$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: xrxl9plvLhxSkIvDpyY5tkntyoDcDxtzNwDBGe4c0bc= Subject key identifier: 47:19:1D:20:B7:9D:8A:F2:15:44:8D:5F:DA:FF:95:C2:4A:52:75:E6 Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 046C Signing time: Tue 01 Jul 2025 00:41:48 +0000 Manifest this update: Tue 01 Jul 2025 00:41:48 +0000 Manifest next update: Tue 08 Jul 2025 00:41:48 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: 3AzhFWPlWRvUbgwapDqTIh+Xhx94WTjwtOA2TeWrM3w=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Jul 1 00:41:48 2025 GMT Not After : Jul 8 00:41:48 2025 GMT Subject: CN=68632ecc-da66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:6a:de:95:0e:43:b8:2b:4c:57:d4:ef:e0: c5:3d:0f:4e:ed:bc:2b:ee:a3:96:b0:d2:85:45:db: 8b:61:7f:34:bd:48:84:b9:a1:c0:0f:0a:b9:35:1d: 6a:d7:9c:34:aa:86:ef:ba:7d:9a:7c:fa:1f:fa:55: 29:f6:a7:fa:e4:9a:85:ea:fc:48:4f:55:4c:d3:21: 40:fe:ad:17:71:fb:d6:ee:fd:f2:99:1c:7c:46:c3: cf:9f:d3:8a:70:22:00:72:3e:37:e4:92:50:7b:cc: a1:6c:9a:af:f9:d5:01:8b:02:92:f0:bf:ec:90:08: 4a:49:3d:f3:de:09:9a:b1:77:b0:60:c9:43:a6:f8: d8:17:54:bf:87:f6:99:6f:99:1f:88:9e:c3:fe:29: 06:7b:b8:89:77:8f:82:f6:b1:97:bd:fc:16:6a:59: e7:4f:eb:b8:30:3f:9b:57:8a:a0:6f:39:04:4e:79: cd:6e:3e:10:25:a5:88:e9:fc:5b:a1:19:9d:3f:e3: 15:55:79:45:ce:14:db:89:18:ae:c6:a4:7e:e5:2b: 4d:27:f3:4d:47:49:21:72:d9:ef:e9:54:09:2b:64: eb:36:fa:3f:5f:a4:21:b8:fb:99:59:ce:31:78:4d: eb:93:ec:2b:3d:73:9a:1f:db:d7:05:3a:9b:cb:52: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:19:1D:20:B7:9D:8A:F2:15:44:8D:5F:DA:FF:95:C2:4A:52:75:E6 X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:65:c3:15:dc:24:6e:e7:1c:71:cb:40:8b:56:8f:d1:97:c1: e3:02:85:94:88:59:1f:1f:58:e4:d2:18:4b:1e:c9:31:0a:66: 10:4e:cd:ca:e0:2f:f0:e2:85:94:24:d0:35:2b:29:b3:c4:00: c6:dd:ff:a1:d7:59:46:fd:4d:10:50:aa:b2:d7:92:e7:59:09: 18:5e:4f:ed:87:90:cc:70:83:01:c3:d5:bd:69:d5:9a:60:99: 7c:cf:22:47:86:43:6b:25:e0:9f:ac:f3:6b:57:9d:fd:4f:25: 5d:5b:f2:3f:e7:39:40:7f:d4:ab:9c:fa:f4:1a:ae:42:ec:0c: 78:da:fd:5b:f0:52:54:bd:f5:b1:c4:d2:13:a8:47:08:a0:58: 0a:a6:03:73:c0:ff:e2:9e:17:39:b8:a8:b3:79:38:34:21:4f: df:37:65:85:87:3c:e0:2a:96:41:c9:e2:ab:45:18:f1:c4:f2: a6:19:27:69:40:3e:ab:5d:64:6e:e4:d6:6c:de:01:b4:2f:5c: 86:66:7b:37:be:f8:04:5a:44:4f:13:e0:e4:f7:4c:f6:28:a7: 52:d9:a6:e1:87:a1:5b:24:ec:81:64:8a:e9:10:bf:3e:6c:66: b1:65:57:ef:e1:d2:f5:bc:c0:66:d1:e7:78:3b:00:9c:8d:07: 73:be:ab:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjUwNzAxMDA0MTQ4WhcNMjUwNzA4MDA0MTQ4WjAYMRYwFAYD VQQDEw02ODYzMmVjYy1kYTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoD9q3pUOQ7grTFfU7+DFPQ9O7bwr7qOWsNKFRduLYX80vUiEuaHADwq5NR1q 15w0qobvun2afPof+lUp9qf65JqF6vxIT1VM0yFA/q0XcfvW7v3ymRx8RsPPn9OK cCIAcj435JJQe8yhbJqv+dUBiwKS8L/skAhKST3z3gmasXewYMlDpvjYF1S/h/aZ b5kfiJ7D/ikGe7iJd4+C9rGXvfwWalnnT+u4MD+bV4qgbzkETnnNbj4QJaWI6fxb oRmdP+MVVXlFzhTbiRiuxqR+5StNJ/NNR0khctnv6VQJK2TrNvo/X6QhuPuZWc4x eE3rk+wrPXOaH9vXBTqby1JXOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcZHSC3 nYryFUSNX9r/lcJKUnXmMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVZcMV3CRu5xxxy0CLVo/Rl8HjAoWUiFkfH1jk0hhLHskxCmYQTs3K 4C/w4oWUJNA1KymzxADG3f+h11lG/U0QUKqy15LnWQkYXk/th5DMcIMBw9W9adWa YJl8zyJHhkNrJeCfrPNrV539TyVdW/I/5zlAf9SrnPr0Gq5C7Ax42v1b8FJUvfWx xNITqEcIoFgKpgNzwP/inhc5uKizeTg0IU/fN2WFhzzgKpZByeKrRRjxxPKmGSdp QD6rXWRu5NZs3gG0L1yGZns3vvgEWkRPE+Dk90z2KKdS2abhh6FbJOyBZIrpEL8+ bGaxZVfv4dL1vMBm0ed4OwCcjQdzvqsV -----END CERTIFICATE-----Generated at Thu Jul 3 00:17:50 2025 by rpki-client