$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: x8yBgz3f8CAqaJ/6zYBe2cX+/xIiYRVoFLbAb6eaUkk= Subject key identifier: 92:48:71:76:B7:4A:8D:8B:BE:7E:76:6D:3B:8D:54:A8:71:71:1C:05 Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 048F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 0476 Signing time: Mon 21 Jul 2025 00:22:18 +0000 Manifest this update: Mon 21 Jul 2025 00:22:18 +0000 Manifest next update: Mon 28 Jul 2025 00:22:18 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: rT5t1vCMIzFRh2Sw1iKmKOX2oBy+qjoR9AEuOb5rg54=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1167 (0x48f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Jul 21 00:22:18 2025 GMT Not After : Jul 28 00:22:18 2025 GMT Subject: CN=687d883a-1eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:b2:f3:4f:ee:ac:0d:81:96:4e:82:cb:a2: 13:dc:47:33:eb:d5:4f:f9:18:1d:6b:56:bb:61:c8: b6:d9:0b:bf:89:a4:67:5c:97:3a:2f:f8:51:4a:2b: a6:d1:81:61:15:9a:6f:dc:0b:d9:db:83:d1:a3:32: d8:37:b1:df:4f:47:f6:b2:18:fb:8b:5c:5d:4f:06: 88:52:4d:83:5b:cb:e6:0a:3a:d1:de:98:4b:ba:bc: 18:75:7d:d8:7d:6c:6b:69:e3:93:14:19:1e:44:0f: 10:04:7c:53:34:80:57:97:13:a4:de:d9:80:3a:86: 77:4e:12:1f:66:70:be:30:61:ed:ee:c4:14:df:c1: b9:97:20:ba:3e:67:f7:01:e0:66:ae:2a:bc:2d:64: 79:d1:eb:1a:72:cc:13:1e:40:b3:28:01:14:b9:a8: 9b:e7:11:82:b1:77:8f:f2:6e:bb:f5:e0:a1:ec:5a: f0:84:6e:eb:ed:e9:17:59:d8:19:d8:ab:03:41:b7: e9:4e:09:06:0c:a9:f2:4a:e9:58:14:b0:6c:35:10: 8e:67:67:97:11:f9:d9:8d:1a:21:82:1a:ff:b5:e5: 5f:03:38:d1:e4:c1:ca:9c:6e:d7:c7:c7:bf:3b:4d: f8:9a:1c:d3:18:eb:0a:e3:79:fa:d3:bb:e0:0c:da: be:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:48:71:76:B7:4A:8D:8B:BE:7E:76:6D:3B:8D:54:A8:71:71:1C:05 X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:33:e3:df:ea:a2:e7:9d:73:0d:55:38:e9:e4:02:ba:9c:92: a1:e6:ee:3e:8d:aa:4b:b2:09:d1:cf:ae:22:60:75:89:78:d5: f9:e4:97:e2:24:23:2d:91:eb:a8:14:59:8a:1e:d3:44:d7:50: a5:8a:87:a3:f0:9c:3f:74:01:88:74:5f:2c:3e:5a:70:cf:e7: 9b:e3:7e:fb:f7:c4:74:54:8d:84:0a:9f:3a:de:e5:ce:89:88: 8f:c8:98:a3:65:0c:9d:72:95:65:4c:63:79:9e:5c:8a:0c:b4: 92:8c:92:b0:e4:48:4e:b3:54:88:3e:c1:15:e0:7a:d5:b5:b0: ae:1e:16:24:7c:7b:62:ca:77:26:6c:6e:14:2e:36:eb:cf:32: b5:2c:64:bd:ea:4b:30:ee:b6:3f:a9:07:75:cb:e4:63:8b:88: e1:db:d0:ba:01:41:79:fa:c1:57:5c:49:68:41:42:33:e3:23: 61:58:cc:69:48:60:9a:2c:0c:74:d0:44:af:19:7e:f0:28:b9: 49:82:f3:90:3a:60:ec:a3:50:b4:fc:66:40:80:af:16:e8:0b: d2:76:0c:be:19:88:61:59:f2:a8:8a:26:99:89:59:42:18:70: cc:b7:11:1e:77:42:de:6f:2d:be:2d:d6:8d:87:7f:12:cc:2e: 59:82:3c:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjUwNzIxMDAyMjE4WhcNMjUwNzI4MDAyMjE4WjAYMRYwFAYD VQQDEw02ODdkODgzYS0xZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEGy80/urA2Blk6Cy6IT3Ecz69VP+Rgda1a7Yci22Qu/iaRnXJc6L/hRSium 0YFhFZpv3AvZ24PRozLYN7HfT0f2shj7i1xdTwaIUk2DW8vmCjrR3phLurwYdX3Y fWxraeOTFBkeRA8QBHxTNIBXlxOk3tmAOoZ3ThIfZnC+MGHt7sQU38G5lyC6Pmf3 AeBmriq8LWR50esacswTHkCzKAEUuaib5xGCsXeP8m679eCh7FrwhG7r7ekXWdgZ 2KsDQbfpTgkGDKnySulYFLBsNRCOZ2eXEfnZjRohghr/teVfAzjR5MHKnG7Xx8e/ O034mhzTGOsK43n607vgDNq+uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJIcXa3 So2Lvn52bTuNVKhxcRwFMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiM+Pf6qLnnXMNVTjp5AK6nJKh5u4+japLsgnRz64iYHWJeNX55Jfi JCMtkeuoFFmKHtNE11Clioej8Jw/dAGIdF8sPlpwz+eb437798R0VI2ECp863uXO iYiPyJijZQydcpVlTGN5nlyKDLSSjJKw5EhOs1SIPsEV4HrVtbCuHhYkfHtiyncm bG4ULjbrzzK1LGS96ksw7rY/qQd1y+Rji4jh29C6AUF5+sFXXEloQUIz4yNhWMxp SGCaLAx00ESvGX7wKLlJgvOQOmDso1C0/GZAgK8W6AvSdgy+GYhhWfKoiiaZiVlC GHDMtxEed0Leby2+LdaNh38SzC5ZgjxS -----END CERTIFICATE-----Generated at Mon Jul 21 23:46:08 2025 by rpki-client