$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: CSjBQHBUYs35ZS7FNF+zlhdXArklsCyaEgnN5lHe77A= Subject key identifier: 39:85:49:90:00:24:64:0A:E5:C7:6C:20:ED:43:89:1F:09:11:E8:DD Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 047D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 0464 Signing time: Sat 14 Jun 2025 23:55:19 +0000 Manifest this update: Sat 14 Jun 2025 23:55:19 +0000 Manifest next update: Sat 21 Jun 2025 23:55:19 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: o1rRouehR976HeOrsDmGaIkuLW+piNWSJ+7Jj1xQzYo=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Jun 14 23:55:19 2025 GMT Not After : Jun 21 23:55:19 2025 GMT Subject: CN=684e0be7-ae10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:db:bb:65:0c:e7:ff:da:a8:70:27:90:3b:34: ec:ff:8d:c6:40:5f:f0:72:55:23:5f:1e:21:96:58: 0b:4f:be:6b:67:dd:3c:a7:40:a1:92:32:73:29:2f: 78:8a:a2:10:2e:e3:92:0e:1f:88:f5:8e:fb:0d:53: 00:0d:40:3c:ea:0d:99:ee:0d:f1:7e:4a:dc:83:e8: 0d:15:2c:b0:d9:e3:b7:5a:c3:9b:86:9a:a1:b1:fb: bc:b8:62:5f:8c:3e:1e:46:0b:16:91:fb:8e:04:11: 04:e1:5f:be:c7:f2:91:24:67:c8:70:97:23:10:f1: 1f:4e:4f:9a:4b:a5:f2:f8:b1:80:39:60:2e:e5:25: 17:a7:b7:ea:ac:48:99:7b:d6:c0:4a:37:18:c4:cc: fb:2f:95:26:da:97:a0:cc:23:61:2d:a9:d0:cd:cb: cf:e9:24:00:75:d0:74:f4:4c:99:82:56:e4:4e:91: dd:12:fd:6a:c3:eb:21:23:1d:24:67:a3:34:88:95: c9:e6:d7:f8:a0:34:ed:4c:f1:72:c5:10:91:11:4f: 95:94:d7:3f:57:01:3a:28:a0:2e:a4:84:bb:10:55: b2:c1:d8:7e:cc:6b:fb:c8:c7:48:05:c1:71:a9:ef: b6:2a:65:10:bb:fe:71:63:a5:d5:fc:ec:2a:8f:14: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:85:49:90:00:24:64:0A:E5:C7:6C:20:ED:43:89:1F:09:11:E8:DD X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:43:4b:79:3b:b4:a1:60:85:81:fb:aa:73:45:3a:e4:4e:92: 29:2f:73:d1:60:ca:51:19:70:5e:50:c6:f8:42:44:38:98:04: f6:1a:7e:1b:33:b6:ba:bf:5f:47:a5:a4:fb:81:d8:24:76:27: 57:67:cf:25:3b:dd:e5:0c:ae:df:80:ec:83:6e:2c:39:e4:26: 7d:d7:e6:25:61:e3:af:d0:a6:f1:c1:f1:00:3d:83:19:7b:fb: bd:00:81:c5:32:42:a3:85:3f:20:2b:4e:b8:ab:08:ba:2e:67: 66:e7:fa:a0:82:55:22:91:1e:4b:10:85:61:f8:95:19:d2:a2: af:e6:b7:6b:d0:bd:44:c9:32:cd:10:10:39:2e:5f:68:21:bc: 4b:15:e6:27:56:26:c6:1a:a8:3d:dd:b5:28:27:a8:fc:9a:4c: 15:89:b2:a2:de:f9:a1:f4:f4:06:99:ce:4a:22:b0:d3:60:8f: 12:fa:5c:bf:6f:8c:63:31:04:e7:0c:b6:41:cc:71:70:fd:68: e0:1f:f7:4f:b7:73:a5:94:4f:55:3a:14:98:09:7a:a7:6a:59: e4:81:23:a6:62:76:26:33:63:0c:19:96:ab:fd:87:b7:a8:04: cf:c0:e8:4c:a8:39:7f:48:74:c9:07:78:ae:64:8f:68:d0:18: 45:1a:77:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjUwNjE0MjM1NTE5WhcNMjUwNjIxMjM1NTE5WjAYMRYwFAYD VQQDEw02ODRlMGJlNy1hZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tu7ZQzn/9qocCeQOzTs/43GQF/wclUjXx4hllgLT75rZ908p0ChkjJzKS94 iqIQLuOSDh+I9Y77DVMADUA86g2Z7g3xfkrcg+gNFSyw2eO3WsObhpqhsfu8uGJf jD4eRgsWkfuOBBEE4V++x/KRJGfIcJcjEPEfTk+aS6Xy+LGAOWAu5SUXp7fqrEiZ e9bASjcYxMz7L5Um2pegzCNhLanQzcvP6SQAddB09EyZglbkTpHdEv1qw+shIx0k Z6M0iJXJ5tf4oDTtTPFyxRCREU+VlNc/VwE6KKAupIS7EFWywdh+zGv7yMdIBcFx qe+2KmUQu/5xY6XV/OwqjxTMNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmFSZAA JGQK5cdsIO1DiR8JEejdMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPQ0t5O7ShYIWB+6pzRTrkTpIpL3PRYMpRGXBeUMb4QkQ4mAT2Gn4b M7a6v19HpaT7gdgkdidXZ88lO93lDK7fgOyDbiw55CZ91+YlYeOv0KbxwfEAPYMZ e/u9AIHFMkKjhT8gK064qwi6Lmdm5/qgglUikR5LEIVh+JUZ0qKv5rdr0L1EyTLN EBA5Ll9oIbxLFeYnVibGGqg93bUoJ6j8mkwVibKi3vmh9PQGmc5KIrDTYI8S+ly/ b4xjMQTnDLZBzHFw/WjgH/dPt3OllE9VOhSYCXqnalnkgSOmYnYmM2MMGZar/Ye3 qATPwOhMqDl/SHTJB3iuZI9o0BhFGndG -----END CERTIFICATE-----Generated at Sun Jun 15 09:42:26 2025 by rpki-client