQRgZW//+eaqQy4dQOJc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVDMy84QTMzRDcyMEY0 RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJHQmxiX181NXFwRExoMUE0 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRZ09KQzVGQkdCbGJfXzU1cXBETGgxQTRsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVDMy84QTMzRDcyMEY0RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJH QmxiX181NXFwRExoMUE0bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFbfLr3/bbM0HTUk84AybQhPYozYBpIl0DefFNCnGCoN+hVWYk5Yuw p03j4yUDHIMj10NZTBvG0Rvg7q6gH17Cc7OoYBfNa53jHKmdn6wy9kSVq/dI8yRE KsXEJgxDOwEq6QvcOLpAjS20gqoL+47IoP2ouQRfdcNoqNFOgnj3gTg2HK3TYjAx ZgxjM5h8YHEZs3BCnv3syGnb1LyprQCTRO1qzs69luBkWg3jMpUXCggus3TgIsyU LOlAEw2e59ywQUr4+zWQg6+ZmFaVKTR0y3FGJegOdz1G8Zam/WX2yppbBhbetrg0 sTeShUGmhujpvP77ei2mqp/8iJxcJUU/ -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:19 2025 by rpki-client