$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: h7nX9Hg0Q0U7E0XvB44cucigqD/wzDgniYFMLPnIfK4= Subject key identifier: D9:0F:D5:2C:F0:53:80:69:8C:67:85:D1:DC:91:35:0B:21:93:B6:68 Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 02DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 02D7 Signing time: Wed 05 Nov 2025 01:25:12 +0000 Manifest this update: Wed 05 Nov 2025 01:25:12 +0000 Manifest next update: Wed 12 Nov 2025 01:25:12 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: KdoWoUu0P6fzpS5npohoKXw11fTeuiXhHGw8Nl/5q2w=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: oyCtMje9lcYf2wr513hrmeca1vFWbCB0GW1U6axyanE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Nov 5 01:25:12 2025 GMT Not After : Nov 12 01:25:12 2025 GMT Subject: CN=690aa778-2e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:dd:ab:87:f6:f7:07:ff:7f:a5:32:1c:89: 35:89:49:bb:24:ea:7b:20:fe:63:2f:eb:cf:8c:2b: e9:37:80:56:1b:39:bf:ed:47:e5:0f:07:d5:bc:c6: 5b:71:17:cf:b3:ad:c1:df:e1:6e:be:1b:c6:9e:92: 60:5f:73:80:95:c3:09:3f:d4:34:47:e3:f3:3c:91: 75:9d:2e:3c:4b:a4:38:1c:84:c1:2b:5b:98:92:d1: fb:e6:b9:b2:44:f5:cd:b2:ef:e3:41:42:56:0e:21: 35:19:c3:fd:17:22:f6:02:ad:ca:4c:e2:71:43:7b: 18:a7:35:81:94:12:30:07:a1:44:a0:04:14:0d:12: 8f:a4:10:97:17:cf:21:76:7c:8f:19:38:a6:4c:13: ab:af:61:23:3d:8f:fa:25:ae:27:65:76:d1:69:8b: 73:8f:af:3c:3c:38:7c:86:38:95:83:f0:1e:9f:e7: 8a:68:6e:c7:cb:fc:7e:0d:04:f9:a4:2e:bf:51:7a: 35:91:c1:74:e5:fb:42:80:a7:ba:e9:97:04:43:7c: bc:52:48:3d:fa:0c:98:34:7c:69:61:52:50:4a:f8: ba:00:92:20:1e:61:51:68:c5:bc:7e:04:81:9e:26: 3a:0c:93:95:56:e0:c5:b4:15:e1:4f:de:de:e0:2c: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0F:D5:2C:F0:53:80:69:8C:67:85:D1:DC:91:35:0B:21:93:B6:68 X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:6b:23:6f:1b:ea:cd:4c:e6:5e:79:c1:d4:4e:63:00:e7:a5: d2:48:a7:3c:43:85:d3:86:f1:3d:4a:87:39:3f:89:01:70:a5: 60:f2:29:c3:1a:d6:05:78:3e:91:e5:80:53:8e:69:b0:e9:f2: 49:7a:da:32:9e:b0:e4:0f:23:59:fa:30:e6:3d:87:4e:41:4e: 70:a2:01:23:37:73:1c:f7:11:6e:1a:83:9f:72:54:1b:41:2a: 43:f5:96:f6:b8:63:b8:fd:76:26:b8:55:fb:f5:00:06:7e:85: 3e:34:cf:73:08:db:b8:3f:a5:44:67:f0:11:28:e0:0b:fc:06: b2:38:f4:b8:e6:ad:1e:23:6e:52:85:59:b6:de:78:22:37:77: ae:5f:85:c4:f4:37:21:ac:5f:a6:5e:16:ba:48:8a:1f:84:ef: ee:43:61:05:72:39:08:86:6d:93:19:b5:49:8c:ac:e1:cd:0c: 9b:05:49:98:93:e8:02:48:e6:8e:f1:47:2f:4c:a2:da:de:67: 9e:58:f3:e0:ba:7e:6c:5f:9c:a6:34:4d:01:62:ce:f7:7e:ff: d4:3d:51:d9:25:0a:e3:53:13:71:74:96:82:9c:42:36:51:57: 35:66:b6:33:60:b1:2c:a3:05:b7:9b:58:e6:4f:56:7e:d9:80: 4b:c8:5b:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjUxMTA1MDEyNTEyWhcNMjUxMTEyMDEyNTEyWjAYMRYwFAYD VQQDEw02OTBhYTc3OC0yZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznvdq4f29wf/f6UyHIk1iUm7JOp7IP5jL+vPjCvpN4BWGzm/7UflDwfVvMZb cRfPs63B3+FuvhvGnpJgX3OAlcMJP9Q0R+PzPJF1nS48S6Q4HITBK1uYktH75rmy RPXNsu/jQUJWDiE1GcP9FyL2Aq3KTOJxQ3sYpzWBlBIwB6FEoAQUDRKPpBCXF88h dnyPGTimTBOrr2EjPY/6Ja4nZXbRaYtzj688PDh8hjiVg/Aen+eKaG7Hy/x+DQT5 pC6/UXo1kcF05ftCgKe66ZcEQ3y8Ukg9+gyYNHxpYVJQSvi6AJIgHmFRaMW8fgSB niY6DJOVVuDFtBXhT97e4CxkjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkP1Szw U4BpjGeF0dyRNQshk7ZoMB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUayNvG+rNTOZeecHUTmMA56XSSKc8Q4XThvE9Soc5P4kBcKVg8inD GtYFeD6R5YBTjmmw6fJJetoynrDkDyNZ+jDmPYdOQU5wogEjN3Mc9xFuGoOfclQb QSpD9Zb2uGO4/XYmuFX79QAGfoU+NM9zCNu4P6VEZ/ARKOAL/AayOPS45q0eI25S hVm23ngiN3euX4XE9DchrF+mXha6SIofhO/uQ2EFcjkIhm2TGbVJjKzhzQybBUmY k+gCSOaO8UcvTKLa3meeWPPgun5sX5ymNE0BYs73fv/UPVHZJQrjUxNxdJaCnEI2 UVc1ZrYzYLEsowW3m1jmT1Z+2YBLyFs0 -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:56 2025 by rpki-client