$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: 5EenYaGzUP3fCLqTcu1czlrwdSK+70BJkcay1oznv+Q= Subject key identifier: E3:A2:8F:E0:92:73:68:7A:7A:1D:51:5E:71:05:1C:BF:E4:44:3A:00 Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 04C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 04AE Signing time: Wed 05 Nov 2025 00:04:08 +0000 Manifest this update: Wed 05 Nov 2025 00:04:07 +0000 Manifest next update: Wed 12 Nov 2025 00:04:07 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: j8GyaWelI6vs2s5HYJz0Yi6sVe69eQvlhrQnCLQt5nY=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: qczG78WG8haFYulxxAmtGLgjwlDTvxJABqvmBehyavo=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: hKxsj0PrtMUtw8bckcFfFfce/Zwknq+qJ573s/y34G4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Nov 5 00:04:07 2025 GMT Not After : Nov 12 00:04:07 2025 GMT Subject: CN=690a9477-f68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:40:6c:8c:14:71:f4:f4:b7:3a:02:1a:40: 74:d3:2b:b6:56:9c:bc:55:e6:45:9f:f9:f9:40:a6: 60:8f:d3:be:6a:5d:fa:c6:68:03:da:e4:9d:92:dd: 5a:76:c5:00:e9:4a:89:ec:05:36:81:a1:12:79:d9: de:2c:28:c2:ea:04:4a:63:b4:f7:bd:2f:4a:7a:6d: 02:3d:5d:82:e7:f4:60:b7:3c:49:55:c1:e1:b6:7d: 0b:b2:40:ed:3b:5f:fc:c5:be:a9:3e:20:77:00:d7: 14:34:62:41:e3:dd:a3:33:af:62:58:b4:bc:e7:c8: 07:95:d9:de:2f:ee:b4:68:2d:1a:37:85:27:11:09: 04:31:97:4a:ce:d2:f7:3f:8f:6b:bf:92:65:39:29: 69:86:9e:70:a4:71:b5:ee:bb:e4:dd:a0:1a:3c:53: 62:2b:89:e5:d6:9c:4f:81:45:c6:ca:de:9e:9b:ca: f6:51:a3:f5:9e:c6:96:a7:81:5d:11:08:f4:fa:11: e7:ce:aa:84:16:2b:df:81:9b:ee:8e:98:2e:eb:93: 1d:9e:50:e5:f4:e8:e6:70:d7:d8:1b:7c:57:91:02: cb:1c:17:f0:67:e2:35:97:dd:8d:37:19:eb:ec:39: 69:ae:9e:70:77:5e:13:7f:76:81:2a:a8:75:a2:25: de:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A2:8F:E0:92:73:68:7A:7A:1D:51:5E:71:05:1C:BF:E4:44:3A:00 X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:5c:20:e6:f0:ef:94:51:63:14:69:b6:37:49:01:e0:a1:ed: e9:86:9a:f3:73:44:15:96:ef:4e:30:d1:56:8a:58:c8:a1:3c: ab:ff:8f:45:0f:bb:00:b8:52:88:6d:52:a1:44:c5:7d:1e:a9: 15:ff:fb:05:49:df:fa:f3:f4:b2:d1:73:fe:3e:1d:1f:da:ea: 45:b4:bb:a5:8b:52:d8:7f:9c:22:d9:00:13:3e:0b:6a:5c:9c: a1:33:ff:c2:c5:d4:55:89:87:f8:7d:92:ed:52:ac:34:38:86: b7:46:60:0b:55:c9:db:cb:4e:f4:3a:a9:a1:77:c2:7f:3a:a7: c8:8a:df:2f:af:d0:f7:7c:ad:ba:59:3d:7b:e0:f5:4f:15:36: af:10:ce:28:69:1c:2f:f7:1e:16:d7:ce:6d:80:91:b9:8f:f7: fe:f1:ff:31:16:f0:43:0b:4e:64:50:2e:c3:3b:7f:96:f0:24: 58:ff:c0:58:c9:8d:1d:9b:34:2f:73:32:e4:ea:c5:71:fc:56: b3:d2:ff:03:86:8d:d7:e2:de:1b:74:e7:72:24:f3:bb:ca:b7: 14:20:5c:58:e1:f4:f1:13:7b:16:ac:a2:9a:8b:34:15:17:20: ee:e9:72:ac:92:0b:5b:bb:0a:84:23:88:38:59:67:03:96:14: 06:e8:b5:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjUxMTA1MDAwNDA3WhcNMjUxMTEyMDAwNDA3WjAYMRYwFAYD VQQDEw02OTBhOTQ3Ny1mNjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUVAbIwUcfT0tzoCGkB00yu2Vpy8VeZFn/n5QKZgj9O+al36xmgD2uSdkt1a dsUA6UqJ7AU2gaESedneLCjC6gRKY7T3vS9Kem0CPV2C5/RgtzxJVcHhtn0LskDt O1/8xb6pPiB3ANcUNGJB492jM69iWLS858gHldneL+60aC0aN4UnEQkEMZdKztL3 P49rv5JlOSlphp5wpHG17rvk3aAaPFNiK4nl1pxPgUXGyt6em8r2UaP1nsaWp4Fd EQj0+hHnzqqEFivfgZvujpgu65MdnlDl9OjmcNfYG3xXkQLLHBfwZ+I1l92NNxnr 7Dlprp5wd14Tf3aBKqh1oiXeOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOij+CS c2h6eh1RXnEFHL/kRDoAMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoXCDm8O+UUWMUabY3SQHgoe3phprzc0QVlu9OMNFWiljIoTyr/49F D7sAuFKIbVKhRMV9HqkV//sFSd/68/Sy0XP+Ph0f2upFtLuli1LYf5wi2QATPgtq XJyhM//CxdRViYf4fZLtUqw0OIa3RmALVcnby070Oqmhd8J/OqfIit8vr9D3fK26 WT174PVPFTavEM4oaRwv9x4W185tgJG5j/f+8f8xFvBDC05kUC7DO3+W8CRY/8BY yY0dmzQvczLk6sVx/Faz0v8Dho3X4t4bdOdyJPO7yrcUIFxY4fTxE3sWrKKaizQV FyDu6XKskgtbuwqEI4g4WWcDlhQG6LVT -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:38 2025 by rpki-client