$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json) Hash identifier: 1uTRfM90efKcQTyrXNmYv+NhFmvaD+P4h2ZXIcALXc0= Subject key identifier: 4B:A3:79:EE:34:5D:79:37:B7:76:C2:9C:31:71:B9:D0:7D:2F:68:97 Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft Manifest number: 1E Signing time: Tue 09 Sep 2025 08:03:25 +0000 Manifest this update: Tue 09 Sep 2025 08:03:25 +0000 Manifest next update: Tue 16 Sep 2025 08:03:25 +0000 Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: 4B+lzMy3L2RaIa8ZCbkaOa7sqozs4oLUJta+wN3dZYg=) 2: D2B93B4C638211F087594469C4F9AE02.roa (hash: Pu8GeUQM5zPY/klLoi38DXyDw9LChnXWL5CaLmbea3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 08:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Validity Not Before: Sep 9 08:03:25 2025 GMT Not After : Sep 16 08:03:25 2025 GMT Subject: CN=68bfdf4d-8823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1d:62:7c:72:09:8e:90:b4:d3:63:92:8e:03: 24:8e:02:1a:94:af:5e:89:47:51:64:93:26:71:08: 3a:0e:fd:bd:e3:7c:16:2d:41:ed:1c:7c:7c:f5:bd: a7:2b:61:ef:ba:c5:27:84:4f:e8:6f:9b:8d:7b:d5: 65:b2:14:3d:c3:7c:c7:b5:f8:1e:98:2e:bc:9f:d1: 7f:ed:28:7c:c5:06:3d:cd:9a:04:6d:53:43:a1:e0: a2:cc:56:69:a7:50:15:22:0f:32:cf:7d:60:8e:85: ca:bd:d6:62:d3:a7:b7:62:77:a1:14:95:09:79:2d: 53:df:d5:4a:bd:c8:c7:75:88:59:1e:41:5e:bc:ae: 9d:ec:9f:fa:39:9a:d2:93:f4:a6:af:c2:bd:bd:ae: 59:27:ee:ba:da:65:e2:0d:5d:23:e8:19:7c:2b:97: 3c:ac:d5:2b:7f:60:77:0c:da:33:fa:63:0e:24:be: df:22:ce:31:31:ca:42:a9:df:0f:fd:ec:cb:88:85: 97:72:a0:8a:bd:38:30:37:c8:3f:ce:54:bf:94:13: e9:c4:7b:80:13:cc:68:01:62:c5:d9:e8:83:3e:38: ba:b1:5f:fd:01:f8:58:91:a2:04:fd:ff:04:a5:54: 5b:1a:ff:fa:d5:3d:4e:e5:a0:37:bd:bf:a3:07:9b: 84:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A3:79:EE:34:5D:79:37:B7:76:C2:9C:31:71:B9:D0:7D:2F:68:97 X509v3 Authority Key Identifier: keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:57:00:89:37:4c:57:55:a1:cf:0e:86:5b:c4:87:84:d3:bc: 6d:df:66:89:3e:d4:6b:20:dd:8f:a1:a5:36:0e:48:27:00:68: cb:5c:ad:0a:98:63:36:aa:04:d9:4b:40:8e:3d:7c:c4:db:61: 22:4c:e4:7b:bb:87:b4:9a:d6:9b:63:20:c3:ce:4f:62:d0:a6: 83:d3:aa:c8:66:32:7b:bf:50:23:71:38:16:58:f9:00:b2:a2: 18:ff:7a:25:01:ed:25:e9:c4:0b:e3:cb:26:01:e3:cb:d5:7f: fa:cf:cc:b4:98:a7:ff:1c:1c:d0:96:ba:27:7a:6f:96:d0:e2: e3:97:40:e1:e6:63:af:b2:e1:2c:cd:e6:de:34:da:0b:29:19: 0e:c7:9c:04:cc:41:01:6b:5a:ad:0f:00:5e:32:b7:bb:2c:07: d8:fb:d2:f5:33:6e:87:68:a5:bc:eb:10:bf:62:3a:68:f6:fe: bc:62:60:24:e1:00:a2:17:6c:69:af:c7:81:b6:28:86:74:de: 83:c6:fd:ba:91:51:3a:23:dd:34:b3:7a:d9:22:31:c0:ee:f3: f1:2c:49:67:ce:20:0a:27:44:27:7f:00:a8:0c:86:94:98:77: a5:5e:f7:15:81:75:bf:64:a2:b1:0c:36:ee:df:68:9b:ec:6f: 43:40:fd:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoNkE0OTdFRUQ1RjRGRTJDMTUxNjRERDJEMDdGQzRERDUy QkNFODkyMTAeFw0yNTA5MDkwODAzMjVaFw0yNTA5MTYwODAzMjVaMBgxFjAUBgNV BAMTDTY4YmZkZjRkLTg4MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyHWJ8cgmOkLTTY5KOAySOAhqUr16JR1FkkyZxCDoO/b3jfBYtQe0cfHz1vacr Ye+6xSeET+hvm4171WWyFD3DfMe1+B6YLryf0X/tKHzFBj3NmgRtU0Oh4KLMVmmn UBUiDzLPfWCOhcq91mLTp7did6EUlQl5LVPf1Uq9yMd1iFkeQV68rp3sn/o5mtKT 9Kavwr29rlkn7rraZeINXSPoGXwrlzys1St/YHcM2jP6Yw4kvt8izjExykKp3w/9 7MuIhZdyoIq9ODA3yD/OVL+UE+nEe4ATzGgBYsXZ6IM+OLqxX/0B+FiRogT9/wSl VFsa//rVPU7loDe9v6MHm4RbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS6N57jRd eTe3dsKcMXG50H0vaJcwHwYDVR0jBBgwFoAUakl+7V9P4sFRZN0tB/xN1SvOiSEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzZBRkJFNDRDNjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lT RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWtsLTdWOVA0c0ZSWk4wdEJfeE4xU3ZPaVNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzZBRkJFNDRDNjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNG UlpOMHRCX3hOMVN2T2lTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADVXAIk3TFdVoc8OhlvEh4TTvG3fZok+1Gsg3Y+hpTYOSCcAaMtcrQqY YzaqBNlLQI49fMTbYSJM5Hu7h7Sa1ptjIMPOT2LQpoPTqshmMnu/UCNxOBZY+QCy ohj/eiUB7SXpxAvjyyYB48vVf/rPzLSYp/8cHNCWuid6b5bQ4uOXQOHmY6+y4SzN 5t402gspGQ7HnATMQQFrWq0PAF4yt7ssB9j70vUzbodopbzrEL9iOmj2/rxiYCTh AKIXbGmvx4G2KIZ03oPG/bqRUToj3TSzetkiMcDu8/EsSWfOIAonRCd/AKgMhpSY d6Ve9xWBdb9korEMNu7faJvsb0NA/e0= -----END CERTIFICATE-----Generated at Tue Sep 9 17:26:37 2025 by rpki-client