$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json) Hash identifier: dCCZpa2EGX44QLC7DHoih+jaWNNOipf3MihPpe16l18= Subject key identifier: 49:BD:6C:A4:1F:AF:7A:2D:C2:1E:76:23:6D:EA:45:40:77:30:E4:71 Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Certificate serial: 084C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft Manifest number: 0845 Signing time: Tue 04 Nov 2025 20:48:24 +0000 Manifest this update: Tue 04 Nov 2025 20:48:24 +0000 Manifest next update: Tue 11 Nov 2025 20:48:24 +0000 Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: mymY2KEyQg9fHITBdYAACLsvKdWrVzrX+FjEjG5toig=) 2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: uoOD9ug4cYWw7XbQbk8d35Oe55TFSJv/qRJ/jB7pYDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2124 (0x84c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Validity Not Before: Nov 4 20:48:24 2025 GMT Not After : Nov 11 20:48:24 2025 GMT Subject: CN=690a6698-cdee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f4:de:c4:fc:e3:1a:d4:2e:80:59:ab:8b:3d: 37:0f:70:ac:f8:60:f3:ae:e5:69:f8:7b:9a:95:1f: ce:be:35:cd:e6:92:d1:b0:74:5b:51:e8:92:3c:c4: 67:bb:92:5a:56:9f:f8:0a:28:a4:bf:79:97:a1:f5: 8c:e3:d8:f2:ab:2b:24:88:3e:2c:88:a9:68:f7:72: c2:cd:35:b7:3b:3d:63:88:e1:14:94:96:bc:ce:e0: 5b:c5:1a:69:74:20:78:27:f3:9b:61:84:86:65:bf: 83:64:ef:31:6e:1a:a8:1d:39:95:64:3e:60:87:76: db:a1:de:92:87:99:85:0e:a1:fc:68:77:06:b7:a2: 47:61:c0:d1:36:87:1b:70:34:9d:6f:b4:61:87:68: 3a:ee:c9:8e:72:88:43:de:a8:92:e2:69:af:68:c1: b0:5f:00:0c:ab:d0:a9:9f:51:81:c6:13:3b:4a:81: aa:74:ed:84:cf:82:af:c1:12:7e:9b:7d:dd:c4:2f: 4a:be:cd:79:ec:4c:0b:45:91:1e:52:6e:73:4f:04: 35:5c:70:53:96:d3:7e:15:57:11:1b:47:8c:ea:b8: f5:5b:49:33:2c:24:b9:53:6e:5c:49:ab:21:3a:26: d9:d7:4e:58:5b:38:1d:7e:93:68:d5:62:40:46:fb: f6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BD:6C:A4:1F:AF:7A:2D:C2:1E:76:23:6D:EA:45:40:77:30:E4:71 X509v3 Authority Key Identifier: keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:66:4f:11:73:a5:63:3b:29:50:5e:f2:72:88:98:b9:af:68: de:c1:e5:65:67:ad:ac:76:c0:94:cd:42:70:40:c9:d2:31:e9: 04:7e:c4:60:49:62:d9:1e:b9:77:24:75:17:26:4b:9f:6e:0e: 6a:87:0b:d8:32:d8:d7:29:3e:59:70:df:2c:fd:b6:56:e5:aa: dc:dd:d1:2f:98:6c:d6:c1:cd:7a:f5:45:a5:d3:29:13:ef:21: 5c:f7:fd:80:8a:72:79:70:67:6d:8e:9d:a0:c4:ef:b5:9c:34: 1e:ce:00:75:2b:02:fe:3b:70:90:08:fc:22:ad:ae:3a:7c:ac: 11:a9:0f:1d:87:d2:14:b2:e2:18:10:8b:b8:91:4f:73:c4:2d: b7:f2:12:d4:35:00:db:64:5d:7f:1b:f7:c7:5c:72:4c:d8:86: f5:b8:83:08:99:55:f5:95:73:09:39:85:7e:d1:6d:92:d7:7c: e0:7b:52:03:6c:ff:66:94:ff:74:af:26:18:eb:26:a3:30:da: b9:03:26:05:56:b6:d2:c9:5a:bc:83:71:17:ee:44:2b:20:c4: 8e:ed:00:c6:cd:3c:7a:59:7e:74:08:db:81:6a:0f:f8:59:83: 1d:91:98:b7:65:84:17:64:28:df:28:5f:a4:c1:d8:0c:bd:a8: e9:b8:09:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBQUIxMTAvBgNVBAUTKDAwNUZBQUFEMkFFMzBFNzc1MjU2QUZCQkJCMjhCNjI0 OTE3MkFCRTMwHhcNMjUxMTA0MjA0ODI0WhcNMjUxMTExMjA0ODI0WjAYMRYwFAYD VQQDEw02OTBhNjY5OC1jZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/TexPzjGtQugFmriz03D3Cs+GDzruVp+HualR/OvjXN5pLRsHRbUeiSPMRn u5JaVp/4Ciikv3mXofWM49jyqyskiD4siKlo93LCzTW3Oz1jiOEUlJa8zuBbxRpp dCB4J/ObYYSGZb+DZO8xbhqoHTmVZD5gh3bbod6Sh5mFDqH8aHcGt6JHYcDRNocb cDSdb7Rhh2g67smOcohD3qiS4mmvaMGwXwAMq9Cpn1GBxhM7SoGqdO2Ez4KvwRJ+ m33dxC9Kvs157EwLRZEeUm5zTwQ1XHBTltN+FVcRG0eM6rj1W0kzLCS5U25cSash OibZ105YWzgdfpNo1WJARvv2jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEm9bKQf r3otwh52I23qRUB3MORxMB8GA1UdIwQYMBaAFABfqq0q4w53Ulavu7sotiSRcqvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEFBQi8wNUVFMTc5NEUz OEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRuZFNWcS03dXlpMkpKRnlx LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FGLXFyU3JqRG5kU1ZxLTd1eWkySkpGeXEtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEFBQi8wNUVFMTc5NEUzOEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRu ZFNWcS03dXlpMkpKRnlxLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKZk8Rc6VjOylQXvJyiJi5r2jeweVlZ62sdsCUzUJwQMnSMekEfsRg SWLZHrl3JHUXJkufbg5qhwvYMtjXKT5ZcN8s/bZW5arc3dEvmGzWwc169UWl0ykT 7yFc9/2AinJ5cGdtjp2gxO+1nDQezgB1KwL+O3CQCPwira46fKwRqQ8dh9IUsuIY EIu4kU9zxC238hLUNQDbZF1/G/fHXHJM2Ib1uIMImVX1lXMJOYV+0W2S13zge1ID bP9mlP90ryYY6yajMNq5AyYFVrbSyVq8g3EX7kQrIMSO7QDGzTx6WX50CNuBag/4 WYMdkZi3ZYQXZCjfKF+kwdgMvajpuAlU -----END CERTIFICATE-----Generated at Wed Nov 5 11:57:04 2025 by rpki-client