$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: Ywnj12suwYaU6knBgvpnuQpxZLvsXt08Xmtp5eDUFeo= Subject key identifier: ED:29:E6:E1:B1:BF:B1:09:65:CC:CC:F4:A2:19:8E:9F:69:61:A7:AF Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 34E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 34C8 Signing time: Fri 22 Aug 2025 14:16:59 +0000 Manifest this update: Fri 22 Aug 2025 14:16:58 +0000 Manifest next update: Fri 29 Aug 2025 14:16:58 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: nhaaIiGQj9ZcrySYa5dRXSTMyTPFfBiKNrhRsQ30Lb0=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: hYytIPmZWrKBo2kUKZ6RbyTlKDVjP2KD/kyPVrq80v0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C, serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: Aug 22 14:16:58 2025 GMT Not After : Aug 29 14:16:58 2025 GMT Subject: CN=68a87bda-a08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:d8:da:57:6b:cc:cd:7f:81:a4:8e:d0:de: 95:b1:a6:6b:de:06:4c:47:ae:98:14:f7:08:bd:87: 8b:bb:06:7d:71:4e:43:29:7d:f2:4e:17:48:1f:d2: da:3e:43:0d:2e:46:fa:ad:70:9e:e2:fc:d2:5d:75: be:b8:18:4b:ea:2c:ea:ef:e5:be:9e:1d:55:5b:45: 33:5d:f5:c4:51:ae:37:3b:69:60:5e:12:54:11:ea: 64:2d:11:6f:be:6f:e9:7d:b4:e2:17:c2:09:53:94: cc:c2:2b:fb:e3:31:8b:73:b7:5b:05:ce:c9:b1:d6: 99:88:be:d6:e3:f7:4c:8d:80:7b:68:44:15:4c:cd: 6e:fd:85:4f:68:dc:83:47:01:fe:44:ba:7a:8b:14: 47:ee:41:a5:79:26:f7:c4:c7:c7:30:12:1a:e5:56: ed:1c:0c:02:40:92:de:dd:a1:cf:7f:df:ad:60:8a: ba:be:4a:fe:a7:c3:fd:00:72:30:1c:fa:9e:9a:c3: 12:e2:74:3c:9d:3d:d0:88:fb:1c:d3:cf:13:1b:f5: a5:ad:9e:43:16:9b:78:00:9d:7f:ec:41:37:65:fa: ca:a4:e0:f0:cc:00:49:6b:b8:0d:64:d4:d6:4b:99: 32:f9:37:64:c7:17:a6:e1:6b:bd:d6:cb:d7:5f:3a: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:29:E6:E1:B1:BF:B1:09:65:CC:CC:F4:A2:19:8E:9F:69:61:A7:AF X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:7f:c5:86:97:20:cf:d9:f9:7e:1e:20:81:66:0c:12:50:87: 48:6f:79:61:11:82:c5:bc:aa:03:2e:0b:e9:a7:ac:ab:79:aa: 2d:4b:dc:3b:aa:22:fe:d0:7a:2a:4a:ca:f3:05:5b:23:49:19: 35:ec:5f:8a:c4:81:45:7c:17:36:a6:31:50:b2:d3:74:77:4e: 54:d2:b0:63:69:11:94:17:71:7d:66:b6:2d:2c:bd:29:cb:a7: c3:e1:6d:7d:22:d0:62:3c:d5:37:cb:b0:0d:36:cb:7e:59:87: ce:28:3d:10:df:86:5a:ab:88:d9:1a:af:b7:37:59:eb:a1:6c: d4:9a:2e:bf:a7:11:78:21:8b:73:88:fb:7a:27:a3:d1:cd:c9: a2:74:28:e7:96:b1:43:b0:ea:04:96:d3:f5:de:f8:4b:3c:84: e7:4b:a0:2e:9f:72:e8:0c:7d:64:54:c9:91:5c:0f:c7:15:7a: ea:cf:ae:ac:dc:d9:3b:24:4c:ba:68:ac:b8:ff:4b:3e:6f:a0: da:63:e1:a0:b9:56:51:39:af:f8:da:07:02:4e:08:d6:5f:d9: 02:ad:73:4e:d0:6b:6f:23:78:3b:9e:0d:3c:29:eb:3b:71:db: 87:71:cb:a6:4e:d6:29:34:93:06:b8:8d:d7:db:01:4c:e9:92: 61:a0:1a:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjUwODIyMTQxNjU4WhcNMjUwODI5MTQxNjU4WjAYMRYwFAYD VQQDEw02OGE4N2JkYS1hMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI7Y2ldrzM1/gaSO0N6VsaZr3gZMR66YFPcIvYeLuwZ9cU5DKX3yThdIH9La PkMNLkb6rXCe4vzSXXW+uBhL6izq7+W+nh1VW0UzXfXEUa43O2lgXhJUEepkLRFv vm/pfbTiF8IJU5TMwiv74zGLc7dbBc7JsdaZiL7W4/dMjYB7aEQVTM1u/YVPaNyD RwH+RLp6ixRH7kGleSb3xMfHMBIa5VbtHAwCQJLe3aHPf9+tYIq6vkr+p8P9AHIw HPqemsMS4nQ8nT3QiPsc088TG/WlrZ5DFpt4AJ1/7EE3ZfrKpODwzABJa7gNZNTW S5ky+Tdkxxem4Wu91svXXzpyfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0p5uGx v7EJZczM9KIZjp9pYaevMB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAf8WGlyDP2fl+HiCBZgwSUIdIb3lhEYLFvKoDLgvpp6yreaotS9w7 qiL+0HoqSsrzBVsjSRk17F+KxIFFfBc2pjFQstN0d05U0rBjaRGUF3F9ZrYtLL0p y6fD4W19ItBiPNU3y7ANNst+WYfOKD0Q34Zaq4jZGq+3N1nroWzUmi6/pxF4IYtz iPt6J6PRzcmidCjnlrFDsOoEltP13vhLPITnS6Aun3LoDH1kVMmRXA/HFXrqz66s 3Nk7JEy6aKy4/0s+b6DaY+GguVZROa/42gcCTgjWX9kCrXNO0GtvI3g7ng08Kes7 cduHccumTtYpNJMGuI3X2wFM6ZJhoBp0 -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:43 2025 by rpki-client