$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft File: akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json) Hash identifier: 86iiLjxF3o6m047bHDyX+h/Slg/KtkJw1TMO2SlIvuM= Subject key identifier: 30:2F:9B:7B:BB:78:F1:66:13:66:A5:A9:F6:22:71:82:19:90:20:4C Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Certificate serial: 087F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft Manifest number: 086A Signing time: Wed 02 Jul 2025 21:00:08 +0000 Manifest this update: Wed 02 Jul 2025 21:00:07 +0000 Manifest next update: Wed 09 Jul 2025 21:00:07 +0000 Files and hashes: 1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: 2jg8qS/KxgtR3L/cxjQxmKiIeaQRpbH/GazhrxRp/5g=) 2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: 7GUW7TYiJ43LqgVUnKqTpmI4a0Ih/VJ75WOYgV4BI0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Validity Not Before: Jul 2 21:00:07 2025 GMT Not After : Jul 9 21:00:07 2025 GMT Subject: CN=68659dd8-3533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:ec:97:22:36:c2:a6:03:80:1a:eb:5a:f5: fb:a6:8e:6a:ca:ac:b0:0d:b7:5a:e9:a4:01:6e:7c: 06:4b:cf:f9:48:b2:60:3c:8e:ed:33:21:54:a0:5a: 7f:3b:65:95:23:3a:1a:fc:e6:ca:05:35:8e:7b:a5: f7:b9:d1:2c:41:96:d7:df:ec:46:bd:89:c0:ef:a8: c8:f2:27:57:88:a2:ee:93:ff:5c:68:da:9d:66:7b: d7:66:66:89:24:ae:96:17:41:44:2e:89:99:f2:cc: 9b:3a:9f:ef:13:51:04:04:c8:35:20:3b:ef:ff:3f: 84:58:fc:6e:4b:65:03:57:7b:66:4d:40:73:3a:2e: 30:da:b9:1e:0b:85:06:ed:47:0d:06:62:1f:96:e2: 53:a0:f0:16:1f:d6:eb:4e:6c:bc:52:18:23:09:f9: d3:d9:66:1c:17:c4:3a:a5:b8:91:f0:e3:9e:0e:4a: c0:a4:97:ee:10:35:dd:e3:84:42:60:43:c3:45:72: 50:15:69:49:c7:dd:7c:32:f7:9d:7d:90:14:34:9c: b4:fd:1d:b0:5b:41:d8:d7:37:4e:77:19:ee:f9:c2: 8e:22:75:1e:cc:9e:dc:be:4c:72:4a:c2:d1:ee:aa: da:1f:d5:2b:bb:9b:58:14:68:e8:4d:bf:3f:11:f5: 46:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2F:9B:7B:BB:78:F1:66:13:66:A5:A9:F6:22:71:82:19:90:20:4C X509v3 Authority Key Identifier: keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:c1:31:ae:a8:6f:ca:73:88:8d:93:b6:18:dd:c0:1e:f6:34: 19:73:3b:be:0b:19:27:cb:8a:ea:0c:29:7f:15:7a:75:52:8f: 6c:67:41:13:a6:c7:8d:db:0a:02:9a:95:1b:61:d3:86:7c:fd: 13:9e:3c:58:79:e0:bd:1e:8e:6a:72:51:32:df:37:2b:ed:af: c5:81:c4:4c:8a:60:03:74:42:d3:69:fe:48:ab:37:54:a3:c3: fa:44:25:86:2c:db:56:f4:e9:ff:9e:f1:c0:87:7f:48:f5:f7: a8:2f:c7:d1:4b:bf:69:bf:9d:84:1a:4f:48:75:8a:0d:6b:a8: c5:df:73:41:2c:66:c4:7f:e8:d9:62:ad:96:6b:85:83:38:17: 6f:9f:8b:09:ee:dd:a6:ee:2c:a3:f1:6d:f0:14:b0:a2:2e:02: dd:db:93:cb:ba:ee:16:5c:43:db:19:3d:ee:cf:5e:38:5a:f2: 46:25:aa:7c:a0:c8:9e:7e:20:ad:92:0d:48:f3:ea:89:0b:f0: 30:0b:ee:64:e9:c7:10:5e:49:89:1e:cd:46:3d:0f:03:db:a9: ca:16:73:fb:6f:ac:94:9c:e6:81:81:a0:60:f9:8c:8c:d0:e5: 03:76:de:f7:53:68:a6:96:7a:5e:9f:82:bd:96:2a:f4:d0:76: 3c:ef:6d:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2 NUIxQTJEQUQwHhcNMjUwNzAyMjEwMDA3WhcNMjUwNzA5MjEwMDA3WjAYMRYwFAYD VQQDEw02ODY1OWRkOC0zNTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1nslyI2wqYDgBrrWvX7po5qyqywDbda6aQBbnwGS8/5SLJgPI7tMyFUoFp/ O2WVIzoa/ObKBTWOe6X3udEsQZbX3+xGvYnA76jI8idXiKLuk/9caNqdZnvXZmaJ JK6WF0FELomZ8sybOp/vE1EEBMg1IDvv/z+EWPxuS2UDV3tmTUBzOi4w2rkeC4UG 7UcNBmIfluJToPAWH9brTmy8UhgjCfnT2WYcF8Q6pbiR8OOeDkrApJfuEDXd44RC YEPDRXJQFWlJx918MvedfZAUNJy0/R2wW0HY1zdOdxnu+cKOInUezJ7cvkxySsLR 7qraH9Uru5tYFGjoTb8/EfVGowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAvm3u7 ePFmE2alqfYicYIZkCBMMB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUE2QS82MkJFMEFDNkNFOUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6 dW9VTE82SVVLV3Rsc2FMYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0wTGuqG/Kc4iNk7YY3cAe9jQZczu+Cxkny4rqDCl/FXp1Uo9sZ0ET pseN2woCmpUbYdOGfP0TnjxYeeC9Ho5qclEy3zcr7a/FgcRMimADdELTaf5IqzdU o8P6RCWGLNtW9On/nvHAh39I9feoL8fRS79pv52EGk9IdYoNa6jF33NBLGbEf+jZ Yq2Wa4WDOBdvn4sJ7t2m7iyj8W3wFLCiLgLd25PLuu4WXEPbGT3uz144WvJGJap8 oMiefiCtkg1I8+qJC/AwC+5k6ccQXkmJHs1GPQ8D26nKFnP7b6yUnOaBgaBg+YyM 0OUDdt73U2imlnpen4K9lir00HY87239 -----END CERTIFICATE-----Generated at Thu Jul 3 18:51:59 2025 by rpki-client