$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: UeHNI5qWOeC96ggfZZjTzdU290akCaAf6kUDbGh6GVg= Subject key identifier: A4:7F:DD:D0:92:A4:B8:94:EB:FB:BA:CF:ED:45:88:24:79:3C:95:82 Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 02AB Signing time: Sat 09 Aug 2025 02:03:13 +0000 Manifest this update: Sat 09 Aug 2025 02:03:13 +0000 Manifest next update: Sat 16 Aug 2025 02:03:13 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: Vu3eLcz5IklaOCoLLsto4pciAX03NRjpDqZbHXD4tvY=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: oyCtMje9lcYf2wr513hrmeca1vFWbCB0GW1U6axyanE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Aug 9 02:03:13 2025 GMT Not After : Aug 16 02:03:13 2025 GMT Subject: CN=6896ac61-89e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:a6:09:d6:8b:65:26:34:2c:b4:1d:d1:46: 20:c2:20:5d:64:64:92:35:cb:a2:87:90:54:bc:30: 92:b7:d6:ab:c9:66:7d:d2:5c:57:95:99:05:eb:27: 67:bc:75:12:d8:ed:fb:09:9e:3c:8c:78:b2:9a:34: 0e:6d:a8:85:21:89:97:05:c9:f4:f9:f7:d6:45:6f: ea:51:d4:6b:e8:11:a8:bc:65:f0:32:2e:d2:f2:39: bc:cd:a6:88:db:22:19:f7:bc:cd:d4:08:69:ea:dc: 92:35:9d:31:3e:87:4b:0b:96:98:90:7e:45:22:87: c3:22:4b:fb:ca:8a:31:88:b3:7a:e6:75:0e:cf:54: b4:33:3c:8b:59:16:0e:31:18:b7:ee:7a:b6:4c:e5: 1e:0e:f7:59:33:a1:b1:a1:0d:71:0d:1c:4a:be:43: 6b:c9:90:b0:0f:0e:9c:93:db:a1:4f:79:e7:93:7c: 50:5c:34:19:5a:42:98:dc:7b:e0:6a:90:88:1c:0d: a7:f2:6a:e3:e7:fd:59:43:68:20:f5:d3:ac:af:e9: 14:7e:1f:c0:1e:09:c1:7c:66:8c:55:42:55:ae:a2: 0b:8b:69:1a:6a:11:9b:84:64:73:96:ba:0e:dc:20: 07:29:14:16:9d:fb:43:43:1a:cf:b5:14:16:1f:30: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7F:DD:D0:92:A4:B8:94:EB:FB:BA:CF:ED:45:88:24:79:3C:95:82 X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fc:59:5f:b0:e5:b9:9f:76:3e:18:d6:55:98:6a:84:87:62: 91:7c:08:ca:d0:6a:c9:ec:9c:55:02:14:15:03:f1:8b:cb:5c: b0:b2:37:44:f6:f1:04:58:e4:7d:2a:d5:74:29:b4:b8:61:99: 78:0e:f4:89:83:46:2a:9b:52:80:ef:a9:2a:85:cd:f4:a3:54: 19:40:a0:d7:98:1e:f9:0f:21:5b:a6:72:33:0d:d1:9f:76:72: 15:a6:49:f0:b1:4f:4e:59:f2:e2:79:4b:d1:4f:70:63:78:27: 06:9b:fa:d2:3d:32:ee:65:fd:ac:b4:e1:ae:7a:50:07:38:89: 5d:6a:41:8f:bc:6e:74:0e:7b:4e:46:31:ed:00:47:59:c6:f0: d7:6c:b0:c1:1f:b5:f1:70:7f:58:dd:89:29:f0:b6:1f:08:a4: 02:4b:08:c4:ee:95:f4:25:97:b6:67:39:9a:cc:37:90:b7:76: 7b:5d:5c:0b:16:9c:6e:2f:1f:1a:d9:4e:87:8b:67:5a:c3:b3: 5c:75:c8:40:5d:ee:a6:f0:35:08:51:0a:f6:7e:67:27:53:0e: 31:19:5a:b3:12:9d:b7:41:c3:9c:bc:9b:d3:23:db:cd:e1:d4: ee:9f:4f:07:c7:0b:a1:95:55:b4:88:1a:91:1c:55:fc:84:ee: e2:0e:65:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjUwODA5MDIwMzEzWhcNMjUwODE2MDIwMzEzWjAYMRYwFAYD VQQDEw02ODk2YWM2MS04OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLymCdaLZSY0LLQd0UYgwiBdZGSSNcuih5BUvDCSt9aryWZ90lxXlZkF6ydn vHUS2O37CZ48jHiymjQObaiFIYmXBcn0+ffWRW/qUdRr6BGovGXwMi7S8jm8zaaI 2yIZ97zN1Ahp6tySNZ0xPodLC5aYkH5FIofDIkv7yooxiLN65nUOz1S0MzyLWRYO MRi37nq2TOUeDvdZM6GxoQ1xDRxKvkNryZCwDw6ck9uhT3nnk3xQXDQZWkKY3Hvg apCIHA2n8mrj5/1ZQ2gg9dOsr+kUfh/AHgnBfGaMVUJVrqILi2kaahGbhGRzlroO 3CAHKRQWnftDQxrPtRQWHzDK5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKR/3dCS pLiU6/u6z+1FiCR5PJWCMB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3/FlfsOW5n3Y+GNZVmGqEh2KRfAjK0GrJ7JxVAhQVA/GLy1ywsjdE 9vEEWOR9KtV0KbS4YZl4DvSJg0Yqm1KA76kqhc30o1QZQKDXmB75DyFbpnIzDdGf dnIVpknwsU9OWfLieUvRT3BjeCcGm/rSPTLuZf2stOGuelAHOIldakGPvG50DntO RjHtAEdZxvDXbLDBH7XxcH9Y3Ykp8LYfCKQCSwjE7pX0JZe2ZzmazDeQt3Z7XVwL FpxuLx8a2U6Hi2daw7NcdchAXe6m8DUIUQr2fmcnUw4xGVqzEp23QcOcvJvTI9vN 4dTun08HxwuhlVW0iBqRHFX8hO7iDmVq -----END CERTIFICATE-----Generated at Sat Aug 9 05:46:16 2025 by rpki-client