$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json) Hash identifier: TeJXS8TnY0/x6d60I51BieAtwkvcWh4sI886UMyQE60= Subject key identifier: B3:26:1A:D8:EE:49:26:B5:DF:8D:6A:90:5D:DE:D7:E3:89:0D:4A:6B Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Certificate serial: 0548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft Manifest number: 053D Signing time: Mon 12 May 2025 23:16:14 +0000 Manifest this update: Mon 12 May 2025 23:16:14 +0000 Manifest next update: Mon 19 May 2025 23:16:14 +0000 Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: Wo8frG63wP2pdXoeYVQVZ84N9VBOai8dp1r5NL2Xi3E=) 2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: nnEDrBs5N1TINTxavJXzYMTFVmRpWUpTfX0eoMA2f+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Validity Not Before: May 12 23:16:14 2025 GMT Not After : May 19 23:16:14 2025 GMT Subject: CN=6822813e-3ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:cc:46:e3:94:4c:30:37:82:9a:41:59:22: b8:73:40:e9:ae:c5:8c:71:6b:07:e5:3c:b9:24:48: c2:1b:16:f2:40:7d:5c:72:dd:22:13:67:d4:f1:25: 19:18:e5:94:13:c4:22:2a:c8:ae:dc:73:24:a5:07: 4f:21:4e:ed:1a:6f:8a:15:f6:37:86:3e:21:fa:14: 3c:0d:ef:dd:f7:0c:45:53:f4:5f:30:eb:05:0b:5a: fb:67:02:34:e6:3d:14:b3:27:9a:ba:7a:c7:d5:99: 53:64:5b:b7:82:6f:d4:44:09:eb:68:64:47:06:7f: 89:49:41:bb:06:15:72:29:82:f6:ed:d2:63:a5:d4: 4c:ae:da:f9:40:ed:b0:17:eb:59:c9:e1:6f:8c:6c: 8c:9a:b9:fd:50:cd:70:f8:23:e5:cb:04:be:ca:4a: 5a:e6:ae:98:78:48:df:89:84:c1:91:8e:0d:06:f1: 76:ef:7f:05:46:54:de:fa:0f:17:60:f8:54:d8:68: 00:9c:c1:04:c9:86:4b:4c:05:7e:d4:31:a3:8b:5e: 73:e0:e4:be:c9:0a:11:61:f1:e2:1b:81:97:41:1c: d1:44:54:8b:4b:ef:a9:20:41:77:67:72:bb:e7:62: fc:a5:42:fe:3f:8c:de:73:bc:24:df:a9:2b:57:9c: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:26:1A:D8:EE:49:26:B5:DF:8D:6A:90:5D:DE:D7:E3:89:0D:4A:6B X509v3 Authority Key Identifier: keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a7:7d:06:80:1f:ae:eb:28:36:92:9e:e3:23:8e:72:69:47: a7:d9:0e:b8:fa:f1:c9:8c:6e:9e:3e:73:fb:ab:9c:73:dc:90: 7b:bc:4d:f4:12:7a:d8:da:0f:93:f6:c9:b7:be:c3:ea:c9:bd: df:a8:6d:c7:ac:1c:03:f0:a7:bf:c1:46:90:63:ae:a9:25:73: 92:ce:e4:e1:13:58:99:bf:22:d3:1f:ad:8a:02:69:54:71:4e: f7:7e:2f:df:d3:39:9e:ee:95:79:e5:b7:af:c2:70:45:9a:c4: 99:cc:9c:4e:b5:00:79:12:96:36:59:6a:ae:8a:34:5f:9c:e9: 87:d4:58:1e:4f:87:17:ca:73:dc:48:2b:ea:a5:c6:9c:3a:e1: f1:95:40:32:2c:58:f1:6f:b1:c8:13:52:a0:1a:43:f9:bd:d3: 3c:3b:50:2b:f3:2f:e2:65:19:a5:c6:0f:87:da:a0:13:ea:68: 2f:44:f2:e3:ef:a0:4f:f6:1e:fc:0a:ee:67:31:f2:0a:22:e6: 52:58:60:67:b4:d1:7e:4d:0f:5d:50:61:c6:35:df:4d:aa:69: 23:76:57:e0:87:91:91:19:71:f4:a5:7a:5b:05:e4:3b:c9:7b: f0:7b:1b:08:3b:04:88:d7:c5:e0:83:d3:e0:a8:be:09:92:d9: de:6e:05:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QzMxMTAvBgNVBAUTKDAxMDgwRTI0MkU0NTA0NjA2NTZGRkZGOUU2QUE0MzJF MUQ0MEUyNUMwHhcNMjUwNTEyMjMxNjE0WhcNMjUwNTE5MjMxNjE0WjAYMRYwFAYD VQQDEw02ODIyODEzZS0zY2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnjMRuOUTDA3gppBWSK4c0DprsWMcWsH5Ty5JEjCGxbyQH1cct0iE2fU8SUZ GOWUE8QiKsiu3HMkpQdPIU7tGm+KFfY3hj4h+hQ8De/d9wxFU/RfMOsFC1r7ZwI0 5j0UsyeaunrH1ZlTZFu3gm/URAnraGRHBn+JSUG7BhVyKYL27dJjpdRMrtr5QO2w F+tZyeFvjGyMmrn9UM1w+CPlywS+ykpa5q6YeEjfiYTBkY4NBvF2738FRlTe+g8X YPhU2GgAnMEEyYZLTAV+1DGji15z4OS+yQoRYfHiG4GXQRzRRFSLS++pIEF3Z3K7 52L8pUL+P4zec7wk36krV5z6BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMmGtju SSa1341qkF3e1+OJDUprMB8GA1UdIwQYMBaAFAEIDiQuRQRgZW//+eaqQy4dQOJc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVDMy84QTMzRDcyMEY0 RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJHQmxiX181NXFwRExoMUE0 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRZ09KQzVGQkdCbGJfXzU1cXBETGgxQTRsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVDMy84QTMzRDcyMEY0RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJH QmxiX181NXFwRExoMUE0bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdp30GgB+u6yg2kp7jI45yaUen2Q64+vHJjG6ePnP7q5xz3JB7vE30 EnrY2g+T9sm3vsPqyb3fqG3HrBwD8Ke/wUaQY66pJXOSzuThE1iZvyLTH62KAmlU cU73fi/f0zme7pV55bevwnBFmsSZzJxOtQB5EpY2WWquijRfnOmH1FgeT4cXynPc SCvqpcacOuHxlUAyLFjxb7HIE1KgGkP5vdM8O1Ar8y/iZRmlxg+H2qAT6mgvRPLj 76BP9h78Cu5nMfIKIuZSWGBntNF+TQ9dUGHGNd9Nqmkjdlfgh5GRGXH0pXpbBeQ7 yXvwexsIOwSI18Xgg9PgqL4JktnebgXF -----END CERTIFICATE-----Generated at Wed May 14 19:40:12 2025 by rpki-client