$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft File: akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json) Hash identifier: yCq4jCeFFxAoZh5lJK8ApwrR/bpYjD2yfFR66HUzlxo= Subject key identifier: 10:79:46:06:B3:2A:00:07:0D:1D:99:F8:3A:82:CA:77:22:06:16:A9 Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Certificate serial: 0896 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft Manifest number: 0880 Signing time: Sun 10 Aug 2025 20:41:40 +0000 Manifest this update: Sun 10 Aug 2025 20:41:39 +0000 Manifest next update: Sun 17 Aug 2025 20:41:39 +0000 Files and hashes: 1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: napbbp2ZLCDCV5ylh4njgX9IpfiVWKlHfM25oXQ3rS0=) 2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: IEwu4/gA3UIvhwDT2AUjwIos0wFKYYY+JWkqYTbzbDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 20:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Validity Not Before: Aug 10 20:41:39 2025 GMT Not After : Aug 17 20:41:39 2025 GMT Subject: CN=68990403-6d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:32:b3:8e:b9:62:b2:9b:50:a4:87:1e:e4:b6: 8e:05:24:ae:cb:83:b1:7b:36:17:b6:01:5d:b2:3d: 08:93:70:4c:14:0f:75:6e:be:84:b0:6c:ff:5c:66: 2e:ed:0d:b0:8a:a0:e0:ac:c1:4b:b9:7a:d4:68:ae: 02:1d:f1:f8:f3:d5:73:4f:bd:7c:5a:9f:16:08:71: d6:13:f0:3e:be:56:f5:27:b1:4c:66:3a:e5:e9:a1: c2:31:ce:18:66:cf:ef:9e:22:3b:87:c0:0f:6e:c3: db:32:4a:b7:08:19:09:54:26:9c:bc:c9:5b:51:be: 39:63:46:4c:e1:40:01:ba:66:72:c7:a2:8e:e6:c8: 6a:35:1b:2e:f9:0b:78:39:ba:23:15:8b:48:e5:a2: ca:97:5a:db:8f:cd:38:8f:07:dc:99:f9:84:d4:dc: 96:24:9d:e9:56:a3:9a:3a:32:62:c7:ec:09:6a:15: 95:fd:86:87:11:f5:55:bc:c7:51:bf:ec:00:2e:96: fb:cc:91:b2:ff:78:60:46:90:cd:e8:74:9d:ff:d3: f0:f7:cb:4f:c8:40:46:87:cb:00:30:29:b5:b8:4f: 04:c3:04:23:fc:08:4e:89:1f:0f:0b:cb:36:db:32: 41:ef:a8:cb:e4:03:dd:35:44:45:69:b9:49:fd:52: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:79:46:06:B3:2A:00:07:0D:1D:99:F8:3A:82:CA:77:22:06:16:A9 X509v3 Authority Key Identifier: keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:18:7a:9b:8d:c5:37:e7:2c:3f:a1:6f:df:3d:09:e2:28:b2: 19:e9:94:46:6f:db:47:09:e5:71:2a:c7:b0:4a:25:2b:4d:84: ee:92:4c:bf:5f:cd:7e:b0:da:75:83:c3:85:9f:cb:0a:f2:29: 80:2c:ac:8a:27:d3:76:1f:36:83:6e:4b:ba:28:b9:22:2d:0a: a0:ba:a6:a0:40:a9:63:44:dc:8a:61:e3:f1:2c:98:0d:9d:b9: 6e:57:8f:55:4d:65:3e:c6:b1:9c:6a:ff:85:e4:92:ce:4f:f2: 9f:a4:71:32:fe:5a:a0:51:cd:ee:b6:34:94:b7:67:37:82:53: 5c:60:38:02:6a:b5:8b:48:de:9a:b0:70:f2:fd:d9:fe:9e:b0: b9:a3:8f:f4:41:0c:7c:35:db:d7:6f:76:e0:0d:bd:39:54:1f: c0:e1:9d:73:b0:ce:bf:d0:f2:3d:63:5f:1e:61:68:4e:fd:82: fa:d0:06:fe:33:51:28:c8:9a:9d:f7:14:d0:26:32:29:70:c4: cf:e2:46:28:2b:ec:80:0f:bb:4c:6c:8d:a3:ca:02:1b:1d:bc: 81:15:7c:4d:94:48:5b:3c:93:57:e4:a4:0b:f7:db:2e:eb:42: a0:ea:ba:5d:ec:47:05:47:b5:37:9c:7d:da:c3:48:0a:5b:3c: 63:57:08:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2 NUIxQTJEQUQwHhcNMjUwODEwMjA0MTM5WhcNMjUwODE3MjA0MTM5WjAYMRYwFAYD VQQDEw02ODk5MDQwMy02ZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzKzjrlisptQpIce5LaOBSSuy4OxezYXtgFdsj0Ik3BMFA91br6EsGz/XGYu 7Q2wiqDgrMFLuXrUaK4CHfH489VzT718Wp8WCHHWE/A+vlb1J7FMZjrl6aHCMc4Y Zs/vniI7h8APbsPbMkq3CBkJVCacvMlbUb45Y0ZM4UABumZyx6KO5shqNRsu+Qt4 ObojFYtI5aLKl1rbj804jwfcmfmE1NyWJJ3pVqOaOjJix+wJahWV/YaHEfVVvMdR v+wALpb7zJGy/3hgRpDN6HSd/9Pw98tPyEBGh8sAMCm1uE8EwwQj/AhOiR8PC8s2 2zJB76jL5APdNURFablJ/VIAeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB5Rgaz KgAHDR2Z+DqCynciBhapMB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUE2QS82MkJFMEFDNkNFOUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6 dW9VTE82SVVLV3Rsc2FMYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4GHqbjcU35yw/oW/fPQniKLIZ6ZRGb9tHCeVxKsewSiUrTYTukky/ X81+sNp1g8OFn8sK8imALKyKJ9N2HzaDbku6KLkiLQqguqagQKljRNyKYePxLJgN nbluV49VTWU+xrGcav+F5JLOT/KfpHEy/lqgUc3utjSUt2c3glNcYDgCarWLSN6a sHDy/dn+nrC5o4/0QQx8NdvXb3bgDb05VB/A4Z1zsM6/0PI9Y18eYWhO/YL60Ab+ M1EoyJqd9xTQJjIpcMTP4kYoK+yAD7tMbI2jygIbHbyBFXxNlEhbPJNX5KQL99su 60Kg6rpd7EcFR7U3nH3aw0gKWzxjVwhv -----END CERTIFICATE-----Generated at Tue Aug 12 13:36:09 2025 by rpki-client