$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: 4S7h8E/DrxP0Hw7AIn5qsTVowbgnLm2NP6+a7UBGpc4= Subject key identifier: 2B:04:48:B7:C9:D4:CD:92:0D:6F:E7:C0:60:DB:0A:7B:B7:EE:71:BB Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 0499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 0480 Signing time: Sat 09 Aug 2025 00:36:33 +0000 Manifest this update: Sat 09 Aug 2025 00:36:33 +0000 Manifest next update: Sat 16 Aug 2025 00:36:33 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: FLiTVtum1KZ2UqeRAycmjczxIyBWr4eTg25HWOutsMg=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Aug 9 00:36:33 2025 GMT Not After : Aug 16 00:36:33 2025 GMT Subject: CN=68969811-0d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:02:ea:8b:ed:38:4e:50:2b:1a:cb:7c:20: 43:58:f6:fd:9d:e4:f4:a1:e6:87:86:0f:44:1d:6f: 5c:df:ca:39:5d:ba:15:93:fa:42:a4:17:f2:51:8d: ae:5c:c8:65:6e:bd:ff:17:0c:f7:74:9c:71:1e:82: 99:24:01:6d:52:e1:5b:8d:d7:06:46:cf:3d:94:9a: fe:69:4d:9b:98:92:ec:26:06:ab:db:08:66:3e:d8: 09:49:c1:76:9a:ad:aa:92:ec:fd:54:78:b5:04:51: ed:30:a1:ec:ca:66:cb:fc:67:f1:51:f2:af:28:23: 75:34:7c:75:7d:21:ab:75:3a:93:1c:93:f8:a2:b7: be:62:bc:d4:c3:94:17:1a:1d:76:23:d6:f7:16:84: 0e:ce:52:a9:23:98:f9:47:ce:9d:21:54:d6:9a:39: 9b:bf:d9:58:c8:3a:a6:2d:83:68:a9:67:eb:b1:3a: c1:b3:0f:7d:59:6f:eb:44:31:5f:c1:ac:f2:02:78: ad:5b:74:7c:45:78:bc:18:9e:6d:f3:4e:d6:61:6d: 73:30:60:00:e2:35:4c:2b:5d:4e:1d:94:e8:bc:22: 80:48:ea:a8:ac:0d:be:ca:5b:ec:53:6b:05:08:42: 73:7a:80:3c:1e:c3:cf:dc:26:34:10:a0:79:69:85: 4a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:04:48:B7:C9:D4:CD:92:0D:6F:E7:C0:60:DB:0A:7B:B7:EE:71:BB X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:3c:18:46:d5:05:a6:b5:dd:8b:e5:c5:a8:94:13:8f:e3:a3: 92:06:6d:59:a9:00:cd:22:89:0c:55:41:bf:ef:f0:fe:12:38: a7:71:b6:8d:f2:2b:39:f5:f4:cd:e9:9d:b0:f4:d0:de:a2:0d: 65:52:5d:f8:0b:62:d5:23:17:dd:f0:03:ce:01:ab:75:73:66: be:70:bd:f5:c0:58:31:b2:79:60:cc:d1:fe:3e:a8:24:84:24: c0:d7:0f:f7:f5:3e:2a:ef:1b:bf:7b:2d:b2:f7:94:aa:02:a0: 8b:28:93:98:0a:8c:cf:df:83:60:66:e5:93:50:7d:82:7c:96: 41:3d:2d:c0:c0:e6:14:ec:29:ec:f3:8c:38:81:78:7e:d1:5c: 80:9a:df:4b:ff:b7:20:c0:aa:86:a0:72:be:28:0f:25:53:2a: 55:0d:9b:b2:f5:b9:36:0f:35:7d:e5:d8:e1:95:19:f9:3e:6d: 25:b4:16:fe:3d:fb:e1:ee:7b:09:17:0f:8f:40:4a:93:8d:01: 25:60:e0:ae:d4:7a:df:28:81:b4:c3:dc:5e:00:30:1a:ea:cf: 50:c4:51:22:5f:a9:93:56:48:25:e8:a3:66:99:28:7c:9d:10: b9:57:5f:1d:aa:1b:c3:ff:3e:1d:05:99:7a:66:e3:5c:d5:64: 63:94:bf:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjUwODA5MDAzNjMzWhcNMjUwODE2MDAzNjMzWjAYMRYwFAYD VQQDEw02ODk2OTgxMS0wZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW0C6ovtOE5QKxrLfCBDWPb9neT0oeaHhg9EHW9c38o5XboVk/pCpBfyUY2u XMhlbr3/Fwz3dJxxHoKZJAFtUuFbjdcGRs89lJr+aU2bmJLsJgar2whmPtgJScF2 mq2qkuz9VHi1BFHtMKHsymbL/GfxUfKvKCN1NHx1fSGrdTqTHJP4ore+YrzUw5QX Gh12I9b3FoQOzlKpI5j5R86dIVTWmjmbv9lYyDqmLYNoqWfrsTrBsw99WW/rRDFf wazyAnitW3R8RXi8GJ5t807WYW1zMGAA4jVMK11OHZTovCKASOqorA2+ylvsU2sF CEJzeoA8HsPP3CY0EKB5aYVKvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsESLfJ 1M2SDW/nwGDbCnu37nG7MB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4PBhG1QWmtd2L5cWolBOP46OSBm1ZqQDNIokMVUG/7/D+EjincbaN 8is59fTN6Z2w9NDeog1lUl34C2LVIxfd8APOAat1c2a+cL31wFgxsnlgzNH+Pqgk hCTA1w/39T4q7xu/ey2y95SqAqCLKJOYCozP34NgZuWTUH2CfJZBPS3AwOYU7Cns 84w4gXh+0VyAmt9L/7cgwKqGoHK+KA8lUypVDZuy9bk2DzV95djhlRn5Pm0ltBb+ Pfvh7nsJFw+PQEqTjQElYOCu1HrfKIG0w9xeADAa6s9QxFEiX6mTVkgl6KNmmSh8 nRC5V18dqhvD/z4dBZl6ZuNc1WRjlL/s -----END CERTIFICATE-----Generated at Sun Aug 10 04:24:04 2025 by rpki-client