$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft File: 5GuTGFhaweBs84Ti7swh9HQzibs.mft (raw, json) Hash identifier: kvXdmxjcxZF/8hbDXGte0uL6M11ahtMVadyBKZUHGwc= Subject key identifier: 39:C9:82:9E:7F:36:A0:A1:86:26:74:2E:69:11:23:BF:32:21:F5:91 Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB Certificate issuer: /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft Manifest number: 4D Signing time: Sat 19 Jul 2025 07:36:58 +0000 Manifest this update: Sat 19 Jul 2025 07:36:57 +0000 Manifest next update: Sat 26 Jul 2025 07:36:57 +0000 Files and hashes: 1: 5GuTGFhaweBs84Ti7swh9HQzibs.crl (hash: uRzrCZsbfbBRW4lW0ITp7HaGqBRjl2e310uHxmz3aUg=) 2: 3CA27876F73F11EF95C5F011C4F9AE02.roa (hash: N43S8PomeMoOc73XP6mqN9NeUSUDTrEwlo9H3GKtmMY=) 3: E0E5603A371611F0A29AF975C4F9AE02.roa (hash: 7sGkTVjWqxDLmNFPgwzndzV8HDq97b9L4xe31X9V3nA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB Validity Not Before: Jul 19 07:36:57 2025 GMT Not After : Jul 26 07:36:57 2025 GMT Subject: CN=687b4b19-a94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:00:8c:2b:5b:46:c2:f0:03:07:70:fe:68: 52:86:1a:db:70:33:1a:6c:74:12:c6:4b:2b:d5:7d: 49:7b:4b:f0:92:82:28:2a:76:54:5a:f8:0b:1c:38: 18:6c:7d:f2:09:5d:03:17:18:74:a0:70:5a:7a:5d: 45:b0:5c:e3:54:d7:6f:8c:a2:c6:c5:17:b0:2b:86: cd:3b:63:59:78:c0:24:57:f8:3b:e3:ed:3f:42:57: 56:ea:42:88:c2:cb:07:22:d7:06:77:c2:a1:82:66: 10:a5:81:5f:4d:c9:53:71:e6:53:d8:15:c7:c7:a6: 78:b1:7d:48:e9:25:e8:54:d7:20:35:de:e8:fa:cb: 27:2f:0b:32:cb:3a:80:39:d8:5b:98:20:6c:49:e1: 93:d5:65:06:3d:cf:77:7d:f2:58:d4:8c:8f:0d:16: a8:ba:11:3c:d7:d5:ca:15:92:21:cf:9a:67:02:30: 26:81:3a:f2:2d:a7:92:86:ef:e9:88:b3:84:50:d4: 4c:da:16:fa:df:76:48:19:23:a9:3f:df:c6:9e:4c: fc:9a:3e:2d:48:29:69:13:ff:7a:96:b8:78:58:97: 58:27:65:9f:80:c3:3d:13:49:65:3e:af:fd:45:b6: 4b:97:ef:d8:45:71:48:81:b1:2a:8f:fa:f8:72:aa: a6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C9:82:9E:7F:36:A0:A1:86:26:74:2E:69:11:23:BF:32:21:F5:91 X509v3 Authority Key Identifier: keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:10:bd:3e:23:41:d3:b7:16:99:1f:da:2b:ec:4e:d2:b2:ff: 5a:c6:50:8c:ca:76:8c:ef:a0:20:50:6d:d7:43:4f:24:7e:f5: fd:21:bb:ea:df:f8:3c:e6:7e:55:76:5f:eb:92:5a:22:99:b5: aa:60:90:ef:c1:c8:51:20:7e:d7:1c:3f:45:11:cc:6a:6b:de: f0:0b:50:29:52:58:97:36:3d:05:94:d5:2b:09:2a:19:3b:c6: 5d:ef:04:e4:55:f3:97:27:f7:9d:58:6a:76:ac:b9:ef:7f:8e: 43:01:87:5e:f3:ba:a2:a9:b9:d8:3f:57:9c:11:1a:fb:9b:11: 80:ec:1e:13:4e:e7:fa:b7:4c:ee:ec:a2:2c:01:65:0f:27:3a: b6:bd:d5:42:f3:b6:c0:97:89:16:2d:14:12:92:5e:1b:0c:f5: ed:44:0b:56:0c:19:65:73:9d:fd:58:15:97:a3:be:2d:91:c0: 52:55:6c:24:23:14:b4:e9:bb:d0:0c:1e:51:43:08:cb:4c:b3: a5:77:f0:4b:75:97:86:56:d9:06:4d:12:0d:d1:7b:63:01:ea: 96:dd:25:3e:a5:c1:f6:ea:a7:50:4f:1a:fe:71:3b:70:ac:37: 76:73:ce:00:cb:4b:c2:7e:b1:92:85:81:7b:0a:4b:3e:e7:79: 18:d3:51:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODNCNjExMC8GA1UEBRMoRTQ2QjkzMTg1ODVBQzFFMDZDRjM4NEUyRUVDQzIxRjQ3 NDMzODlCQjAeFw0yNTA3MTkwNzM2NTdaFw0yNTA3MjYwNzM2NTdaMBgxFjAUBgNV BAMTDTY4N2I0YjE5LWE5NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvrgCMK1tGwvADB3D+aFKGGttwMxpsdBLGSyvVfUl7S/CSgigqdlRa+AscOBhs ffIJXQMXGHSgcFp6XUWwXONU12+MosbFF7Arhs07Y1l4wCRX+Dvj7T9CV1bqQojC ywci1wZ3wqGCZhClgV9NyVNx5lPYFcfHpnixfUjpJehU1yA13uj6yycvCzLLOoA5 2FuYIGxJ4ZPVZQY9z3d98ljUjI8NFqi6ETzX1coVkiHPmmcCMCaBOvItp5KG7+mI s4RQ1EzaFvrfdkgZI6k/38aeTPyaPi1IKWkT/3qWuHhYl1gnZZ+Awz0TSWU+r/1F tkuX79hFcUiBsSqP+vhyqqb9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOcmCnn82 oKGGJnQuaREjvzIh9ZEwHwYDVR0jBBgwFoAU5GuTGFhaweBs84Ti7swh9HQzibsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4M0I2L0U4RjE4QjIyRjcz RTExRUY5Njg3MzcwREM0RjlBRTAyLzVHdVRHRmhhd2VCczg0VGk3c3doOUhRemli cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUd1VEdGaGF3ZUJzODRUaTdzd2g5SFF6aWJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 M0I2L0U4RjE4QjIyRjczRTExRUY5Njg3MzcwREM0RjlBRTAyLzVHdVRHRmhhd2VC czg0VGk3c3doOUhRemlicy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAQQvT4jQdO3Fpkf2ivsTtKy/1rGUIzKdozvoCBQbddDTyR+9f0hu+rf +DzmflV2X+uSWiKZtapgkO/ByFEgftccP0URzGpr3vALUClSWJc2PQWU1SsJKhk7 xl3vBORV85cn951Yanasue9/jkMBh17zuqKpudg/V5wRGvubEYDsHhNO5/q3TO7s oiwBZQ8nOra91ULztsCXiRYtFBKSXhsM9e1EC1YMGWVznf1YFZejvi2RwFJVbCQj FLTpu9AMHlFDCMtMs6V38Et1l4ZW2QZNEg3Re2MB6pbdJT6lwfbqp1BPGv5xO3Cs N3ZzzgDLS8J+sZKFgXsKSz7neRjTUYA= -----END CERTIFICATE-----Generated at Mon Jul 21 05:47:32 2025 by rpki-client