$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json) Hash identifier: h3NcflveQc8il8W/cdDakONAuvpK1g7prkS+sVNTglM= Subject key identifier: 90:F3:37:A8:B0:54:8A:5A:44:67:02:AE:7D:ED:68:9E:AA:9D:4E:67 Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft Manifest number: 0556 Signing time: Wed 02 Jul 2025 23:43:15 +0000 Manifest this update: Wed 02 Jul 2025 23:43:14 +0000 Manifest next update: Wed 09 Jul 2025 23:43:14 +0000 Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: LbafBIa0Pz7d4RUt5lfFdrZQAaKdmJhDkINSB2DombA=) 2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: nnEDrBs5N1TINTxavJXzYMTFVmRpWUpTfX0eoMA2f+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Validity Not Before: Jul 2 23:43:14 2025 GMT Not After : Jul 9 23:43:14 2025 GMT Subject: CN=6865c412-2def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:77:aa:28:d5:3d:e1:18:ef:c2:54:70:4a: de:78:2f:44:0c:8a:ea:85:dd:5a:1c:56:18:8e:6a: c5:81:3e:03:8a:1c:b9:5f:37:0a:36:cd:6b:21:36: a8:8c:02:47:e5:b5:26:c5:37:2b:06:34:9a:ab:15: c3:8f:3d:14:c6:df:72:f9:5e:e5:cb:ff:0a:89:74: 8d:56:c8:68:95:30:fc:b6:75:e5:6d:ee:4b:78:1b: b6:d7:cf:fc:bb:68:42:0c:42:e6:d2:0e:bb:c1:bd: fe:e0:a3:67:61:f8:81:72:81:04:1c:9c:e3:ef:d8: a8:f8:f4:9e:eb:7d:64:de:76:80:02:c7:f4:12:ef: 0d:1c:63:c7:da:6f:07:c9:7d:52:0c:b6:f4:0c:b4: ab:63:56:31:0f:fe:2c:24:d6:ba:91:33:f5:e5:9d: ac:62:e2:cc:8d:74:00:c9:e8:16:39:6a:b5:6e:33: 75:c3:43:c7:d3:a9:8e:20:ce:16:1e:c4:9e:7c:b5: 5e:0f:98:e9:17:b4:c5:d9:18:53:e4:62:d7:a7:61: 15:54:b3:50:12:60:3a:fb:bc:85:56:45:1a:4c:da: 44:be:fe:12:b9:12:7f:7e:1f:bf:b0:8e:1b:17:9b: 3c:a6:6f:0e:9a:ba:e9:78:9b:de:f5:e8:7c:a2:e2: 82:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F3:37:A8:B0:54:8A:5A:44:67:02:AE:7D:ED:68:9E:AA:9D:4E:67 X509v3 Authority Key Identifier: keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d4:c1:3e:30:87:4c:c4:f3:59:5d:49:4c:be:3b:b4:b8:45: 8a:3a:40:91:b7:48:b2:ca:bf:af:fa:d5:b3:4e:62:dd:d1:7a: 3c:66:dd:60:47:65:32:a3:a2:90:d8:ec:8b:7c:e2:c0:07:77: 83:22:69:26:ce:4e:eb:91:13:8c:36:16:da:a9:2e:f5:79:78: df:1d:3b:f2:a6:a1:91:62:42:b7:26:15:29:f2:d6:a7:52:51: a9:34:91:aa:ff:38:1a:24:37:83:2b:09:06:c4:d6:a2:57:5a: 48:19:d7:7f:56:58:4a:49:5b:4d:ca:ce:62:1c:89:33:60:7f: 0b:19:ca:ce:0b:23:ca:37:05:e3:7d:ad:e7:1d:42:ad:ee:a2: 0e:33:87:de:2e:e0:72:40:68:3d:50:3f:c8:5d:fc:0f:1a:ed: a8:e9:fe:70:4b:46:af:01:85:a2:a6:2b:86:1f:07:05:b5:9a: a7:10:97:a6:dd:c9:6c:d5:a9:05:be:02:03:a9:d9:e0:3e:57: fc:37:29:9c:05:52:76:83:06:67:34:ab:09:82:ca:91:c5:5a: 36:6b:31:59:e5:ef:dd:80:0f:2d:ea:c8:12:31:00:d6:2b:c8: ec:68:41:64:d9:b2:86:8a:a2:e8:01:cd:cf:b0:d3:2f:9d:f8: 63:5d:1f:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QzMxMTAvBgNVBAUTKDAxMDgwRTI0MkU0NTA0NjA2NTZGRkZGOUU2QUE0MzJF MUQ0MEUyNUMwHhcNMjUwNzAyMjM0MzE0WhcNMjUwNzA5MjM0MzE0WjAYMRYwFAYD VQQDEw02ODY1YzQxMi0yZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkt3qijVPeEY78JUcEreeC9EDIrqhd1aHFYYjmrFgT4Dihy5XzcKNs1rITao jAJH5bUmxTcrBjSaqxXDjz0Uxt9y+V7ly/8KiXSNVsholTD8tnXlbe5LeBu218/8 u2hCDELm0g67wb3+4KNnYfiBcoEEHJzj79io+PSe631k3naAAsf0Eu8NHGPH2m8H yX1SDLb0DLSrY1YxD/4sJNa6kTP15Z2sYuLMjXQAyegWOWq1bjN1w0PH06mOIM4W HsSefLVeD5jpF7TF2RhT5GLXp2EVVLNQEmA6+7yFVkUaTNpEvv4SuRJ/fh+/sI4b F5s8pm8OmrrpeJve9eh8ouKC/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDzN6iw VIpaRGcCrn3taJ6qnU5nMB8GA1UdIwQYMBaAFAEIDiQuRQRgZW//+eaqQy4dQOJc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVDMy84QTMzRDcyMEY0 RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJHQmxiX181NXFwRExoMUE0 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRZ09KQzVGQkdCbGJfXzU1cXBETGgxQTRsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVDMy84QTMzRDcyMEY0RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJH QmxiX181NXFwRExoMUE0bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy1ME+MIdMxPNZXUlMvju0uEWKOkCRt0iyyr+v+tWzTmLd0Xo8Zt1g R2Uyo6KQ2OyLfOLAB3eDImkmzk7rkROMNhbaqS71eXjfHTvypqGRYkK3JhUp8tan UlGpNJGq/zgaJDeDKwkGxNaiV1pIGdd/VlhKSVtNys5iHIkzYH8LGcrOCyPKNwXj fa3nHUKt7qIOM4feLuByQGg9UD/IXfwPGu2o6f5wS0avAYWipiuGHwcFtZqnEJem 3cls1akFvgIDqdngPlf8NymcBVJ2gwZnNKsJgsqRxVo2azFZ5e/dgA8t6sgSMQDW K8jsaEFk2bKGiqLoAc3PsNMvnfhjXR9A -----END CERTIFICATE-----Generated at Thu Jul 3 17:10:41 2025 by rpki-client