$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json) Hash identifier: cEsV2x0QqERTN/6KB4tXdwAUi4XufFLY+6hJeGy9mTQ= Subject key identifier: C5:B7:41:B0:1A:0C:FB:D1:08:FA:C5:0C:36:A6:42:D1:03:6C:C2:18 Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft Manifest number: 32 Signing time: Sun 19 Oct 2025 11:08:48 +0000 Manifest this update: Sun 19 Oct 2025 11:08:48 +0000 Manifest next update: Sun 26 Oct 2025 11:08:48 +0000 Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: f/ClfWOMkNkdGVaxaYtZRVPuxN0Uf5SB4sI2N29FzbE=) 2: D2B93B4C638211F087594469C4F9AE02.roa (hash: Pu8GeUQM5zPY/klLoi38DXyDw9LChnXWL5CaLmbea3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Validity Not Before: Oct 19 11:08:48 2025 GMT Not After : Oct 26 11:08:48 2025 GMT Subject: CN=68f4c6c0-ccfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:56:d1:75:bc:a6:58:96:e1:fc:a2:6d:89:00: 57:4b:55:5f:85:ef:18:8f:95:bd:88:bf:a0:0c:ae: d0:23:4e:50:ef:b0:a9:5f:5d:ff:49:39:f7:5b:e8: 95:e4:ff:a1:cc:31:d9:f1:de:2d:a3:47:7c:41:7a: a8:05:f5:40:7e:91:3e:8e:81:68:46:41:9d:7d:3c: 8d:b6:b5:54:ed:4a:60:f6:bc:c1:3d:f9:ed:7b:da: 6a:73:63:37:2f:1f:9c:7e:91:ca:66:49:bb:06:df: 26:6a:71:25:49:f1:44:1f:c3:56:08:21:19:ae:bd: ad:1e:59:6f:81:ee:46:4d:10:f3:82:b0:27:06:41: a4:23:a2:29:26:ac:09:84:75:38:8d:2e:ba:50:4a: 20:79:6f:c0:fe:07:bb:df:55:d0:3d:69:71:58:80: 07:59:2d:4a:34:e9:bf:0c:9f:b7:59:67:da:a4:a7: 41:e3:f3:f4:6e:ec:f2:76:84:6e:74:ee:d6:f3:ab: e8:f5:e0:4b:c3:8f:97:37:df:c7:d1:69:65:75:d8: 32:fb:fa:b1:db:96:aa:7e:08:0e:33:c3:96:54:72: 2d:61:93:0a:67:23:ac:4f:18:61:ec:7f:45:67:0f: ba:f2:ac:f4:62:d4:6b:36:55:5b:a1:81:13:61:be: ee:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B7:41:B0:1A:0C:FB:D1:08:FA:C5:0C:36:A6:42:D1:03:6C:C2:18 X509v3 Authority Key Identifier: keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:35:a8:cb:ce:6b:ba:22:0a:55:de:2e:fd:be:22:8a:8c:23: 05:cd:fb:f5:bb:d9:25:30:6e:ca:c1:b5:1e:ba:05:db:04:0a: b1:87:e5:fa:38:69:2f:85:49:c5:15:68:ef:81:51:c5:cd:c4: 64:76:e2:d0:10:b5:b3:a7:84:9d:f4:94:5a:41:9c:65:83:2f: ce:46:48:a5:64:f1:79:56:45:4c:07:07:b2:69:48:f2:db:3e: 46:10:db:60:7d:fd:57:26:9e:57:35:78:24:46:f5:e3:a8:43: 38:e3:54:e4:68:e4:6e:b0:31:f3:78:28:a1:41:dd:fb:85:9d: 83:1a:6b:b4:94:ec:4e:51:3b:dc:fe:a3:7c:db:0f:86:68:59: 4d:8a:45:e3:01:4a:1d:42:ac:93:f1:cc:c1:65:c0:7e:ff:9a: d2:68:04:ae:07:a3:2d:88:a3:15:6f:11:f3:ec:80:aa:e3:0d: 73:ac:04:a5:c7:00:f8:5e:97:6f:20:08:b6:d4:d7:85:db:fa: 63:01:9f:85:c4:8b:da:68:dc:ac:6d:a0:a7:f6:51:ee:7f:50: fe:27:b1:be:af:b0:fe:83:43:94:8c:0a:56:c4:4f:e9:2b:84: 28:96:e5:29:33:45:38:dd:08:ff:f7:1f:66:55:38:f3:26:94: 93:9e:be:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoNkE0OTdFRUQ1RjRGRTJDMTUxNjRERDJEMDdGQzRERDUy QkNFODkyMTAeFw0yNTEwMTkxMTA4NDhaFw0yNTEwMjYxMTA4NDhaMBgxFjAUBgNV BAMTDTY4ZjRjNmMwLWNjZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUVtF1vKZYluH8om2JAFdLVV+F7xiPlb2Iv6AMrtAjTlDvsKlfXf9JOfdb6JXk /6HMMdnx3i2jR3xBeqgF9UB+kT6OgWhGQZ19PI22tVTtSmD2vME9+e172mpzYzcv H5x+kcpmSbsG3yZqcSVJ8UQfw1YIIRmuva0eWW+B7kZNEPOCsCcGQaQjoikmrAmE dTiNLrpQSiB5b8D+B7vfVdA9aXFYgAdZLUo06b8Mn7dZZ9qkp0Hj8/Ru7PJ2hG50 7tbzq+j14EvDj5c338fRaWV12DL7+rHblqp+CA4zw5ZUci1hkwpnI6xPGGHsf0Vn D7ryrPRi1Gs2VVuhgRNhvu6pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxbdBsBoM +9EI+sUMNqZC0QNswhgwHwYDVR0jBBgwFoAUakl+7V9P4sFRZN0tB/xN1SvOiSEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzZBRkJFNDRDNjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lT RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWtsLTdWOVA0c0ZSWk4wdEJfeE4xU3ZPaVNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzZBRkJFNDRDNjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNG UlpOMHRCX3hOMVN2T2lTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI01qMvOa7oiClXeLv2+IoqMIwXN+/W72SUwbsrBtR66BdsECrGH5fo4 aS+FScUVaO+BUcXNxGR24tAQtbOnhJ30lFpBnGWDL85GSKVk8XlWRUwHB7JpSPLb PkYQ22B9/Vcmnlc1eCRG9eOoQzjjVORo5G6wMfN4KKFB3fuFnYMaa7SU7E5RO9z+ o3zbD4ZoWU2KReMBSh1CrJPxzMFlwH7/mtJoBK4Hoy2IoxVvEfPsgKrjDXOsBKXH APhel28gCLbU14Xb+mMBn4XEi9po3KxtoKf2Ue5/UP4nsb6vsP6DQ5SMClbET+kr hCiW5SkzRTjdCP/3H2ZVOPMmlJOevgA= -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:12 2025 by rpki-client