$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json) Hash identifier: ab/t9zUhRcrKPprkR6+VlNC35fCzNnZKfORxMrjAfpw= Subject key identifier: 9E:2B:C3:B2:D0:39:12:CA:ED:47:13:D3:A4:B6:F4:85:9F:54:13:BD Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft Manifest number: 3A Signing time: Wed 05 Nov 2025 07:44:19 +0000 Manifest this update: Wed 05 Nov 2025 07:44:18 +0000 Manifest next update: Wed 12 Nov 2025 07:44:18 +0000 Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: PPtfWUhCIT3wfv1TMfXZk4+oECXl2kOUJ9DRTvqu6bw=) 2: D2B93B4C638211F087594469C4F9AE02.roa (hash: Pu8GeUQM5zPY/klLoi38DXyDw9LChnXWL5CaLmbea3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Validity Not Before: Nov 5 07:44:18 2025 GMT Not After : Nov 12 07:44:18 2025 GMT Subject: CN=690b0053-b88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f7:8a:31:cc:1a:ab:72:c9:03:5c:cb:0e:2d: f2:19:51:b0:62:62:40:40:8a:d6:e7:7f:ce:ac:84: 7e:d7:1c:c3:ab:10:b1:1b:f7:dd:07:96:b2:c0:f6: 0a:46:bc:ab:40:45:dd:86:20:b4:8d:5b:c6:e9:62: 4b:11:39:e6:1c:86:95:81:5a:26:1e:4e:d7:4c:c1: e7:4b:e7:8c:ae:b3:ea:b1:92:e5:39:7b:02:54:f2: 55:72:be:23:aa:ab:3e:2c:38:e5:6c:49:ee:9d:98: 44:fe:e3:f4:05:cc:68:d5:24:20:43:1c:0a:da:ac: 47:ba:cc:17:4d:9e:ef:04:41:7e:31:de:33:f4:ff: b9:5d:ef:5a:64:92:ad:68:d7:7c:b3:98:76:d2:11: 70:34:81:0f:3b:bb:51:ec:58:99:2a:4c:ad:47:d5: b9:e4:c6:c1:0b:76:cb:7d:54:ad:a8:67:d8:54:5f: d4:3a:9c:78:fe:fc:c0:71:da:f6:cf:5d:55:c6:4b: 20:df:fa:93:71:ea:00:02:4e:aa:4f:e8:c1:cb:47: e1:d2:37:ad:71:42:7b:60:59:fb:82:13:09:f5:1f: c1:f7:9f:f2:ec:03:0e:9f:4d:0e:31:7b:ed:39:5f: 05:18:8c:26:2f:c1:c9:be:f3:e8:57:b2:8b:cb:be: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2B:C3:B2:D0:39:12:CA:ED:47:13:D3:A4:B6:F4:85:9F:54:13:BD X509v3 Authority Key Identifier: keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:b5:ea:90:0e:83:79:c7:15:a0:86:4d:56:7d:cc:78:f1:b2: 3d:5b:3f:52:bc:d9:b8:da:66:2a:78:bb:dc:dd:70:76:a8:a1: 2b:bb:f5:e9:e3:c8:ca:a0:bb:b9:0d:ac:42:c0:c3:c1:03:ed: e9:89:07:2d:85:98:e8:9a:d7:95:0d:27:1d:9a:de:bb:fa:e7: a9:6e:35:28:ea:7f:aa:78:65:e8:13:ea:bd:b3:5b:48:f2:95: fc:97:6e:0b:bc:35:95:b5:be:22:ff:a4:7d:fb:48:06:b3:4e: 4f:6b:6b:5e:ea:e5:86:70:cf:29:c0:23:5e:42:2a:26:81:2d: 87:2b:7d:55:e5:47:ad:0d:bb:07:b2:91:ae:9a:1d:4c:5e:b4: 30:b4:d9:66:bd:c4:c6:52:ec:a2:ed:95:2a:e7:8b:2c:b5:e3: 3b:33:9e:0c:25:90:3b:db:99:8d:ac:01:f7:2d:04:a5:6b:1e: 0f:e3:8a:bf:e9:ab:86:0e:9f:5f:f8:f9:dc:89:49:23:fa:21: fd:5c:6a:9a:be:56:b3:d1:31:ca:85:e6:41:24:5d:94:27:fe: c5:ae:93:28:96:6f:7d:04:ff:bf:44:c4:60:e5:4d:2f:6a:10: 2b:68:88:5d:87:2c:17:73:e2:2a:4c:69:31:8e:42:4d:1c:7c: 3b:25:58:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoNkE0OTdFRUQ1RjRGRTJDMTUxNjRERDJEMDdGQzRERDUy QkNFODkyMTAeFw0yNTExMDUwNzQ0MThaFw0yNTExMTIwNzQ0MThaMBgxFjAUBgNV BAMTDTY5MGIwMDUzLWI4OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDl94oxzBqrcskDXMsOLfIZUbBiYkBAitbnf86shH7XHMOrELEb990HlrLA9gpG vKtARd2GILSNW8bpYksROeYchpWBWiYeTtdMwedL54yus+qxkuU5ewJU8lVyviOq qz4sOOVsSe6dmET+4/QFzGjVJCBDHArarEe6zBdNnu8EQX4x3jP0/7ld71pkkq1o 13yzmHbSEXA0gQ87u1HsWJkqTK1H1bnkxsELdst9VK2oZ9hUX9Q6nHj+/MBx2vbP XVXGSyDf+pNx6gACTqpP6MHLR+HSN61xQntgWfuCEwn1H8H3n/LsAw6fTQ4xe+05 XwUYjCYvwcm+8+hXsovLvvorAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnivDstA5 EsrtRxPTpLb0hZ9UE70wHwYDVR0jBBgwFoAUakl+7V9P4sFRZN0tB/xN1SvOiSEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzZBRkJFNDRDNjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lT RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWtsLTdWOVA0c0ZSWk4wdEJfeE4xU3ZPaVNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzZBRkJFNDRDNjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNG UlpOMHRCX3hOMVN2T2lTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALe16pAOg3nHFaCGTVZ9zHjxsj1bP1K82bjaZip4u9zdcHaooSu79enj yMqgu7kNrELAw8ED7emJBy2FmOia15UNJx2a3rv656luNSjqf6p4ZegT6r2zW0jy lfyXbgu8NZW1viL/pH37SAazTk9ra17q5YZwzynAI15CKiaBLYcrfVXlR60Nuwey ka6aHUxetDC02Wa9xMZS7KLtlSrniyy14zszngwlkDvbmY2sAfctBKVrHg/jir/p q4YOn1/4+dyJSSP6If1capq+VrPRMcqF5kEkXZQn/sWukyiWb30E/79ExGDlTS9q ECtoiF2HLBdz4ipMaTGOQk0cfDslWF4= -----END CERTIFICATE-----Generated at Wed Nov 5 13:02:25 2025 by rpki-client