$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: sPvfG08LeAkdWqTia1vdeHijSu1wDOkbnZ1CqAbQyLk= Subject key identifier: C3:3F:AC:92:80:4E:27:9B:7B:80:20:A2:8B:A1:9F:E7:1A:3E:C5:DD Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 035A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 0356 Signing time: Sat 19 Jul 2025 01:22:52 +0000 Manifest this update: Sat 19 Jul 2025 01:22:52 +0000 Manifest next update: Sat 26 Jul 2025 01:22:52 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: 0z4BfDjbvvwzRuhbypGUY+NtXOal9uajvpuB1moKKxs=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: 9lR4wMfGIYGiHedS31WLLXrhF347dnFxO3kCajEDmqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: Jul 19 01:22:52 2025 GMT Not After : Jul 26 01:22:52 2025 GMT Subject: CN=687af36c-d272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:96:1d:6d:24:1a:1b:91:8e:74:32:a6:ea: e9:a0:cf:ea:74:e3:a1:62:cb:a7:b8:2e:90:b2:3a: 55:fb:81:bd:9b:3e:04:48:35:3e:d3:a1:e1:50:bc: 91:61:31:27:91:5c:19:08:27:21:8b:1a:23:d3:13: 74:5d:01:26:5e:0d:7c:ed:34:35:7c:be:12:fd:23: e3:ff:70:29:65:f7:60:72:43:af:f1:62:42:49:6d: 77:6d:77:35:d2:84:e4:e6:96:eb:e7:d0:60:7b:67: c2:09:d9:b6:38:29:14:26:45:34:e3:7a:11:1e:10: 31:b3:06:71:23:d3:10:95:e7:bd:0e:f5:6a:6a:79: ea:98:b5:47:f0:d0:7e:3d:7e:3c:6b:e2:03:51:5b: 9c:81:35:0f:a2:7f:71:2c:ab:66:fc:5a:97:e1:a9: 66:ca:d6:2d:14:57:03:35:25:65:f5:d8:44:a3:af: 64:52:3e:fb:c2:c6:86:26:4d:02:8d:03:9a:4b:51: 07:a6:03:9e:69:1e:4d:50:a1:07:fa:57:b2:87:db: b8:e0:26:90:14:0a:ba:42:61:f1:d5:26:78:4e:20: 4d:7c:e9:25:4b:6a:e5:54:dc:95:84:fa:b2:11:a0: a0:ad:c6:4f:7a:5a:1c:41:ec:b3:14:f6:62:e3:80: 90:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3F:AC:92:80:4E:27:9B:7B:80:20:A2:8B:A1:9F:E7:1A:3E:C5:DD X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d1:b1:df:a6:dd:76:09:92:7f:bc:46:81:08:bc:91:9a:25: 9c:cb:1b:cf:dd:62:59:3f:dc:63:99:8d:51:26:17:b5:8c:f0: 10:75:1d:00:68:33:e5:1d:fa:be:b5:f6:a5:98:1d:38:67:91: a6:25:d5:4c:5f:de:14:d0:8d:07:10:ca:9d:79:e7:65:34:a5: e8:25:db:0f:f7:5a:7b:8f:64:ed:c2:4b:8f:69:9d:9c:92:dc: a5:e7:f0:72:22:50:c8:72:f9:78:a6:47:53:6f:64:85:fa:38: 87:2a:3c:bb:13:a6:41:e2:79:1f:b9:15:81:d7:ce:bb:fa:38: 4f:ee:bb:64:6a:ca:f7:d4:fb:42:79:7c:41:c2:a0:a5:4a:ad: 5e:b3:d0:c3:61:b0:1a:42:04:2a:42:0c:f3:e5:88:a1:f4:d8: 36:07:28:26:f4:ad:e3:c6:93:21:a7:ff:a2:06:ab:55:4a:d4: 49:fb:7c:aa:31:0b:8e:64:5a:8f:cb:00:1a:b3:83:45:99:03: 39:3d:28:9b:4a:2d:d2:b4:c5:c2:f7:35:5e:94:72:29:98:f3: f2:d7:01:98:86:05:fb:27:10:df:61:93:22:ad:d1:03:09:1e: 59:fc:70:76:ac:62:d6:56:90:ab:85:ec:89:77:39:af:fb:b0: 1d:05:99:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjUwNzE5MDEyMjUyWhcNMjUwNzI2MDEyMjUyWjAYMRYwFAYD VQQDEw02ODdhZjM2Yy1kMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvb6WHW0kGhuRjnQypurpoM/qdOOhYsunuC6QsjpV+4G9mz4ESDU+06HhULyR YTEnkVwZCCchixoj0xN0XQEmXg187TQ1fL4S/SPj/3ApZfdgckOv8WJCSW13bXc1 0oTk5pbr59Bge2fCCdm2OCkUJkU043oRHhAxswZxI9MQlee9DvVqannqmLVH8NB+ PX48a+IDUVucgTUPon9xLKtm/FqX4almytYtFFcDNSVl9dhEo69kUj77wsaGJk0C jQOaS1EHpgOeaR5NUKEH+leyh9u44CaQFAq6QmHx1SZ4TiBNfOklS2rlVNyVhPqy EaCgrcZPelocQeyzFPZi44CQMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM/rJKA Tiebe4Agoouhn+caPsXdMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI0bHfpt12CZJ/vEaBCLyRmiWcyxvP3WJZP9xjmY1RJhe1jPAQdR0A aDPlHfq+tfalmB04Z5GmJdVMX94U0I0HEMqdeedlNKXoJdsP91p7j2TtwkuPaZ2c ktyl5/ByIlDIcvl4pkdTb2SF+jiHKjy7E6ZB4nkfuRWB1867+jhP7rtkasr31PtC eXxBwqClSq1es9DDYbAaQgQqQgzz5Yih9Ng2Bygm9K3jxpMhp/+iBqtVStRJ+3yq MQuOZFqPywAas4NFmQM5PSibSi3StMXC9zVelHIpmPPy1wGYhgX7JxDfYZMirdED CR5Z/HB2rGLWVpCrheyJdzmv+7AdBZm0 -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:05 2025 by rpki-client