$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: aAKkVcNXU12sZqnkQ65dRdCyczsbRVhT+qDfbv3aQ+4= Subject key identifier: A8:85:D4:77:A2:8A:28:CE:78:00:D8:3F:B4:F8:4D:08:F2:75:0D:B9 Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 028E Signing time: Tue 17 Jun 2025 01:09:59 +0000 Manifest this update: Tue 17 Jun 2025 01:09:59 +0000 Manifest next update: Tue 24 Jun 2025 01:09:59 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: +ftmykG+cZlqArp+27EPpM0hOd2KzovHzqpJhLU7PQE=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: WXESl+cDjvowOeUJyXhiCBItPAjmmkM/CbjCul3Q7bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Jun 17 01:09:59 2025 GMT Not After : Jun 24 01:09:59 2025 GMT Subject: CN=6850c067-938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:31:67:17:a0:b6:dc:0a:d2:13:2f:d3:77: ef:1b:4e:85:04:33:c1:d5:64:4f:1d:c5:2c:d0:4e: e9:d0:80:87:c6:4e:12:4e:4c:41:e0:49:77:4b:a2: b7:24:33:90:fb:fe:f3:0c:81:e3:4f:ab:83:5a:b6: f1:ab:5a:39:1b:28:40:be:ee:65:4d:53:28:4b:27: e3:92:30:b0:51:aa:8e:54:09:fc:0a:da:46:2d:90: e9:56:91:fa:35:b0:65:25:23:0d:f8:7d:06:de:3d: 14:c6:0c:ee:13:d2:96:75:02:6a:58:21:f1:6c:fe: 25:c4:97:ca:c3:72:73:1c:33:30:c5:d3:f5:5f:97: 3a:28:ef:27:9a:b4:93:c9:63:5f:1c:e0:66:f9:4d: c4:5a:78:17:ea:13:82:fa:c5:a8:68:c4:b8:b7:f7: 56:a1:4d:d3:10:05:7f:ac:c3:b9:f0:05:fa:1b:87: ee:88:fd:a5:d9:9b:4a:64:cf:b5:16:4d:a7:73:d9: c8:2b:c5:29:c4:70:06:bc:51:01:9d:bb:87:9a:2b: 35:23:33:e2:14:66:90:92:2f:5a:d8:b4:17:a6:78: 13:be:a8:93:f9:29:ce:37:88:d7:e9:3a:66:88:7a: 76:fd:28:3a:30:38:9d:c3:78:e3:8e:8b:bc:0d:05: c2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:85:D4:77:A2:8A:28:CE:78:00:D8:3F:B4:F8:4D:08:F2:75:0D:B9 X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:ea:1d:9f:65:f6:57:7d:68:28:23:2e:f7:79:92:32:f6:cc: 02:fb:50:08:74:81:2d:1c:99:06:6e:3a:f3:9d:4b:09:69:23: d8:c3:13:04:84:35:be:fb:db:1f:f1:7a:38:26:d9:74:0b:2b: 6e:fb:78:26:af:af:5b:93:84:18:55:a1:53:fb:84:45:6a:c9: b8:1f:6c:e5:80:8b:cd:8c:84:7f:2a:b8:bf:ef:ea:13:22:af: 30:67:ab:34:2c:4d:21:63:ce:37:d2:93:72:93:e3:7f:28:da: 02:fe:7b:09:c0:da:11:a0:df:52:d9:6a:d7:c4:c5:87:43:4f: 1d:75:c9:af:ca:7e:e4:6a:4e:2e:f8:47:20:7a:f6:ce:24:df: dc:46:98:e6:6f:32:a7:89:5b:5e:0e:b6:e5:3b:df:ba:3d:c6: 26:68:e5:36:11:19:df:e3:ea:d0:66:4f:e0:fa:f5:29:9d:f9: bd:c6:4f:ee:0d:d3:63:07:cc:43:b2:26:a0:0d:49:bf:de:6b: 9e:f1:a9:eb:55:8c:87:12:aa:cd:39:3a:c2:dc:37:6d:03:0e: ba:90:fd:46:66:39:c5:5e:4a:9f:2c:54:c8:ac:76:16:ac:0c: 4f:40:0b:9d:78:ac:10:c1:e3:fa:30:e5:d3:67:d1:23:78:e9: 6b:23:af:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjUwNjE3MDEwOTU5WhcNMjUwNjI0MDEwOTU5WjAYMRYwFAYD VQQDEw02ODUwYzA2Ny05MzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEoxZxegttwK0hMv03fvG06FBDPB1WRPHcUs0E7p0ICHxk4STkxB4El3S6K3 JDOQ+/7zDIHjT6uDWrbxq1o5GyhAvu5lTVMoSyfjkjCwUaqOVAn8CtpGLZDpVpH6 NbBlJSMN+H0G3j0UxgzuE9KWdQJqWCHxbP4lxJfKw3JzHDMwxdP1X5c6KO8nmrST yWNfHOBm+U3EWngX6hOC+sWoaMS4t/dWoU3TEAV/rMO58AX6G4fuiP2l2ZtKZM+1 Fk2nc9nIK8UpxHAGvFEBnbuHmis1IzPiFGaQki9a2LQXpngTvqiT+SnON4jX6Tpm iHp2/Sg6MDidw3jjjou8DQXC2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiF1Hei iijOeADYP7T4TQjydQ25MB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY6h2fZfZXfWgoIy73eZIy9swC+1AIdIEtHJkGbjrznUsJaSPYwxME hDW++9sf8Xo4Jtl0Cytu+3gmr69bk4QYVaFT+4RFasm4H2zlgIvNjIR/Kri/7+oT Iq8wZ6s0LE0hY8430pNyk+N/KNoC/nsJwNoRoN9S2WrXxMWHQ08ddcmvyn7kak4u +EcgevbOJN/cRpjmbzKniVteDrblO9+6PcYmaOU2ERnf4+rQZk/g+vUpnfm9xk/u DdNjB8xDsiagDUm/3mue8anrVYyHEqrNOTrC3DdtAw66kP1GZjnFXkqfLFTIrHYW rAxPQAudeKwQweP6MOXTZ9EjeOlrI693 -----END CERTIFICATE-----Generated at Wed Jun 18 06:38:41 2025 by rpki-client