$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: 3u/kAjPt2QYDQtafES5U0b/I7gOLEeT4srCpWOnD3Jo= Subject key identifier: C4:A1:58:96:53:DE:1F:C3:6A:18:B7:72:0B:F7:CC:E4:F3:25:87:3F Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 42 Signing time: Sat 23 Aug 2025 07:41:14 +0000 Manifest this update: Sat 23 Aug 2025 07:41:14 +0000 Manifest next update: Sat 30 Aug 2025 07:41:14 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: VUUTeePnmcnGZ3k+Na3DDyxsjOcBFED3WKPM+Rv1PjM=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Aug 23 07:41:14 2025 GMT Not After : Aug 30 07:41:14 2025 GMT Subject: CN=68a9709a-340e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1a:fd:3e:5f:80:db:66:39:8b:26:24:db:c4: d2:a9:64:61:92:7f:d2:34:f7:13:17:4e:6b:11:ad: 1f:2e:82:02:de:a4:1d:77:68:4a:f4:71:81:28:a2: 67:a0:45:0e:07:f5:d2:75:e7:72:f8:a8:ac:13:8b: 81:e4:bc:56:6f:3f:f3:5f:32:d6:44:84:d2:1f:1f: 04:f8:a4:40:22:2b:ca:ae:c8:ef:e6:26:43:68:f9: 88:c7:58:e4:cd:e2:5b:eb:e7:18:76:55:ea:28:a6: 6e:48:33:27:bc:c5:c2:f9:e2:54:0e:20:fd:03:8b: 02:7e:0c:16:9f:ff:0e:ba:3a:d0:d1:e9:25:c0:82: ae:f0:a2:6b:cd:13:65:1b:50:6b:0c:6f:e5:c8:9f: e2:59:6d:24:1b:0c:54:1e:32:3f:37:8f:a3:15:66: e5:a5:56:56:a3:38:d8:fe:38:4c:61:27:4a:94:8e: 19:11:44:18:8c:59:35:ed:33:e8:7d:3d:01:32:2e: 11:bb:8c:ac:ce:a4:7f:ba:a6:4e:89:d1:f5:c0:f1: 5a:12:e6:9a:38:b9:05:67:df:41:76:2e:77:d4:2b: 08:30:f6:9d:62:1d:79:8a:58:13:68:02:1e:c0:9d: 4e:f6:56:a6:2e:b9:ea:1b:98:e5:6e:56:09:72:40: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A1:58:96:53:DE:1F:C3:6A:18:B7:72:0B:F7:CC:E4:F3:25:87:3F X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:af:89:aa:fc:25:27:d0:3a:30:e5:1b:8c:21:1e:2d:93:75: b7:42:f7:c5:65:9c:cb:bb:78:d4:ce:39:5e:fd:a5:36:42:6c: 4a:ab:12:1e:da:8d:db:1f:79:bb:18:5a:ca:bd:c7:db:23:73: d7:b7:84:2e:f5:4a:3d:04:0c:e7:ea:1f:49:38:6e:e0:0a:4c: 62:a4:9a:36:2c:9e:d9:5d:b5:4e:8a:60:f7:69:65:cb:a9:16: 8a:2b:d1:f4:b6:d3:f6:a5:72:56:4b:9e:47:3a:64:9a:88:89: 49:06:c0:32:df:46:5d:c3:9e:e9:e2:b2:9e:cb:7c:be:88:e0: b3:c8:24:7d:46:90:0f:9f:cb:f5:58:4b:b5:f2:a8:31:98:e7: 7d:4e:0f:0b:1c:f8:19:05:99:a7:f8:58:1c:97:0e:12:20:1d: 4e:60:9b:0b:2a:1b:48:b7:21:e3:74:06:d4:ea:a0:a8:d6:1d: 9a:f2:e4:66:30:b2:16:32:22:52:7f:80:2f:5e:9c:56:8d:d9: 48:4b:ea:64:78:a0:10:7e:22:41:4a:9d:aa:02:f7:f1:5f:1c: 7d:c0:64:bd:bd:fd:e7:a5:0c:08:9f:b6:37:a8:78:06:63:97: cc:ed:7e:7a:3e:5c:d5:aa:18:b9:df:bb:2c:a9:b2:8b:06:87: 84:7d:06:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTA4MjMwNzQxMTRaFw0yNTA4MzAwNzQxMTRaMBgxFjAUBgNV BAMTDTY4YTk3MDlhLTM0MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiGv0+X4DbZjmLJiTbxNKpZGGSf9I09xMXTmsRrR8uggLepB13aEr0cYEoomeg RQ4H9dJ153L4qKwTi4HkvFZvP/NfMtZEhNIfHwT4pEAiK8quyO/mJkNo+YjHWOTN 4lvr5xh2Veoopm5IMye8xcL54lQOIP0DiwJ+DBaf/w66OtDR6SXAgq7womvNE2Ub UGsMb+XIn+JZbSQbDFQeMj83j6MVZuWlVlajONj+OExhJ0qUjhkRRBiMWTXtM+h9 PQEyLhG7jKzOpH+6pk6J0fXA8VoS5po4uQVn30F2LnfUKwgw9p1iHXmKWBNoAh7A nU72VqYuueobmOVuVglyQHJ1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxKFYllPe H8NqGLdyC/fM5PMlhz8wHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABSviar8JSfQOjDlG4whHi2TdbdC98VlnMu7eNTOOV79pTZCbEqrEh7a jdsfebsYWsq9x9sjc9e3hC71Sj0EDOfqH0k4buAKTGKkmjYsntldtU6KYPdpZcup Foor0fS20/alclZLnkc6ZJqIiUkGwDLfRl3Dnunisp7LfL6I4LPIJH1GkA+fy/VY S7XyqDGY531ODwsc+BkFmaf4WByXDhIgHU5gmwsqG0i3IeN0BtTqoKjWHZry5GYw shYyIlJ/gC9enFaN2UhL6mR4oBB+IkFKnaoC9/FfHH3AZL29/eelDAiftjeoeAZj l8ztfno+XNWqGLnfuyypsosGh4R9Bl4= -----END CERTIFICATE-----Generated at Sat Aug 23 17:02:53 2025 by rpki-client