$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: OwXkSeR43eSNLfv0I/XjUo+TYm9hp4A03mt8LKFIreE= Subject key identifier: EF:8C:B6:D2:0E:D2:CE:E6:B9:3F:23:48:18:2A:AB:18:F1:96:32:19 Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 02B1 Signing time: Thu 21 Aug 2025 01:40:03 +0000 Manifest this update: Thu 21 Aug 2025 01:40:03 +0000 Manifest next update: Thu 28 Aug 2025 01:40:03 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: O/XxFdH9sI2gGQbrmWzXJvmJSYAB9rFLQ3oQIY2yMQY=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: oyCtMje9lcYf2wr513hrmeca1vFWbCB0GW1U6axyanE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Aug 21 01:40:03 2025 GMT Not After : Aug 28 01:40:03 2025 GMT Subject: CN=68a678f3-f536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:8c:06:62:94:ec:71:0b:11:ff:14:ab:44: e4:5f:4e:0a:05:a6:60:28:73:ef:c0:70:88:ec:d8: f5:bf:ff:15:ff:01:52:1a:35:46:73:e5:36:26:94: 62:f9:56:b4:71:40:82:06:38:fa:a4:d5:78:24:65: 32:c5:b4:a4:66:d5:f9:4d:cc:05:7a:51:25:54:ea: 3d:ce:c4:f3:4c:03:8c:59:01:9e:cf:bb:1c:e3:76: 77:f0:5d:4e:da:19:2e:20:b4:9c:bd:0b:7f:24:59: 4f:5f:ae:36:b9:85:2f:1e:ae:5a:69:b7:ce:cd:42: b3:15:e6:c4:e6:d0:7a:50:32:d7:26:0e:ad:4b:22: 24:5f:84:55:2f:82:b0:e2:4e:1e:c7:11:82:61:d1: 3a:cc:af:8e:c7:d9:6a:04:7b:2f:60:c9:b0:ba:f1: ad:ef:1b:77:1c:f1:bd:66:7d:67:02:21:5d:20:fc: e7:1b:95:21:38:e3:9f:e3:10:65:25:01:9a:68:d3: ff:2a:5c:73:ca:14:9e:c0:ad:19:13:3b:22:14:24: 73:b5:c9:d8:3e:f3:2b:b7:9e:fa:ed:e5:c6:12:5b: 72:8b:0b:e6:50:b7:fb:bf:bd:6b:16:70:0a:e9:9c: ec:0b:17:1c:39:94:d2:cf:d1:6f:36:03:d3:d6:50: 63:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8C:B6:D2:0E:D2:CE:E6:B9:3F:23:48:18:2A:AB:18:F1:96:32:19 X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:cc:ad:8f:06:39:63:93:a3:64:20:26:86:b5:f6:68:fb:ec: da:64:ab:4a:42:e1:99:cd:bb:cf:f0:5b:4f:9a:ff:f3:2d:98: ea:e0:6f:78:e5:e0:f6:e2:01:2b:b5:7d:95:8b:63:0c:fc:f8: 2b:da:4b:f2:c6:5b:b2:f7:ae:24:4a:6c:ea:4d:24:34:18:01: d2:cc:f0:be:67:2b:93:a6:d4:57:8a:5a:b4:95:c4:14:41:a3: 2e:58:d0:bb:d6:c3:1f:f1:21:31:ec:80:2a:72:83:87:a4:5c: 32:7a:2b:b5:65:ba:00:08:76:09:25:e2:03:ff:23:2a:a9:68: 2c:f8:75:ee:ed:e0:b0:60:df:41:ee:48:77:4b:4d:b9:5b:48: e0:2a:c8:52:ae:39:86:36:30:0c:3b:b5:2c:57:5a:9d:04:d3: 0b:74:0d:1b:8f:aa:50:28:5e:6e:99:77:ea:5a:bc:94:d2:cd: 8d:cd:5f:4a:6e:39:dd:ee:f3:7a:ef:3d:c7:40:9e:df:05:0b: c5:d4:32:39:8f:90:ee:15:38:65:9a:fc:93:81:6b:81:54:78: b5:a1:75:bd:20:ec:c9:20:cc:9d:80:fb:25:94:45:44:78:d4: 23:5f:5b:c5:13:21:b8:1b:5f:cb:90:a9:93:2d:13:06:bd:41: 40:a4:a8:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjUwODIxMDE0MDAzWhcNMjUwODI4MDE0MDAzWjAYMRYwFAYD VQQDEw02OGE2NzhmMy1mNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKyMBmKU7HELEf8Uq0TkX04KBaZgKHPvwHCI7Nj1v/8V/wFSGjVGc+U2JpRi +Va0cUCCBjj6pNV4JGUyxbSkZtX5TcwFelElVOo9zsTzTAOMWQGez7sc43Z38F1O 2hkuILScvQt/JFlPX642uYUvHq5aabfOzUKzFebE5tB6UDLXJg6tSyIkX4RVL4Kw 4k4exxGCYdE6zK+Ox9lqBHsvYMmwuvGt7xt3HPG9Zn1nAiFdIPznG5UhOOOf4xBl JQGaaNP/KlxzyhSewK0ZEzsiFCRztcnYPvMrt5767eXGEltyiwvmULf7v71rFnAK 6ZzsCxccOZTSz9FvNgPT1lBjDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+MttIO 0s7muT8jSBgqqxjxljIZMB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUzK2PBjljk6NkICaGtfZo++zaZKtKQuGZzbvP8FtPmv/zLZjq4G94 5eD24gErtX2Vi2MM/Pgr2kvyxluy964kSmzqTSQ0GAHSzPC+ZyuTptRXilq0lcQU QaMuWNC71sMf8SEx7IAqcoOHpFwyeiu1ZboACHYJJeID/yMqqWgs+HXu7eCwYN9B 7kh3S025W0jgKshSrjmGNjAMO7UsV1qdBNMLdA0bj6pQKF5umXfqWryU0s2NzV9K bjnd7vN67z3HQJ7fBQvF1DI5j5DuFThlmvyTgWuBVHi1oXW9IOzJIMydgPsllEVE eNQjX1vFEyG4G1/LkKmTLRMGvUFApKjT -----END CERTIFICATE-----Generated at Thu Aug 21 07:23:16 2025 by rpki-client