$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json) Hash identifier: UKwnpVleWbiYTZjFjdI3ly17te5f8vu1vdxC7W0bwho= Subject key identifier: 4E:0A:52:96:04:08:FF:87:3C:3D:D8:56:B9:97:97:97:FA:6A:FF:4A Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Certificate serial: 056B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft Manifest number: 0560 Signing time: Tue 22 Jul 2025 23:44:35 +0000 Manifest this update: Tue 22 Jul 2025 23:44:34 +0000 Manifest next update: Tue 29 Jul 2025 23:44:34 +0000 Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: L9lzNIC/TRHwUMmCwyHQHUz2foYWGgcYDroboijeug4=) 2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: nnEDrBs5N1TINTxavJXzYMTFVmRpWUpTfX0eoMA2f+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1387 (0x56b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Validity Not Before: Jul 22 23:44:34 2025 GMT Not After : Jul 29 23:44:34 2025 GMT Subject: CN=68802263-65fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9c:18:f0:50:ff:93:35:c1:7c:6b:54:cc:7f: ec:d9:1e:01:ea:44:4c:11:ab:e0:a2:52:38:0a:5f: 6e:2f:05:95:d0:5c:a7:5c:df:03:8a:74:f0:7c:0e: 4e:61:aa:6a:fd:c8:f4:6a:42:a8:e8:8b:64:5c:a3: 90:a3:78:a3:81:a4:9d:a7:d0:76:58:22:b5:ac:71: 47:de:d4:af:34:a5:75:a1:c4:a6:ea:2d:4f:f2:2e: a5:84:40:43:ac:aa:b1:de:a1:b1:b9:13:6c:ff:95: d0:76:4d:10:9b:9b:29:a8:f0:80:66:ce:51:fe:80: 4b:ba:4f:c5:cd:f1:46:0e:5f:7f:37:70:e7:d0:a1: f2:4e:d0:68:92:73:bd:ad:fd:83:9c:15:3b:82:d0: fe:c7:ab:bf:1c:8d:5e:08:60:0b:a4:ae:ec:c8:4b: 4d:74:12:1d:21:52:0a:ff:fb:d0:4c:3a:98:4c:18: e3:ca:c4:8f:2e:d3:35:20:98:05:4f:20:e0:0d:fa: 9f:01:8a:e8:89:d6:3c:66:25:7c:e2:ae:9e:56:31: 00:8f:32:13:0d:16:9b:ca:c3:60:46:d8:ab:98:bf: e2:71:26:b7:05:49:38:cb:d7:f9:be:a2:f9:e9:61: 5f:b0:54:82:63:f6:93:b4:09:b5:35:7b:00:52:4f: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0A:52:96:04:08:FF:87:3C:3D:D8:56:B9:97:97:97:FA:6A:FF:4A X509v3 Authority Key Identifier: keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:5a:b4:ad:2d:99:f1:40:07:f8:93:81:de:87:f0:bd:5e:97: 29:a8:3a:b0:d3:91:93:c4:72:1a:84:40:13:07:ca:e7:1e:aa: fd:24:e8:75:eb:58:11:3b:0f:11:a5:34:d6:34:47:02:73:e4: d4:bf:25:a8:3e:51:e6:6a:b0:db:a3:74:5e:ed:67:31:74:7c: 2a:0e:b6:ac:b9:33:e0:6d:3a:d0:93:a2:d3:64:07:1d:eb:d1: 56:43:e3:7c:00:60:ec:51:0b:b8:ff:0a:99:93:ef:8a:5c:20: 8b:eb:41:2d:7d:a3:ea:dc:f1:18:d4:a2:29:50:e4:6a:eb:9a: 6a:d6:7d:66:00:b0:f0:ff:00:04:f0:c0:f3:3a:13:42:13:fc: 12:77:9a:bb:19:b7:64:9f:1b:91:e0:8e:4f:7d:31:e6:ea:88: 5c:e9:3f:ed:3f:fa:db:82:a8:3b:86:33:44:53:3d:99:d8:f8: ad:af:4f:a9:c1:a0:f8:29:4c:b9:0b:29:19:b8:84:a9:7b:44: b5:ea:dc:2f:3f:34:20:2b:4b:bc:0b:b7:85:e5:71:d2:e1:b9: b3:83:b4:9d:f0:eb:6d:74:ba:f1:4a:64:f5:e4:2a:0d:dc:51: 80:2d:f0:3b:55:d6:c8:52:5a:1a:d2:2b:4e:a9:36:11:ab:ac: 49:a0:b6:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QzMxMTAvBgNVBAUTKDAxMDgwRTI0MkU0NTA0NjA2NTZGRkZGOUU2QUE0MzJF MUQ0MEUyNUMwHhcNMjUwNzIyMjM0NDM0WhcNMjUwNzI5MjM0NDM0WjAYMRYwFAYD VQQDEw02ODgwMjI2My02NWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JwY8FD/kzXBfGtUzH/s2R4B6kRMEavgolI4Cl9uLwWV0FynXN8DinTwfA5O Yapq/cj0akKo6ItkXKOQo3ijgaSdp9B2WCK1rHFH3tSvNKV1ocSm6i1P8i6lhEBD rKqx3qGxuRNs/5XQdk0Qm5spqPCAZs5R/oBLuk/FzfFGDl9/N3Dn0KHyTtBoknO9 rf2DnBU7gtD+x6u/HI1eCGALpK7syEtNdBIdIVIK//vQTDqYTBjjysSPLtM1IJgF TyDgDfqfAYroidY8ZiV84q6eVjEAjzITDRabysNgRtirmL/icSa3BUk4y9f5vqL5 6WFfsFSCY/aTtAm1NXsAUk8FjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4KUpYE CP+HPD3YVrmXl5f6av9KMB8GA1UdIwQYMBaAFAEIDiQuRQRgZW//+eaqQy4dQOJc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVDMy84QTMzRDcyMEY0 RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJHQmxiX181NXFwRExoMUE0 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRZ09KQzVGQkdCbGJfXzU1cXBETGgxQTRsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVDMy84QTMzRDcyMEY0RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJH QmxiX181NXFwRExoMUE0bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHWrStLZnxQAf4k4Heh/C9XpcpqDqw05GTxHIahEATB8rnHqr9JOh1 61gROw8RpTTWNEcCc+TUvyWoPlHmarDbo3Re7WcxdHwqDrasuTPgbTrQk6LTZAcd 69FWQ+N8AGDsUQu4/wqZk++KXCCL60EtfaPq3PEY1KIpUORq65pq1n1mALDw/wAE 8MDzOhNCE/wSd5q7GbdknxuR4I5PfTHm6ohc6T/tP/rbgqg7hjNEUz2Z2Pitr0+p waD4KUy5CykZuISpe0S16twvPzQgK0u8C7eF5XHS4bmzg7Sd8OttdLrxSmT15CoN 3FGALfA7VdbIUloa0itOqTYRq6xJoLZ2 -----END CERTIFICATE-----Generated at Thu Jul 24 08:43:03 2025 by rpki-client