$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json) Hash identifier: xEJ6iX71ZMSL3XX87hnbiVxsYR4+Bj0A4567tpY/O90= Subject key identifier: 5F:E8:F5:E4:53:77:BE:F5:A0:C5:6C:1E:3E:41:B1:96:84:77:1C:D2 Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft Manifest number: 15 Signing time: Sat 23 Aug 2025 08:15:37 +0000 Manifest this update: Sat 23 Aug 2025 08:15:36 +0000 Manifest next update: Sat 30 Aug 2025 08:15:36 +0000 Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: pdqxhvmKgwbOFiBbpED8JThi0X1Ac1R3UBw7bhQHYSw=) 2: D2B93B4C638211F087594469C4F9AE02.roa (hash: Pu8GeUQM5zPY/klLoi38DXyDw9LChnXWL5CaLmbea3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Validity Not Before: Aug 23 08:15:36 2025 GMT Not After : Aug 30 08:15:36 2025 GMT Subject: CN=68a978a8-1cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:20:d0:0f:81:fc:43:9e:15:6d:fe:21:5b:9a: 38:3e:3f:3e:94:5c:03:b9:4d:61:08:c1:ba:0a:f9: 67:05:c3:23:b0:12:b9:f9:68:ab:5d:b2:80:55:82: 69:39:30:9d:81:8c:8c:ff:a0:07:27:59:60:0a:31: 5b:fb:62:a5:67:e5:6e:be:d1:e7:53:df:dc:bb:dc: d3:c0:ce:03:a8:a2:88:33:6c:f5:af:df:76:97:24: 72:de:4d:9a:0c:06:75:12:a3:74:7a:01:53:5c:ad: ca:25:27:10:75:2e:fa:b1:08:ce:39:1f:f8:3b:27: 47:36:60:42:3c:60:8d:ee:5a:0f:63:da:15:13:58: fa:1b:c9:a9:b6:11:db:9f:a6:8a:a5:a4:3d:a4:22: 5f:c1:2b:cc:a7:47:9b:57:c4:14:be:34:88:7c:cc: a9:7d:cc:10:6f:5f:6c:4b:e0:70:bf:c8:cb:5d:6d: fe:91:ce:65:26:71:4a:f7:2e:3c:eb:7d:92:59:1f: 63:5f:bc:45:62:43:37:d7:f8:bb:aa:00:42:5c:d6: aa:c8:dc:5e:ff:88:f1:3e:4d:a6:05:fb:bd:04:bf: 94:c7:e4:07:b0:d2:6c:b8:21:39:b9:20:9e:0a:39: 95:b0:ef:9a:2a:cc:12:2c:54:5c:b6:7e:e5:5f:de: e1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E8:F5:E4:53:77:BE:F5:A0:C5:6C:1E:3E:41:B1:96:84:77:1C:D2 X509v3 Authority Key Identifier: keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ea:a3:83:a0:35:63:6e:ee:b3:51:df:11:fb:3a:21:59:c3: 49:47:68:66:d9:fd:7c:d0:82:ea:a4:d4:50:21:85:d1:c3:51: 2f:23:18:be:0e:9f:c0:6d:e2:d9:15:69:99:4f:a9:db:ee:1e: e6:6a:5a:b7:47:ee:d7:12:39:c8:40:2d:ac:c6:81:f6:05:19: fd:f5:45:45:65:e8:e0:97:a8:79:5a:d3:8a:b3:56:50:4c:8b: cb:52:32:c6:68:92:6b:a2:83:7e:44:c8:0f:d1:84:6e:d2:7b: b9:a0:8b:38:09:ef:81:59:2f:87:61:86:38:61:f5:2f:6c:3b: 7f:a5:dd:85:9e:0b:3d:94:27:4e:31:d6:05:19:a7:07:ac:53: d8:ca:d8:f8:54:88:8d:f5:63:c0:07:d8:d4:aa:e8:99:1f:0b: af:a5:d7:a1:92:2e:01:dd:6d:82:20:ef:a7:10:d6:f0:7a:a8: fb:78:98:c4:31:2b:92:e8:f1:52:95:05:d3:f9:43:0a:07:4c: 4a:a4:72:19:ae:dc:80:82:66:9b:10:32:1a:47:9d:8f:de:95: 9e:4e:c0:96:3e:31:2f:0c:c2:07:d3:72:4f:e8:4b:02:ec:52: fd:5c:7d:5d:52:7e:3d:5e:15:3d:4d:5c:c1:7d:a0:b5:6e:a4: 1b:3b:4f:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoNkE0OTdFRUQ1RjRGRTJDMTUxNjRERDJEMDdGQzRERDUy QkNFODkyMTAeFw0yNTA4MjMwODE1MzZaFw0yNTA4MzAwODE1MzZaMBgxFjAUBgNV BAMTDTY4YTk3OGE4LTFjYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDINAPgfxDnhVt/iFbmjg+Pz6UXAO5TWEIwboK+WcFwyOwErn5aKtdsoBVgmk5 MJ2BjIz/oAcnWWAKMVv7YqVn5W6+0edT39y73NPAzgOooogzbPWv33aXJHLeTZoM BnUSo3R6AVNcrcolJxB1LvqxCM45H/g7J0c2YEI8YI3uWg9j2hUTWPobyam2Eduf poqlpD2kIl/BK8ynR5tXxBS+NIh8zKl9zBBvX2xL4HC/yMtdbf6RzmUmcUr3Ljzr fZJZH2NfvEViQzfX+LuqAEJc1qrI3F7/iPE+TaYF+70Ev5TH5Aew0my4ITm5IJ4K OZWw75oqzBIsVFy2fuVf3uGBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX+j15FN3 vvWgxWwePkGxloR3HNIwHwYDVR0jBBgwFoAUakl+7V9P4sFRZN0tB/xN1SvOiSEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzZBRkJFNDRDNjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lT RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWtsLTdWOVA0c0ZSWk4wdEJfeE4xU3ZPaVNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzZBRkJFNDRDNjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNG UlpOMHRCX3hOMVN2T2lTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE7qo4OgNWNu7rNR3xH7OiFZw0lHaGbZ/XzQguqk1FAhhdHDUS8jGL4O n8Bt4tkVaZlPqdvuHuZqWrdH7tcSOchALazGgfYFGf31RUVl6OCXqHla04qzVlBM i8tSMsZokmuig35EyA/RhG7Se7mgizgJ74FZL4dhhjhh9S9sO3+l3YWeCz2UJ04x 1gUZpwesU9jK2PhUiI31Y8AH2NSq6JkfC6+l16GSLgHdbYIg76cQ1vB6qPt4mMQx K5Lo8VKVBdP5QwoHTEqkchmu3ICCZpsQMhpHnY/elZ5OwJY+MS8MwgfTck/oSwLs Uv1cfV1Sfj1eFT1NXMF9oLVupBs7T/s= -----END CERTIFICATE-----Generated at Sun Aug 24 04:35:28 2025 by rpki-client