$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json) Hash identifier: 86On9rWCkg+E2rxifb4tQswT+j30ePcrDdyIjX17/v8= Subject key identifier: 81:92:69:3D:FE:42:AD:CE:25:AD:CD:FB:A4:83:99:DE:47:30:11:94 Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft Manifest number: 0527 Signing time: Wed 02 Apr 2025 23:32:59 +0000 Manifest this update: Wed 02 Apr 2025 23:32:58 +0000 Manifest next update: Wed 09 Apr 2025 23:32:58 +0000 Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: dDimode+WHB3DRjQ8xmoGOwZEeMLc6p3prow0h6mEOI=) 2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: jezgNWeangYgvRMm1Nco5WCrmwhWUzw/oL8A7ZNwlsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45C3 Validity Not Before: Apr 2 23:32:58 2025 GMT Not After : Apr 9 23:32:58 2025 GMT Subject: CN=67edc92a-0d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:2d:46:20:ae:8c:19:ad:58:b2:0b:09:a1: 46:5e:ea:3c:97:9f:16:ab:44:b1:c2:02:36:b1:c6: 7e:82:16:e6:1f:aa:3a:10:08:e5:5d:47:a7:7d:bc: 49:7e:c3:58:ac:51:c5:9e:86:53:43:a6:af:8d:6b: 76:7c:2b:be:a4:61:e7:44:9d:ae:37:04:32:65:fb: 1e:47:9e:62:ca:3f:4a:e4:80:6b:4e:1d:88:71:71: 28:7e:12:80:a5:b5:83:aa:f3:1d:fc:73:01:31:2d: d6:ae:42:b3:02:b4:ac:ff:49:7e:bc:5c:0b:36:6d: ee:6e:63:7e:9c:b0:b9:ff:2b:74:db:08:29:41:d9: f8:b2:22:03:58:df:f0:b2:e6:b0:f5:c3:f7:1c:a8: b4:b3:23:9c:64:5d:ca:17:b0:fe:a8:e7:6a:0a:0b: 83:4d:3d:26:9f:4d:48:01:a5:8e:ca:3b:b1:10:56: 65:95:63:c6:ae:a1:d8:ce:90:85:ef:01:69:29:e9: 20:25:88:a9:44:b6:fa:25:bc:87:53:04:e1:65:79: f1:ca:bf:f0:b4:a1:2f:9b:81:a5:80:6b:62:c2:42: 13:98:d3:83:46:ab:64:05:08:32:34:3e:a0:29:b5: f6:f4:2a:27:93:fa:f4:f6:4a:49:b1:f0:2f:24:11: ab:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:92:69:3D:FE:42:AD:CE:25:AD:CD:FB:A4:83:99:DE:47:30:11:94 X509v3 Authority Key Identifier: keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:44:85:5e:61:e6:85:37:ca:17:6a:6f:bd:90:92:4c:fe:a6: 1f:6d:a3:8a:41:b3:18:69:bf:34:51:e8:62:ab:db:02:d3:23: 07:f0:02:85:8a:72:fd:f5:db:7d:2e:14:8c:9a:4f:e6:4f:d4: 5b:85:ef:2f:49:f8:82:01:cb:36:0c:5a:30:99:b4:33:df:6a: 57:28:67:50:db:73:76:92:a9:8c:20:d0:1c:5f:d0:db:ea:76: 9c:52:a8:b3:49:b4:fd:a9:58:f5:56:b7:d1:09:a9:e3:33:19: 2d:c5:5f:38:dd:bf:a6:51:69:b9:59:1d:85:ff:a2:8a:96:c7: 45:32:4f:45:81:06:69:36:ce:4b:0c:3d:85:0b:5a:33:f9:1b: 26:22:f3:a4:02:10:2f:a7:8d:e0:aa:3d:5f:72:fd:be:4a:94: 50:c3:f6:08:67:f4:9b:9b:6a:50:a3:bc:fc:c2:59:94:78:ef: 84:6e:08:ca:a9:ef:9c:cb:5d:be:10:f8:bb:63:b7:17:c8:0a: fc:0e:86:a1:7f:b3:f7:75:d7:2c:61:f8:f1:2f:dd:3c:28:3a: 98:08:15:9f:1c:5d:59:a7:1e:76:70:48:a3:eb:c1:88:5b:f6: be:55:2b:52:1d:0a:7c:9b:de:31:4b:e6:bf:d4:85:45:66:52: c1:ba:91:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QzMxMTAvBgNVBAUTKDAxMDgwRTI0MkU0NTA0NjA2NTZGRkZGOUU2QUE0MzJF MUQ0MEUyNUMwHhcNMjUwNDAyMjMzMjU4WhcNMjUwNDA5MjMzMjU4WjAYMRYwFAYD VQQDEw02N2VkYzkyYS0wZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iItRiCujBmtWLILCaFGXuo8l58Wq0SxwgI2scZ+ghbmH6o6EAjlXUenfbxJ fsNYrFHFnoZTQ6avjWt2fCu+pGHnRJ2uNwQyZfseR55iyj9K5IBrTh2IcXEofhKA pbWDqvMd/HMBMS3WrkKzArSs/0l+vFwLNm3ubmN+nLC5/yt02wgpQdn4siIDWN/w suaw9cP3HKi0syOcZF3KF7D+qOdqCguDTT0mn01IAaWOyjuxEFZllWPGrqHYzpCF 7wFpKekgJYipRLb6JbyHUwThZXnxyr/wtKEvm4GlgGtiwkITmNODRqtkBQgyND6g KbX29Conk/r09kpJsfAvJBGr9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGSaT3+ Qq3OJa3N+6SDmd5HMBGUMB8GA1UdIwQYMBaAFAEIDiQuRQRgZW//+eaqQy4dQOJc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVDMy84QTMzRDcyMEY0 RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJHQmxiX181NXFwRExoMUE0 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRZ09KQzVGQkdCbGJfXzU1cXBETGgxQTRsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVDMy84QTMzRDcyMEY0RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJH QmxiX181NXFwRExoMUE0bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCRIVeYeaFN8oXam+9kJJM/qYfbaOKQbMYab80Uehiq9sC0yMH8AKF inL99dt9LhSMmk/mT9Rbhe8vSfiCAcs2DFowmbQz32pXKGdQ23N2kqmMINAcX9Db 6nacUqizSbT9qVj1VrfRCanjMxktxV843b+mUWm5WR2F/6KKlsdFMk9FgQZpNs5L DD2FC1oz+RsmIvOkAhAvp43gqj1fcv2+SpRQw/YIZ/Sbm2pQo7z8wlmUeO+EbgjK qe+cy12+EPi7Y7cXyAr8Doahf7P3ddcsYfjxL908KDqYCBWfHF1Zpx52cEij68GI W/a+VStSHQp8m94xS+a/1IVFZlLBupG6 -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:11 2025 by rpki-client