$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft File: AfBcfqXyou38GDiX9YNZgrLPA78.mft (raw, json) Hash identifier: txu3sX6PUnJrJJ10pWiwjp/HjJB9/IH1uBaU1BQoR4E= Subject key identifier: C6:02:54:E5:FB:6B:A4:2E:A9:A3:0D:BE:B5:23:9E:98:F7:E7:8E:D5 Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF Certificate issuer: /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft Manifest number: AB Signing time: Sun 19 Oct 2025 09:20:32 +0000 Manifest this update: Sun 19 Oct 2025 09:20:31 +0000 Manifest next update: Sun 26 Oct 2025 09:20:31 +0000 Files and hashes: 1: AfBcfqXyou38GDiX9YNZgrLPA78.crl (hash: 74SaSZAoirrw4GuR7Oiu6CtfzZ9qciIyDSxxwcIibaI=) 2: A69DB4ACA70811EFB1511445C4F9AE02.roa (hash: ve1sSgZ6oct5AOmrySo9DC5xQlX3NPwVMFkq6CjA+1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF Validity Not Before: Oct 19 09:20:31 2025 GMT Not After : Oct 26 09:20:31 2025 GMT Subject: CN=68f4ad60-e2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:ba:3b:b4:68:3e:bb:c8:81:09:d5:63:ad: b0:b7:45:75:7b:86:c5:5e:04:a6:56:b2:52:2d:98: 9d:e0:14:89:13:fd:5b:80:6d:11:61:4e:6c:e9:9c: 82:30:4a:08:d4:5c:70:99:7c:b6:24:73:b4:1a:fb: ca:ee:13:86:35:a7:b6:b3:d8:1f:1d:5b:19:e0:70: 0b:18:5f:04:af:83:d4:54:e6:45:31:59:71:48:51: 12:d6:44:29:ac:6b:c6:a2:b4:ff:66:ad:a0:a9:60: 29:5f:14:eb:e2:51:57:fd:91:cd:ed:67:74:4a:e9: 6e:dc:6d:74:c8:08:cd:86:04:64:a1:8e:da:f6:24: 9d:9c:67:ba:3b:6c:09:29:09:85:00:46:0f:2b:03: ad:6e:95:1f:64:52:76:90:9c:70:99:53:10:91:51: 1c:51:a5:58:37:5a:88:bd:89:66:e9:c4:81:18:cd: bd:21:95:84:3a:fa:a3:10:68:f2:ba:4e:bb:15:44: 96:91:22:ae:10:aa:29:0c:b0:4d:e3:26:4a:73:2a: 13:3a:1b:96:4e:25:3b:72:3b:18:2c:41:f3:73:92: 22:7d:ae:f7:64:58:d2:05:b4:22:c4:09:80:8d:05: 22:5e:02:83:61:03:48:0e:3b:51:e5:8b:13:52:82: de:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:02:54:E5:FB:6B:A4:2E:A9:A3:0D:BE:B5:23:9E:98:F7:E7:8E:D5 X509v3 Authority Key Identifier: keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d4:73:1e:f0:1d:70:19:73:d9:e9:48:cb:b2:e2:1f:52:21: 4b:27:5f:c6:4f:60:84:c8:28:c0:a8:11:9e:0d:ae:1d:8d:1c: da:1f:13:74:77:69:95:de:b3:3b:ff:76:48:ea:4c:31:3d:ab: 7b:bb:f5:b7:fd:da:3f:93:80:5f:01:f9:a1:1b:8c:ec:c3:16: 45:ea:62:43:2b:a6:1a:ab:21:60:c6:9c:de:02:9a:b9:d0:14: 83:38:39:7c:f6:a0:b5:9f:b3:67:9d:a0:b6:40:2d:d3:bf:c2: a5:63:59:8f:2f:bc:18:de:d3:e7:0f:ae:bc:b3:bd:9a:f5:94: cd:99:ed:4e:6a:7a:86:10:18:98:95:47:fe:de:76:01:a2:63: de:cd:53:44:63:06:5a:ab:7c:53:50:ff:6a:e1:f3:88:a9:2d: 23:44:5a:de:75:f8:7d:bb:7f:7d:af:0b:b6:32:35:bf:9e:b9: 35:b8:30:73:6e:f6:ce:8f:bb:f8:4e:a5:a9:17:dc:a0:6c:8e: 82:71:28:6a:1a:1d:2e:ef:77:15:49:a5:41:7f:15:82:7d:a8: 09:77:e2:72:48:5f:a1:ce:ac:a2:b7:38:e8:a8:d1:8c:61:8d: 99:3f:13:48:c9:5e:2e:bb:ec:b7:5c:10:0f:28:74:76:f2:6e: b1:52:6f:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QkMxMTAvBgNVBAUTKDAxRjA1QzdFQTVGMkEyRURGQzE4Mzg5N0Y1ODM1OTgy QjJDRjAzQkYwHhcNMjUxMDE5MDkyMDMxWhcNMjUxMDI2MDkyMDMxWjAYMRYwFAYD VQQDEw02OGY0YWQ2MC1lMmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4G6O7RoPrvIgQnVY62wt0V1e4bFXgSmVrJSLZid4BSJE/1bgG0RYU5s6ZyC MEoI1FxwmXy2JHO0GvvK7hOGNae2s9gfHVsZ4HALGF8Er4PUVOZFMVlxSFES1kQp rGvGorT/Zq2gqWApXxTr4lFX/ZHN7Wd0Sulu3G10yAjNhgRkoY7a9iSdnGe6O2wJ KQmFAEYPKwOtbpUfZFJ2kJxwmVMQkVEcUaVYN1qIvYlm6cSBGM29IZWEOvqjEGjy uk67FUSWkSKuEKopDLBN4yZKcyoTOhuWTiU7cjsYLEHzc5Iifa73ZFjSBbQixAmA jQUiXgKDYQNIDjtR5YsTUoLevQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYCVOX7 a6QuqaMNvrUjnpj3547VMB8GA1UdIwQYMBaAFAHwXH6l8qLt/Bg4l/WDWYKyzwO/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCQy9EMzVCMDgyRUE3 MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi9BZkJjZnFYeW91MzhHRGlYOVlOWmdyTFBB NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmQmNmcVh5b3UzOEdEaVg5WU5aZ3JMUEE3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCQy9EMzVCMDgyRUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi9BZkJjZnFYeW91 MzhHRGlYOVlOWmdyTFBBNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj1HMe8B1wGXPZ6UjLsuIfUiFLJ1/GT2CEyCjAqBGeDa4djRzaHxN0 d2mV3rM7/3ZI6kwxPat7u/W3/do/k4BfAfmhG4zswxZF6mJDK6YaqyFgxpzeApq5 0BSDODl89qC1n7NnnaC2QC3Tv8KlY1mPL7wY3tPnD668s72a9ZTNme1OanqGEBiY lUf+3nYBomPezVNEYwZaq3xTUP9q4fOIqS0jRFredfh9u399rwu2MjW/nrk1uDBz bvbOj7v4TqWpF9ygbI6CcShqGh0u73cVSaVBfxWCfagJd+JySF+hzqyitzjoqNGM YY2ZPxNIyV4uu+y3XBAPKHR28m6xUm+o -----END CERTIFICATE-----Generated at Tue Oct 21 03:22:27 2025 by rpki-client