$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft File: akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json) Hash identifier: 7SIwPWGMoQvqR6IPyp3lapNaqRWTsV9WsaPf8gzgrbc= Subject key identifier: 6F:D6:49:10:8A:C2:90:74:61:34:5E:FA:71:90:AA:0E:B9:A1:4E:94 Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Certificate serial: 08A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft Manifest number: 088E Signing time: Sat 06 Sep 2025 20:51:45 +0000 Manifest this update: Sat 06 Sep 2025 20:51:45 +0000 Manifest next update: Sat 13 Sep 2025 20:51:45 +0000 Files and hashes: 1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: fY7tSe611UVZTRSx2d34cD97/8X5nY/CEm8qEz1CMbw=) 2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: IEwu4/gA3UIvhwDT2AUjwIos0wFKYYY+JWkqYTbzbDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Validity Not Before: Sep 6 20:51:45 2025 GMT Not After : Sep 13 20:51:45 2025 GMT Subject: CN=68bc9ee1-bcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:48:8e:3f:24:6e:04:f8:b4:28:f0:22:a5:59: 3f:f4:ff:8c:45:3e:bd:1e:1b:2b:f3:b1:72:d5:f3: 19:1b:57:ea:f0:64:d5:97:b3:47:ab:b8:99:b5:f6: 0b:9d:a6:8c:cf:55:3a:58:d9:d1:26:5b:a3:47:dd: 34:48:22:cf:a2:8c:19:31:c6:47:79:73:ab:4c:fd: f6:64:c9:fb:e1:81:df:c0:b3:a2:07:01:c0:29:5a: 07:4f:43:3c:58:ae:29:56:3f:6f:0a:93:1c:86:b9: 25:59:ea:e0:6a:9e:9e:71:f5:22:b3:4f:f3:5b:a6: 77:c4:89:2e:3c:d6:b0:44:d6:2d:f4:e2:0c:77:3c: 8d:8c:5e:74:8d:d1:26:4e:de:cb:47:27:34:e8:d0: d2:8e:37:6f:46:aa:8d:4a:4c:d8:ce:66:8a:b7:53: b2:66:20:ea:90:c3:4e:41:2f:88:e1:6f:de:7e:c4: a3:a0:c6:a8:f9:b0:24:2f:d1:e2:a8:9b:b1:2a:cb: 34:78:47:10:20:4d:9b:b6:42:18:e0:45:40:f3:13: e7:3e:6d:0b:57:9c:00:b4:fa:19:b6:03:6c:cc:2f: b3:4b:7a:eb:a3:38:17:73:9d:fa:19:0e:bc:bd:4a: 55:9a:f2:e3:d6:68:fd:0b:42:f5:79:61:79:31:76: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D6:49:10:8A:C2:90:74:61:34:5E:FA:71:90:AA:0E:B9:A1:4E:94 X509v3 Authority Key Identifier: keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:37:59:90:43:4a:f5:00:7e:ab:cf:95:98:81:83:94:9a:06: b9:35:b4:5b:1c:c5:8d:d8:8e:c5:07:9a:27:62:07:34:9d:4c: 3a:2f:43:91:33:10:2a:e4:dd:40:87:78:c4:d4:a9:95:0a:c7: 96:ce:d7:90:2a:a0:31:99:c6:e0:89:d3:0c:90:86:7b:bd:d2: 4c:90:81:3d:de:2d:90:24:61:d5:5c:ee:b5:ca:6d:69:d8:10: b4:89:88:6e:75:32:05:20:15:e4:ff:aa:5d:e4:0e:10:e8:b6: 9a:af:2d:7a:56:a8:be:d3:e3:dc:fa:48:5d:8b:f3:7c:0b:29: b7:ee:76:ab:68:a0:93:30:bf:6f:5a:d6:1e:2e:4b:7a:ae:9e: 70:fa:64:9a:ef:01:15:48:52:83:f5:81:0d:09:16:5a:d2:31: 63:8e:8a:f3:a9:a3:79:45:6d:0f:3c:26:d6:2b:ca:b0:6e:e4: e8:ad:e1:96:ea:3b:c1:0a:3b:00:26:3a:72:2d:84:21:03:ac: 04:38:c0:9c:7b:e3:2f:08:75:ec:8b:bf:06:21:f3:db:59:08: fa:cd:51:d3:da:10:4f:62:1f:94:32:82:2f:ae:f5:9d:3c:4f: a9:95:ba:eb:15:8c:01:91:28:17:df:51:9b:8d:0e:c2:7c:d6: 36:b5:fe:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2 NUIxQTJEQUQwHhcNMjUwOTA2MjA1MTQ1WhcNMjUwOTEzMjA1MTQ1WjAYMRYwFAYD VQQDEw02OGJjOWVlMS1iY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10iOPyRuBPi0KPAipVk/9P+MRT69Hhsr87Fy1fMZG1fq8GTVl7NHq7iZtfYL naaMz1U6WNnRJlujR900SCLPoowZMcZHeXOrTP32ZMn74YHfwLOiBwHAKVoHT0M8 WK4pVj9vCpMchrklWergap6ecfUis0/zW6Z3xIkuPNawRNYt9OIMdzyNjF50jdEm Tt7LRyc06NDSjjdvRqqNSkzYzmaKt1OyZiDqkMNOQS+I4W/efsSjoMao+bAkL9Hi qJuxKss0eEcQIE2btkIY4EVA8xPnPm0LV5wAtPoZtgNszC+zS3rrozgXc536GQ68 vUpVmvLj1mj9C0L1eWF5MXZzfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/WSRCK wpB0YTRe+nGQqg65oU6UMB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUE2QS82MkJFMEFDNkNFOUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6 dW9VTE82SVVLV3Rsc2FMYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIN1mQQ0r1AH6rz5WYgYOUmga5NbRbHMWN2I7FB5onYgc0nUw6L0OR MxAq5N1Ah3jE1KmVCseWzteQKqAxmcbgidMMkIZ7vdJMkIE93i2QJGHVXO61ym1p 2BC0iYhudTIFIBXk/6pd5A4Q6Laary16Vqi+0+Pc+khdi/N8Cym37naraKCTML9v WtYeLkt6rp5w+mSa7wEVSFKD9YENCRZa0jFjjorzqaN5RW0PPCbWK8qwbuToreGW 6jvBCjsAJjpyLYQhA6wEOMCce+MvCHXsi78GIfPbWQj6zVHT2hBPYh+UMoIvrvWd PE+plbrrFYwBkSgX31GbjQ7CfNY2tf6T -----END CERTIFICATE-----Generated at Mon Sep 8 14:41:26 2025 by rpki-client