$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json) Hash identifier: zr7KPVYkKGgw2MNYc5rTnabiAhSD5De4kKh/W0bztaw= Subject key identifier: 6C:37:65:F0:7E:6A:D4:73:33:EC:1E:A9:7D:66:EF:0C:F8:F1:BB:39 Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Certificate serial: 0A7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft Manifest number: 0A65 Signing time: Thu 18 Sep 2025 19:53:23 +0000 Manifest this update: Thu 18 Sep 2025 19:53:23 +0000 Manifest next update: Thu 25 Sep 2025 19:53:23 +0000 Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: 6XPuAatBowpOAIOAOjZURlyqXzBMLO58ymg5kwa56w0=) 2: 57C25DB2E42811EA881AB667C4F9AE02.roa (hash: E9181+VVT+rwNNkc7uINFuNWW6wPgms9gTqr7A850dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2682 (0xa7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Validity Not Before: Sep 18 19:53:23 2025 GMT Not After : Sep 25 19:53:23 2025 GMT Subject: CN=68cc6333-74f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:8f:09:f5:92:52:1c:ce:64:b5:88:70:81: 14:e6:7b:ea:56:ce:25:45:2a:db:89:5d:a2:33:00: 5a:4c:98:1f:5a:6d:a6:af:d1:09:6c:b1:c8:0a:a7: 88:a9:33:1c:0e:86:d6:c4:d2:20:95:61:a2:17:8e: 9c:a5:57:9c:46:52:5b:b4:a6:44:9d:5c:aa:65:fd: 21:74:02:ca:79:9c:91:43:f9:ae:32:2b:aa:42:11: dd:16:7b:e0:55:f8:5c:65:a0:9a:0c:bf:55:e5:c5: 7d:b7:80:85:2e:4c:b5:47:21:5b:d4:d6:d4:ce:cb: c4:3e:fc:1b:ee:58:13:26:5a:c2:fd:5f:2d:cc:02: 16:6a:ea:49:d7:9c:d1:82:7e:13:17:68:cc:15:74: c1:94:cc:40:23:49:bd:b4:2f:1c:77:85:24:bd:c8: c8:42:af:d0:58:d8:b5:b6:ce:da:b3:4d:d3:c2:92: 49:20:69:2d:80:68:8e:e8:49:43:42:15:22:d0:77: 4e:f1:9f:00:cc:7f:b3:bb:55:a6:30:0f:c4:38:69: 0c:a9:17:23:9a:e3:d5:d8:44:aa:48:fa:40:a9:e4: ef:9d:b4:37:6f:27:10:40:47:fd:99:d8:db:35:f2: a5:07:f1:4c:c8:88:b2:47:52:5b:a1:b5:f8:24:f3: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:37:65:F0:7E:6A:D4:73:33:EC:1E:A9:7D:66:EF:0C:F8:F1:BB:39 X509v3 Authority Key Identifier: keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:de:7f:f2:25:ce:d4:fc:8b:19:5e:ff:60:76:7e:25:59:67: df:b6:18:62:16:74:e0:ff:33:2c:c8:89:f5:01:2c:d5:1f:2a: 12:29:7c:c1:a8:73:23:c4:5c:01:d4:16:c7:03:67:ae:da:74: 58:fd:a2:eb:28:42:e6:fd:ce:d9:45:f8:05:eb:a1:2f:05:9a: df:58:05:56:d9:09:5b:a9:a3:99:9c:4a:de:fb:64:8c:89:de: 7b:57:8d:9b:b5:06:43:03:30:dc:c1:a7:c7:5a:b2:7a:f3:36: 2f:e3:dd:4a:79:79:62:62:80:09:e9:39:c1:4c:51:18:c2:40: 7e:2a:1a:25:6d:68:4f:27:cc:e9:46:d1:97:8f:38:1e:0d:8d: 9e:c3:e7:f4:37:df:7d:d1:f0:8f:5a:ca:dd:a1:d7:12:1f:4d: a0:4e:a0:37:f5:0f:82:c2:45:5a:a9:96:45:e6:bc:2a:bd:c4: c4:77:37:df:65:54:95:b3:52:d5:bb:3d:52:48:ca:0a:78:8d: 89:7b:88:17:2e:80:cc:cf:ad:50:dc:40:01:49:42:a2:a1:b6: 0e:4d:c9:62:51:dc:ae:bc:46:40:de:f7:a0:b7:33:b6:4f:18: 17:74:f0:5d:b5:3e:ba:1e:31:f4:f4:5b:48:82:26:10:80:69: c8:cf:8a:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD NkI2NzkzNUEwHhcNMjUwOTE4MTk1MzIzWhcNMjUwOTI1MTk1MzIzWjAYMRYwFAYD VQQDEw02OGNjNjMzMy03NGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAKPCfWSUhzOZLWIcIEU5nvqVs4lRSrbiV2iMwBaTJgfWm2mr9EJbLHICqeI qTMcDobWxNIglWGiF46cpVecRlJbtKZEnVyqZf0hdALKeZyRQ/muMiuqQhHdFnvg VfhcZaCaDL9V5cV9t4CFLky1RyFb1NbUzsvEPvwb7lgTJlrC/V8tzAIWaupJ15zR gn4TF2jMFXTBlMxAI0m9tC8cd4UkvcjIQq/QWNi1ts7as03TwpJJIGktgGiO6ElD QhUi0HdO8Z8AzH+zu1WmMA/EOGkMqRcjmuPV2ESqSPpAqeTvnbQ3bycQQEf9mdjb NfKlB/FMyIiyR1JbobX4JPPLpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGw3ZfB+ atRzM+weqX1m7wz48bs5MB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUFDNy84MUE0QzRENjZFNDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RK RFFXTWRCVXgyTm5HdG5rMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDb3n/yJc7U/IsZXv9gdn4lWWffthhiFnTg/zMsyIn1ASzVHyoSKXzB qHMjxFwB1BbHA2eu2nRY/aLrKELm/c7ZRfgF66EvBZrfWAVW2QlbqaOZnEre+2SM id57V42btQZDAzDcwafHWrJ68zYv491KeXliYoAJ6TnBTFEYwkB+KholbWhPJ8zp RtGXjzgeDY2ew+f0N9990fCPWsrdodcSH02gTqA39Q+CwkVaqZZF5rwqvcTEdzff ZVSVs1LVuz1SSMoKeI2Je4gXLoDMz61Q3EABSUKiobYOTcliUdyuvEZA3vegtzO2 TxgXdPBdtT66HjH09FtIgiYQgGnIz4qh -----END CERTIFICATE-----Generated at Fri Sep 19 02:55:41 2025 by rpki-client