$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: rWMdlOurjPb0A8yr13NdJ+5zOjWIQHCdpjpzDuAgIUY= Subject key identifier: B4:65:68:7C:C7:2C:6F:35:22:D0:88:7B:F6:20:5F:CE:9F:81:EE:65 Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 02CF Signing time: Sun 19 Oct 2025 03:29:46 +0000 Manifest this update: Sun 19 Oct 2025 03:29:45 +0000 Manifest next update: Sun 26 Oct 2025 03:29:45 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: YEIImPD5TmuoTsy5mal29FpBJpT0k59cvWoSQaHa1r8=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: oyCtMje9lcYf2wr513hrmeca1vFWbCB0GW1U6axyanE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Oct 19 03:29:45 2025 GMT Not After : Oct 26 03:29:45 2025 GMT Subject: CN=68f45b2a-81c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:84:30:b1:a1:f6:9c:61:d4:89:dc:c0:03: 20:52:1b:5c:f8:ed:ad:d2:2f:c5:37:66:6e:42:53: 19:c5:a5:94:da:17:6d:b5:25:7d:f1:f5:ba:43:7c: 4d:6d:5d:a7:69:08:38:58:a9:62:b6:b8:3d:54:64: d6:d4:fd:e7:0a:ef:8a:45:61:27:d6:fc:da:7d:fa: 89:77:9b:0c:98:4d:1f:a3:12:49:ab:92:af:4d:7d: f5:fa:bc:cd:58:00:88:fb:41:3f:9c:d4:55:47:52: ec:7a:71:f4:b3:84:e9:d3:1d:ef:ba:35:91:e0:e0: f0:8e:c1:cd:23:17:d3:9b:76:97:c8:e0:8d:3e:a5: e4:cd:d2:08:ec:10:87:50:de:62:8d:e6:5b:5f:46: bd:55:6f:98:c4:66:b9:bf:b2:c2:44:50:89:64:5e: a5:f1:03:85:06:4f:29:65:54:92:f1:59:ee:db:55: 42:10:d1:15:4b:53:f0:31:d9:ab:76:dc:08:cf:2a: be:14:de:c3:6a:19:78:56:df:5c:29:2a:86:e8:20: bc:7d:f8:c1:f9:1d:68:04:0d:08:e5:7e:4d:e0:d0: 9c:64:71:29:6d:ef:05:fe:b5:89:b6:9c:70:13:24: 8f:95:2a:d3:5e:42:5e:60:e2:3e:71:9b:56:8a:c7: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:65:68:7C:C7:2C:6F:35:22:D0:88:7B:F6:20:5F:CE:9F:81:EE:65 X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:62:e0:9b:18:d7:fa:ac:44:ea:f5:7d:85:82:43:71:0a:4a: 62:af:de:a0:2b:55:9b:78:59:43:04:e1:5a:1d:09:14:69:65: 3e:87:6c:b9:5b:1c:85:a0:0a:13:7a:14:9f:8e:9f:62:b3:34: e5:36:2c:16:f9:d9:44:d5:ba:19:ec:ab:c4:8f:ad:0b:36:6c: 48:f5:8d:96:9a:60:1b:4b:37:7e:e7:b6:2f:cd:12:4b:d2:ca: 28:31:dc:ec:26:f6:41:13:39:55:7e:dd:19:7f:3f:6e:0c:26: ec:d0:87:3a:c7:30:59:08:9d:4e:17:55:62:62:65:bd:6d:ad: 37:8a:01:c9:f9:82:cc:8d:e8:92:d5:7f:8e:9c:9c:6e:49:c5: 30:41:86:dd:26:9b:f7:bd:8e:8d:ab:8e:f3:80:5f:6a:15:ca: dc:ce:6f:41:1f:f2:bc:e5:d5:51:a0:89:8a:bb:f4:98:72:37: 82:00:2d:1b:20:96:cf:88:c6:c8:e3:a1:93:6d:40:53:0c:5b: 08:32:07:f5:c0:eb:09:86:77:6c:f2:73:6c:9e:f3:fa:71:aa: b8:5f:90:63:34:01:92:1f:50:e7:42:29:ae:28:a0:9e:d4:b4: a4:92:97:9a:69:fc:75:2a:97:ba:40:df:d1:8c:da:1c:01:09: 65:ff:b2:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjUxMDE5MDMyOTQ1WhcNMjUxMDI2MDMyOTQ1WjAYMRYwFAYD VQQDEw02OGY0NWIyYS04MWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsz+EMLGh9pxh1IncwAMgUhtc+O2t0i/FN2ZuQlMZxaWU2hdttSV98fW6Q3xN bV2naQg4WKlitrg9VGTW1P3nCu+KRWEn1vzaffqJd5sMmE0foxJJq5KvTX31+rzN WACI+0E/nNRVR1LsenH0s4Tp0x3vujWR4ODwjsHNIxfTm3aXyOCNPqXkzdII7BCH UN5ijeZbX0a9VW+YxGa5v7LCRFCJZF6l8QOFBk8pZVSS8Vnu21VCENEVS1PwMdmr dtwIzyq+FN7Dahl4Vt9cKSqG6CC8ffjB+R1oBA0I5X5N4NCcZHEpbe8F/rWJtpxw EySPlSrTXkJeYOI+cZtWiscQzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRlaHzH LG81ItCIe/YgX86fge5lMB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLYuCbGNf6rETq9X2FgkNxCkpir96gK1WbeFlDBOFaHQkUaWU+h2y5 WxyFoAoTehSfjp9iszTlNiwW+dlE1boZ7KvEj60LNmxI9Y2WmmAbSzd+57YvzRJL 0sooMdzsJvZBEzlVft0Zfz9uDCbs0Ic6xzBZCJ1OF1ViYmW9ba03igHJ+YLMjeiS 1X+OnJxuScUwQYbdJpv3vY6Nq47zgF9qFcrczm9BH/K85dVRoImKu/SYcjeCAC0b IJbPiMbI46GTbUBTDFsIMgf1wOsJhnds8nNsnvP6caq4X5BjNAGSH1DnQimuKKCe 1LSkkpeaafx1Kpe6QN/RjNocAQll/7Ll -----END CERTIFICATE-----Generated at Sun Oct 19 16:28:25 2025 by rpki-client