$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json) Hash identifier: 6grDvvLFkpVi5Z/VA+NQ5BipixNCelKc4DgNsdi8Pgg= Subject key identifier: 87:68:4B:89:EE:11:8D:3E:EE:3C:C7:62:B0:A8:78:C7:15:49:06:73 Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft Manifest number: A7 Signing time: Sat 23 Aug 2025 06:27:45 +0000 Manifest this update: Sat 23 Aug 2025 06:27:45 +0000 Manifest next update: Sat 30 Aug 2025 06:27:45 +0000 Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: UjcONgezs/fzVkdponi/QfQH5QwVsdB1jXBwVXcd/jA=) 2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632 Validity Not Before: Aug 23 06:27:45 2025 GMT Not After : Aug 30 06:27:45 2025 GMT Subject: CN=68a95f61-d9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0e:0b:3b:df:cd:ce:f2:19:5e:bb:6f:2b:05: 36:37:ae:20:1b:36:3d:bb:4e:06:f6:29:b4:cb:b3: 46:11:34:f2:b4:c7:eb:bc:ea:0d:42:60:8b:29:51: 34:1f:77:2f:a2:cf:79:79:b7:3f:38:fb:bb:15:c0: 21:90:5b:be:bf:91:50:8d:6e:da:25:24:a6:7e:b9: a7:58:18:75:b7:33:ed:26:3f:fc:1d:bf:a6:50:0b: 12:80:d4:ab:75:13:61:12:bd:7c:79:6c:29:d0:fe: e9:14:b3:bf:20:c4:14:f9:79:c2:cc:6b:f7:44:4a: d2:57:34:c5:76:eb:f4:7e:7c:46:f2:72:96:1e:2b: 3b:e9:35:05:8a:6d:d4:cc:df:c2:89:ab:64:62:f2: 4b:22:c6:8c:6e:02:c7:1c:80:99:f0:f3:17:47:84: ed:a7:95:cb:22:a0:62:67:29:50:18:97:59:c4:03: db:26:79:13:1c:96:0a:42:b8:ba:5f:d4:28:18:da: bf:a5:a0:47:e9:fb:d9:30:92:18:4f:b9:64:d7:d3: 52:e4:5c:7b:f4:97:e5:e2:02:d9:cc:eb:3e:41:6f: 7d:99:5b:28:86:a7:73:c9:a7:27:14:72:ed:ba:c6: 8a:86:d3:2f:32:e7:4b:90:aa:ef:03:2f:4d:47:1d: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:4B:89:EE:11:8D:3E:EE:3C:C7:62:B0:A8:78:C7:15:49:06:73 X509v3 Authority Key Identifier: keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:2c:2e:5d:0d:92:5e:20:a9:d3:a9:d5:2f:64:ee:06:3b:d8: 7d:3b:23:9c:79:b5:c6:bd:88:29:59:0a:0d:39:1d:9b:27:13: 6d:c9:1f:9b:06:35:f3:9f:f3:05:e4:e0:5b:d1:ba:a1:fc:26: 96:b6:88:a0:fa:f6:2f:fb:6c:53:bf:c7:a9:ae:37:6f:f1:4d: 47:a0:e2:bb:35:58:84:62:93:99:f9:b7:bb:90:ff:e4:65:93: b4:3a:22:a9:3b:85:65:75:b2:cc:61:5d:e6:ac:8f:55:b9:49: 0d:32:10:bc:28:a1:b4:73:c7:da:49:4a:ac:ab:d9:d3:57:c7: 94:b9:3a:36:a2:95:d2:dc:6b:ff:23:a1:50:c5:69:1c:93:a8: 62:c9:3e:44:65:ba:fa:7a:b4:f7:f6:a5:7a:dd:f3:51:23:8a: 26:7b:97:11:a8:36:9f:1e:16:54:b6:2c:91:61:a9:4b:1f:34: 5a:51:32:6a:53:20:5a:a8:0c:70:46:b5:8e:6f:4a:38:76:9c: 1f:ac:f5:bd:16:63:70:05:3a:33:c4:71:8e:c8:e4:18:33:ab: 22:bf:e5:d9:74:1f:19:a3:34:3a:ed:50:ac:98:d3:c8:cc:40: 50:84:52:34:33:9b:44:c4:41:08:5f:1a:84:dd:0d:5b:1a:98: ca:2f:05:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBOTIxMTAvBgNVBAUTKDZBNDU4QUIwRkM1NjI4MjkzMzE4M0Q0NjgwNTFCRkM1 MDc5MTE2MzIwHhcNMjUwODIzMDYyNzQ1WhcNMjUwODMwMDYyNzQ1WjAYMRYwFAYD VQQDEw02OGE5NWY2MS1kOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Q4LO9/NzvIZXrtvKwU2N64gGzY9u04G9im0y7NGETTytMfrvOoNQmCLKVE0 H3cvos95ebc/OPu7FcAhkFu+v5FQjW7aJSSmfrmnWBh1tzPtJj/8Hb+mUAsSgNSr dRNhEr18eWwp0P7pFLO/IMQU+XnCzGv3RErSVzTFduv0fnxG8nKWHis76TUFim3U zN/CiatkYvJLIsaMbgLHHICZ8PMXR4Ttp5XLIqBiZylQGJdZxAPbJnkTHJYKQri6 X9QoGNq/paBH6fvZMJIYT7lk19NS5Fx79Jfl4gLZzOs+QW99mVsohqdzyacnFHLt usaKhtMvMudLkKrvAy9NRx2DtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdoS4nu EY0+7jzHYrCoeMcVSQZzMB8GA1UdIwQYMBaAFGpFirD8VigpMxg9RoBRv8UHkRYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0E5Mi85OTlFOEVBQzg3 QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tDa3pHRDFHZ0ZHX3hRZVJG akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0E5Mi85OTlFOEVBQzg3QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tD a3pHRDFHZ0ZHX3hRZVJGakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCLC5dDZJeIKnTqdUvZO4GO9h9OyOcebXGvYgpWQoNOR2bJxNtyR+b BjXzn/MF5OBb0bqh/CaWtoig+vYv+2xTv8eprjdv8U1HoOK7NViEYpOZ+be7kP/k ZZO0OiKpO4VldbLMYV3mrI9VuUkNMhC8KKG0c8faSUqsq9nTV8eUuTo2opXS3Gv/ I6FQxWkck6hiyT5EZbr6erT39qV63fNRI4ome5cRqDafHhZUtiyRYalLHzRaUTJq UyBaqAxwRrWOb0o4dpwfrPW9FmNwBTozxHGOyOQYM6siv+XZdB8ZozQ67VCsmNPI zEBQhFI0M5tExEEIXxqE3Q1bGpjKLwXy -----END CERTIFICATE-----Generated at Sun Aug 24 02:39:19 2025 by rpki-client