$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json) Hash identifier: ycvm+eNY3dbCoOmLqx86SSYAQU2tg5gbP2bx2cT8Apw= Subject key identifier: 3B:6F:12:F4:39:6D:B5:85:00:33:15:21:58:D2:A2:E2:D4:3E:7E:5E Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft Manifest number: C3 Signing time: Mon 27 Jul 2026 17:28:26 +0000 Manifest this update: Mon 27 Jul 2026 17:28:26 +0000 Manifest next update: Mon 03 Aug 2026 17:28:26 +0000 Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: UwgcLiI0yZHrSrL/ZoGJsFIus/JNcHa06kUJ3RjCwt0=) 2: 2EC0243A89E011F1B81BDF965611F970.roa (hash: HlbEiXYQGYnUzE77dTv3Dl0fdaZ53XIDvfT5r88Cggw=) 3: 904FFA4A89E011F19D4A2A975611F970.roa (hash: f4w8/RoAlGzHTiWVuDFuDfN0UYQ4NDHr3btTiYDqHLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Validity Not Before: Jul 27 17:28:26 2026 GMT Not After : Aug 3 17:28:26 2026 GMT Subject: CN=6a67953a-ac5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6c:55:dc:eb:1f:5b:01:f9:60:25:28:a4:42: 38:cd:0b:d9:e9:de:5f:cd:5e:67:ec:7d:3c:88:02: eb:26:81:04:a9:3a:a7:2a:2a:e2:fd:ba:74:aa:d7: b4:a5:16:be:09:42:25:cd:42:f0:5c:dc:4f:e6:2f: 03:10:f3:50:0d:0a:03:66:bb:8d:f1:2e:c3:57:7f: 6d:f1:79:cc:fb:ec:63:4d:cc:f3:21:9c:9a:f1:45: 94:8c:c4:96:1b:90:9f:27:bb:eb:92:64:2d:04:45: f8:7d:f0:99:f4:05:1d:fd:f4:07:52:a2:4b:b2:37: bc:6e:f0:aa:69:e0:ce:17:61:0e:15:e4:13:81:72: 09:ef:1b:72:77:c3:b7:31:09:a3:58:ee:c5:d3:93: b1:84:70:3c:69:9f:cd:d2:c7:2c:18:65:4b:f9:91: ee:19:7d:a4:1c:e6:3a:94:05:6e:29:bc:9c:9f:49: 15:45:0b:e4:10:3b:ce:71:ce:cf:6c:67:04:ac:c2: 69:e8:bd:77:f9:bb:dc:a7:4d:7a:95:67:51:a5:1a: 9d:c3:a9:d7:b7:63:74:1e:67:eb:a7:1f:0c:06:23: 5a:4a:d5:bf:64:68:43:5c:4d:9f:2f:7d:80:99:79: 24:8f:8e:f8:4a:c8:27:05:c9:f4:84:12:4a:b1:d4: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6F:12:F4:39:6D:B5:85:00:33:15:21:58:D2:A2:E2:D4:3E:7E:5E X509v3 Authority Key Identifier: keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:90:7a:7b:d3:58:ea:ca:5e:65:34:41:66:ef:fe:ef:82:74: 1f:ab:23:e7:55:f4:b1:b8:c5:28:eb:a8:30:f0:40:cc:db:e8: dc:27:4e:5c:03:3d:af:4f:45:af:54:7a:90:2f:7e:1d:f2:6e: 4c:17:87:2c:09:be:2b:6e:12:59:28:ed:d9:01:db:55:29:6a: 05:2b:ec:c6:8b:bc:74:cd:77:d1:cf:9f:a2:38:5c:da:c7:7c: c6:72:70:e1:08:cf:8c:55:a9:bd:f3:ad:5f:6f:ea:61:06:02: 54:52:53:c5:19:c1:49:c9:03:dc:c3:27:e4:2e:b1:87:c6:ea: 04:8f:09:d7:0e:a7:63:2b:66:08:6d:08:68:9a:10:e9:38:ed: 90:a6:20:78:18:e9:f9:87:a7:42:b6:1b:ce:46:d2:59:81:06: bb:0a:45:f6:f9:68:fd:fb:0f:de:5b:d9:73:f2:49:b4:55:8c: e6:d4:27:d3:b1:44:9e:7b:e1:01:3b:ce:2d:42:03:3c:88:b1: 1c:d2:73:6f:3d:6d:fa:15:81:f1:e7:65:6e:6e:c9:76:a3:90: 79:05:41:ff:b3:53:43:92:0e:11:82:52:86:aa:2a:41:c0:4f: 88:a2:4d:64:e4:99:c0:cf:3d:e5:5c:38:ce:57:3b:32:59:bd: 45:83:d3:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFRjIxMTAvBgNVBAUTKDZBNDk3RUVENUY0RkUyQzE1MTY0REQyRDA3RkM0REQ1 MkJDRTg5MjEwHhcNMjYwNzI3MTcyODI2WhcNMjYwODAzMTcyODI2WjAYMRYwFAYD VQQDEw02YTY3OTUzYS1hYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WxV3OsfWwH5YCUopEI4zQvZ6d5fzV5n7H08iALrJoEEqTqnKiri/bp0qte0 pRa+CUIlzULwXNxP5i8DEPNQDQoDZruN8S7DV39t8XnM++xjTczzIZya8UWUjMSW G5CfJ7vrkmQtBEX4ffCZ9AUd/fQHUqJLsje8bvCqaeDOF2EOFeQTgXIJ7xtyd8O3 MQmjWO7F05OxhHA8aZ/N0scsGGVL+ZHuGX2kHOY6lAVuKbycn0kVRQvkEDvOcc7P bGcErMJp6L13+bvcp016lWdRpRqdw6nXt2N0Hmfrpx8MBiNaStW/ZGhDXE2fL32A mXkkj474SsgnBcn0hBJKsdSAYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtvEvQ5 bbWFADMVIVjSouLUPn5eMB8GA1UdIwQYMBaAFGpJfu1fT+LBUWTdLQf8TdUrzokh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0VGMi82QUZCRTQ0QzYz ODExMUYwQTMzRDIzNjRDNEY5QUUwMi9ha2wtN1Y5UDRzRlJaTjB0Ql94TjFTdk9p U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0VGMi82QUZCRTQ0QzYzODExMUYwQTMzRDIzNjRDNEY5QUUwMi9ha2wtN1Y5UDRz RlJaTjB0Ql94TjFTdk9pU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGZB6e9NY6speZTRBZu/+74J0H6sj51X0sbjFKOuoMPBAzNvo3CdOXAM9r09F r1R6kC9+HfJuTBeHLAm+K24SWSjt2QHbVSlqBSvsxou8dM130c+fojhc2sd8xnJw 4QjPjFWpvfOtX2/qYQYCVFJTxRnBSckD3MMn5C6xh8bqBI8J1w6nYytmCG0IaJoQ 6TjtkKYgeBjp+YenQrYbzkbSWYEGuwpF9vlo/fsP3lvZc/JJtFWM5tQn07FEnnvh ATvOLUIDPIixHNJzbz1t+hWB8edlbm7JdqOQeQVB/7NTQ5IOEYJShqoqQcBPiKJN ZOSZwM895Vw4zlc7Mlm9RYPT1A== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:36 2026 by rpki-client