$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: qbupQh6BoYgXx3Inw+S1n0GWzJClcCzGQi3lOQd6kjQ= Subject key identifier: 70:8A:B9:61:59:B7:93:E7:0D:7B:53:87:67:6F:CE:F6:67:CE:63:ED Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 0487 Signing time: Sat 23 Aug 2025 00:18:40 +0000 Manifest this update: Sat 23 Aug 2025 00:18:39 +0000 Manifest next update: Sat 30 Aug 2025 00:18:39 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: scPE5vwC/o6RBWcwkXAeMHqhhBXb5c8t9frf/qAambM=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Aug 23 00:18:39 2025 GMT Not After : Aug 30 00:18:39 2025 GMT Subject: CN=68a908df-c145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:e0:d5:e4:15:d3:17:14:8b:ed:da:2a:44: d8:91:71:3c:8e:df:0e:0e:fd:38:e5:6b:a2:ee:9c: a8:48:17:22:80:e6:80:71:82:72:19:eb:07:32:e0: ac:29:37:bb:6e:ac:4c:22:c5:a2:00:a6:73:09:f0: 90:5e:1f:01:64:15:40:57:96:f9:7a:90:07:cf:a0: 07:d0:43:4d:f8:5c:a5:53:ac:25:60:22:0e:4b:78: 65:eb:f1:a6:2b:d5:f0:dd:1e:23:ca:65:90:b7:11: 10:ae:0b:b1:ee:5a:ec:dd:5c:a9:54:ea:03:13:00: 71:a0:93:81:91:8d:f3:6e:cd:e3:44:9c:4d:6a:9f: 03:4e:59:62:20:bf:08:c6:c3:90:15:1e:88:ed:a8: 64:b0:7a:03:90:22:16:16:f1:5f:66:3c:e2:d1:35: 86:47:98:11:ff:86:89:5d:80:9b:ae:3d:cc:2b:c7: 14:0e:c6:4b:88:15:a0:1d:15:18:08:50:e4:d6:5d: 1e:8f:65:33:eb:f6:12:f6:d2:9f:cd:9c:01:0c:9e: f1:52:e6:64:41:a2:ac:e0:fa:e1:bb:be:d9:38:e9: 99:15:b6:c8:72:6b:50:da:0d:46:22:00:5c:2a:b8: aa:5d:ff:a6:8d:b5:c0:0b:ee:7b:f6:ee:a4:41:f5: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8A:B9:61:59:B7:93:E7:0D:7B:53:87:67:6F:CE:F6:67:CE:63:ED X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bc:cc:75:9e:64:49:fc:32:14:3e:da:db:2c:3c:53:7f:1b: 24:3f:bf:3e:01:cc:62:bd:50:b2:b7:c8:cd:55:38:7b:e4:1a: 8b:0c:bb:bf:f9:de:f9:74:5f:1f:79:36:63:ac:1e:b5:1f:3e: 32:d2:e1:21:0a:df:82:16:c7:27:b4:a5:20:e9:57:b7:ae:c8: 68:d9:13:3f:bc:f3:ca:4e:fa:d1:92:b0:08:a7:38:3e:a5:68: 48:d6:74:4a:96:3e:d1:e3:81:fe:d5:ee:c5:1a:62:73:91:5c: f7:66:09:ae:2e:de:9e:68:dc:cc:84:95:30:4b:8d:ae:8d:d8: fd:7c:b0:5f:c8:42:a4:89:28:26:fa:95:d2:f4:dd:71:93:14: 9e:8f:f9:a2:ca:e0:09:21:d0:4c:1d:26:23:70:13:64:ab:14: 26:b0:e2:a7:66:0e:22:18:f5:9b:4c:3a:10:4d:bd:7c:41:b3: cd:9a:95:95:64:15:d6:ee:86:a4:67:6b:2f:34:b0:78:d7:5e: 1b:96:ec:29:8b:dc:c4:19:9f:4c:e8:82:dc:2a:9b:d2:f2:55: d8:42:bb:19:c2:65:aa:21:56:7a:e8:60:24:fd:73:e8:9e:a9: 01:c3:f1:fb:f6:aa:cb:9d:69:dc:5e:39:a2:f8:a8:94:56:5e: ff:93:60:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjUwODIzMDAxODM5WhcNMjUwODMwMDAxODM5WjAYMRYwFAYD VQQDEw02OGE5MDhkZi1jMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIXg1eQV0xcUi+3aKkTYkXE8jt8ODv045Wui7pyoSBcigOaAcYJyGesHMuCs KTe7bqxMIsWiAKZzCfCQXh8BZBVAV5b5epAHz6AH0ENN+FylU6wlYCIOS3hl6/Gm K9Xw3R4jymWQtxEQrgux7lrs3VypVOoDEwBxoJOBkY3zbs3jRJxNap8DTlliIL8I xsOQFR6I7ahksHoDkCIWFvFfZjzi0TWGR5gR/4aJXYCbrj3MK8cUDsZLiBWgHRUY CFDk1l0ej2Uz6/YS9tKfzZwBDJ7xUuZkQaKs4Prhu77ZOOmZFbbIcmtQ2g1GIgBc KriqXf+mjbXAC+579u6kQfX46wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCKuWFZ t5PnDXtTh2dvzvZnzmPtMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKvMx1nmRJ/DIUPtrbLDxTfxskP78+AcxivVCyt8jNVTh75BqLDLu/ +d75dF8feTZjrB61Hz4y0uEhCt+CFscntKUg6Ve3rsho2RM/vPPKTvrRkrAIpzg+ pWhI1nRKlj7R44H+1e7FGmJzkVz3ZgmuLt6eaNzMhJUwS42ujdj9fLBfyEKkiSgm +pXS9N1xkxSej/miyuAJIdBMHSYjcBNkqxQmsOKnZg4iGPWbTDoQTb18QbPNmpWV ZBXW7oakZ2svNLB4114bluwpi9zEGZ9M6ILcKpvS8lXYQrsZwmWqIVZ66GAk/XPo nqkBw/H79qrLnWncXjmi+KiUVl7/k2Do -----END CERTIFICATE-----Generated at Sun Aug 24 00:21:04 2025 by rpki-client