$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: iRp8n2K1XlGvDzvp6hiUY1ogfvvWd6WLIvQt8QRWL08= Subject key identifier: BA:C4:E8:3A:71:A5:E6:12:16:C7:8D:01:C4:32:D1:73:52:11:CE:97 Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 0373 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 036F Signing time: Fri 05 Sep 2025 01:12:27 +0000 Manifest this update: Fri 05 Sep 2025 01:12:27 +0000 Manifest next update: Fri 12 Sep 2025 01:12:27 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: lrdvvcUkHApjhv7col4uMu83Ja/NdIidC4VTyAqA1AM=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: 9lR4wMfGIYGiHedS31WLLXrhF347dnFxO3kCajEDmqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: Sep 5 01:12:27 2025 GMT Not After : Sep 12 01:12:27 2025 GMT Subject: CN=68ba38fb-b854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:4b:95:8a:6c:5d:4e:f1:77:5c:6f:94:ab: 19:47:b5:38:af:30:03:9d:a2:0d:f0:8c:8f:aa:7c: f6:b7:70:f8:07:c0:76:e2:19:fb:95:0a:14:3c:5e: 9f:9b:08:8c:75:24:20:43:2e:95:17:e6:8c:a7:94: 3e:3d:9c:8f:30:66:31:7c:1d:9b:df:00:5a:44:09: cd:03:bc:18:c1:d4:32:59:00:5d:cc:24:39:f8:e5: ba:32:aa:0a:4d:6f:c3:30:8a:a6:ee:03:3d:02:c2: 19:a3:27:50:29:f7:a8:d5:cd:63:c3:04:bc:82:f4: 1c:33:bb:55:6e:c4:b4:f5:37:b9:5e:6b:f2:86:21: ca:f5:58:97:af:db:df:db:90:e6:17:1f:28:15:93: 47:2a:a9:15:3b:3c:7f:c5:a0:ea:81:16:0a:1d:64: 77:ce:e8:0b:aa:7b:02:a6:54:9b:36:ad:37:de:d8: 02:a7:99:e6:60:16:47:da:18:15:a9:c8:8c:e6:33: dd:58:cb:23:7c:14:33:f1:33:ca:26:0f:54:2e:f5: c8:03:04:1d:60:24:3f:d5:61:38:8a:2c:16:f3:7f: b8:b4:62:3c:3e:23:33:52:70:6e:32:f3:e9:32:fc: 26:23:95:fe:38:f5:e8:10:ff:5e:15:1c:2b:5b:12: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C4:E8:3A:71:A5:E6:12:16:C7:8D:01:C4:32:D1:73:52:11:CE:97 X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:80:fa:e9:aa:fb:1a:22:d2:06:6b:a0:80:cb:16:df:14:0a: 09:1f:be:0e:2b:e4:8c:0d:6e:27:c1:42:cd:da:ed:9a:99:06: 6c:c7:9f:c4:2c:91:3b:43:73:16:e9:cb:e0:c9:42:c5:2e:b3: a3:7b:4d:0f:b2:db:a2:2b:d7:cb:ef:c2:a1:9c:e6:c4:e9:0b: fb:a1:b7:0c:44:a7:be:3f:4c:f2:3c:52:c1:f1:80:44:78:9f: a8:d9:9a:4a:5f:ac:56:30:6e:5e:11:18:43:c0:c8:51:4b:8c: fb:ac:99:ee:89:20:f4:d4:74:0c:db:ce:2e:b0:14:fb:66:c7: 45:a1:56:95:2f:a1:96:b0:59:d2:64:ae:28:cb:b8:e6:a2:f7: 6b:ce:a3:c1:cc:df:40:66:b0:cf:63:06:52:42:e0:d7:42:41: 90:a4:a9:2e:82:83:e5:d9:71:e3:f3:13:aa:4f:e0:ac:36:d0: be:5c:09:02:8d:01:f3:36:6d:c7:48:7a:cd:d8:d8:6b:bd:aa: 26:07:84:d0:83:2f:b8:d6:d4:60:02:ab:2c:d2:77:31:86:1a: 83:e2:c5:2c:b8:c7:1f:71:b1:dc:49:7f:bc:4e:69:bb:90:15: ba:6c:b7:9f:8f:ec:23:54:b9:f9:bf:be:03:a2:a9:08:a0:4d: 2f:30:cc:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjUwOTA1MDExMjI3WhcNMjUwOTEyMDExMjI3WjAYMRYwFAYD VQQDEw02OGJhMzhmYi1iODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9dLlYpsXU7xd1xvlKsZR7U4rzADnaIN8IyPqnz2t3D4B8B24hn7lQoUPF6f mwiMdSQgQy6VF+aMp5Q+PZyPMGYxfB2b3wBaRAnNA7wYwdQyWQBdzCQ5+OW6MqoK TW/DMIqm7gM9AsIZoydQKfeo1c1jwwS8gvQcM7tVbsS09Te5XmvyhiHK9ViXr9vf 25DmFx8oFZNHKqkVOzx/xaDqgRYKHWR3zugLqnsCplSbNq033tgCp5nmYBZH2hgV qciM5jPdWMsjfBQz8TPKJg9ULvXIAwQdYCQ/1WE4iiwW83+4tGI8PiMzUnBuMvPp MvwmI5X+OPXoEP9eFRwrWxK7XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrE6Dpx peYSFseNAcQy0XNSEc6XMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmgPrpqvsaItIGa6CAyxbfFAoJH74OK+SMDW4nwULN2u2amQZsx5/E LJE7Q3MW6cvgyULFLrOje00PstuiK9fL78KhnObE6Qv7obcMRKe+P0zyPFLB8YBE eJ+o2ZpKX6xWMG5eERhDwMhRS4z7rJnuiSD01HQM284usBT7ZsdFoVaVL6GWsFnS ZK4oy7jmovdrzqPBzN9AZrDPYwZSQuDXQkGQpKkugoPl2XHj8xOqT+CsNtC+XAkC jQHzNm3HSHrN2NhrvaomB4TQgy+41tRgAqss0ncxhhqD4sUsuMcfcbHcSX+8Tmm7 kBW6bLefj+wjVLn5v74DoqkIoE0vMMxh -----END CERTIFICATE-----Generated at Sat Sep 6 13:48:16 2025 by rpki-client