$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: o4JeViKgsMeYF6ReFyd84C/TsPQVRm10GGymOr0URo4= Subject key identifier: 96:B2:25:26:FD:57:F3:FB:82:B3:CB:7E:94:C8:EC:02:81:BF:6D:9C Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 66 Signing time: Mon 03 Nov 2025 07:00:19 +0000 Manifest this update: Mon 03 Nov 2025 07:00:18 +0000 Manifest next update: Mon 10 Nov 2025 07:00:18 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: gfGHE+Oue3TUyWwJLtQhcJUhXCQSvr55YJVUj9ZRY9w=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Nov 3 07:00:18 2025 GMT Not After : Nov 10 07:00:18 2025 GMT Subject: CN=69085302-fc4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:45:47:5f:e7:fd:cf:b2:11:1b:36:77:fc: d5:1d:03:e8:2d:9f:0e:f8:28:60:d1:8c:11:40:de: 77:e5:0f:49:a8:78:01:a8:77:e9:04:89:84:41:09: 2b:53:37:23:3b:8d:fc:1d:89:73:6f:60:70:c6:74: 6f:5d:43:81:46:e9:2d:62:5b:44:82:7c:fd:b5:f8: 94:9f:26:90:9d:27:9b:ee:f9:c0:5d:05:d8:60:20: 10:3a:a9:cf:35:4f:14:99:cd:c0:ec:2a:8e:a9:0f: 7a:83:31:1f:46:ba:f0:72:62:73:35:04:f2:96:f2: af:46:10:47:9a:be:3f:7a:47:c9:34:c5:85:4c:4b: 42:85:ce:44:9a:92:da:2e:26:73:c0:bf:57:39:0a: ea:be:36:6e:0c:a7:15:1d:05:a4:18:9d:11:9a:b8: 99:10:c1:b6:f5:54:ac:52:d3:d4:39:eb:4a:aa:e2: b5:2c:de:73:b7:b6:1c:a7:10:ce:26:04:c4:29:e2: 10:bd:f0:93:c1:b6:8d:08:79:44:1f:03:b9:85:11: 49:9d:23:1b:bc:9a:ad:2c:8f:c5:a6:27:56:07:e1: fb:9f:20:99:ac:44:4e:52:2c:95:5d:69:1e:d5:6e: b3:69:e3:c5:1d:74:e5:85:8f:69:4f:a7:37:25:d6: 5d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B2:25:26:FD:57:F3:FB:82:B3:CB:7E:94:C8:EC:02:81:BF:6D:9C X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b9:54:99:57:93:42:ce:bd:40:4f:db:08:31:3d:bd:da:5d: cc:c5:4e:d8:03:ee:20:d0:b4:14:f7:9c:e9:4a:0f:67:4f:6e: 83:27:7a:c9:3c:61:b0:80:37:f3:3c:8f:33:e0:73:43:d0:55: 0e:7c:86:4a:91:d3:27:20:f2:51:db:85:5e:32:4b:6d:7d:15: c6:bf:1f:e0:04:b0:e3:58:2c:2e:b8:ad:90:c6:2e:79:b0:a2: 27:30:37:90:a6:d7:78:76:1b:ae:5b:ad:d3:0d:e8:ef:b6:48: d1:db:fb:3f:38:27:4b:78:e6:3a:d1:e2:7c:1d:98:40:02:6e: 56:91:db:77:7e:55:c6:80:48:69:a9:b8:02:37:34:d0:e2:dc: f3:73:51:fd:00:79:bb:72:ca:26:7b:e7:49:01:d1:b4:af:b3: d1:d2:47:b5:7a:08:aa:d5:b7:06:85:98:5a:1e:6d:d9:07:59: 24:26:fa:8c:da:f5:eb:17:06:b1:bb:5a:20:0b:a2:c3:78:c2: bf:8b:a1:b0:91:44:35:e3:30:bc:50:ba:1f:97:d4:63:23:76: 87:05:2f:55:25:e4:4d:46:16:74:c1:2d:aa:3e:bc:5d:07:a8: 53:dc:35:51:6a:e5:da:33:0d:43:aa:95:2b:de:e5:43:16:f7: 7b:b6:b6:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTExMDMwNzAwMThaFw0yNTExMTAwNzAwMThaMBgxFjAUBgNV BAMTDTY5MDg1MzAyLWZjNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/80VHX+f9z7IRGzZ3/NUdA+gtnw74KGDRjBFA3nflD0moeAGod+kEiYRBCStT NyM7jfwdiXNvYHDGdG9dQ4FG6S1iW0SCfP21+JSfJpCdJ5vu+cBdBdhgIBA6qc81 TxSZzcDsKo6pD3qDMR9GuvByYnM1BPKW8q9GEEeavj96R8k0xYVMS0KFzkSaktou JnPAv1c5Cuq+Nm4MpxUdBaQYnRGauJkQwbb1VKxS09Q560qq4rUs3nO3thynEM4m BMQp4hC98JPBto0IeUQfA7mFEUmdIxu8mq0sj8WmJ1YH4fufIJmsRE5SLJVdaR7V brNp48UddOWFj2lPpzcl1l19AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlrIlJv1X 8/uCs8t+lMjsAoG/bZwwHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH+5VJlXk0LOvUBP2wgxPb3aXczFTtgD7iDQtBT3nOlKD2dPboMnesk8 YbCAN/M8jzPgc0PQVQ58hkqR0ycg8lHbhV4yS219Fca/H+AEsONYLC64rZDGLnmw oicwN5Cm13h2G65brdMN6O+2SNHb+z84J0t45jrR4nwdmEACblaR23d+VcaASGmp uAI3NNDi3PNzUf0AebtyyiZ750kB0bSvs9HSR7V6CKrVtwaFmFoebdkHWSQm+oza 9esXBrG7WiALosN4wr+LobCRRDXjMLxQuh+X1GMjdocFL1Ul5E1GFnTBLao+vF0H qFPcNVFq5dozDUOqlSve5UMW93u2tg8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:08 2025 by rpki-client