$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json) Hash identifier: VdSogemTWpA7unW2Pcr0h5RXbIRlh60ejWaqNKRZlJQ= Subject key identifier: 79:E9:33:FB:B5:AB:4C:A6:49:C8:72:7E:F1:42:06:86:25:BC:7E:0B Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Certificate serial: 0844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft Manifest number: 083D Signing time: Sat 18 Oct 2025 21:55:50 +0000 Manifest this update: Sat 18 Oct 2025 21:55:49 +0000 Manifest next update: Sat 25 Oct 2025 21:55:49 +0000 Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: zRi3f3GKqQC4chO0nXPMGAdkd6FPwkKi99SPpCzPH2s=) 2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: uoOD9ug4cYWw7XbQbk8d35Oe55TFSJv/qRJ/jB7pYDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2116 (0x844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Validity Not Before: Oct 18 21:55:49 2025 GMT Not After : Oct 25 21:55:49 2025 GMT Subject: CN=68f40ce6-2e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ce:f6:fb:bb:b7:95:19:12:09:14:bb:63:bd: a5:c0:86:49:4a:b2:56:98:42:4c:a6:80:78:a3:f2: 48:9a:20:59:30:98:75:16:f1:28:05:3f:91:f5:76: c5:51:d3:72:51:ef:47:b2:64:78:ce:11:d0:54:fa: d9:e4:f0:d1:76:9b:7d:21:b4:60:3d:73:c2:98:48: 21:6b:a4:ed:07:18:ed:61:b7:87:7a:6e:9c:57:0e: 66:e0:07:87:ee:bc:d6:e2:8c:5a:08:a9:48:60:f6: c2:1b:90:9d:82:68:6c:cd:40:b2:de:aa:89:b1:d7: 07:cd:e3:e8:94:50:bc:ea:4a:a7:f4:9c:0a:65:6a: 03:85:34:33:49:3d:1f:a4:5f:ee:8e:47:c7:66:b0: f1:93:17:89:e9:4b:11:cb:ea:bd:c2:be:9b:69:40: 71:f1:ee:30:51:1b:28:c2:b6:4c:9c:44:d3:97:4c: 2b:cf:fa:9f:4f:91:ad:f8:9d:24:74:0d:17:71:d6: 89:e4:2f:60:56:b3:65:a2:38:08:88:44:94:d2:b3: 6f:75:67:79:98:75:7a:45:49:58:3e:03:3b:bd:27: d5:06:de:04:82:58:0a:19:54:7e:f6:40:27:c5:09: 25:f3:e3:d8:4c:dd:39:c0:79:46:48:ef:05:d6:05: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E9:33:FB:B5:AB:4C:A6:49:C8:72:7E:F1:42:06:86:25:BC:7E:0B X509v3 Authority Key Identifier: keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:e6:4f:90:d8:dd:5b:42:5c:8d:fd:dc:70:f5:ca:1a:93:ec: 6b:5e:7e:c2:50:cd:1f:7b:9b:9b:4f:6c:48:b9:ec:28:99:ae: b6:b4:51:1f:6c:be:46:b0:49:01:32:63:77:af:a4:82:e4:9d: 3f:03:3b:a4:d5:40:a7:75:d2:16:4d:8f:7a:f0:1c:2e:13:97: ee:ca:d4:75:9c:22:d1:12:55:04:33:db:65:45:01:a8:9e:3f: 55:da:a2:99:dc:89:ee:39:69:4e:db:f3:7c:a0:43:77:c9:b5: b0:96:d1:5d:ed:d9:8c:da:21:5d:75:35:45:0f:c4:f6:12:4a: 91:61:2f:8e:ac:35:0e:17:c7:61:18:cd:18:9c:e1:cb:15:40: 59:d9:b8:09:49:dd:45:7d:aa:5e:c6:62:5e:ea:23:fe:94:0b: d8:7c:6c:78:a0:ce:0b:29:4b:5b:f1:b3:d7:3d:6a:c3:bb:97: 3e:a2:62:4a:7d:c8:5a:6e:39:86:c9:9f:70:7a:ef:df:a7:3d: 8b:1a:35:41:cd:6a:33:f8:c4:28:62:14:18:3f:c7:2d:14:35: a8:90:98:01:d0:37:81:15:0d:69:15:03:f2:3c:6a:fc:aa:d7: fe:aa:de:de:b1:da:ed:d4:27:9a:ee:c3:28:b1:58:11:2a:5e: 32:66:3a:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBQUIxMTAvBgNVBAUTKDAwNUZBQUFEMkFFMzBFNzc1MjU2QUZCQkJCMjhCNjI0 OTE3MkFCRTMwHhcNMjUxMDE4MjE1NTQ5WhcNMjUxMDI1MjE1NTQ5WjAYMRYwFAYD VQQDEw02OGY0MGNlNi0yZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8s72+7u3lRkSCRS7Y72lwIZJSrJWmEJMpoB4o/JImiBZMJh1FvEoBT+R9XbF UdNyUe9HsmR4zhHQVPrZ5PDRdpt9IbRgPXPCmEgha6TtBxjtYbeHem6cVw5m4AeH 7rzW4oxaCKlIYPbCG5CdgmhszUCy3qqJsdcHzePolFC86kqn9JwKZWoDhTQzST0f pF/ujkfHZrDxkxeJ6UsRy+q9wr6baUBx8e4wURsowrZMnETTl0wrz/qfT5Gt+J0k dA0XcdaJ5C9gVrNlojgIiESU0rNvdWd5mHV6RUlYPgM7vSfVBt4EglgKGVR+9kAn xQkl8+PYTN05wHlGSO8F1gVZCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnpM/u1 q0ymSchyfvFCBoYlvH4LMB8GA1UdIwQYMBaAFABfqq0q4w53Ulavu7sotiSRcqvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEFBQi8wNUVFMTc5NEUz OEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRuZFNWcS03dXlpMkpKRnlx LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FGLXFyU3JqRG5kU1ZxLTd1eWkySkpGeXEtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEFBQi8wNUVFMTc5NEUzOEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRu ZFNWcS03dXlpMkpKRnlxLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt5k+Q2N1bQlyN/dxw9coak+xrXn7CUM0fe5ubT2xIuewoma62tFEf bL5GsEkBMmN3r6SC5J0/Azuk1UCnddIWTY968BwuE5fuytR1nCLRElUEM9tlRQGo nj9V2qKZ3InuOWlO2/N8oEN3ybWwltFd7dmM2iFddTVFD8T2EkqRYS+OrDUOF8dh GM0YnOHLFUBZ2bgJSd1FfapexmJe6iP+lAvYfGx4oM4LKUtb8bPXPWrDu5c+omJK fchabjmGyZ9weu/fpz2LGjVBzWoz+MQoYhQYP8ctFDWokJgB0DeBFQ1pFQPyPGr8 qtf+qt7esdrt1Cea7sMosVgRKl4yZjoA -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:13 2025 by rpki-client