$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: EG05bwZGToXFWN7vgfJ1nDaTzbGzdAFDkSKsEjpC6oY= Subject key identifier: 4B:88:5A:08:E3:2F:A2:09:40:13:1E:67:56:57:C3:2B:03:71:DB:90 Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 61 Signing time: Sat 25 Oct 2025 10:59:36 +0000 Manifest this update: Sat 25 Oct 2025 10:59:36 +0000 Manifest next update: Sat 01 Nov 2025 10:59:36 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: 2V+KqlT9XlxIFaKftj8SDnVhlJZPD1+7EnBqejHb7vE=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 10:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Oct 25 10:59:36 2025 GMT Not After : Nov 1 10:59:36 2025 GMT Subject: CN=68fcad98-6d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0a:3f:56:56:29:54:e9:61:69:3e:6d:7e:bb: 41:96:53:18:69:b3:c3:47:62:c7:2a:0b:9d:c5:61: 72:82:25:ba:49:54:9d:68:d3:ee:11:5f:2d:d4:51: 77:dc:2f:fc:a7:2d:0f:08:26:a8:50:7b:23:00:ce: ad:90:ce:8c:a0:ef:18:46:a8:55:c0:c0:f1:2d:5d: 9f:4e:5f:ac:b1:f7:22:10:7a:76:6b:8e:c8:1f:44: 1a:5e:84:ad:2e:e0:d9:50:ce:45:52:94:81:85:ee: 60:85:d1:a3:8a:1f:0d:fb:bd:7c:74:ad:29:97:a1: b7:1c:ce:54:04:8e:17:52:eb:df:88:6a:85:55:cc: f6:d8:fa:74:47:4c:cf:4a:dd:87:18:11:ba:e6:7f: 69:d3:41:60:25:50:2c:a4:4c:ff:11:ab:74:93:a3: f0:b1:bc:c7:58:e5:8c:8a:c2:65:aa:cd:01:89:72: 4b:30:e9:9d:37:f9:81:48:19:eb:31:4c:e4:2a:6f: 56:0d:b7:55:11:6b:af:f4:2c:89:33:e8:6a:63:bb: 08:33:b0:d6:ba:d5:be:b6:a3:51:84:5a:97:4e:43: 7a:1f:70:e6:56:a5:f2:17:bf:fd:60:2a:15:8b:73: ad:81:a2:19:65:2b:cf:a2:05:29:cb:0b:1a:5d:7f: ec:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:88:5A:08:E3:2F:A2:09:40:13:1E:67:56:57:C3:2B:03:71:DB:90 X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b3:4b:0b:9d:ce:67:c5:19:50:f9:21:a9:62:8f:d4:63:33: e4:ca:7b:28:7b:77:3c:5b:ba:29:aa:67:9d:06:1e:ad:8d:c1: 10:a4:f2:82:25:9b:9a:9d:cd:5c:45:40:07:04:09:33:af:3b: 5f:a6:36:ec:c2:61:85:83:3c:80:e9:58:2f:55:89:43:5c:2d: 10:60:11:e5:b4:6a:a8:9c:27:48:9b:c6:43:fb:15:6b:a1:20: 4b:80:7a:6c:79:14:2b:a2:d9:9f:03:b4:14:2e:58:12:ea:74: 9c:cc:57:5e:6d:d8:52:c8:a4:ba:39:e2:f9:2b:28:30:09:f6: 8d:ec:74:86:ec:16:36:e4:13:3e:21:64:64:c6:89:26:51:5b: bb:ee:08:4e:53:09:62:a0:6f:08:84:ce:bc:f5:59:df:a1:d2: 81:cb:78:4b:09:64:4a:a1:60:87:37:4a:fe:f3:b4:b1:e5:83: d1:24:62:fd:68:fc:c9:f7:48:62:9e:45:f5:e4:16:d3:39:e0: d9:51:96:ce:b8:31:2c:3e:34:7b:20:7f:01:33:ac:b5:33:fe: 6f:92:0b:bf:07:95:f9:e5:25:9e:83:c6:ef:59:e9:4e:dd:84: 5f:30:ca:cd:b1:74:3d:d8:62:33:26:dc:0f:a2:6a:1b:5b:96: 86:1e:6e:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTEwMjUxMDU5MzZaFw0yNTExMDExMDU5MzZaMBgxFjAUBgNV BAMTDTY4ZmNhZDk4LTZkNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVCj9WVilU6WFpPm1+u0GWUxhps8NHYscqC53FYXKCJbpJVJ1o0+4RXy3UUXfc L/ynLQ8IJqhQeyMAzq2Qzoyg7xhGqFXAwPEtXZ9OX6yx9yIQenZrjsgfRBpehK0u 4NlQzkVSlIGF7mCF0aOKHw37vXx0rSmXobcczlQEjhdS69+IaoVVzPbY+nRHTM9K 3YcYEbrmf2nTQWAlUCykTP8Rq3STo/CxvMdY5YyKwmWqzQGJcksw6Z03+YFIGesx TOQqb1YNt1URa6/0LIkz6GpjuwgzsNa61b62o1GEWpdOQ3ofcOZWpfIXv/1gKhWL c62BohllK8+iBSnLCxpdf+y5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS4haCOMv oglAEx5nVlfDKwNx25AwHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACKzSwudzmfFGVD5Ialij9RjM+TKeyh7dzxbuimqZ50GHq2NwRCk8oIl m5qdzVxFQAcECTOvO1+mNuzCYYWDPIDpWC9ViUNcLRBgEeW0aqicJ0ibxkP7FWuh IEuAemx5FCui2Z8DtBQuWBLqdJzMV15t2FLIpLo54vkrKDAJ9o3sdIbsFjbkEz4h ZGTGiSZRW7vuCE5TCWKgbwiEzrz1Wd+h0oHLeEsJZEqhYIc3Sv7ztLHlg9EkYv1o /Mn3SGKeRfXkFtM54NlRls64MSw+NHsgfwEzrLUz/m+SC78HlfnlJZ6Dxu9Z6U7d hF8wys2xdD3YYjMm3A+iahtbloYebps= -----END CERTIFICATE-----Generated at Mon Oct 27 04:41:35 2025 by rpki-client