$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json) Hash identifier: vGmcFo97VXSxcwRHdmyrT9mEPZ0o0Y6E41b/oEAqGT8= Subject key identifier: F4:B8:92:A3:AA:1D:C8:D8:B5:2A:9C:79:75:0B:39:96:FB:9F:81:B1 Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Certificate serial: 057B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft Manifest number: 0570 Signing time: Fri 22 Aug 2025 23:30:39 +0000 Manifest this update: Fri 22 Aug 2025 23:30:39 +0000 Manifest next update: Fri 29 Aug 2025 23:30:39 +0000 Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: m3oQdusMFHqZF1V01WlMbVRqCF9lgjvV9kak5zvQwGs=) 2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: nnEDrBs5N1TINTxavJXzYMTFVmRpWUpTfX0eoMA2f+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1403 (0x57b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Validity Not Before: Aug 22 23:30:39 2025 GMT Not After : Aug 29 23:30:39 2025 GMT Subject: CN=68a8fd9f-2b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:fb:30:e6:b1:d5:e5:b4:5f:c2:d2:ba:de: b5:3c:19:f8:d8:8a:c3:39:73:44:60:8e:71:d7:40: 64:6d:83:3f:c7:fb:8b:68:bc:48:c7:5f:94:1f:42: fa:97:90:35:5c:81:0f:a8:66:53:ab:56:ca:f6:37: 0c:70:a5:9f:b5:30:67:fb:63:70:a2:94:6a:41:19: b3:cf:cc:39:38:28:8c:67:d9:9e:09:5d:b9:a0:9b: c5:46:c0:30:46:15:a4:4f:33:5b:d9:a6:6d:dc:9b: 78:a0:1c:90:c6:4e:d4:50:81:e0:ba:4e:dc:3c:bf: af:62:82:c5:a5:7c:9d:80:c1:53:35:d4:c2:b5:26: 58:3f:19:84:e6:ac:b5:dc:77:b1:49:05:99:62:32: 95:07:c7:2a:92:b8:ae:ef:bf:eb:06:73:8d:2f:fc: bd:28:8f:2c:81:30:be:14:7c:0d:fe:ad:4b:48:1a: ac:f9:52:0a:32:41:ef:50:02:c9:97:0b:ba:b5:5d: c9:b2:ba:c3:25:67:5d:00:25:a7:ff:7e:5e:1b:6c: 49:1f:b7:01:ba:66:a6:19:e9:72:d1:ec:10:44:3e: 4f:44:eb:f1:68:c0:51:99:03:05:03:44:0b:78:24: 1d:15:f8:dd:1d:39:5a:fa:2b:c1:b2:e6:21:e3:30: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B8:92:A3:AA:1D:C8:D8:B5:2A:9C:79:75:0B:39:96:FB:9F:81:B1 X509v3 Authority Key Identifier: keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4d:a6:ec:ba:33:7b:ba:7c:3e:92:80:9b:5c:a3:9c:c9:18: c0:de:16:59:fa:52:13:13:f3:fb:08:3d:d1:d6:97:97:f2:0f: 64:48:44:07:c9:a1:65:a9:3e:c2:12:b6:97:3f:3c:df:bc:d4: 2a:1b:29:13:b9:61:d8:5c:34:1b:4c:00:80:0f:07:09:e2:86: 85:3c:8d:af:df:9b:15:02:de:39:cc:0c:c6:fb:95:11:85:8a: 45:d6:39:96:78:e3:0b:9d:1b:c7:f4:10:9e:bc:e8:dd:02:36: 16:e1:f1:60:12:67:bf:7d:c6:1d:10:33:15:85:eb:10:ed:70: 88:95:65:84:1d:24:5e:a9:2b:e7:2f:f0:75:a6:4e:7a:27:0f: 37:c8:c6:e1:9a:48:1e:cc:85:25:ab:ad:e3:0a:78:a5:ec:b1: 57:42:1a:50:f2:2e:40:f2:12:c0:1a:0f:ec:56:e4:b1:ee:55: a0:3c:68:72:17:c5:c3:e5:c0:ed:d9:00:3c:4a:b5:83:ed:7d: 9e:11:a9:24:3d:3e:5d:ad:63:ca:fc:3f:50:53:48:71:89:0f: aa:27:05:58:74:8f:e5:92:ee:28:e9:c1:1f:ee:3f:52:3a:7d: cb:a2:33:84:bc:8a:73:61:3e:2b:5c:89:89:5b:c3:a1:4c:de: 73:2c:c4:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QzMxMTAvBgNVBAUTKDAxMDgwRTI0MkU0NTA0NjA2NTZGRkZGOUU2QUE0MzJF MUQ0MEUyNUMwHhcNMjUwODIyMjMzMDM5WhcNMjUwODI5MjMzMDM5WjAYMRYwFAYD VQQDEw02OGE4ZmQ5Zi0yYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTf7MOax1eW0X8LSut61PBn42IrDOXNEYI5x10BkbYM/x/uLaLxIx1+UH0L6 l5A1XIEPqGZTq1bK9jcMcKWftTBn+2NwopRqQRmzz8w5OCiMZ9meCV25oJvFRsAw RhWkTzNb2aZt3Jt4oByQxk7UUIHguk7cPL+vYoLFpXydgMFTNdTCtSZYPxmE5qy1 3HexSQWZYjKVB8cqkriu77/rBnONL/y9KI8sgTC+FHwN/q1LSBqs+VIKMkHvUALJ lwu6tV3JsrrDJWddACWn/35eG2xJH7cBumamGely0ewQRD5PROvxaMBRmQMFA0QL eCQdFfjdHTla+ivBsuYh4zAIgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS4kqOq HcjYtSqceXULOZb7n4GxMB8GA1UdIwQYMBaAFAEIDiQuRQRgZW//+eaqQy4dQOJc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVDMy84QTMzRDcyMEY0 RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJHQmxiX181NXFwRExoMUE0 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRZ09KQzVGQkdCbGJfXzU1cXBETGgxQTRsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVDMy84QTMzRDcyMEY0RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJH QmxiX181NXFwRExoMUE0bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMTabsujN7unw+koCbXKOcyRjA3hZZ+lITE/P7CD3R1peX8g9kSEQH yaFlqT7CEraXPzzfvNQqGykTuWHYXDQbTACADwcJ4oaFPI2v35sVAt45zAzG+5UR hYpF1jmWeOMLnRvH9BCevOjdAjYW4fFgEme/fcYdEDMVhesQ7XCIlWWEHSReqSvn L/B1pk56Jw83yMbhmkgezIUlq63jCnil7LFXQhpQ8i5A8hLAGg/sVuSx7lWgPGhy F8XD5cDt2QA8SrWD7X2eEakkPT5drWPK/D9QU0hxiQ+qJwVYdI/lku4o6cEf7j9S On3LojOEvIpzYT4rXImJW8OhTN5zLMQu -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:14 2025 by rpki-client