$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json) Hash identifier: h0TrIlIH+hoeMVQ7dv8QFqHfUtWkfZzjK3vvvzy6Rk4= Subject key identifier: 59:99:B9:A2:76:C2:56:50:E1:5B:2A:7C:51:B9:03:86:6E:2D:0E:29 Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft Manifest number: 0E Signing time: Sat 09 Aug 2025 08:38:14 +0000 Manifest this update: Sat 09 Aug 2025 08:38:14 +0000 Manifest next update: Sat 16 Aug 2025 08:38:13 +0000 Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: TXvXeL1Y1r9euzpMwfw2zMpiAlCdHsD/YhaCU6XUVqw=) 2: D2B93B4C638211F087594469C4F9AE02.roa (hash: Pu8GeUQM5zPY/klLoi38DXyDw9LChnXWL5CaLmbea3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Validity Not Before: Aug 9 08:38:14 2025 GMT Not After : Aug 16 08:38:13 2025 GMT Subject: CN=689708f6-d7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ad:b8:70:7a:26:db:b9:c3:cf:57:30:9c:73: dd:9a:d0:c1:32:a6:7e:bc:0c:16:1b:eb:f9:1d:fa: 29:81:62:69:c3:f8:de:a1:73:9c:e1:ce:76:2a:6c: 81:78:14:ad:85:bf:b1:1b:a1:f5:4b:dd:f5:a0:44: 56:60:47:a3:4d:01:61:6c:b9:46:5d:0a:0d:41:c6: 4f:ca:9d:06:39:9e:a0:f1:46:93:7a:de:dc:6b:bd: c6:d7:a0:f8:f4:2e:f1:1a:3b:bc:6a:8f:e3:62:07: 1a:34:b0:a3:2e:d7:24:64:e8:6a:c7:fc:f9:81:40: 18:71:a5:b7:a8:05:5c:64:1b:6e:f9:2a:06:95:24: 63:6c:56:e3:c4:de:b5:f6:03:0c:69:cd:94:ce:c8: be:d9:4a:46:91:b6:50:10:8a:b8:93:d6:13:69:34: 00:cc:fa:19:bd:36:7e:41:db:73:e4:39:a6:8b:0b: 71:1c:2a:88:c0:f0:17:82:6a:97:8d:fe:c0:42:3e: 62:8a:da:9c:21:a4:47:63:b9:ed:5d:ab:d5:f4:7a: 74:69:ce:07:02:11:d5:6a:c9:60:46:6a:66:23:37: 1d:b6:a6:d2:df:65:e6:63:45:0c:81:dd:58:37:13: 63:2e:ef:cc:63:19:12:d9:fb:81:3c:30:14:7e:c2: ed:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:99:B9:A2:76:C2:56:50:E1:5B:2A:7C:51:B9:03:86:6E:2D:0E:29 X509v3 Authority Key Identifier: keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a9:2d:30:7e:49:b5:2b:72:2b:63:29:e0:2c:20:79:10:35: 48:c6:d4:87:c5:9c:c2:46:de:e5:fd:60:0c:c6:18:22:54:de: f7:91:be:60:69:79:01:c0:43:b9:09:84:58:e0:5f:f4:e8:81: 54:68:c5:81:9c:fb:70:3a:37:a3:e1:5c:fa:14:b1:e9:08:b5: 77:ff:e6:29:ff:03:52:71:49:c6:8a:b0:2c:90:c4:65:c0:9f: ab:a5:bc:3e:99:f2:89:fc:e9:e4:e4:2e:93:c2:73:ee:9a:3e: cb:b6:a6:a4:15:d0:d8:be:8e:20:e8:fa:45:58:b4:89:63:f6: f5:6b:9e:f8:ad:9d:97:e1:77:83:be:c5:d5:45:13:9f:50:65: da:6a:a2:f6:88:62:f1:7c:42:f5:ec:27:11:67:92:63:18:a7: db:ee:67:d0:73:fc:95:28:26:c3:2e:4f:28:40:79:c1:86:e4: 28:9d:50:f6:d0:a6:8d:e7:dd:36:07:e9:fb:f8:78:10:86:aa: e2:c1:7c:a1:7b:e5:e8:9b:2a:0d:fb:9a:82:6a:ec:12:93:0a: f9:30:a8:b8:47:90:f2:4a:a9:65:5b:1a:9b:2c:96:c7:9e:7b: c5:71:b2:d0:7b:27:8f:f6:bb:1a:d5:bc:70:e2:a2:0c:e5:73: b3:06:ba:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoNkE0OTdFRUQ1RjRGRTJDMTUxNjRERDJEMDdGQzRERDUy QkNFODkyMTAeFw0yNTA4MDkwODM4MTRaFw0yNTA4MTYwODM4MTNaMBgxFjAUBgNV BAMTDTY4OTcwOGY2LWQ3YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgrbhweibbucPPVzCcc92a0MEypn68DBYb6/kd+imBYmnD+N6hc5zhznYqbIF4 FK2Fv7EbofVL3fWgRFZgR6NNAWFsuUZdCg1Bxk/KnQY5nqDxRpN63txrvcbXoPj0 LvEaO7xqj+NiBxo0sKMu1yRk6GrH/PmBQBhxpbeoBVxkG275KgaVJGNsVuPE3rX2 AwxpzZTOyL7ZSkaRtlAQiriT1hNpNADM+hm9Nn5B23PkOaaLC3EcKojA8BeCapeN /sBCPmKK2pwhpEdjue1dq9X0enRpzgcCEdVqyWBGamYjNx22ptLfZeZjRQyB3Vg3 E2Mu78xjGRLZ+4E8MBR+wu1JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWZm5onbC VlDhWyp8UbkDhm4tDikwHwYDVR0jBBgwFoAUakl+7V9P4sFRZN0tB/xN1SvOiSEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzZBRkJFNDRDNjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lT RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWtsLTdWOVA0c0ZSWk4wdEJfeE4xU3ZPaVNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzZBRkJFNDRDNjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNG UlpOMHRCX3hOMVN2T2lTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAupLTB+SbUrcitjKeAsIHkQNUjG1IfFnMJG3uX9YAzGGCJU3veRvmBp eQHAQ7kJhFjgX/TogVRoxYGc+3A6N6PhXPoUsekItXf/5in/A1JxScaKsCyQxGXA n6ulvD6Z8on86eTkLpPCc+6aPsu2pqQV0Ni+jiDo+kVYtIlj9vVrnvitnZfhd4O+ xdVFE59QZdpqovaIYvF8QvXsJxFnkmMYp9vuZ9Bz/JUoJsMuTyhAecGG5CidUPbQ po3n3TYH6fv4eBCGquLBfKF75eibKg37moJq7BKTCvkwqLhHkPJKqWVbGpsslsee e8VxstB7J4/2uxrVvHDiogzlc7MGunA= -----END CERTIFICATE-----Generated at Sun Aug 10 18:12:43 2025 by rpki-client