$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json) Hash identifier: 5eCp5GBEVQaHGzvFTOje6e7GW8qTS6JOeX74k/uD/qU= Subject key identifier: 98:11:0A:8E:A4:9E:58:4C:01:3A:EF:3B:5F:50:41:36:76:45:86:47 Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Certificate serial: 0817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft Manifest number: 0810 Signing time: Tue 22 Jul 2025 21:06:29 +0000 Manifest this update: Tue 22 Jul 2025 21:06:29 +0000 Manifest next update: Tue 29 Jul 2025 21:06:29 +0000 Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: 3ekcT0KdCOYiTi19+ujPW6Ak0OxG/14Mt8SSW9ZZABI=) 2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: uoOD9ug4cYWw7XbQbk8d35Oe55TFSJv/qRJ/jB7pYDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Validity Not Before: Jul 22 21:06:29 2025 GMT Not After : Jul 29 21:06:29 2025 GMT Subject: CN=687ffd55-0640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:f3:2c:53:e5:da:d8:4b:bb:b5:d1:9b:fc: 79:7b:ad:f1:bb:70:9b:88:4e:0d:ef:85:37:ad:21: 13:9c:40:52:05:0e:b1:ed:c5:d0:30:1b:61:07:02: a5:28:96:9a:4b:c6:85:39:73:d2:54:b3:7d:5a:e9: 13:05:d3:63:80:db:7b:b2:b1:e4:67:5e:ff:77:78: fd:a3:51:6f:f3:af:8f:fe:7c:26:66:e6:3a:20:77: 24:e1:31:13:41:f6:78:b8:96:b6:05:a3:64:a4:06: b1:0f:2c:83:37:b6:44:4a:5d:73:4f:b3:10:4e:7c: c4:ed:90:dc:9e:77:42:a0:bb:d7:0c:c1:7c:ea:39: ca:c6:2b:a2:72:41:b6:c7:73:cd:2f:d6:32:73:0e: f1:63:7a:00:ec:bd:01:40:fe:83:36:f0:43:50:23: 8c:7b:34:91:ba:ff:ce:14:1c:9e:50:d7:87:f7:9c: 8e:a2:70:94:b7:e8:e2:d0:2c:91:97:1a:36:0d:53: b0:52:6d:0f:c4:6f:83:9b:89:20:b6:c3:e6:6e:64: 31:a8:80:bf:6c:b3:8d:e2:e3:16:95:3f:63:26:da: 41:33:a6:12:f5:76:fd:6c:33:e4:a8:bc:59:26:72: b0:1c:95:27:c2:ff:2a:e4:5c:14:e5:86:7e:4e:13: 26:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:11:0A:8E:A4:9E:58:4C:01:3A:EF:3B:5F:50:41:36:76:45:86:47 X509v3 Authority Key Identifier: keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3e:87:87:cb:ff:0c:52:9f:17:43:3e:b3:07:cb:05:6c:2b: da:c6:fc:e5:ea:bd:78:1a:0e:c2:d5:10:99:8e:81:d4:30:ac: 4a:1d:d5:29:8e:f6:51:32:1a:08:c8:0e:ed:e2:85:97:80:4c: d5:e5:0d:8b:19:ae:b0:1c:49:3f:10:1f:50:6b:d2:8e:39:a1: 1d:4a:d6:21:9d:15:9a:5d:d8:c8:e6:ce:c8:0c:a0:d2:7b:ce: 4e:46:34:91:2c:0d:b1:00:39:ba:4c:57:30:39:4b:80:ba:da: ab:35:fd:68:34:39:84:b1:c8:14:24:22:26:c7:ff:03:a0:3e: 3f:6f:1f:41:5a:6b:dc:05:48:14:bb:f3:60:a3:d8:60:5b:ea: 6a:23:7f:02:1e:79:7f:e2:bf:a5:86:af:7a:3c:90:b3:03:2c: b4:99:5f:1c:cc:2d:e1:50:02:b0:a5:7b:45:2d:0f:66:bc:38: ef:c9:69:a8:66:9d:58:53:36:e8:65:6a:37:99:f7:16:8a:46: 35:ff:60:d6:92:f7:57:00:86:60:b5:64:fb:07:27:d9:63:e4: 97:6e:fb:df:8e:05:f2:49:5a:48:8d:03:eb:b0:a1:34:b1:af: ec:98:f8:df:fe:41:69:84:3b:ab:60:b2:82:e2:73:cf:68:21: 50:02:60:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBQUIxMTAvBgNVBAUTKDAwNUZBQUFEMkFFMzBFNzc1MjU2QUZCQkJCMjhCNjI0 OTE3MkFCRTMwHhcNMjUwNzIyMjEwNjI5WhcNMjUwNzI5MjEwNjI5WjAYMRYwFAYD VQQDEw02ODdmZmQ1NS0wNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLrzLFPl2thLu7XRm/x5e63xu3CbiE4N74U3rSETnEBSBQ6x7cXQMBthBwKl KJaaS8aFOXPSVLN9WukTBdNjgNt7srHkZ17/d3j9o1Fv86+P/nwmZuY6IHck4TET QfZ4uJa2BaNkpAaxDyyDN7ZESl1zT7MQTnzE7ZDcnndCoLvXDMF86jnKxiuickG2 x3PNL9Yycw7xY3oA7L0BQP6DNvBDUCOMezSRuv/OFByeUNeH95yOonCUt+ji0CyR lxo2DVOwUm0PxG+Dm4kgtsPmbmQxqIC/bLON4uMWlT9jJtpBM6YS9Xb9bDPkqLxZ JnKwHJUnwv8q5FwU5YZ+ThMm3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgRCo6k nlhMATrvO19QQTZ2RYZHMB8GA1UdIwQYMBaAFABfqq0q4w53Ulavu7sotiSRcqvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEFBQi8wNUVFMTc5NEUz OEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRuZFNWcS03dXlpMkpKRnlx LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FGLXFyU3JqRG5kU1ZxLTd1eWkySkpGeXEtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEFBQi8wNUVFMTc5NEUzOEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRu ZFNWcS03dXlpMkpKRnlxLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmPoeHy/8MUp8XQz6zB8sFbCvaxvzl6r14Gg7C1RCZjoHUMKxKHdUp jvZRMhoIyA7t4oWXgEzV5Q2LGa6wHEk/EB9Qa9KOOaEdStYhnRWaXdjI5s7IDKDS e85ORjSRLA2xADm6TFcwOUuAutqrNf1oNDmEscgUJCImx/8DoD4/bx9BWmvcBUgU u/Ngo9hgW+pqI38CHnl/4r+lhq96PJCzAyy0mV8czC3hUAKwpXtFLQ9mvDjvyWmo Zp1YUzboZWo3mfcWikY1/2DWkvdXAIZgtWT7ByfZY+SXbvvfjgXySVpIjQPrsKE0 sa/smPjf/kFphDurYLKC4nPPaCFQAmDP -----END CERTIFICATE-----Generated at Thu Jul 24 12:12:28 2025 by rpki-client