$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft File: akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json) Hash identifier: EQjbkf9R5ueYDhsif10d4LWBnrG2wdgeLZ5E2giBMHI= Subject key identifier: BC:47:DF:70:96:FB:B0:9B:5C:D4:47:12:FF:EB:2D:B3:57:0C:83:CB Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Certificate serial: 089C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft Manifest number: 0886 Signing time: Fri 22 Aug 2025 20:47:53 +0000 Manifest this update: Fri 22 Aug 2025 20:47:52 +0000 Manifest next update: Fri 29 Aug 2025 20:47:52 +0000 Files and hashes: 1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: VWgp6pYoOcr4hpJX6k+2EYtJjVlDCnwFxWsI3qegq1k=) 2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: IEwu4/gA3UIvhwDT2AUjwIos0wFKYYY+JWkqYTbzbDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204 (0x89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Validity Not Before: Aug 22 20:47:52 2025 GMT Not After : Aug 29 20:47:52 2025 GMT Subject: CN=68a8d778-9541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:47:29:97:c1:d9:92:13:d9:6f:3a:97:8e:37: e1:58:e0:2d:d9:31:ea:a7:09:1f:59:48:8a:8f:6e: 94:09:a2:6d:97:1c:fb:65:03:bf:da:a2:4b:e8:52: 08:84:a5:41:05:47:0c:3c:9e:f9:3d:ad:6c:b1:a7: 9c:c3:65:c5:49:0c:f6:94:08:27:e8:95:22:64:55: 81:81:18:0b:97:ca:01:9c:1a:2d:da:c7:67:39:8c: 38:79:15:94:13:f5:27:6d:b4:38:40:03:25:45:e6: 7c:52:a9:33:4d:a3:6c:70:56:19:b1:ae:ee:ad:f9: 58:e3:f6:6d:74:48:1b:84:a5:05:10:a1:18:9b:87: 61:db:49:bf:eb:c6:fe:b0:5c:82:59:7c:6f:22:b5: 6e:1d:f2:77:71:99:6d:f4:9a:7e:d3:34:75:0b:b9: 95:1d:35:d2:f5:00:7c:51:17:be:64:c4:95:1b:b8: 0b:b4:d8:f7:c6:e0:b3:cc:f2:40:e2:53:a7:d4:3e: 97:0e:2a:95:07:10:2b:a4:b9:a9:55:52:2a:c7:6d: 5c:34:09:ab:ed:cd:bd:f1:93:d5:46:f7:e8:b5:5e: 97:f7:00:6b:1c:a1:bc:74:67:05:4e:0f:78:e5:9d: 4b:57:e1:80:53:67:aa:9c:f9:71:42:0f:4c:f9:2c: 7c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:47:DF:70:96:FB:B0:9B:5C:D4:47:12:FF:EB:2D:B3:57:0C:83:CB X509v3 Authority Key Identifier: keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:55:6c:7c:3d:91:dc:78:88:2c:64:dc:53:0d:df:cb:f6:3d: 2b:dd:19:69:cb:e3:e2:df:9c:d1:7f:56:af:78:ff:fb:60:12: 89:be:88:ea:d1:96:bd:2a:e8:2c:dd:c6:60:8c:e1:f5:cb:88: 8d:40:9d:da:8b:60:39:6c:c0:9e:66:12:57:34:27:f7:34:f4: 3c:26:15:e4:23:52:0c:66:48:5c:f7:87:90:77:1c:08:18:28: 18:c4:95:87:0b:81:c3:14:7f:a7:ce:6c:94:7a:53:10:55:1b: 4a:fc:d1:b0:1e:73:22:93:0b:5d:d3:c1:d4:20:47:f4:90:43: 81:36:22:a2:49:7b:29:18:b6:e6:44:92:2b:c6:8a:76:f7:35: 5f:76:c7:47:48:8f:05:ea:89:63:ec:fc:e3:f0:68:16:71:be: 0a:ea:a1:ba:02:1c:30:51:c2:87:0f:b1:91:bb:50:61:c7:24: 0c:90:8d:7a:25:c0:45:72:19:44:49:5c:f7:0c:91:e3:78:d1: 3e:4b:41:f9:a8:b7:bf:10:20:42:3f:3e:14:ce:1b:4a:01:3b: 60:ce:04:b3:85:3b:85:11:28:9c:9c:97:59:54:fa:51:04:e5: 97:52:c8:74:92:8a:8d:af:bb:74:ef:9d:34:d3:4b:af:31:cf: 27:ca:7f:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2 NUIxQTJEQUQwHhcNMjUwODIyMjA0NzUyWhcNMjUwODI5MjA0NzUyWjAYMRYwFAYD VQQDEw02OGE4ZDc3OC05NTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEcpl8HZkhPZbzqXjjfhWOAt2THqpwkfWUiKj26UCaJtlxz7ZQO/2qJL6FII hKVBBUcMPJ75Pa1ssaecw2XFSQz2lAgn6JUiZFWBgRgLl8oBnBot2sdnOYw4eRWU E/UnbbQ4QAMlReZ8UqkzTaNscFYZsa7urflY4/ZtdEgbhKUFEKEYm4dh20m/68b+ sFyCWXxvIrVuHfJ3cZlt9Jp+0zR1C7mVHTXS9QB8URe+ZMSVG7gLtNj3xuCzzPJA 4lOn1D6XDiqVBxArpLmpVVIqx21cNAmr7c298ZPVRvfotV6X9wBrHKG8dGcFTg94 5Z1LV+GAU2eqnPlxQg9M+Sx8nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxH33CW +7CbXNRHEv/rLbNXDIPLMB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUE2QS82MkJFMEFDNkNFOUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6 dW9VTE82SVVLV3Rsc2FMYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVVWx8PZHceIgsZNxTDd/L9j0r3Rlpy+Pi35zRf1aveP/7YBKJvojq 0Za9Kugs3cZgjOH1y4iNQJ3ai2A5bMCeZhJXNCf3NPQ8JhXkI1IMZkhc94eQdxwI GCgYxJWHC4HDFH+nzmyUelMQVRtK/NGwHnMikwtd08HUIEf0kEOBNiKiSXspGLbm RJIrxop29zVfdsdHSI8F6olj7Pzj8GgWcb4K6qG6AhwwUcKHD7GRu1BhxyQMkI16 JcBFchlESVz3DJHjeNE+S0H5qLe/ECBCPz4UzhtKATtgzgSzhTuFESicnJdZVPpR BOWXUsh0koqNr7t0750000uvMc8nyn9s -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:26 2025 by rpki-client