$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: tPyPyFHYGjjjdKq9OOotjk7SmufsuvrOV+9Sw8RPWn8= Subject key identifier: 22:D4:FA:E8:92:84:F4:EB:9F:4A:EA:F0:50:02:E9:36:5F:2E:8F:B2 Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 0295 Signing time: Tue 01 Jul 2025 02:14:45 +0000 Manifest this update: Tue 01 Jul 2025 02:14:45 +0000 Manifest next update: Tue 08 Jul 2025 02:14:44 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: 1SnbAuKIBYlTJwlMrRU/cly9Gtg/KVYSZehSE4+iA6I=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: WXESl+cDjvowOeUJyXhiCBItPAjmmkM/CbjCul3Q7bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Jul 1 02:14:45 2025 GMT Not After : Jul 8 02:14:44 2025 GMT Subject: CN=68634495-47c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:36:c8:a7:d1:91:8b:f2:e2:a6:eb:ca:37: 6a:8d:a6:7e:77:2e:6f:7a:f1:4d:42:ba:a0:61:1d: ac:eb:2f:d9:aa:0d:4b:7d:b1:ae:15:5a:f8:d8:40: e8:cb:b5:79:86:ed:15:a2:70:0d:9a:90:a4:33:f8: 2a:54:54:e7:56:c8:d7:e1:87:bf:91:9d:ea:5c:5f: 7c:69:6d:59:cb:4a:7f:2a:76:c2:29:2c:ee:87:75: 0e:9d:a9:d2:fd:2e:0d:dc:78:b7:7a:73:a0:1b:72: 36:82:2a:8c:7c:8f:0b:dc:54:3a:57:b1:7c:b2:a9: 91:eb:4a:ac:91:3b:9e:5a:ec:dd:5d:4a:a0:3d:bb: 3d:42:d3:a8:d3:6b:5a:3e:6a:45:07:76:c8:50:44: af:32:fa:44:bc:61:89:40:56:df:76:82:a4:50:c9: 16:8b:59:43:04:f7:49:89:40:73:79:d3:0e:9c:31: 74:0b:72:92:4a:d5:2d:93:e6:dd:2f:72:c5:ad:c4: 51:01:f5:49:e8:f2:4a:26:4c:d9:2f:3a:95:32:1a: 47:f2:38:8d:fc:1a:b0:6c:8e:5f:66:11:ad:01:85: af:90:91:9c:c2:61:fa:b6:e6:1b:b0:30:2a:84:bc: f3:a8:c6:83:dc:e8:4b:f1:4e:a5:19:f8:cc:8e:b3: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D4:FA:E8:92:84:F4:EB:9F:4A:EA:F0:50:02:E9:36:5F:2E:8F:B2 X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:61:b2:d5:ba:8c:f9:53:9e:c1:9c:50:5c:cc:29:c6:fa:d8: b0:5d:b9:e9:17:43:de:e5:98:b0:17:e7:ca:c3:8c:ce:58:cb: 92:54:88:01:33:35:9d:c1:a5:89:20:79:28:1b:3d:b4:7b:fc: b4:3d:8e:c6:da:4a:13:86:71:90:69:3c:4f:07:03:b2:4a:5e: 96:c7:ad:d0:86:f7:df:9a:6c:64:fc:5c:5b:a2:a6:95:bc:ad: 50:38:82:88:f3:e0:3f:bf:41:d3:60:fe:c5:87:7e:39:5b:67: 75:1b:e9:12:0e:ec:f0:74:1d:f4:4e:66:20:4e:93:cc:1a:3a: dd:4b:a0:1f:91:5f:b3:d9:5e:af:de:92:84:ca:0b:09:83:b4: aa:06:f6:2a:4b:61:a8:03:b8:98:69:00:02:58:f0:ae:05:6a: dd:c3:92:93:c4:81:b7:86:b7:64:ff:40:fe:b4:43:cc:09:f6: c2:3d:af:a8:15:f8:76:55:8f:bd:37:be:a7:d0:81:70:78:b3: 3a:a5:3b:ed:b2:ed:d1:37:3b:ad:f9:ba:20:06:c8:18:39:c7: ef:5c:80:3d:67:fa:6e:ca:32:2f:ab:49:0b:bd:76:c1:3d:9c: 5b:31:46:ea:3f:52:13:f8:56:ff:13:ef:51:7c:8d:95:9b:04: 87:2a:00:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjUwNzAxMDIxNDQ1WhcNMjUwNzA4MDIxNDQ0WjAYMRYwFAYD VQQDEw02ODYzNDQ5NS00N2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoo2yKfRkYvy4qbryjdqjaZ+dy5vevFNQrqgYR2s6y/Zqg1LfbGuFVr42EDo y7V5hu0VonANmpCkM/gqVFTnVsjX4Ye/kZ3qXF98aW1Zy0p/KnbCKSzuh3UOnanS /S4N3Hi3enOgG3I2giqMfI8L3FQ6V7F8sqmR60qskTueWuzdXUqgPbs9QtOo02ta PmpFB3bIUESvMvpEvGGJQFbfdoKkUMkWi1lDBPdJiUBzedMOnDF0C3KSStUtk+bd L3LFrcRRAfVJ6PJKJkzZLzqVMhpH8jiN/BqwbI5fZhGtAYWvkJGcwmH6tuYbsDAq hLzzqMaD3OhL8U6lGfjMjrMniQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLU+uiS hPTrn0rq8FAC6TZfLo+yMB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHYbLVuoz5U57BnFBczCnG+tiwXbnpF0Pe5ZiwF+fKw4zOWMuSVIgB MzWdwaWJIHkoGz20e/y0PY7G2koThnGQaTxPBwOySl6Wx63Qhvffmmxk/FxboqaV vK1QOIKI8+A/v0HTYP7Fh345W2d1G+kSDuzwdB30TmYgTpPMGjrdS6AfkV+z2V6v 3pKEygsJg7SqBvYqS2GoA7iYaQACWPCuBWrdw5KTxIG3hrdk/0D+tEPMCfbCPa+o Ffh2VY+9N76n0IFweLM6pTvtsu3RNzut+bogBsgYOcfvXIA9Z/puyjIvq0kLvXbB PZxbMUbqP1IT+Fb/E+9RfI2VmwSHKgD8 -----END CERTIFICATE-----Generated at Wed Jul 2 13:42:49 2025 by rpki-client