$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: 1CeXyhao67zfGiyObfV4jQA0uDZUzDRkg7SUrYrc110= Subject key identifier: C5:E9:D9:5E:93:B6:01:CE:43:71:0E:2A:1F:F1:CA:9D:CD:C9:F0:8E Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 04AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 0495 Signing time: Fri 19 Sep 2025 00:24:50 +0000 Manifest this update: Fri 19 Sep 2025 00:24:48 +0000 Manifest next update: Fri 26 Sep 2025 00:24:48 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: 6qGheCUo1MuVKqOKZzYzA+0aQmu8tlXlvvIx54/IFyA=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1198 (0x4ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Sep 19 00:24:48 2025 GMT Not After : Sep 26 00:24:48 2025 GMT Subject: CN=68cca2d1-b37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:22:33:a2:c0:5d:fb:c0:21:93:2a:0d:68:e7: 9f:01:ff:a9:a9:20:88:2a:76:87:b2:be:61:2d:64: 6e:2c:de:ec:a6:56:5b:a2:00:d5:aa:fe:fe:76:e2: 7e:f2:0f:40:cb:f6:f0:0c:4c:76:bc:6e:e6:e9:da: 35:ff:16:96:de:15:9f:c0:e4:e4:0e:4f:e9:bc:b2: a8:f7:77:1b:4c:4c:87:0b:2c:cd:f2:ca:97:ad:b3: f5:93:f2:5b:3c:c8:e4:69:07:35:48:df:92:5a:96: 1c:05:3c:5b:bf:ef:43:55:39:c0:f2:15:b2:f5:48: e2:5d:ba:03:e9:2d:27:84:26:3f:96:1a:1d:2b:21: a1:ef:ab:5b:c2:b0:f9:d7:56:cd:0d:0d:8d:61:d1: ed:11:20:54:e7:5d:85:98:0c:b5:88:5f:cd:47:10: 7f:bb:c7:85:e0:9b:71:11:29:a5:96:71:a9:4f:67: 79:dd:6f:37:4c:ff:42:b7:1a:7f:62:02:2a:41:49: 58:65:ce:81:a8:89:60:0e:fd:b5:47:9b:91:b9:71: a9:40:19:0d:2e:a1:d4:aa:ed:95:4b:88:fd:94:15: c5:a6:de:07:ab:9d:b4:d8:83:5f:25:8b:e6:ec:24: a2:01:61:0c:2e:b3:b9:e2:d5:2c:73:26:c2:a2:4d: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E9:D9:5E:93:B6:01:CE:43:71:0E:2A:1F:F1:CA:9D:CD:C9:F0:8E X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:91:b1:b2:da:1e:d3:61:fa:21:f6:3f:cd:92:49:bc:ff:14: c0:d3:12:32:df:71:cb:f0:b4:06:52:16:22:03:2c:e1:16:c1: 44:f7:d4:2e:be:17:c9:4b:bb:8b:d3:42:24:d3:3a:f3:31:3c: 55:40:d9:35:8d:57:5a:f9:1d:18:50:8d:38:25:30:1c:d0:d0: 95:77:36:4f:ae:5d:2b:eb:2b:f7:05:3c:cd:5d:3d:3b:cb:b0: 94:49:2d:42:73:75:fe:dd:7b:e7:7b:f7:9b:bf:cd:a2:a6:0a: 12:25:38:8a:00:72:e7:c9:40:2e:f7:a5:57:89:1f:66:91:86: a2:6e:9e:8a:16:fc:83:1a:c8:eb:fe:47:85:52:8d:a1:f4:7f: 08:ce:15:f8:de:73:e6:df:4a:73:71:94:1a:c5:21:45:be:24: de:0e:78:a1:81:42:e2:cc:95:7e:2e:36:ff:c6:2e:af:92:7f: 66:8b:ee:b5:b9:ae:60:e3:39:ac:4e:ce:bf:0f:5a:1a:ce:03: e7:42:d3:61:d0:90:32:b8:c9:5f:c9:9a:06:00:52:ee:4e:c5: d8:ea:ac:fd:8d:dd:65:d6:60:be:67:f5:a6:eb:d7:3b:fa:ae: 2f:ea:ee:77:ba:cd:7a:4f:2f:26:5e:de:49:aa:2e:ec:b0:f4: 2b:d9:d4:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjUwOTE5MDAyNDQ4WhcNMjUwOTI2MDAyNDQ4WjAYMRYwFAYD VQQDEw02OGNjYTJkMS1iMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iIzosBd+8AhkyoNaOefAf+pqSCIKnaHsr5hLWRuLN7splZbogDVqv7+duJ+ 8g9Ay/bwDEx2vG7m6do1/xaW3hWfwOTkDk/pvLKo93cbTEyHCyzN8sqXrbP1k/Jb PMjkaQc1SN+SWpYcBTxbv+9DVTnA8hWy9UjiXboD6S0nhCY/lhodKyGh76tbwrD5 11bNDQ2NYdHtESBU512FmAy1iF/NRxB/u8eF4JtxESmllnGpT2d53W83TP9Ctxp/ YgIqQUlYZc6BqIlgDv21R5uRuXGpQBkNLqHUqu2VS4j9lBXFpt4Hq5202INfJYvm 7CSiAWEMLrO54tUscybCok2V+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXp2V6T tgHOQ3EOKh/xyp3NyfCOMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6kbGy2h7TYfoh9j/Nkkm8/xTA0xIy33HL8LQGUhYiAyzhFsFE99Qu vhfJS7uL00Ik0zrzMTxVQNk1jVda+R0YUI04JTAc0NCVdzZPrl0r6yv3BTzNXT07 y7CUSS1Cc3X+3Xvne/ebv82ipgoSJTiKAHLnyUAu96VXiR9mkYaibp6KFvyDGsjr /keFUo2h9H8IzhX43nPm30pzcZQaxSFFviTeDnihgULizJV+Ljb/xi6vkn9mi+61 ua5g4zmsTs6/D1oazgPnQtNh0JAyuMlfyZoGAFLuTsXY6qz9jd1l1mC+Z/Wm69c7 +q4v6u53us16Ty8mXt5Jqi7ssPQr2dRR -----END CERTIFICATE-----Generated at Fri Sep 19 05:21:06 2025 by rpki-client