$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft File: 53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json) Hash identifier: 7tNLARfLD0esGCrH3Zb0MhfexO1Xx29jNKk5M/C4P24= Subject key identifier: 9C:0D:7B:A0:B3:E9:09:51:E6:AF:9C:2F:7C:99:35:36:E3:BC:B1:08 Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 Certificate issuer: /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Certificate serial: 0C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft Manifest number: 0C5A Signing time: Sat 02 Aug 2025 18:37:45 +0000 Manifest this update: Sat 02 Aug 2025 18:37:44 +0000 Manifest next update: Sat 09 Aug 2025 18:37:44 +0000 Files and hashes: 1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: 3bk7E/yFUml9er0dovibgOS3n0gKFFiGOtHffEUYkWs=) 2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: 7T6rttGkDUZMLr7YNcGWXFP6okk75uTuQj2yDiVmYPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1486, serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Validity Not Before: Aug 2 18:37:44 2025 GMT Not After : Aug 9 18:37:44 2025 GMT Subject: CN=688e5af8-bbb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:e0:fd:f3:7b:2f:1b:79:03:3c:48:26:be: 31:2e:8a:66:d5:05:e0:fe:70:c6:01:88:a3:bf:64: 5c:b1:fc:e2:7a:d0:c0:4f:79:3f:fc:80:c8:fc:10: eb:9c:07:dd:51:cb:4f:41:d3:4e:0c:a9:2f:55:17: 35:3f:dc:20:bb:bd:3f:72:29:50:f7:b0:16:4a:09: e8:a8:f2:0b:2d:e4:6a:5f:69:08:d2:00:f8:16:b8: f0:d0:7e:24:9f:e2:e9:67:2b:ef:66:67:f9:f9:fc: 4f:df:0a:c8:01:c2:fa:ce:51:92:42:89:59:3c:f8: b7:66:1f:3f:ed:0f:1f:d7:95:d5:30:20:3c:3a:56: b7:b7:47:40:35:52:da:0b:dc:4f:1e:8d:7d:f5:c8: a0:80:28:94:99:f4:42:4a:da:61:42:9a:cd:b8:d4: f4:38:d0:14:85:f3:32:45:15:dd:6c:ed:62:18:69: 9c:29:c3:5c:c9:13:79:76:1d:0a:ba:23:fb:87:cc: bf:0e:df:e3:c4:c9:a5:cf:aa:3a:af:74:0a:51:43: 83:99:68:bc:ba:bf:98:31:49:8c:be:72:9e:ce:6a: 34:93:6d:b6:d5:a3:70:6c:d6:e0:64:5a:d2:a9:c3: 1e:de:40:e1:65:87:e3:23:82:d6:74:59:a7:9b:34: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0D:7B:A0:B3:E9:09:51:E6:AF:9C:2F:7C:99:35:36:E3:BC:B1:08 X509v3 Authority Key Identifier: keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:30:83:0a:4e:0b:04:04:e7:52:62:1e:2c:59:d0:ed:67:21: c1:a6:01:f1:58:a0:5c:cf:be:f8:f1:8f:89:cc:e7:57:a4:07: bc:29:2d:3f:7c:e2:b3:b4:91:da:dd:f2:a0:00:23:a1:8f:c8: e3:06:3c:4f:30:9a:d8:be:79:58:2d:c6:ca:9e:d2:f7:63:df: 4e:4d:cc:64:00:8d:4a:77:be:8a:72:a6:d8:80:c0:92:2b:29: a4:c6:cb:74:e9:a7:1a:f1:b8:f2:9f:ed:b1:56:d9:85:30:1c: 09:ab:87:fa:89:c1:ca:00:96:bf:cc:e1:cf:8a:1e:62:15:10: 65:e8:e3:3d:44:60:4f:33:e2:67:33:27:c3:f2:4d:f6:41:b9: 35:45:20:7c:8e:09:8c:be:75:e2:a9:cd:d3:42:50:2a:83:0d: db:d2:2c:cb:8a:b8:18:df:47:06:66:f0:51:06:4f:fc:34:70: 52:77:1e:b6:27:5f:f1:f9:f5:c0:99:1c:43:d0:60:35:54:ba: 93:0f:fa:ce:1e:08:b1:2c:03:77:47:bf:33:13:d1:fc:56:97: f0:8d:be:3c:c3:07:68:a6:10:06:3a:ef:79:4d:de:70:be:63: 7a:84:8f:a1:dc:8f:75:42:da:7d:c3:66:b7:b4:05:0b:54:d0: 5f:61:5e:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0ODYxMTAvBgNVBAUTKEU3NzZBNzMzNkY4RjY3ODVBMzZBMDEwNDY4NDBCNTE0 QTBENDE5MjkwHhcNMjUwODAyMTgzNzQ0WhcNMjUwODA5MTgzNzQ0WjAYMRYwFAYD VQQDEw02ODhlNWFmOC1iYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtPg/fN7Lxt5AzxIJr4xLopm1QXg/nDGAYijv2RcsfzietDAT3k//IDI/BDr nAfdUctPQdNODKkvVRc1P9wgu70/cilQ97AWSgnoqPILLeRqX2kI0gD4Frjw0H4k n+LpZyvvZmf5+fxP3wrIAcL6zlGSQolZPPi3Zh8/7Q8f15XVMCA8Ola3t0dANVLa C9xPHo199ciggCiUmfRCStphQprNuNT0ONAUhfMyRRXdbO1iGGmcKcNcyRN5dh0K uiP7h8y/Dt/jxMmlz6o6r3QKUUODmWi8ur+YMUmMvnKezmo0k2221aNwbNbgZFrS qcMe3kDhZYfjI4LWdFmnmzS3jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwNe6Cz 6QlR5q+cL3yZNTbjvLEIMB8GA1UdIwQYMBaAFOd2pzNvj2eFo2oBBGhAtRSg1Bkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ4Ni8wNkM0QjJGRTA2 QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0V2phZ0VFYUVDMUZLRFVH U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzYW5NMi1QWjRXamFnRUVhRUMxRktEVUdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ4Ni8wNkM0QjJGRTA2QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0 V2phZ0VFYUVDMUZLRFVHU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcMIMKTgsEBOdSYh4sWdDtZyHBpgHxWKBcz7748Y+JzOdXpAe8KS0/ fOKztJHa3fKgACOhj8jjBjxPMJrYvnlYLcbKntL3Y99OTcxkAI1Kd76KcqbYgMCS Kymkxst06aca8bjyn+2xVtmFMBwJq4f6icHKAJa/zOHPih5iFRBl6OM9RGBPM+Jn MyfD8k32Qbk1RSB8jgmMvnXiqc3TQlAqgw3b0izLirgY30cGZvBRBk/8NHBSdx62 J1/x+fXAmRxD0GA1VLqTD/rOHgixLAN3R78zE9H8Vpfwjb48wwdophAGOu95Td5w vmN6hI+h3I91Qtp9w2a3tAULVNBfYV4C -----END CERTIFICATE-----Generated at Mon Aug 4 16:11:39 2025 by rpki-client