$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json) Hash identifier: s3RZlfYpmNkuQcoxoUJ6y4k9UYaiR2z7txEDswrNvsU= Subject key identifier: FF:AD:25:2B:5F:6F:7B:6B:85:37:68:C0:B6:59:85:84:BF:75:46:4E Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft Manifest number: 8D Signing time: Thu 03 Jul 2025 06:44:56 +0000 Manifest this update: Thu 03 Jul 2025 06:44:55 +0000 Manifest next update: Thu 10 Jul 2025 06:44:55 +0000 Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: 2tpPINXnp4vRbCuvtnFP/bAvk4bLsaE5blWWPNMDiZY=) 2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632 Validity Not Before: Jul 3 06:44:55 2025 GMT Not After : Jul 10 06:44:55 2025 GMT Subject: CN=686626e8-54aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:84:e0:01:96:9c:1f:35:15:85:01:c3:e4: 34:8e:d0:7a:de:66:41:d8:e9:88:12:c6:9b:3a:c2: 55:eb:60:ec:f2:7d:7c:5e:ec:e2:20:69:6e:3b:ee: ca:1e:49:5d:de:d8:fa:5a:cd:a7:a9:20:c6:49:8f: e4:eb:1e:6c:7d:d9:be:01:40:dd:3b:0f:0b:44:ec: 8e:67:cf:9d:3e:a3:69:69:d6:45:fe:c1:ab:84:e6: ea:e9:f7:59:64:de:9d:91:13:a8:68:a8:03:79:42: e9:a9:be:db:80:8f:d4:fd:6d:4d:54:4a:24:39:4d: 56:63:19:8c:96:c1:7a:59:91:eb:52:3d:5b:3e:76: e5:7d:ce:6c:23:24:2f:45:6f:07:f2:71:3d:f4:7e: 9c:27:b3:6e:03:1d:e9:52:15:cf:6b:79:26:a6:18: d3:90:2a:6c:28:d3:5f:4c:90:25:a0:3b:42:5d:e3: 69:32:2c:6e:85:8b:1e:75:8b:3f:7e:e8:15:36:fd: 5d:b0:43:97:3d:44:6e:fb:4e:89:1c:79:9b:ab:46: 0c:47:69:12:66:20:26:fd:f6:77:fc:fb:7b:68:b8: 72:49:97:d1:04:85:66:cb:6e:c6:2e:27:6b:a6:a1: 2e:78:8e:ef:06:a9:3e:14:95:25:9a:da:79:d6:b5: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AD:25:2B:5F:6F:7B:6B:85:37:68:C0:B6:59:85:84:BF:75:46:4E X509v3 Authority Key Identifier: keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b4:40:0e:17:21:21:9b:d7:77:e2:39:52:19:a3:74:91:3c: d7:3b:04:2c:e4:d6:ee:2c:7b:8c:98:aa:dd:31:d0:c1:a1:92: 9a:57:9c:cd:f0:11:26:fe:61:68:96:7c:dd:e9:bc:11:2a:db: 27:7d:a5:b8:1b:07:c4:e7:82:61:a5:65:ab:64:7f:d4:dd:c6: 42:e8:41:2c:99:f5:64:a8:7d:79:de:70:75:02:ec:da:58:42: a3:24:8c:89:bc:78:12:8e:0b:51:55:7b:76:21:e9:8b:16:25: be:78:4e:c0:48:f1:78:59:64:17:61:e2:5f:4b:94:4a:8d:3e: 0b:f8:37:67:b5:8c:28:88:e5:c6:53:24:aa:06:c6:ae:40:8d: d2:1e:b7:fc:3e:c8:19:c3:6a:85:ef:4d:4a:32:f5:a4:b3:11: 08:52:5a:55:f2:3a:84:c2:29:2e:f3:69:d6:4c:3f:89:a4:f2: 07:7d:0b:47:08:c2:9c:d0:77:f3:fd:0c:72:48:bd:38:57:6d: c3:df:57:71:16:03:6e:bd:cd:5f:fd:de:c9:f4:a2:07:4a:59: a3:3c:2a:e2:45:23:55:a3:b8:3d:85:a9:53:2e:0a:80:fc:59: a6:c5:58:cc:c8:18:9d:68:9c:d2:1b:c6:af:6d:d1:f3:6b:a5: 57:3b:7e:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBOTIxMTAvBgNVBAUTKDZBNDU4QUIwRkM1NjI4MjkzMzE4M0Q0NjgwNTFCRkM1 MDc5MTE2MzIwHhcNMjUwNzAzMDY0NDU1WhcNMjUwNzEwMDY0NDU1WjAYMRYwFAYD VQQDEw02ODY2MjZlOC01NGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcuE4AGWnB81FYUBw+Q0jtB63mZB2OmIEsabOsJV62Ds8n18XuziIGluO+7K Hkld3tj6Ws2nqSDGSY/k6x5sfdm+AUDdOw8LROyOZ8+dPqNpadZF/sGrhObq6fdZ ZN6dkROoaKgDeULpqb7bgI/U/W1NVEokOU1WYxmMlsF6WZHrUj1bPnblfc5sIyQv RW8H8nE99H6cJ7NuAx3pUhXPa3kmphjTkCpsKNNfTJAloDtCXeNpMixuhYsedYs/ fugVNv1dsEOXPURu+06JHHmbq0YMR2kSZiAm/fZ3/Pt7aLhySZfRBIVmy27GLidr pqEueI7vBqk+FJUlmtp51rXodwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+tJStf b3trhTdowLZZhYS/dUZOMB8GA1UdIwQYMBaAFGpFirD8VigpMxg9RoBRv8UHkRYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0E5Mi85OTlFOEVBQzg3 QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tDa3pHRDFHZ0ZHX3hRZVJG akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0E5Mi85OTlFOEVBQzg3QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tD a3pHRDFHZ0ZHX3hRZVJGakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJtEAOFyEhm9d34jlSGaN0kTzXOwQs5NbuLHuMmKrdMdDBoZKaV5zN 8BEm/mFolnzd6bwRKtsnfaW4GwfE54JhpWWrZH/U3cZC6EEsmfVkqH153nB1Auza WEKjJIyJvHgSjgtRVXt2IemLFiW+eE7ASPF4WWQXYeJfS5RKjT4L+DdntYwoiOXG UySqBsauQI3SHrf8PsgZw2qF701KMvWksxEIUlpV8jqEwiku82nWTD+JpPIHfQtH CMKc0Hfz/QxySL04V23D31dxFgNuvc1f/d7J9KIHSlmjPCriRSNVo7g9halTLgqA /FmmxVjMyBidaJzSG8avbdHza6VXO37l -----END CERTIFICATE-----Generated at Thu Jul 3 18:01:57 2025 by rpki-client