$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3F7F/8A0B441A872911F09453627FC4F9AE02/AfpykgfkEOkMxx4ymH5ZtzbwK1Q.mft File: AfpykgfkEOkMxx4ymH5ZtzbwK1Q.mft (raw, json) Hash identifier: E1aYrpLnMfbKBl/mdRE1F0S0eY7M8PFkJBnhaEfrhUQ= Subject key identifier: 81:1E:A7:5F:32:5E:E8:AC:F3:0B:57:E1:43:79:21:D6:80:82:B1:0F Authority key identifier: 01:FA:72:92:07:E4:10:E9:0C:C7:1E:32:98:7E:59:B7:36:F0:2B:54 Certificate issuer: /CN=A91C3F7F/serialNumber=01FA729207E410E90CC71E32987E59B736F02B54 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfpykgfkEOkMxx4ymH5ZtzbwK1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3F7F/8A0B441A872911F09453627FC4F9AE02/AfpykgfkEOkMxx4ymH5ZtzbwK1Q.mft Manifest number: 0A Signing time: Wed 17 Sep 2025 08:51:34 +0000 Manifest this update: Wed 17 Sep 2025 08:51:33 +0000 Manifest next update: Wed 24 Sep 2025 08:51:33 +0000 Files and hashes: 1: AfpykgfkEOkMxx4ymH5ZtzbwK1Q.crl (hash: 4BuwmU84yiEqmCQqvA/Gefh28GVMjVutyrGn8IHDVkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3F7F/8A0B441A872911F09453627FC4F9AE02/AfpykgfkEOkMxx4ymH5ZtzbwK1Q.crl rsync://rpki.apnic.net/member_repository/A91C3F7F/8A0B441A872911F09453627FC4F9AE02/AfpykgfkEOkMxx4ymH5ZtzbwK1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfpykgfkEOkMxx4ymH5ZtzbwK1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3F7F, serialNumber=01FA729207E410E90CC71E32987E59B736F02B54 Validity Not Before: Sep 17 08:51:33 2025 GMT Not After : Sep 24 08:51:33 2025 GMT Subject: CN=68ca7696-14c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:9a:dc:26:38:70:7e:a9:13:90:c0:5c:99: 2a:59:41:e7:46:81:69:8f:11:a1:cf:db:9e:a5:77: 72:63:12:67:c3:f8:51:60:74:46:a4:10:9f:69:da: 08:91:b4:54:42:63:b3:69:7f:1d:23:fa:08:6b:85: 7f:3c:96:2f:7b:54:76:a8:ab:17:ed:fb:6f:d5:40: d6:55:38:ab:c4:b0:d8:8b:9a:ec:45:24:34:f2:5a: d4:85:2c:6d:c1:00:d1:3d:c1:a1:e1:8e:78:ed:b3: bd:50:f9:00:41:5f:22:74:9b:6d:45:62:dc:be:0f: 19:e4:a4:43:72:46:6d:3e:b2:2e:32:83:c8:e8:bd: 91:b2:ed:36:5c:55:25:39:a8:dc:77:fb:95:14:37: a0:97:4c:8b:ab:09:89:36:73:02:96:e8:c7:60:f5: 79:b6:21:c0:29:0b:26:4b:1b:b9:88:b4:7a:39:78: ec:40:0c:ca:cf:13:76:8b:a9:de:35:e1:1a:27:d2: db:9e:e5:c8:f7:4e:e6:9a:07:63:fe:1b:9d:f7:8c: f8:86:66:db:91:68:0c:54:5b:c6:cc:45:e1:c2:87: 44:71:ef:27:81:9c:a7:2f:5b:56:4c:6c:96:db:2b: 3d:6d:8a:d4:3b:5d:0b:97:2e:30:e5:88:04:69:f0: 79:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1E:A7:5F:32:5E:E8:AC:F3:0B:57:E1:43:79:21:D6:80:82:B1:0F X509v3 Authority Key Identifier: