$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: MsnAFISpLzt5UWimtHtf8FoklzmkNeXndFaCeuLJ6fE= Subject key identifier: 2F:C6:E9:43:22:C7:BE:FB:A0:6A:34:D6:DD:AB:8E:D2:05:E2:F5:57 Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 0366 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 0362 Signing time: Mon 11 Aug 2025 01:07:36 +0000 Manifest this update: Mon 11 Aug 2025 01:07:35 +0000 Manifest next update: Mon 18 Aug 2025 01:07:35 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: Q6XZKNpcJiemU/s4wK68hbp6bZsD+5HqjsUOb6jqdO0=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: 9lR4wMfGIYGiHedS31WLLXrhF347dnFxO3kCajEDmqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 01:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 870 (0x366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: Aug 11 01:07:35 2025 GMT Not After : Aug 18 01:07:35 2025 GMT Subject: CN=68994257-eaff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:c9:e6:40:6d:aa:ab:50:ef:10:6d:27:61: 80:af:50:74:7d:e0:c5:55:c0:6c:59:17:67:7d:71: ba:ca:9b:6a:33:63:16:9e:e1:6a:87:c5:74:70:0a: c2:87:ae:82:3e:fb:3b:33:5b:69:2b:a6:5b:68:7f: 2d:35:c7:e4:ab:d0:c5:8b:3d:79:a0:e5:a7:a0:7d: 61:d4:0e:44:b8:a2:2f:7f:87:a1:13:93:60:b3:30: db:ef:de:e6:3a:6d:56:c2:b3:ed:52:44:4d:df:f8: 3b:16:8a:7e:55:51:b1:e2:b8:a5:49:d7:56:38:0a: 01:0e:4b:42:55:1c:7d:c8:13:eb:8c:a2:3d:bc:0f: 12:17:51:f4:9c:61:3f:00:d7:28:2d:b9:af:5a:ce: 0f:33:5e:02:94:18:6c:13:23:df:6f:a8:2a:d8:4f: 5e:cd:53:9b:d5:35:1c:46:39:38:7e:8e:6a:2b:28: b3:37:a1:14:46:48:1e:77:d9:5b:33:d6:e2:7c:6b: ce:8d:61:d4:a0:58:46:be:42:d0:03:97:e0:b7:9a: 9c:7b:e6:df:43:0e:f9:63:b8:06:e3:93:c8:11:2d: b9:87:f5:a6:b3:18:31:25:09:66:9c:7d:22:b5:84: bd:82:ff:a7:96:17:2c:41:ea:9e:2b:30:83:f6:84: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C6:E9:43:22:C7:BE:FB:A0:6A:34:D6:DD:AB:8E:D2:05:E2:F5:57 X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:d4:f6:04:9e:a1:87:c3:44:a3:87:aa:9c:b2:5c:ba:b1:c3: 5b:c7:19:65:77:ee:82:64:49:cf:89:ee:d8:f5:ca:07:d3:53: ba:60:52:f3:f4:db:a4:19:5f:d3:aa:26:df:87:d5:97:c1:23: 20:9b:97:08:a6:48:1f:0b:33:39:ff:f4:cc:fc:0d:01:d6:92: d9:8a:07:2a:3d:da:d5:7a:10:a6:8c:a2:7e:48:97:0d:e4:d4: db:53:32:58:b4:24:bb:05:88:36:cf:5d:1e:ea:57:c6:fa:89: f9:85:9e:8b:cd:0e:80:c8:05:ca:8a:71:81:d8:12:97:6e:ae: 8f:38:d2:c6:8c:6d:22:3a:47:52:18:e9:bd:00:42:55:4b:87: 7b:fa:b5:a7:7d:d3:ce:99:5b:ad:02:ef:26:e6:e2:68:7b:1c: 30:d7:7c:df:1a:4d:10:d6:1d:10:90:09:89:22:b2:e1:04:52: 08:f0:38:b2:1a:13:d8:c2:ad:a0:39:28:f8:3e:0d:25:0f:97: 3b:8e:ec:de:51:c9:b9:26:a9:90:56:0e:eb:35:3e:3c:54:b9: 61:66:c1:94:c4:16:1a:81:93:cf:d0:47:51:48:a7:05:80:84: c4:66:a3:65:32:45:4a:8a:14:4a:42:57:f7:98:aa:be:c5:0c: 2c:46:09:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjUwODExMDEwNzM1WhcNMjUwODE4MDEwNzM1WjAYMRYwFAYD VQQDEw02ODk5NDI1Ny1lYWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswLJ5kBtqqtQ7xBtJ2GAr1B0feDFVcBsWRdnfXG6yptqM2MWnuFqh8V0cArC h66CPvs7M1tpK6ZbaH8tNcfkq9DFiz15oOWnoH1h1A5EuKIvf4ehE5NgszDb797m Om1WwrPtUkRN3/g7Fop+VVGx4rilSddWOAoBDktCVRx9yBPrjKI9vA8SF1H0nGE/ ANcoLbmvWs4PM14ClBhsEyPfb6gq2E9ezVOb1TUcRjk4fo5qKyizN6EURkged9lb M9bifGvOjWHUoFhGvkLQA5fgt5qce+bfQw75Y7gG45PIES25h/WmsxgxJQlmnH0i tYS9gv+nlhcsQeqeKzCD9oR6JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/G6UMi x777oGo01t2rjtIF4vVXMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR1PYEnqGHw0Sjh6qcsly6scNbxxlld+6CZEnPie7Y9coH01O6YFLz 9NukGV/Tqibfh9WXwSMgm5cIpkgfCzM5//TM/A0B1pLZigcqPdrVehCmjKJ+SJcN 5NTbUzJYtCS7BYg2z10e6lfG+on5hZ6LzQ6AyAXKinGB2BKXbq6PONLGjG0iOkdS GOm9AEJVS4d7+rWnfdPOmVutAu8m5uJoexww13zfGk0Q1h0QkAmJIrLhBFII8Diy GhPYwq2gOSj4Pg0lD5c7juzeUcm5JqmQVg7rNT48VLlhZsGUxBYagZPP0EdRSKcF gITEZqNlMkVKihRKQlf3mKq+xQwsRgnc -----END CERTIFICATE-----Generated at Tue Aug 12 18:55:33 2025 by rpki-client