$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json) Hash identifier: eK/ZlNahAjTI7adeQiB35r7Q0c+onjRJ2eTg8e0UXVI= Subject key identifier: A5:29:5E:BE:F4:4B:1F:82:FA:1D:67:DD:62:F5:05:87:BE:45:A2:9B Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft Manifest number: 95 Signing time: Sat 19 Jul 2025 06:40:31 +0000 Manifest this update: Sat 19 Jul 2025 06:40:30 +0000 Manifest next update: Sat 26 Jul 2025 06:40:30 +0000 Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: 6y1i2NDiMQkE1jgp8CH8JtDm+7Xq6LaRphxnYhHwtc4=) 2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632 Validity Not Before: Jul 19 06:40:30 2025 GMT Not After : Jul 26 06:40:30 2025 GMT Subject: CN=687b3ddf-5075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:83:5b:0b:b0:f5:0c:3f:e4:6c:50:79:a6: a5:57:f8:f9:dc:84:dd:d7:e7:6b:98:2a:aa:3b:d9: 5d:c9:81:1a:dd:7f:80:2a:1d:f4:f1:91:79:88:6b: c6:d8:5e:19:14:fd:60:78:44:4e:17:98:93:2d:54: 09:99:e2:3c:0a:37:2c:22:ba:2a:35:23:a2:61:fd: a9:ff:72:4b:59:5e:30:d7:33:0a:a5:a4:2d:7d:69: 3b:8a:44:81:04:9d:0d:0b:0b:c6:1d:44:a4:ea:94: 16:95:60:2a:f3:7e:7c:a1:00:96:52:a5:6a:d2:1e: c9:d1:06:65:44:d2:a6:4d:89:4d:2f:81:7b:db:87: 37:8f:d1:54:cd:50:b0:97:b3:74:29:51:d3:a6:3e: a6:0a:24:59:6c:91:44:1b:16:bf:f7:84:ed:c9:70: 9e:d9:e7:9e:a1:95:34:f9:f0:67:38:5c:47:74:c4: dc:6c:88:ea:da:cc:fb:96:12:a5:24:f8:3e:cf:7d: 2a:bb:f9:c5:0a:c6:30:74:6f:db:05:7a:10:fc:a9: 91:38:61:50:c3:4b:4a:9f:75:90:92:64:fd:5a:d0: 69:58:a8:55:d0:af:d1:a8:42:d0:47:6c:cf:c2:38: f7:f6:b3:23:d7:ef:11:b9:1f:f6:0a:9b:3e:39:37: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:29:5E:BE:F4:4B:1F:82:FA:1D:67:DD:62:F5:05:87:BE:45:A2:9B X509v3 Authority Key Identifier: keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:48:26:d2:99:51:78:81:f6:45:3a:9e:66:6f:c3:87:91:59: 00:41:5d:14:ae:08:c3:ba:47:9e:4a:a3:9a:ac:ea:fc:42:c0: 61:f8:e0:3e:b9:3d:ba:b9:36:c8:39:61:72:a7:77:7e:c0:75: 0f:e4:90:cb:0c:81:71:9c:78:d9:e8:d5:b0:38:b8:36:56:d1: 00:c0:bd:9b:6d:24:4f:2e:2c:6d:da:af:8a:15:07:6d:5a:22: 9d:87:7c:34:34:c1:8d:bc:a9:7e:bc:cc:01:f8:6d:61:ee:1e: 78:fc:28:df:31:58:b7:d2:de:36:66:f2:f5:d4:99:47:92:22: ef:4b:5a:2b:2d:b2:83:ca:b5:67:95:b8:ce:25:e9:9d:9a:da: b3:a3:27:d3:94:d8:d0:d4:25:78:42:a7:06:80:53:e0:fb:9d: 4d:c0:3c:56:c9:eb:46:a5:f9:bb:fd:45:02:5b:be:1d:39:98: f0:bf:c7:d5:dc:1f:57:5a:66:ed:99:19:6d:29:52:66:a6:88: 3c:af:56:c4:2a:e5:b9:82:6a:ce:14:50:33:a9:f1:14:95:77: 51:f3:67:be:f0:c6:e4:fb:31:9e:79:c4:5f:88:71:09:08:b6: de:21:f5:0f:b7:da:26:a8:5e:16:4e:d7:0f:4f:46:cf:c0:f7: e3:4c:3f:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBOTIxMTAvBgNVBAUTKDZBNDU4QUIwRkM1NjI4MjkzMzE4M0Q0NjgwNTFCRkM1 MDc5MTE2MzIwHhcNMjUwNzE5MDY0MDMwWhcNMjUwNzI2MDY0MDMwWjAYMRYwFAYD VQQDEw02ODdiM2RkZi01MDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqiDWwuw9Qw/5GxQeaalV/j53ITd1+drmCqqO9ldyYEa3X+AKh308ZF5iGvG 2F4ZFP1geEROF5iTLVQJmeI8CjcsIroqNSOiYf2p/3JLWV4w1zMKpaQtfWk7ikSB BJ0NCwvGHUSk6pQWlWAq8358oQCWUqVq0h7J0QZlRNKmTYlNL4F724c3j9FUzVCw l7N0KVHTpj6mCiRZbJFEGxa/94TtyXCe2eeeoZU0+fBnOFxHdMTcbIjq2sz7lhKl JPg+z30qu/nFCsYwdG/bBXoQ/KmROGFQw0tKn3WQkmT9WtBpWKhV0K/RqELQR2zP wjj39rMj1+8RuR/2Cps+OTferQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUpXr70 Sx+C+h1n3WL1BYe+RaKbMB8GA1UdIwQYMBaAFGpFirD8VigpMxg9RoBRv8UHkRYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0E5Mi85OTlFOEVBQzg3 QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tDa3pHRDFHZ0ZHX3hRZVJG akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0E5Mi85OTlFOEVBQzg3QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tD a3pHRDFHZ0ZHX3hRZVJGakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRSCbSmVF4gfZFOp5mb8OHkVkAQV0UrgjDukeeSqOarOr8QsBh+OA+ uT26uTbIOWFyp3d+wHUP5JDLDIFxnHjZ6NWwOLg2VtEAwL2bbSRPLixt2q+KFQdt WiKdh3w0NMGNvKl+vMwB+G1h7h54/CjfMVi30t42ZvL11JlHkiLvS1orLbKDyrVn lbjOJemdmtqzoyfTlNjQ1CV4QqcGgFPg+51NwDxWyetGpfm7/UUCW74dOZjwv8fV 3B9XWmbtmRltKVJmpog8r1bEKuW5gmrOFFAzqfEUlXdR82e+8Mbk+zGeecRfiHEJ CLbeIfUPt9omqF4WTtcPT0bPwPfjTD+a -----END CERTIFICATE-----Generated at Mon Jul 21 07:21:40 2025 by rpki-client