$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: ciws7F09u9UV27oHEiMB9mNaXDHy6DXkBAdsGbKANYc= Subject key identifier: D1:25:5B:2F:C5:16:61:CF:F5:54:26:D8:32:77:7A:22:C1:7D:00:90 Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 30 Signing time: Sat 19 Jul 2025 07:56:08 +0000 Manifest this update: Sat 19 Jul 2025 07:56:07 +0000 Manifest next update: Sat 26 Jul 2025 07:56:07 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: o9sfgeSE619qRATzN8HRNW/XYvf6xdN2lGwQVh+gR+s=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Jul 19 07:56:07 2025 GMT Not After : Jul 26 07:56:07 2025 GMT Subject: CN=687b4f97-25f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:67:67:2e:1b:f6:8f:e7:b2:ac:4d:9a:5d: 3b:e8:1d:08:2d:74:d0:5d:79:de:f8:fc:4a:05:49: 8e:ea:55:0e:e8:0a:2e:cf:41:bd:53:22:6a:48:53: 91:cb:4e:e0:65:1c:af:32:68:a2:25:00:2c:9b:5f: c1:c9:ef:da:a2:19:03:20:fc:17:1c:de:11:4f:3b: 58:1a:4d:71:ca:be:d9:2f:b4:53:bc:f5:c6:37:e2: be:b6:80:62:b9:74:26:c0:1b:f2:a8:31:1f:f6:ce: 9d:dd:63:b8:0b:e9:3a:8b:e3:60:52:b0:bf:93:25: c4:45:75:a7:7a:cb:c9:2d:b0:32:02:f9:9f:eb:b7: d9:f1:85:23:22:36:86:28:28:af:d1:37:3c:e4:bf: ec:d7:06:7a:0f:d1:4d:21:5b:0b:3f:a5:7d:a1:62: f1:76:8b:67:23:81:da:e6:9d:38:ca:ea:8a:80:a6: a2:61:ea:6c:57:b6:48:12:91:f4:b4:5b:24:39:03: d0:db:32:de:4a:6a:37:86:ab:f2:54:9b:89:52:6e: 59:b6:32:90:50:70:eb:3e:5a:e0:68:0c:86:ee:70: cf:43:c8:42:bc:f2:7f:7d:db:58:11:9c:9b:55:02: 8a:af:f5:1d:51:5c:ed:2a:03:1d:c9:c1:c4:8e:7e: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:25:5B:2F:C5:16:61:CF:F5:54:26:D8:32:77:7A:22:C1:7D:00:90 X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:07:8e:56:9e:62:6a:54:3f:fa:52:70:58:c6:24:61:3d:06: 66:b6:1b:e4:f0:b3:ad:6c:f9:97:e8:f6:fe:68:e8:e0:0d:28: 5b:6d:55:b1:4d:ce:f4:c8:9d:eb:08:f9:0f:3d:41:45:60:5b: 25:36:4c:20:13:47:3a:42:d5:4a:3b:07:21:52:de:05:7e:20: 9c:ee:07:9a:5d:8f:19:14:ec:94:da:b5:bd:a6:fa:35:99:3a: 43:23:38:90:b9:f1:db:ac:a2:49:0a:1e:e0:cd:1a:75:8d:9d: 29:c8:44:16:a7:95:98:21:52:b7:1d:53:1d:02:7a:5b:11:8b: 44:47:da:a7:b9:b0:fa:43:10:9d:6f:c3:0b:65:e4:ec:26:fa: a9:47:c1:61:05:c7:c0:d8:50:96:97:f4:06:8b:76:73:a7:84: ee:43:cb:10:40:2f:9e:75:22:4a:30:f5:af:77:6d:3a:46:d9: 08:5d:6f:b6:99:63:18:72:61:5c:a5:5b:dd:63:69:89:2f:fb: d5:89:f5:c0:60:18:c6:dc:9c:f0:5b:d6:18:58:d8:e4:8c:cd: 11:6b:76:ef:7c:6b:09:fb:08:49:fe:b7:bd:cf:93:1e:fe:40: 9b:1b:d3:33:8f:95:9d:03:09:2e:ef:47:04:42:e7:92:8c:61: 5f:82:f0:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTA3MTkwNzU2MDdaFw0yNTA3MjYwNzU2MDdaMBgxFjAUBgNV BAMTDTY4N2I0Zjk3LTI1ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2TWdnLhv2j+eyrE2aXTvoHQgtdNBded74/EoFSY7qVQ7oCi7PQb1TImpIU5HL TuBlHK8yaKIlACybX8HJ79qiGQMg/Bcc3hFPO1gaTXHKvtkvtFO89cY34r62gGK5 dCbAG/KoMR/2zp3dY7gL6TqL42BSsL+TJcRFdad6y8ktsDIC+Z/rt9nxhSMiNoYo KK/RNzzkv+zXBnoP0U0hWws/pX2hYvF2i2cjgdrmnTjK6oqApqJh6mxXtkgSkfS0 WyQ5A9DbMt5KajeGq/JUm4lSblm2MpBQcOs+WuBoDIbucM9DyEK88n9921gRnJtV Aoqv9R1RXO0qAx3JwcSOfng5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0SVbL8UW Yc/1VCbYMnd6IsF9AJAwHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHsHjlaeYmpUP/pScFjGJGE9Bma2G+Tws61s+Zfo9v5o6OANKFttVbFN zvTInesI+Q89QUVgWyU2TCATRzpC1Uo7ByFS3gV+IJzuB5pdjxkU7JTatb2m+jWZ OkMjOJC58dusokkKHuDNGnWNnSnIRBanlZghUrcdUx0CelsRi0RH2qe5sPpDEJ1v wwtl5Owm+qlHwWEFx8DYUJaX9AaLdnOnhO5DyxBAL551Ikow9a93bTpG2Qhdb7aZ YxhyYVylW91jaYkv+9WJ9cBgGMbcnPBb1hhY2OSMzRFrdu98awn7CEn+t73Pkx7+ QJsb0zOPlZ0DCS7vRwRC55KMYV+C8D4= -----END CERTIFICATE-----Generated at Sun Jul 20 07:34:15 2025 by rpki-client