$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft File: ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json) Hash identifier: CnVv7+FqFk5Rs1zVZRBHN/fBfMz5GO3X8rT/Zld3DpI= Subject key identifier: 36:F5:0A:6A:AA:CA:43:30:AA:A7:3A:E2:7F:B3:96:3D:DE:73:04:85 Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Certificate serial: 07FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft Manifest number: 07E5 Signing time: Fri 22 Aug 2025 21:14:47 +0000 Manifest this update: Fri 22 Aug 2025 21:14:47 +0000 Manifest next update: Fri 29 Aug 2025 21:14:47 +0000 Files and hashes: 1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: 1lS+e2NMpHbiHtpAPpGf2C5QYPoJZUDTx8PaaX1RAvk=) 2: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (hash: FfGvWbRgw7M2d0HlF6t0whQketZeGqrQDCwVLn5jEfk=) 3: A1D678CACD1D11EEBBCDB72BC4F9AE02.roa (hash: KUbdaIcIL3ANAib1/1yNdALhPqZywuDeLgdVE3tNncA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Validity Not Before: Aug 22 21:14:47 2025 GMT Not After : Aug 29 21:14:47 2025 GMT Subject: CN=68a8ddc7-7c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:c4:1a:4d:5d:32:86:c3:7f:ea:17:68:0d: 22:23:46:2f:4a:94:cf:29:10:9f:5f:11:fe:d3:80: b6:1f:ec:cb:ba:44:1e:e6:59:ae:2c:a6:b8:97:7c: 62:bb:f5:07:e0:3d:78:e4:8f:9f:53:1d:62:9d:16: d2:ce:b7:fe:13:c3:32:78:0b:b5:08:cf:a9:af:0f: 9c:9b:96:0f:d3:a3:1f:17:33:45:0f:aa:c6:85:a8: bd:13:52:ec:3a:19:4f:18:95:04:75:98:86:e6:e5: b2:50:e9:c9:0c:b5:e2:ab:d8:c9:f9:4a:56:fc:f8: dc:c4:54:ee:b9:bf:a9:b0:16:a7:88:83:fa:f3:41: f1:4e:6b:5e:ae:aa:24:1d:44:77:68:61:ee:3f:1c: e5:81:ec:79:67:04:a0:35:c1:8d:88:e5:f5:0a:c6: cd:11:9f:5a:f5:40:1a:1a:ac:6d:bd:c3:74:fc:30: 4d:89:d2:75:44:ff:ec:a0:69:5a:40:6e:ce:bb:6c: 2e:74:17:41:80:fd:82:40:17:17:ef:b0:66:e8:75: 72:89:9d:9e:b9:2d:d9:57:c5:03:5e:d7:fb:a2:1a: e7:0a:64:ce:03:3d:a3:ef:9d:ae:f6:91:71:ff:1e: 2b:a1:7f:43:41:5a:8d:7e:a9:bf:dd:52:44:90:0e: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F5:0A:6A:AA:CA:43:30:AA:A7:3A:E2:7F:B3:96:3D:DE:73:04:85 X509v3 Authority Key Identifier: keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:72:60:4a:85:78:db:8a:b7:24:4e:91:bf:c6:a4:50:9d:ac: a5:66:ec:e1:f6:d4:26:22:91:45:49:4f:78:e2:4a:43:a7:b0: 95:48:e5:d2:92:38:e6:f5:32:80:83:bd:87:1f:90:79:3b:70: 99:22:c3:2a:e8:b8:1f:71:ea:06:40:b2:83:f0:8c:3c:b3:9f: 3a:a5:39:ef:32:76:ff:59:8e:41:97:12:5b:f8:35:4e:87:99: f9:38:90:52:6e:01:ef:94:77:7f:a9:82:a1:61:00:9c:69:63: bb:eb:82:f6:7f:b8:6b:a3:5a:fc:11:2f:e4:88:3e:21:e0:f4: fa:bd:83:d8:c9:28:35:14:11:4a:c1:90:73:70:ec:20:10:fb: f2:62:72:7e:cf:37:35:44:b6:2a:60:70:65:da:1c:27:de:f8: 8b:c8:68:f2:00:9b:ef:df:28:20:b1:17:c4:c2:5b:7b:05:30: 89:ed:d9:74:b6:89:f4:e4:a3:63:b9:24:d8:e0:a4:0b:67:43: aa:e1:73:42:62:fc:83:24:80:03:99:dc:c1:7e:43:ce:04:0e: fc:01:70:cf:ea:4b:bf:9d:2c:5e:a1:aa:70:75:04:ff:42:a8: c2:fc:48:4e:58:96:61:3f:cd:25:e5:b5:3e:59:b2:10:69:22: e7:30:d0:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw MEZDNTQ5NUUwHhcNMjUwODIyMjExNDQ3WhcNMjUwODI5MjExNDQ3WjAYMRYwFAYD VQQDEw02OGE4ZGRjNy03YzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyvEGk1dMobDf+oXaA0iI0YvSpTPKRCfXxH+04C2H+zLukQe5lmuLKa4l3xi u/UH4D145I+fUx1inRbSzrf+E8MyeAu1CM+prw+cm5YP06MfFzNFD6rGhai9E1Ls OhlPGJUEdZiG5uWyUOnJDLXiq9jJ+UpW/PjcxFTuub+psBaniIP680HxTmterqok HUR3aGHuPxzlgex5ZwSgNcGNiOX1CsbNEZ9a9UAaGqxtvcN0/DBNidJ1RP/soGla QG7Ou2wudBdBgP2CQBcX77Bm6HVyiZ2euS3ZV8UDXtf7ohrnCmTOAz2j752u9pFx /x4roX9DQVqNfqm/3VJEkA5uvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDb1Cmqq ykMwqqc64n+zlj3ecwSFMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhDMy9EMEUzM0ZBNDAyQzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRu MWIxeXR1NlhDb0FBX0ZTVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrcmBKhXjbirckTpG/xqRQnaylZuzh9tQmIpFFSU944kpDp7CVSOXS kjjm9TKAg72HH5B5O3CZIsMq6LgfceoGQLKD8Iw8s586pTnvMnb/WY5BlxJb+DVO h5n5OJBSbgHvlHd/qYKhYQCcaWO764L2f7hro1r8ES/kiD4h4PT6vYPYySg1FBFK wZBzcOwgEPvyYnJ+zzc1RLYqYHBl2hwn3viLyGjyAJvv3yggsRfEwlt7BTCJ7dl0 ton05KNjuSTY4KQLZ0Oq4XNCYvyDJIADmdzBfkPOBA78AXDP6ku/nSxeoapwdQT/ QqjC/EhOWJZhP80l5bU+WbIQaSLnMNBC -----END CERTIFICATE-----Generated at Sat Aug 23 21:16:43 2025 by rpki-client