$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: oRDc693pO41xRQgPJFV3yiNGphtQlDA5CxGxnx6ZP2A= Subject key identifier: 30:B3:18:C2:F9:3E:D3:65:28:73:CE:3A:C2:36:9F:6B:79:C3:DA:A1 Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 034E Signing time: Thu 03 Jul 2025 01:20:31 +0000 Manifest this update: Thu 03 Jul 2025 01:20:31 +0000 Manifest next update: Thu 10 Jul 2025 01:20:31 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: h5lMWXlSekZ3PkYGhmrGqQUH6SL//DSBEYorUd57mBs=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: 9lR4wMfGIYGiHedS31WLLXrhF347dnFxO3kCajEDmqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: Jul 3 01:20:31 2025 GMT Not After : Jul 10 01:20:31 2025 GMT Subject: CN=6865dadf-4e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:d0:40:78:7e:76:b9:5d:58:d2:f7:f7:d8: 8f:02:3b:2f:b4:13:0c:cc:ac:b7:c4:a7:fd:5c:fb: cc:cf:3d:4f:05:90:b6:8f:33:79:d5:aa:66:ea:fc: b6:a7:04:e4:93:c5:07:bf:f5:71:5d:bb:d1:c7:85: 2b:6b:a5:21:1a:c5:90:4d:94:6d:0c:a4:02:f9:83: 8f:9c:89:2b:8f:83:7c:60:0a:8d:94:dc:9b:7c:d8: 6b:b4:85:9f:f8:5a:01:a1:27:3c:15:46:2a:d7:72: 55:df:a8:7c:ff:d4:5b:fa:d3:46:14:79:39:5f:49: 0e:8a:71:08:13:21:55:6a:7d:c3:3b:af:22:04:94: 18:d7:40:4a:c2:4a:47:43:ee:df:a8:2e:b7:b9:b7: b8:12:4d:be:f8:a1:b4:73:7a:ef:92:77:ae:53:f2: 22:25:6f:a8:b0:a3:68:c4:5a:43:72:ec:41:18:61: d8:10:05:b4:88:41:06:c0:8f:9f:65:2a:33:29:ad: 74:54:b8:4e:4e:33:b1:f1:6e:d6:9d:3c:ec:0e:9c: 26:ef:7c:2c:0e:f1:66:9d:f2:36:cc:f2:75:e2:73: 0f:db:6d:ad:ce:87:55:9e:62:79:e7:bd:c3:b6:91: a8:02:67:62:c8:a5:e8:76:66:ae:4a:4e:e3:f2:01: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B3:18:C2:F9:3E:D3:65:28:73:CE:3A:C2:36:9F:6B:79:C3:DA:A1 X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:28:21:18:a7:99:0a:60:c5:13:b1:3f:a6:1d:4d:1c:ab:aa: 46:62:7d:38:0f:5e:ad:93:86:ff:b3:59:62:53:8e:bb:3b:63: e6:f3:fa:5a:6c:81:82:d9:7c:3b:c7:9e:3a:8d:8d:ac:28:5a: ae:72:a8:b0:ee:bb:5e:a2:e3:3c:45:2f:36:bf:9b:14:d8:db: 73:e1:3f:c8:50:fd:0b:f6:79:ff:b9:12:21:85:b2:9f:7f:d1: 71:a8:a6:46:8e:0d:cc:4a:20:f9:70:af:af:46:b1:8e:3f:fd: 0b:b7:e4:4d:94:c4:0a:63:c6:31:e3:41:f0:7b:93:66:e6:b5: 23:24:da:c3:98:ff:fa:da:0c:71:a7:17:d5:6e:2c:d8:bd:ef: ce:ef:45:43:54:87:42:7a:59:4d:3b:6a:2d:33:27:51:c7:18: a1:e0:78:51:5d:fe:46:ae:c1:a0:2a:37:9b:98:62:de:be:44: 8e:b9:44:56:61:65:e7:23:22:f9:4f:c5:5d:a4:f8:a1:0d:f9: 1d:63:d7:9b:e7:ee:35:2c:4e:05:31:ed:d0:b0:22:30:cf:ce: f3:c0:a1:28:a6:6e:50:33:e6:3d:c5:5b:d0:84:77:b6:1c:7d: 66:02:67:74:ce:2c:24:cd:dd:b6:e7:8f:29:1e:77:a1:f3:62: 17:96:c2:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjUwNzAzMDEyMDMxWhcNMjUwNzEwMDEyMDMxWjAYMRYwFAYD VQQDEw02ODY1ZGFkZi00ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxz7QQHh+drldWNL399iPAjsvtBMMzKy3xKf9XPvMzz1PBZC2jzN51apm6vy2 pwTkk8UHv/VxXbvRx4Ura6UhGsWQTZRtDKQC+YOPnIkrj4N8YAqNlNybfNhrtIWf +FoBoSc8FUYq13JV36h8/9Rb+tNGFHk5X0kOinEIEyFVan3DO68iBJQY10BKwkpH Q+7fqC63ube4Ek2++KG0c3rvkneuU/IiJW+osKNoxFpDcuxBGGHYEAW0iEEGwI+f ZSozKa10VLhOTjOx8W7WnTzsDpwm73wsDvFmnfI2zPJ14nMP222tzodVnmJ5573D tpGoAmdiyKXodmauSk7j8gGDDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCzGML5 PtNlKHPOOsI2n2t5w9qhMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvKCEYp5kKYMUTsT+mHU0cq6pGYn04D16tk4b/s1liU467O2Pm8/pa bIGC2Xw7x546jY2sKFqucqiw7rteouM8RS82v5sU2Ntz4T/IUP0L9nn/uRIhhbKf f9FxqKZGjg3MSiD5cK+vRrGOP/0Lt+RNlMQKY8Yx40Hwe5Nm5rUjJNrDmP/62gxx pxfVbizYve/O70VDVIdCellNO2otMydRxxih4HhRXf5GrsGgKjebmGLevkSOuURW YWXnIyL5T8VdpPihDfkdY9eb5+41LE4FMe3QsCIwz87zwKEopm5QM+Y9xVvQhHe2 HH1mAmd0ziwkzd22548pHneh82IXlsKa -----END CERTIFICATE-----Generated at Thu Jul 3 11:05:22 2025 by rpki-client