$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: QDb+pKUTe2xqDmTkV1+Z5bXvMg0c1NBNvruM90+3ecw= Subject key identifier: B2:7E:37:A4:FA:D9:E1:D6:58:1F:AA:3F:8F:45:BD:16:D2:42:33:6D Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 4B Signing time: Tue 09 Sep 2025 07:29:12 +0000 Manifest this update: Tue 09 Sep 2025 07:29:12 +0000 Manifest next update: Tue 16 Sep 2025 07:29:12 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: xyzKq2aL+8t9+HavyyIWQeLO3DIEeXEzWEr67KQnsME=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Sep 9 07:29:12 2025 GMT Not After : Sep 16 07:29:12 2025 GMT Subject: CN=68bfd748-ab48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:67:fd:24:a2:f5:c7:55:7e:7b:f6:13:dc: 06:73:8f:bb:44:60:ab:50:11:46:de:76:80:84:61: be:8c:76:0d:5e:93:d5:88:03:d1:49:ae:39:ca:83: f5:bc:7a:d1:af:6f:b1:98:64:6d:d8:63:8f:dd:7f: bc:44:13:9d:19:4b:f4:d2:68:8e:58:1f:b5:b8:4f: dd:9d:44:44:d7:49:9d:33:43:9d:68:ae:03:08:fd: d7:5a:2c:46:84:7c:7c:63:87:99:88:89:44:34:35: dd:b7:f3:75:e1:79:71:61:2e:3a:42:84:68:a2:85: 4d:15:ad:61:86:ab:db:54:64:b5:4a:60:75:35:0c: d3:26:b0:6b:f8:98:75:1f:1c:94:e9:2b:a4:0e:1a: c1:92:ce:ce:a2:a9:99:44:19:8d:4e:17:c6:90:63: d1:00:a2:21:64:ac:2d:83:0e:68:e2:d6:f8:09:1a: 1d:35:af:1e:a4:cb:f2:c9:f8:f0:90:40:1f:4e:0d: f7:f5:9d:0c:0f:84:6d:6d:e9:18:57:0f:5d:20:f3: 1d:5f:99:6e:82:c9:fa:de:ef:57:04:b9:6f:e7:52: 67:33:8d:85:74:27:31:06:a1:2f:4d:f0:54:4d:ff: 7f:0f:11:7f:54:43:11:fc:ec:e4:60:73:93:4a:b1: 82:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7E:37:A4:FA:D9:E1:D6:58:1F:AA:3F:8F:45:BD:16:D2:42:33:6D X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e9:9b:b5:55:45:5e:b1:9e:39:3a:5c:0d:4d:8b:c9:1c:58: 4f:85:5d:0b:d8:27:20:0a:83:61:9e:61:97:14:9c:e1:2b:bf: 57:a3:e7:19:cd:d3:41:2c:e0:7c:42:8c:63:f8:23:cf:01:49: d5:4d:0f:ba:4c:ef:49:af:d9:bf:43:28:a5:ab:09:bf:d8:51: 3e:fb:59:4c:4c:52:c7:82:42:14:92:ec:18:c4:27:8e:fa:74: 3e:e9:a1:1d:fd:53:e5:ab:a0:e4:4c:74:47:83:25:a8:c0:5b: 1b:31:72:f4:54:ac:73:c5:7c:f1:19:bd:0c:d9:2e:ff:4b:0d: e2:68:d3:f6:35:89:c3:f9:ba:9d:ad:17:4e:0d:e4:b3:d2:f2: f6:5b:3d:c6:0a:94:06:a6:4e:fc:8f:ae:42:74:78:ea:fd:d4: 75:c8:1d:85:17:5c:23:a2:ff:79:3a:88:2e:c3:69:64:e1:94: ea:1b:69:67:40:a3:f2:b8:0e:aa:a2:45:54:41:84:7c:37:01: 61:d2:39:2f:9a:79:f1:1d:79:90:08:d3:a0:6d:dd:da:70:bf: 4a:8c:a6:93:76:bd:bb:ce:30:9e:c2:c8:49:09:d8:05:ba:bf: de:0f:ea:52:21:66:cb:57:fa:9f:7a:a8:66:11:a7:98:33:1c: b0:62:a7:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTA5MDkwNzI5MTJaFw0yNTA5MTYwNzI5MTJaMBgxFjAUBgNV BAMTDTY4YmZkNzQ4LWFiNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBR2f9JKL1x1V+e/YT3AZzj7tEYKtQEUbedoCEYb6Mdg1ek9WIA9FJrjnKg/W8 etGvb7GYZG3YY4/df7xEE50ZS/TSaI5YH7W4T92dRETXSZ0zQ51orgMI/ddaLEaE fHxjh5mIiUQ0Nd2383XheXFhLjpChGiihU0VrWGGq9tUZLVKYHU1DNMmsGv4mHUf HJTpK6QOGsGSzs6iqZlEGY1OF8aQY9EAoiFkrC2DDmji1vgJGh01rx6ky/LJ+PCQ QB9ODff1nQwPhG1t6RhXD10g8x1fmW6Cyfre71cEuW/nUmczjYV0JzEGoS9N8FRN /38PEX9UQxH87ORgc5NKsYK/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsn43pPrZ 4dZYH6o/j0W9FtJCM20wHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG/pm7VVRV6xnjk6XA1Ni8kcWE+FXQvYJyAKg2GeYZcUnOErv1ej5xnN 00Es4HxCjGP4I88BSdVND7pM70mv2b9DKKWrCb/YUT77WUxMUseCQhSS7BjEJ476 dD7poR39U+WroORMdEeDJajAWxsxcvRUrHPFfPEZvQzZLv9LDeJo0/Y1icP5up2t F04N5LPS8vZbPcYKlAamTvyPrkJ0eOr91HXIHYUXXCOi/3k6iC7DaWThlOobaWdA o/K4DqqiRVRBhHw3AWHSOS+aefEdeZAI06Bt3dpwv0qMppN2vbvOMJ7CyEkJ2AW6 v94P6lIhZstX+p96qGYRp5gzHLBipzE= -----END CERTIFICATE-----Generated at Wed Sep 10 09:57:05 2025 by rpki-client