$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json) Hash identifier: IhrFLR4eTnoCrjaVLfNXZ1ddmv2JOhJAyYwBpPspQdg= Subject key identifier: 8D:D7:28:6F:1C:3B:18:C4:EE:D6:1D:6C:2C:26:5E:B3:6F:DB:F7:03 Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft Manifest number: A1 Signing time: Mon 11 Aug 2025 06:31:25 +0000 Manifest this update: Mon 11 Aug 2025 06:31:24 +0000 Manifest next update: Mon 18 Aug 2025 06:31:24 +0000 Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: kDVX5bLUT2S2i+qPiIAKK3JLVHaamHv7UCZbt1ZPl7A=) 2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632 Validity Not Before: Aug 11 06:31:24 2025 GMT Not After : Aug 18 06:31:24 2025 GMT Subject: CN=68998e3d-2078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:86:0a:a0:c3:8b:81:d7:1e:8f:19:e6:2e: 51:fe:e4:c5:50:ef:b1:6f:99:c5:4e:e7:68:70:d2: 0f:fe:f5:03:9f:ea:55:a4:7a:f4:7b:e2:8d:5d:20: 63:ec:5b:df:84:18:60:b2:62:a0:01:ee:91:3b:4a: 37:de:67:4c:89:50:eb:3a:48:fa:94:8b:6d:29:56: d9:cb:25:9a:40:74:c3:90:66:c1:22:c6:a5:fa:d5: 87:8d:68:99:a2:42:c6:02:15:d7:b1:e3:22:ea:12: 04:db:05:84:3c:d7:ca:d0:34:25:09:a7:0f:4e:d7: 8d:dd:b3:7f:96:dd:e8:9e:29:85:1a:3e:9d:14:26: 57:9a:d9:53:ea:50:b9:5f:e7:ba:b5:1a:b7:8d:fa: 14:7c:50:f3:bf:7a:76:33:ed:20:51:35:38:9d:45: 4f:bd:ae:9e:e8:bd:97:db:2e:05:15:85:50:2f:fe: bb:ca:f7:20:ca:78:8f:db:6f:ec:be:7f:ec:39:aa: 43:b2:51:db:a4:d5:91:f1:b5:d3:2e:89:c1:97:0b: 4c:d2:34:c0:97:4c:80:03:33:15:48:3e:4d:d1:bf: 9c:9a:8c:60:86:59:18:a2:e2:4c:7f:26:eb:82:1c: 39:bd:b0:f5:13:69:ac:1b:0e:51:eb:2f:6a:1c:45: 54:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D7:28:6F:1C:3B:18:C4:EE:D6:1D:6C:2C:26:5E:B3:6F:DB:F7:03 X509v3 Authority Key Identifier: keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:66:56:7a:11:80:14:dc:13:ff:a3:78:31:9f:26:93:e1:f3: c4:83:17:df:72:1f:5f:6c:16:01:9a:09:f3:0c:6a:17:1a:43: 90:c4:c1:27:4a:56:aa:8a:87:70:f0:70:5c:26:e8:b1:e8:b4: 07:80:9c:61:52:ff:ec:be:15:3c:89:35:71:d4:ba:da:c9:97: 71:11:59:2d:e9:6e:f0:27:3f:f1:2f:8a:8d:75:a3:bd:8b:17: 26:44:0f:3d:d0:16:06:61:2e:17:e4:99:58:d3:0b:86:05:7b: 25:09:ea:6b:76:7b:4f:b3:28:b3:88:c0:b0:49:45:3c:98:00: 9e:49:50:68:94:62:ca:6e:03:b6:74:a2:c9:86:48:c7:dd:47: f0:e5:0c:5f:37:51:1f:d4:cc:22:e4:0a:bc:81:85:c1:30:37: b8:f7:4d:ac:75:87:4b:5f:53:d7:09:1e:ec:c1:34:51:9b:01: 60:27:e7:06:00:a9:07:df:81:85:7b:3e:d5:02:fa:c1:de:23: 01:8f:20:a9:86:85:f5:f3:e8:ac:9e:c8:2a:f4:4e:26:a2:3f: 4c:22:90:15:59:3b:16:4c:2d:7c:32:25:12:de:5f:5b:75:c3: 01:5f:4e:2e:f2:45:5f:9e:66:ff:ad:99:de:de:d6:48:f2:08: 5c:00:a0:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBOTIxMTAvBgNVBAUTKDZBNDU4QUIwRkM1NjI4MjkzMzE4M0Q0NjgwNTFCRkM1 MDc5MTE2MzIwHhcNMjUwODExMDYzMTI0WhcNMjUwODE4MDYzMTI0WjAYMRYwFAYD VQQDEw02ODk5OGUzZC0yMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysOGCqDDi4HXHo8Z5i5R/uTFUO+xb5nFTudocNIP/vUDn+pVpHr0e+KNXSBj 7FvfhBhgsmKgAe6RO0o33mdMiVDrOkj6lIttKVbZyyWaQHTDkGbBIsal+tWHjWiZ okLGAhXXseMi6hIE2wWEPNfK0DQlCacPTteN3bN/lt3onimFGj6dFCZXmtlT6lC5 X+e6tRq3jfoUfFDzv3p2M+0gUTU4nUVPva6e6L2X2y4FFYVQL/67yvcgyniP22/s vn/sOapDslHbpNWR8bXTLonBlwtM0jTAl0yAAzMVSD5N0b+cmoxghlkYouJMfybr ghw5vbD1E2msGw5R6y9qHEVUfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3XKG8c OxjE7tYdbCwmXrNv2/cDMB8GA1UdIwQYMBaAFGpFirD8VigpMxg9RoBRv8UHkRYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0E5Mi85OTlFOEVBQzg3 QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tDa3pHRDFHZ0ZHX3hRZVJG akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0E5Mi85OTlFOEVBQzg3QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tD a3pHRDFHZ0ZHX3hRZVJGakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHZlZ6EYAU3BP/o3gxnyaT4fPEgxffch9fbBYBmgnzDGoXGkOQxMEn Slaqiodw8HBcJuix6LQHgJxhUv/svhU8iTVx1LrayZdxEVkt6W7wJz/xL4qNdaO9 ixcmRA890BYGYS4X5JlY0wuGBXslCeprdntPsyiziMCwSUU8mACeSVBolGLKbgO2 dKLJhkjH3Ufw5QxfN1Ef1Mwi5Aq8gYXBMDe4902sdYdLX1PXCR7swTRRmwFgJ+cG AKkH34GFez7VAvrB3iMBjyCphoX18+isnsgq9E4moj9MIpAVWTsWTC18MiUS3l9b dcMBX04u8kVfnmb/rZne3tZI8ghcAKCb -----END CERTIFICATE-----Generated at Wed Aug 13 02:18:55 2025 by rpki-client