$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: iQO626WV1umAdCxAClfIrMzKd6WuZa3zkUbd5RImPtM= Subject key identifier: 12:53:5D:CE:AB:51:37:8D:76:C2:48:6E:5C:96:46:60:90:44:41:39 Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 3506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 34ED Signing time: Sun 02 Nov 2025 14:16:52 +0000 Manifest this update: Sun 02 Nov 2025 14:16:52 +0000 Manifest next update: Sun 09 Nov 2025 14:16:52 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: AGiweRBuY0iSZNQdg1z57yU/TrtXP+fdT1BicT4Ypww=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: hYytIPmZWrKBo2kUKZ6RbyTlKDVjP2KD/kyPVrq80v0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13574 (0x3506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C, serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: Nov 2 14:16:52 2025 GMT Not After : Nov 9 14:16:52 2025 GMT Subject: CN=690767d4-0672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:00:a6:6d:d5:1e:fc:39:c4:e0:ab:b4:b2:97: 15:ce:66:a7:3b:74:76:94:c5:a8:6b:a0:da:25:df: 0c:ff:e8:b5:a0:ca:6e:8a:14:96:42:87:b4:23:32: aa:7a:b4:40:83:59:eb:d5:34:ea:08:d0:32:b4:2a: 4a:82:c4:57:04:45:a8:d0:74:19:49:94:e9:bc:41: eb:86:66:bf:86:e6:ec:b6:9f:f7:e4:5d:b3:15:a3: 3e:a3:bc:72:c1:67:06:79:53:f1:6f:52:fc:69:0c: 22:4e:fa:d2:82:2b:8f:8f:5f:3c:b7:0c:de:4f:5f: 32:e5:68:0f:1d:33:e2:5f:f4:72:9c:b8:70:9a:19: 69:33:bc:c2:8e:09:90:9e:c1:9f:39:9d:c2:67:d4: 46:de:a3:d9:e4:1c:7c:aa:53:2b:c9:71:28:a6:d4: a0:37:b2:b2:53:9d:0e:a5:08:bc:73:24:8a:44:e3: f7:12:6b:26:4c:ed:98:50:eb:e0:44:97:be:92:7c: 1e:82:a9:dc:3b:0b:21:fe:f2:05:06:be:4c:35:d6: 2a:a3:d2:16:e9:cd:f2:35:13:79:19:b8:71:94:90: ce:4a:e1:d2:86:9c:da:f9:c8:66:12:a1:32:85:e5: 30:72:10:68:bc:d4:a4:d1:07:b3:3f:3f:eb:a6:7c: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:53:5D:CE:AB:51:37:8D:76:C2:48:6E:5C:96:46:60:90:44:41:39 X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:9a:76:05:cf:74:64:24:f2:c0:fb:64:48:6d:5f:b1:72:36: ef:87:18:e5:19:73:d1:1c:f6:3b:b7:39:47:6f:49:6b:cb:c1: 00:5e:11:bc:11:40:9e:f1:c0:6a:d1:82:a3:c7:09:00:03:c7: 92:3f:ca:f1:b0:bf:70:98:f5:e9:1d:d0:ad:9a:41:50:c9:5b: 91:cc:cc:2e:94:ff:1b:0f:f3:7f:35:4f:37:b1:3c:ed:55:26: d6:87:49:20:6b:7a:1b:fc:68:62:ab:3e:3a:6c:d9:f0:52:4f: aa:3f:a4:46:13:88:a0:d5:3c:72:64:51:65:96:a2:32:7f:e9: 6d:c8:97:4e:57:9a:37:f4:3a:ba:16:07:24:ef:49:59:16:3b: f8:a1:bb:f3:19:cb:97:e7:fe:c7:53:fd:0e:8f:c9:e2:c8:43: 4d:05:13:c4:9b:45:9e:3d:03:dd:7d:b8:1e:53:a9:d7:31:d3: 72:4c:ef:69:f3:78:7c:47:03:c7:d6:13:f8:41:21:1b:b1:6e: a8:70:2a:fd:6a:93:dd:54:e0:fe:80:65:32:83:75:e2:6f:4a: ff:74:b5:22:db:d2:5b:f4:aa:54:34:92:f2:cb:4c:fd:e5:72: 2e:76:93:16:b6:28:ba:47:bb:d4:46:2a:98:db:3b:92:45:3f: 7b:fe:5a:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjUxMTAyMTQxNjUyWhcNMjUxMTA5MTQxNjUyWjAYMRYwFAYD VQQDEw02OTA3NjdkNC0wNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wCmbdUe/DnE4Ku0spcVzmanO3R2lMWoa6DaJd8M/+i1oMpuihSWQoe0IzKq erRAg1nr1TTqCNAytCpKgsRXBEWo0HQZSZTpvEHrhma/hubstp/35F2zFaM+o7xy wWcGeVPxb1L8aQwiTvrSgiuPj188twzeT18y5WgPHTPiX/RynLhwmhlpM7zCjgmQ nsGfOZ3CZ9RG3qPZ5Bx8qlMryXEoptSgN7KyU50OpQi8cySKROP3EmsmTO2YUOvg RJe+knwegqncOwsh/vIFBr5MNdYqo9IW6c3yNRN5GbhxlJDOSuHShpza+chmEqEy heUwchBovNSk0QezPz/rpnyUXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJTXc6r UTeNdsJIblyWRmCQREE5MB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFmnYFz3RkJPLA+2RIbV+xcjbvhxjlGXPRHPY7tzlHb0lry8EAXhG8 EUCe8cBq0YKjxwkAA8eSP8rxsL9wmPXpHdCtmkFQyVuRzMwulP8bD/N/NU83sTzt VSbWh0kga3ob/Ghiqz46bNnwUk+qP6RGE4ig1TxyZFFllqIyf+ltyJdOV5o39Dq6 Fgck70lZFjv4obvzGcuX5/7HU/0Oj8niyENNBRPEm0WePQPdfbgeU6nXMdNyTO9p 83h8RwPH1hP4QSEbsW6ocCr9apPdVOD+gGUyg3Xib0r/dLUi29Jb9KpUNJLyy0z9 5XIudpMWtii6R7vURiqY2zuSRT97/lrw -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:08 2025 by rpki-client