$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json) Hash identifier: 1kC1e/yCDmWErKP6zheGUzyH/7HvFbxx0kUKPJu1f3E= Subject key identifier: F4:95:43:B2:4C:7E:27:EA:90:3E:92:BE:4F:86:ED:4F:49:E9:3D:FF Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft Manifest number: 05 Signing time: Wed 23 Jul 2025 08:35:31 +0000 Manifest this update: Wed 23 Jul 2025 08:35:30 +0000 Manifest next update: Wed 30 Jul 2025 08:35:30 +0000 Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: 24l1mok+3mfUa4ITf+suUzYE+UYs+Ep6c0Xkl6d5Gdw=) 2: D2B93B4C638211F087594469C4F9AE02.roa (hash: Pu8GeUQM5zPY/klLoi38DXyDw9LChnXWL5CaLmbea3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 08:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Validity Not Before: Jul 23 08:35:30 2025 GMT Not After : Jul 30 08:35:30 2025 GMT Subject: CN=68809ed2-4458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8b:66:c6:1f:6a:02:ad:60:79:5f:f0:bb:1d: 56:da:d5:64:ce:cc:9a:af:76:fc:af:fc:87:70:77: 96:c5:48:07:6e:50:19:17:29:01:b8:5e:c8:65:5d: 9c:18:af:bc:e9:f5:5e:0e:54:92:46:b4:c8:ef:76: e5:f4:07:d6:1a:ac:0d:ef:35:f1:76:a4:3f:0b:e8: 20:ed:bf:d3:6a:7d:35:ea:63:ac:1d:65:8e:80:c9: ba:91:9b:8e:3b:30:c4:eb:2b:a3:36:e3:dc:a0:97: 11:4b:cd:83:29:4b:d6:35:2a:76:29:4d:cd:db:fe: 39:1f:43:9e:ce:eb:c8:70:e5:53:42:d0:c0:4e:15: 09:0a:cf:af:38:ad:1f:9e:8e:19:44:d8:53:41:c2: c3:92:2e:e5:da:20:a2:94:bc:74:16:06:23:26:f3: 13:9b:df:4b:08:15:cb:96:6d:f7:e4:98:83:7e:ce: a4:3b:f4:e0:d7:2a:15:34:84:a0:32:cd:a8:e9:a7: 57:c3:dc:93:14:a8:c8:74:51:3e:5b:60:e2:b6:22: 57:0f:d4:68:51:1f:d4:dd:26:57:3e:ac:4f:be:09: 0e:b4:f5:8c:cb:38:d8:b0:f4:2a:31:2e:f9:93:a3: 21:39:ef:8b:15:fb:7b:e1:c7:18:3a:0c:70:05:1d: b0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:95:43:B2:4C:7E:27:EA:90:3E:92:BE:4F:86:ED:4F:49:E9:3D:FF X509v3 Authority Key Identifier: keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e4:07:c0:3f:cb:6e:8d:2c:99:c7:8f:78:82:70:2a:f8:e0: a5:50:db:1c:0f:d9:8a:71:e0:b8:e6:83:dd:6e:0f:2d:2a:f0: 06:23:1c:a1:39:bb:fc:f1:55:59:9e:f3:54:30:62:7a:ee:97: 17:f8:63:cc:42:4c:fe:45:91:20:1a:0d:af:fc:de:a1:9e:fa: 1f:28:93:8f:67:75:89:67:1f:6d:d9:ec:5b:8f:06:c5:7c:14: 73:2b:3a:bd:98:21:2e:6e:6e:eb:03:d1:e6:eb:50:70:43:10: 49:89:ff:1f:bd:95:da:2e:b7:72:47:8a:c3:8a:e5:3d:d8:92: 66:ce:f0:db:e6:f5:3d:c8:86:31:6a:9b:74:ae:be:03:6f:11: 62:3e:06:b7:8f:a2:45:58:74:f7:ed:ff:99:49:8b:d4:2f:5c: 53:d6:17:e7:dc:bd:c6:3e:4a:fe:8c:0b:29:b7:db:22:46:11: 02:e8:98:3e:a9:6e:58:ec:4b:a0:33:9c:49:31:9b:d2:58:06: 1b:93:c8:2c:89:be:46:51:3c:00:59:a4:99:40:c7:b1:4a:c8: 1f:73:b5:35:88:01:ec:10:61:cd:16:8e:62:60:fc:38:d8:ae: dc:42:43:76:42:24:d4:71:80:3a:d5:46:cd:29:d4:17:c4:5c: 77:4b:02:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoNkE0OTdFRUQ1RjRGRTJDMTUxNjRERDJEMDdGQzRERDUy QkNFODkyMTAeFw0yNTA3MjMwODM1MzBaFw0yNTA3MzAwODM1MzBaMBgxFjAUBgNV BAMTDTY4ODA5ZWQyLTQ0NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvi2bGH2oCrWB5X/C7HVba1WTOzJqvdvyv/Idwd5bFSAduUBkXKQG4XshlXZwY r7zp9V4OVJJGtMjvduX0B9YarA3vNfF2pD8L6CDtv9NqfTXqY6wdZY6AybqRm447 MMTrK6M249yglxFLzYMpS9Y1KnYpTc3b/jkfQ57O68hw5VNC0MBOFQkKz684rR+e jhlE2FNBwsOSLuXaIKKUvHQWBiMm8xOb30sIFcuWbffkmIN+zqQ79ODXKhU0hKAy zajpp1fD3JMUqMh0UT5bYOK2IlcP1GhRH9TdJlc+rE++CQ609YzLONiw9CoxLvmT oyE574sV+3vhxxg6DHAFHbD7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9JVDskx+ J+qQPpK+T4btT0npPf8wHwYDVR0jBBgwFoAUakl+7V9P4sFRZN0tB/xN1SvOiSEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzZBRkJFNDRDNjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lT RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWtsLTdWOVA0c0ZSWk4wdEJfeE4xU3ZPaVNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzZBRkJFNDRDNjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNG UlpOMHRCX3hOMVN2T2lTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEPkB8A/y26NLJnHj3iCcCr44KVQ2xwP2Ypx4Ljmg91uDy0q8AYjHKE5 u/zxVVme81QwYnrulxf4Y8xCTP5FkSAaDa/83qGe+h8ok49ndYlnH23Z7FuPBsV8 FHMrOr2YIS5ubusD0ebrUHBDEEmJ/x+9ldout3JHisOK5T3YkmbO8Nvm9T3IhjFq m3SuvgNvEWI+BrePokVYdPft/5lJi9QvXFPWF+fcvcY+Sv6MCym32yJGEQLomD6p bljsS6AznEkxm9JYBhuTyCyJvkZRPABZpJlAx7FKyB9ztTWIAewQYc0WjmJg/DjY rtxCQ3ZCJNRxgDrVRs0p1BfEXHdLAow= -----END CERTIFICATE-----Generated at Fri Jul 25 01:41:33 2025 by rpki-client