$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json) Hash identifier: 8WMIfQCPJ4YO8YTuX0mMRTDZUlwp8/YB09W6aJqv7ik= Subject key identifier: 68:82:28:4A:3D:9C:D8:FE:AE:25:B6:D8:E2:8D:AB:35:69:6C:06:D5 Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft Manifest number: 0545 Signing time: Fri 30 May 2025 23:39:36 +0000 Manifest this update: Fri 30 May 2025 23:39:36 +0000 Manifest next update: Fri 06 Jun 2025 23:39:35 +0000 Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: e9NeSkchjGdhnddeCdlwfF6qlvNqhYpp+djbI7vJdps=) 2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: nnEDrBs5N1TINTxavJXzYMTFVmRpWUpTfX0eoMA2f+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Validity Not Before: May 30 23:39:36 2025 GMT Not After : Jun 6 23:39:35 2025 GMT Subject: CN=683a41b8-1ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:b6:7f:5d:50:53:a7:e4:e9:17:a0:af:02: b1:f8:92:9f:3a:6c:34:c5:bb:9c:31:ad:a4:28:ff: 3c:bc:75:8e:de:22:69:9b:45:37:84:59:d8:c4:fa: 0b:bd:b6:16:79:74:2e:4a:72:31:1b:ac:2f:2e:3f: ba:08:fa:74:7d:b5:a3:46:fe:5b:1c:df:79:8c:ae: 50:4c:8c:f4:96:98:a4:b0:97:bf:8c:68:21:0a:13: d1:3e:0e:96:94:62:67:6b:3d:e4:26:60:8c:df:84: f3:cc:f3:6f:c4:8f:40:dd:5e:f3:39:98:cd:d9:df: 39:94:b6:3e:fd:30:d6:e3:69:f1:cf:a6:a8:82:b2: bc:3b:e6:ff:6f:81:0b:1d:a1:74:4e:9a:cd:d4:de: 59:0f:70:08:e3:c0:84:f8:48:60:cb:4a:10:7a:ae: cf:52:d6:09:77:30:5c:9b:3b:16:36:72:b5:db:bd: eb:ca:0a:eb:b9:ec:1c:eb:0a:2b:90:20:e6:05:6c: 2d:cf:91:b3:00:7f:6b:84:43:9a:e6:2d:56:ca:3c: a3:72:b0:af:89:52:b3:69:4c:a9:34:2a:5d:93:a9: 02:06:df:89:6a:a3:81:34:56:69:25:44:e4:41:12: 57:f5:d9:56:2a:b6:65:01:f9:03:97:cf:cb:42:d6: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:82:28:4A:3D:9C:D8:FE:AE:25:B6:D8:E2:8D:AB:35:69:6C:06:D5 X509v3 Authority Key Identifier: keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7a:bc:a0:bc:e6:c7:5f:75:8e:50:eb:d5:2b:74:7c:8a:44: 26:70:4c:ff:7b:ec:c1:08:f9:2f:ef:ab:c6:c2:ce:a6:f6:4c: 27:dc:a1:67:f0:a1:cf:00:23:07:d8:84:4e:c5:d7:20:3c:81: c9:fd:58:f6:dd:b9:c5:5f:24:fb:15:ab:60:7a:f5:88:6c:d3: 0e:91:e7:c9:35:0c:37:92:9e:89:18:91:71:f9:13:a6:fd:42: 7c:14:07:be:2e:1d:2a:f3:e9:4b:b6:f0:51:15:4f:42:0c:66: 1e:05:f6:c1:86:73:96:7d:52:89:55:40:b7:20:99:d1:77:45: c8:90:b3:cf:7a:63:ac:70:93:3c:ae:de:61:c2:10:e9:ca:62: 50:f7:bf:cf:2f:12:5c:97:e0:93:c4:47:c2:44:b8:2e:b4:81: e6:36:72:ab:91:3b:31:80:69:f9:5f:75:0f:57:9f:9c:a0:42: 3b:d8:48:c6:07:4e:23:86:0d:4d:6d:e3:73:9a:2b:5c:70:42: 81:ee:b3:9d:43:17:e9:d9:54:25:11:9c:0c:dd:69:e9:73:7f: 28:19:a8:f6:c0:94:66:4d:e0:89:3a:1e:9c:df:be:ff:b5:75: a3:ac:ec:2a:dc:85:aa:28:88:7d:a9:4c:ad:f2:69:ac:c4:af: 27:ab:8f:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QzMxMTAvBgNVBAUTKDAxMDgwRTI0MkU0NTA0NjA2NTZGRkZGOUU2QUE0MzJF MUQ0MEUyNUMwHhcNMjUwNTMwMjMzOTM2WhcNMjUwNjA2MjMzOTM1WjAYMRYwFAYD VQQDEw02ODNhNDFiOC0xZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufS2f11QU6fk6RegrwKx+JKfOmw0xbucMa2kKP88vHWO3iJpm0U3hFnYxPoL vbYWeXQuSnIxG6wvLj+6CPp0fbWjRv5bHN95jK5QTIz0lpiksJe/jGghChPRPg6W lGJnaz3kJmCM34TzzPNvxI9A3V7zOZjN2d85lLY+/TDW42nxz6aogrK8O+b/b4EL HaF0TprN1N5ZD3AI48CE+Ehgy0oQeq7PUtYJdzBcmzsWNnK1273rygrruewc6wor kCDmBWwtz5GzAH9rhEOa5i1WyjyjcrCviVKzaUypNCpdk6kCBt+JaqOBNFZpJUTk QRJX9dlWKrZlAfkDl8/LQtZy3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiCKEo9 nNj+riW22OKNqzVpbAbVMB8GA1UdIwQYMBaAFAEIDiQuRQRgZW//+eaqQy4dQOJc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVDMy84QTMzRDcyMEY0 RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJHQmxiX181NXFwRExoMUE0 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRZ09KQzVGQkdCbGJfXzU1cXBETGgxQTRsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVDMy84QTMzRDcyMEY0RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJH QmxiX181NXFwRExoMUE0bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCderygvObHX3WOUOvVK3R8ikQmcEz/e+zBCPkv76vGws6m9kwn3KFn 8KHPACMH2IROxdcgPIHJ/Vj23bnFXyT7FatgevWIbNMOkefJNQw3kp6JGJFx+ROm /UJ8FAe+Lh0q8+lLtvBRFU9CDGYeBfbBhnOWfVKJVUC3IJnRd0XIkLPPemOscJM8 rt5hwhDpymJQ97/PLxJcl+CTxEfCRLgutIHmNnKrkTsxgGn5X3UPV5+coEI72EjG B04jhg1NbeNzmitccEKB7rOdQxfp2VQlEZwM3Wnpc38oGaj2wJRmTeCJOh6c377/ tXWjrOwq3IWqKIh9qUyt8mmsxK8nq486 -----END CERTIFICATE-----Generated at Sat May 31 17:23:35 2025 by rpki-client