$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: ZtrR6hbi9UxDPmXgTC80cLtvigKtpbinph3/q+mgffQ= Subject key identifier: 86:3A:25:35:F2:67:67:FD:F3:39:68:D1:F5:AB:D8:FF:66:70:4F:FD Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 02B2 Signing time: Sat 23 Aug 2025 01:43:55 +0000 Manifest this update: Sat 23 Aug 2025 01:43:55 +0000 Manifest next update: Sat 30 Aug 2025 01:43:55 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: 7DaQJa4VVOi19WqWWbyH9cqieIY75PR+S0XmzZTjjis=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: oyCtMje9lcYf2wr513hrmeca1vFWbCB0GW1U6axyanE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Aug 23 01:43:55 2025 GMT Not After : Aug 30 01:43:55 2025 GMT Subject: CN=68a91cdb-bbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:cd:b3:04:25:53:38:5a:02:94:80:09:c6: 22:2b:03:0b:7a:39:64:84:04:e5:45:ec:e0:6f:d9: 08:63:32:54:27:59:8c:5e:d1:94:95:49:4d:2a:41: 1c:c5:0d:e1:28:9d:09:06:95:24:bd:6f:2a:4d:dc: ff:46:d0:6d:43:b1:b8:94:98:a7:07:12:b0:38:ca: ec:05:c7:44:fc:dd:20:c2:03:2d:9e:70:34:49:24: 6c:a6:bb:91:65:91:38:34:87:3f:f2:5f:b3:0b:67: 74:e8:5f:ea:5c:b4:bf:28:62:a5:a8:52:c2:d3:02: 84:5d:99:04:ee:fb:0e:b9:2e:29:a1:4c:2b:db:76: a3:10:2d:1b:06:2c:2b:4a:90:36:08:7b:a9:59:a6: 9b:6e:f3:c0:8d:28:a6:27:1d:e9:c3:cf:2a:84:79: 57:40:37:41:db:19:52:1c:9f:e9:4a:a9:e7:74:27: 3a:54:79:f6:95:55:ca:78:d5:1f:6a:45:ea:37:31: 82:ba:3d:d2:56:1c:6d:03:3c:d7:ab:be:20:bc:6c: 8b:d6:9d:aa:5f:4c:40:95:c8:da:5b:54:0d:57:5c: 45:d8:dd:08:b2:c0:61:96:ed:0c:bf:3d:7b:e4:65: 7c:31:1c:26:19:d2:6d:eb:31:41:c7:36:ee:38:d7: 4e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3A:25:35:F2:67:67:FD:F3:39:68:D1:F5:AB:D8:FF:66:70:4F:FD X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:fd:44:9f:0a:31:43:96:88:89:2a:3a:83:b7:c1:53:e5:5c: 18:82:bc:d0:44:48:e7:41:c4:80:56:d4:4f:36:86:d6:ce:f5: de:44:90:f4:65:6f:34:fa:78:43:43:67:dd:66:d0:ce:59:d3: 11:a3:ce:ae:88:4a:aa:71:d2:e1:21:5f:5d:ce:e1:7a:49:70: 12:ac:ed:7c:2e:37:12:8a:de:30:7f:77:89:88:aa:32:bb:28: 66:8c:71:2b:f1:ad:8b:0b:87:19:f0:36:62:96:75:c1:f9:49: 06:b6:19:9e:78:7d:ba:b7:c3:10:62:3f:de:34:df:93:eb:7d: 26:82:fa:d3:86:6b:eb:a1:a4:78:95:c3:14:01:9d:fd:7c:25: 1c:d3:ad:0d:e3:e0:7a:ae:f4:67:4f:8b:86:5b:b4:c7:56:ab: e4:35:cb:02:2f:7c:f1:ea:1e:25:39:9b:38:48:8c:11:02:be: 90:62:7f:f6:c4:5c:46:69:aa:c3:00:5a:82:28:73:14:67:db: 13:94:cd:94:63:f7:23:58:09:f3:e0:77:ee:57:2e:da:44:32: 1e:5a:25:62:38:2d:3c:6f:f2:a3:ce:35:ee:05:d4:6e:db:0c: 55:ed:18:3d:f9:e6:96:72:eb:d8:30:87:0f:59:5b:44:80:a4: dd:1b:06:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjUwODIzMDE0MzU1WhcNMjUwODMwMDE0MzU1WjAYMRYwFAYD VQQDEw02OGE5MWNkYi1iYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtG7NswQlUzhaApSACcYiKwMLejlkhATlRezgb9kIYzJUJ1mMXtGUlUlNKkEc xQ3hKJ0JBpUkvW8qTdz/RtBtQ7G4lJinBxKwOMrsBcdE/N0gwgMtnnA0SSRspruR ZZE4NIc/8l+zC2d06F/qXLS/KGKlqFLC0wKEXZkE7vsOuS4poUwr23ajEC0bBiwr SpA2CHupWaabbvPAjSimJx3pw88qhHlXQDdB2xlSHJ/pSqnndCc6VHn2lVXKeNUf akXqNzGCuj3SVhxtAzzXq74gvGyL1p2qX0xAlcjaW1QNV1xF2N0IssBhlu0Mvz17 5GV8MRwmGdJt6zFBxzbuONdOrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIY6JTXy Z2f98zlo0fWr2P9mcE/9MB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD/USfCjFDloiJKjqDt8FT5VwYgrzQREjnQcSAVtRPNobWzvXeRJD0 ZW80+nhDQ2fdZtDOWdMRo86uiEqqcdLhIV9dzuF6SXASrO18LjcSit4wf3eJiKoy uyhmjHEr8a2LC4cZ8DZilnXB+UkGthmeeH26t8MQYj/eNN+T630mgvrThmvroaR4 lcMUAZ39fCUc060N4+B6rvRnT4uGW7THVqvkNcsCL3zx6h4lOZs4SIwRAr6QYn/2 xFxGaarDAFqCKHMUZ9sTlM2UY/cjWAnz4HfuVy7aRDIeWiViOC08b/KjzjXuBdRu 2wxV7Rg9+eaWcuvYMIcPWVtEgKTdGwYb -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:15 2025 by rpki-client