$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: AZoXyN21kaiRzFoEf4m9DRqaT0RLpgFJFGF/xg2IVao= Subject key identifier: 80:E3:C8:A3:BD:8D:77:89:E6:9E:89:A2:E2:09:3D:5D:1E:9C:49:43 Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 3A Signing time: Thu 07 Aug 2025 08:11:31 +0000 Manifest this update: Thu 07 Aug 2025 08:11:31 +0000 Manifest next update: Thu 14 Aug 2025 08:11:31 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: 4PCK60FjS3fs/GIKQZm+KQsJbN/LHi/Jm/F2F48gqno=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Aug 7 08:11:31 2025 GMT Not After : Aug 14 08:11:31 2025 GMT Subject: CN=68945fb3-9232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:c2:f1:ea:46:e8:02:62:b8:54:55:f4:4b: b7:c6:49:b1:5d:c8:16:af:63:76:21:b2:28:25:a4: 8f:f5:95:a1:b8:70:92:68:ef:ec:69:c5:b3:e5:e1: 86:77:57:48:a9:d3:dc:36:28:15:0c:aa:91:b4:d0: 3d:73:66:c8:fc:8e:b3:61:c8:1f:00:7e:4e:63:80: 2f:00:ea:3f:4e:0a:3c:6d:a3:2d:75:d2:93:cf:a8: 48:f2:0b:e1:af:26:26:f7:02:6b:69:93:70:c8:bd: 56:36:08:bb:9c:43:dd:06:4f:63:82:4d:7f:f7:d3: 8e:01:73:46:37:ce:24:c2:89:35:cb:1d:01:8b:9f: fc:cd:fc:63:bc:b8:74:c1:4a:59:05:17:24:a9:86: d2:a6:a2:a8:53:73:70:1c:68:93:4b:45:dd:98:07: 21:e4:26:41:f2:3a:fa:37:35:f1:14:95:37:03:73: 2f:6b:e5:9a:c0:ab:8b:14:5b:ac:bf:ba:27:2b:57: a6:5e:aa:ec:f4:88:2d:9c:1f:20:4f:40:17:4b:a0: d8:a1:ad:87:29:32:8a:49:7a:21:57:07:1b:c3:8d: 3f:ac:a9:35:92:be:da:bf:12:0e:40:ea:5b:0b:46: 8a:56:63:de:8e:10:02:9a:02:0e:c8:bc:a7:f7:1f: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E3:C8:A3:BD:8D:77:89:E6:9E:89:A2:E2:09:3D:5D:1E:9C:49:43 X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f9:bf:67:68:d1:e0:03:5b:a9:30:3c:e8:1c:c4:95:78:51: cf:74:e1:cb:1d:ed:4e:9d:4d:63:ad:32:10:58:8a:95:ad:e7: 22:1c:e4:84:16:6a:61:1a:7b:45:c8:b7:de:84:c5:60:af:c7: 84:93:d7:23:0b:32:5d:e0:b6:09:ce:fd:bf:38:5c:21:52:be: de:2c:95:3b:53:98:26:89:8b:98:81:75:3b:84:c8:c0:8c:75: a8:e4:a2:af:aa:35:f5:7c:c0:e0:a8:26:eb:d0:f6:3e:a8:7c: 62:fe:d8:a2:e2:e7:c4:5e:7c:10:6b:f6:8f:a6:ee:43:0c:82: 6f:9f:a1:cf:a7:8a:94:20:38:d4:cf:6f:cc:46:17:30:73:c2: 4b:e2:1a:15:2e:91:7f:ae:6f:c1:36:12:90:4c:23:49:84:86: 97:7c:5f:f6:1b:54:93:9f:f9:71:9e:63:74:af:ce:51:40:1c: 4e:54:25:ad:91:13:cd:fb:04:c5:72:ce:de:25:1b:a5:79:ae: e8:45:74:0c:13:c8:ab:54:5b:59:50:ec:e0:0d:70:10:37:8a: 33:31:51:0f:e3:67:f2:17:b9:90:78:66:85:b8:8b:cc:3f:c0: fe:ba:d2:f6:dc:18:68:3f:db:e4:75:f4:75:1c:f9:47:1d:9e: 7f:d7:0d:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTA4MDcwODExMzFaFw0yNTA4MTQwODExMzFaMBgxFjAUBgNV BAMTDTY4OTQ1ZmIzLTkyMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCygcLx6kboAmK4VFX0S7fGSbFdyBavY3YhsiglpI/1laG4cJJo7+xpxbPl4YZ3 V0ip09w2KBUMqpG00D1zZsj8jrNhyB8Afk5jgC8A6j9OCjxtoy110pPPqEjyC+Gv Jib3Amtpk3DIvVY2CLucQ90GT2OCTX/3044Bc0Y3ziTCiTXLHQGLn/zN/GO8uHTB SlkFFySphtKmoqhTc3AcaJNLRd2YByHkJkHyOvo3NfEUlTcDcy9r5ZrAq4sUW6y/ uicrV6Zequz0iC2cHyBPQBdLoNihrYcpMopJeiFXBxvDjT+sqTWSvtq/Eg5A6lsL RopWY96OEAKaAg7IvKf3H4krAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgOPIo72N d4nmnomi4gk9XR6cSUMwHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD75v2do0eADW6kwPOgcxJV4Uc904csd7U6dTWOtMhBYipWt5yIc5IQW amEae0XIt96ExWCvx4ST1yMLMl3gtgnO/b84XCFSvt4slTtTmCaJi5iBdTuEyMCM dajkoq+qNfV8wOCoJuvQ9j6ofGL+2KLi58RefBBr9o+m7kMMgm+foc+nipQgONTP b8xGFzBzwkviGhUukX+ub8E2EpBMI0mEhpd8X/YbVJOf+XGeY3SvzlFAHE5UJa2R E837BMVyzt4lG6V5ruhFdAwTyKtUW1lQ7OANcBA3ijMxUQ/jZ/IXuZB4ZoW4i8w/ wP660vbcGGg/2+R19HUc+Ucdnn/XDY0= -----END CERTIFICATE-----Generated at Fri Aug 8 20:56:26 2025 by rpki-client