$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json) Hash identifier: 0rP8wBVNeCyWSdRd9EWt5rbvenodAnPMfb9tPJjZ0FM= Subject key identifier: C7:82:37:08:ED:95:3F:2C:52:23:72:5F:DE:2C:2B:0F:6D:5C:03:69 Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Certificate serial: 0804 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft Manifest number: 07FD Signing time: Sat 14 Jun 2025 20:42:04 +0000 Manifest this update: Sat 14 Jun 2025 20:42:03 +0000 Manifest next update: Sat 21 Jun 2025 20:42:03 +0000 Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: P0nM6KoudO10enyrydVT3XywwNQZfR0QRSBxD1I8Mp0=) 2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: uoOD9ug4cYWw7XbQbk8d35Oe55TFSJv/qRJ/jB7pYDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2052 (0x804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Validity Not Before: Jun 14 20:42:03 2025 GMT Not After : Jun 21 20:42:03 2025 GMT Subject: CN=684dde9b-cd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:82:e8:54:96:72:5c:cb:01:73:a7:65:03:9c: 6e:02:ca:8b:bd:a2:f0:7b:9b:4e:95:47:69:74:f9: 64:8b:91:8a:f6:7d:a9:1f:71:02:66:17:fe:19:c6: 9f:4d:1b:49:a9:f0:e8:40:dc:ce:3c:8c:02:f8:c2: 52:b1:44:46:3c:af:40:44:dc:c2:ae:94:36:ae:95: 5f:50:7a:7d:4e:9e:2a:b9:33:1a:20:00:fa:02:05: 1d:f8:10:ff:6f:9e:85:a4:a0:9d:eb:bd:e5:e4:4e: f7:8e:26:75:16:00:95:54:b9:9e:f3:58:58:ee:29: f2:b5:5d:17:5e:55:10:bb:83:2f:00:1e:4c:94:05: 6b:bc:52:2d:e9:fa:12:85:72:88:e3:1f:05:5b:5e: 95:bd:ab:a0:31:f3:ea:bb:e9:89:0e:78:8c:85:df: 0b:80:66:73:36:41:e1:69:b4:66:4f:7d:06:42:91: 9b:c7:79:8c:93:4e:3c:45:e2:87:79:c0:2b:72:f0: 74:c2:88:96:06:96:2f:6d:2c:f4:b5:a3:4f:ec:87: c5:9d:4e:7d:18:54:3e:73:87:b4:a8:a0:b6:13:1b: 7e:f1:35:0f:6e:c1:c4:f6:51:81:d4:ba:42:9e:94: b1:f3:36:76:bd:75:9d:df:65:1b:ff:4a:f3:02:9a: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:82:37:08:ED:95:3F:2C:52:23:72:5F:DE:2C:2B:0F:6D:5C:03:69 X509v3 Authority Key Identifier: keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:cf:86:36:d3:d0:31:45:f2:2f:9e:f8:d0:7b:b8:a6:1f:0b: 87:89:58:1e:a3:98:e2:69:ae:ec:ea:c3:23:92:b9:9e:ad:a9: bc:1d:a4:1a:21:13:f5:57:4b:47:c4:01:6a:aa:67:dc:48:6c: 27:5e:2f:a3:78:5c:68:58:10:2f:19:bd:a0:b5:3c:06:c3:20: c2:48:17:96:2f:e9:9d:a1:f0:94:3d:5e:48:af:44:07:30:f0: 6a:a7:e2:9e:2a:b2:2f:4b:a9:77:39:7b:a2:3c:3c:12:7e:e4: 55:4a:94:e9:3e:08:c7:12:cf:1b:da:19:60:34:53:9a:4a:03: 5c:e9:e7:ad:2b:45:7a:67:2a:97:31:4b:9c:e8:e4:8f:36:7e: f6:06:25:75:ff:f6:90:cb:b1:2d:26:37:69:45:95:c4:12:85: 9c:3d:64:38:08:4f:88:cc:59:71:09:61:69:00:4f:a4:25:3c: 01:77:14:52:b0:66:4a:e5:ab:95:16:94:71:df:05:3f:a7:ee: 81:d9:d2:ac:d6:f1:96:8c:6a:6e:52:59:38:18:59:1c:23:6c: 95:95:3d:dd:5a:3a:05:45:e4:89:7c:ef:fd:8e:b1:19:6a:12: c8:b5:1f:71:70:03:32:47:e4:e3:14:46:28:c7:dc:52:47:7a: 87:55:40:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBQUIxMTAvBgNVBAUTKDAwNUZBQUFEMkFFMzBFNzc1MjU2QUZCQkJCMjhCNjI0 OTE3MkFCRTMwHhcNMjUwNjE0MjA0MjAzWhcNMjUwNjIxMjA0MjAzWjAYMRYwFAYD VQQDEw02ODRkZGU5Yi1jZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04LoVJZyXMsBc6dlA5xuAsqLvaLwe5tOlUdpdPlki5GK9n2pH3ECZhf+Gcaf TRtJqfDoQNzOPIwC+MJSsURGPK9ARNzCrpQ2rpVfUHp9Tp4quTMaIAD6AgUd+BD/ b56FpKCd673l5E73jiZ1FgCVVLme81hY7inytV0XXlUQu4MvAB5MlAVrvFIt6foS hXKI4x8FW16VvaugMfPqu+mJDniMhd8LgGZzNkHhabRmT30GQpGbx3mMk048ReKH ecArcvB0woiWBpYvbSz0taNP7IfFnU59GFQ+c4e0qKC2Ext+8TUPbsHE9lGB1LpC npSx8zZ2vXWd32Ub/0rzApqUlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeCNwjt lT8sUiNyX94sKw9tXANpMB8GA1UdIwQYMBaAFABfqq0q4w53Ulavu7sotiSRcqvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEFBQi8wNUVFMTc5NEUz OEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRuZFNWcS03dXlpMkpKRnlx LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FGLXFyU3JqRG5kU1ZxLTd1eWkySkpGeXEtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEFBQi8wNUVFMTc5NEUzOEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRu ZFNWcS03dXlpMkpKRnlxLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmz4Y209AxRfIvnvjQe7imHwuHiVgeo5jiaa7s6sMjkrmeram8HaQa IRP1V0tHxAFqqmfcSGwnXi+jeFxoWBAvGb2gtTwGwyDCSBeWL+mdofCUPV5Ir0QH MPBqp+KeKrIvS6l3OXuiPDwSfuRVSpTpPgjHEs8b2hlgNFOaSgNc6eetK0V6ZyqX MUuc6OSPNn72BiV1//aQy7EtJjdpRZXEEoWcPWQ4CE+IzFlxCWFpAE+kJTwBdxRS sGZK5auVFpRx3wU/p+6B2dKs1vGWjGpuUlk4GFkcI2yVlT3dWjoFReSJfO/9jrEZ ahLItR9xcAMyR+TjFEYox9xSR3qHVUDT -----END CERTIFICATE-----Generated at Sun Jun 15 08:38:51 2025 by rpki-client