keyid:01:FA:72:92:07:E4:10:E9:0C:C7:1E:32:98:7E:59:B7:36:F0:2B:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3F7F/8A0B441A872911F09453627FC4F9AE02/AfpykgfkEOkMxx4ymH5ZtzbwK1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfpykgfkEOkMxx4ymH5ZtzbwK1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3F7F/8A0B441A872911F09453627FC4F9AE02/AfpykgfkEOkMxx4ymH5ZtzbwK1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5c:fb:ef:73:4c:4f:a3:07:c3:4c:93:e7:25:35:33:01:d6: f4:c5:64:16:df:1b:06:3e:ce:d1:03:a5:47:12:9a:be:09:58: e3:94:48:80:9c:63:53:ef:87:60:52:d1:ca:be:d5:1f:69:f4: 6c:d5:97:cf:a8:84:13:38:78:06:e1:f1:67:89:96:85:fa:4b: 65:95:ae:d2:90:9b:8a:01:c3:63:7c:d0:21:4e:4c:8b:09:4e: 06:38:4f:cb:54:8e:8d:3d:f9:b6:16:63:93:0f:b9:16:75:b6: 72:1c:fc:01:0c:67:e5:55:24:2a:e9:c6:4d:c9:c1:3b:57:3a: c6:e9:a0:a4:28:57:c6:bc:8f:8b:d5:b6:3d:3a:25:f8:5d:be: 2c:42:04:72:ea:9c:c6:b5:e6:7b:38:c4:3e:35:c3:44:bb:f6: 6c:2e:a8:43:f4:29:32:34:fc:92:2f:1a:60:8c:01:0a:ac:70: c0:d1:c8:58:10:6c:09:a3:b7:94:84:5b:a4:00:14:ef:5c:06: 24:bc:a6:2a:90:bc:d9:a9:57:c9:3e:bc:41:dd:40:5f:32:5e: 9a:ab:e9:29:5b:42:88:ac:ce:d5:c2:e3:5b:34:77:dc:84:57: e3:70:56:c0:7e:c8:be:6d:ba:66:0e:90:34:88:4a:b5:a2:24: 63:c5:24:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD M0Y3RjExMC8GA1UEBRMoMDFGQTcyOTIwN0U0MTBFOTBDQzcxRTMyOTg3RTU5Qjcz NkYwMkI1NDAeFw0yNTA5MTcwODUxMzNaFw0yNTA5MjQwODUxMzNaMBgxFjAUBgNV BAMTDTY4Y2E3Njk2LTE0YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJJ5rcJjhwfqkTkMBcmSpZQedGgWmPEaHP256ld3JjEmfD+FFgdEakEJ9p2giR tFRCY7Npfx0j+ghrhX88li97VHaoqxft+2/VQNZVOKvEsNiLmuxFJDTyWtSFLG3B ANE9waHhjnjts71Q+QBBXyJ0m21FYty+DxnkpENyRm0+si4yg8jovZGy7TZcVSU5 qNx3+5UUN6CXTIurCYk2cwKW6Mdg9Xm2IcApCyZLG7mItHo5eOxADMrPE3aLqd41 4Ron0tue5cj3TuaaB2P+G533jPiGZtuRaAxUW8bMReHCh0Rx7yeBnKcvW1ZMbJbb Kz1titQ7XQuXLjDliARp8HktAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgR6nXzJe 6KzzC1fhQ3kh1oCCsQ8wHwYDVR0jBBgwFoAUAfpykgfkEOkMxx4ymH5ZtzbwK1Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzRjdGLzhBMEI0NDFBODcy OTExRjA5NDUzNjI3RkM0RjlBRTAyL0FmcHlrZ2ZrRU9rTXh4NHltSDVadHpid0sx US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWZweWtnZmtFT2tNeHg0eW1INVp0emJ3SzFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz RjdGLzhBMEI0NDFBODcyOTExRjA5NDUzNjI3RkM0RjlBRTAyL0FmcHlrZ2ZrRU9r TXh4NHltSDVadHpid0sxUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJc++9zTE+jB8NMk+clNTMB1vTFZBbfGwY+ztEDpUcSmr4JWOOUSICc Y1Pvh2BS0cq+1R9p9GzVl8+ohBM4eAbh8WeJloX6S2WVrtKQm4oBw2N80CFOTIsJ TgY4T8tUjo09+bYWY5MPuRZ1tnIc/AEMZ+VVJCrpxk3JwTtXOsbpoKQoV8a8j4vV tj06JfhdvixCBHLqnMa15ns4xD41w0S79mwuqEP0KTI0/JIvGmCMAQqscMDRyFgQ bAmjt5SEW6QAFO9cBiS8piqQvNmpV8k+vEHdQF8yXpqr6SlbQoisztXC41s0d9yE V+NwVsB+yL5tumYOkDSISrWiJGPFJMI= -----END CERTIFICATE-----Generated at Fri Sep 19 07:32:44 2025 by rpki-client