$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: 3prTz5AoHhiyl5IuHNqE6NuziB9o4L2BPvxwNCgvrDA= Subject key identifier: A6:D1:C0:11:60:46:3F:73:0B:84:1E:34:C1:F0:D6:DB:2C:91:81:4F Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 5F Signing time: Sun 19 Oct 2025 10:27:56 +0000 Manifest this update: Sun 19 Oct 2025 10:27:55 +0000 Manifest next update: Sun 26 Oct 2025 10:27:55 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: vNq1q9bjfTp/bvHzGFMiIL75SVWmMAI0vMQT5r+K0ZA=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Oct 19 10:27:55 2025 GMT Not After : Oct 26 10:27:55 2025 GMT Subject: CN=68f4bd2c-e6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:c4:79:5f:e6:07:f6:f1:21:45:4f:91:d8: 21:f7:c3:99:bf:a6:ff:82:94:20:5e:76:e6:40:6e: 7f:d2:f3:f2:a7:be:ea:a5:99:70:e0:38:85:1d:f8: b1:1b:2e:c0:15:31:0f:e8:32:b8:d2:55:06:39:bc: 79:ed:f8:01:41:de:02:dd:31:d2:fa:35:8c:7d:e3: 3d:d9:71:ea:79:f0:08:85:27:f0:e9:63:fb:17:1a: 91:38:4a:57:ed:5f:33:c1:da:4d:7c:83:35:5e:0a: ad:6d:2c:d0:1c:bd:e2:10:b7:31:a8:bf:a8:87:db: 98:c9:77:a9:08:64:ef:d4:a8:4a:66:09:a4:ba:20: a1:31:66:92:56:24:c0:c0:4b:cd:60:ba:75:84:33: 9b:95:f6:6c:27:2c:c2:35:e7:0e:03:45:e7:58:81: 9a:33:d8:de:38:95:9f:64:25:6f:d3:80:05:4a:fa: 9f:ac:a5:42:b2:f9:88:4c:12:e7:42:58:b1:51:f0: 74:f1:31:64:19:9d:d5:e8:7f:72:d5:2c:9f:b2:c0: 1f:6c:c0:e7:d5:67:1f:e2:60:13:84:3c:52:0d:d9: 1e:d9:ed:fc:6c:d5:6f:01:bc:63:6a:54:a7:d4:45: 7f:8a:97:dc:15:d6:77:d8:b6:3a:58:20:da:7b:6d: bb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D1:C0:11:60:46:3F:73:0B:84:1E:34:C1:F0:D6:DB:2C:91:81:4F X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:12:e5:74:c7:8d:2d:bc:9c:0c:13:28:09:8d:38:26:ed:1e: 9b:08:71:f9:2c:c9:5c:bd:c1:59:de:23:19:48:93:c5:70:a2: 29:ef:4f:7f:f0:7a:a8:b5:7c:82:de:c8:c4:53:18:13:2c:73: 65:55:23:47:05:48:15:10:34:6e:04:db:43:26:c7:35:c4:05: 01:dd:81:19:a7:d7:d3:b0:0e:12:78:3c:8a:43:7b:d1:ab:35: fd:3b:f8:df:ba:eb:a2:61:57:fc:6b:00:c4:8d:8a:82:72:43: b4:89:44:11:40:6c:b8:fb:ba:25:0f:8c:17:96:d2:82:2e:c4: df:73:de:61:7e:b6:5d:6c:d2:75:3d:43:d4:38:39:3b:3c:57: a6:5d:a5:b6:8b:e4:cc:d7:e2:e0:82:0b:53:61:44:6f:c4:81: 2b:b0:73:23:86:59:24:2e:db:25:e7:1d:40:09:64:c0:8a:c7: 32:09:f9:be:d2:bd:98:d0:da:67:08:db:3e:f8:47:61:76:00: 23:fd:ee:eb:75:c0:2e:4d:a8:b8:59:8a:71:27:b6:cb:1b:51: ce:b0:5e:3c:2d:1d:14:e9:00:d6:dd:04:53:4b:53:96:fa:aa: 1a:80:a9:d2:51:46:e8:82:1d:07:13:e8:cc:d0:10:c0:fe:3e: 01:f0:b3:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTEwMTkxMDI3NTVaFw0yNTEwMjYxMDI3NTVaMBgxFjAUBgNV BAMTDTY4ZjRiZDJjLWU2ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnfMR5X+YH9vEhRU+R2CH3w5m/pv+ClCBeduZAbn/S8/KnvuqlmXDgOIUd+LEb LsAVMQ/oMrjSVQY5vHnt+AFB3gLdMdL6NYx94z3Zcep58AiFJ/DpY/sXGpE4Slft XzPB2k18gzVeCq1tLNAcveIQtzGov6iH25jJd6kIZO/UqEpmCaS6IKExZpJWJMDA S81gunWEM5uV9mwnLMI15w4DRedYgZoz2N44lZ9kJW/TgAVK+p+spUKy+YhMEudC WLFR8HTxMWQZndXof3LVLJ+ywB9swOfVZx/iYBOEPFIN2R7Z7fxs1W8BvGNqVKfU RX+Kl9wV1nfYtjpYINp7bbubAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUptHAEWBG P3MLhB40wfDW2yyRgU8wHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJQS5XTHjS28nAwTKAmNOCbtHpsIcfksyVy9wVneIxlIk8VwoinvT3/w eqi1fILeyMRTGBMsc2VVI0cFSBUQNG4E20MmxzXEBQHdgRmn19OwDhJ4PIpDe9Gr Nf07+N+666JhV/xrAMSNioJyQ7SJRBFAbLj7uiUPjBeW0oIuxN9z3mF+tl1s0nU9 Q9Q4OTs8V6ZdpbaL5MzX4uCCC1NhRG/EgSuwcyOGWSQu2yXnHUAJZMCKxzIJ+b7S vZjQ2mcI2z74R2F2ACP97ut1wC5NqLhZinEntssbUc6wXjwtHRTpANbdBFNLU5b6 qhqAqdJRRuiCHQcT6MzQEMD+PgHws6Q= -----END CERTIFICATE-----Generated at Mon Oct 20 08:22:26 2025 by rpki-client