$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: vDlmGReJnKvAdSL8w6kc+T5QTtVnOJEiGRKaWDxksZQ= Subject key identifier: D9:BE:9C:3A:EB:EB:8A:FD:5B:E0:71:88:0A:98:6D:6B:47:05:DB:FC Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 3507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 34EE Signing time: Tue 04 Nov 2025 14:16:52 +0000 Manifest this update: Tue 04 Nov 2025 14:16:52 +0000 Manifest next update: Tue 11 Nov 2025 14:16:52 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: M4kBx2tHurJ6JCZ5eLShlu6nu+dTpJopBSVMIZLDN3c=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: hYytIPmZWrKBo2kUKZ6RbyTlKDVjP2KD/kyPVrq80v0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13575 (0x3507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C, serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: Nov 4 14:16:52 2025 GMT Not After : Nov 11 14:16:52 2025 GMT Subject: CN=690a0ad4-d3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c3:54:e1:1f:d0:d4:9f:90:14:8d:10:b3:ab: f1:00:87:67:83:f4:48:b6:14:2b:df:d6:c5:9e:88: 88:99:d8:ca:ea:03:bb:36:c0:fd:b1:bf:a8:34:0a: 2c:b6:03:47:b4:21:b1:c5:78:d8:7c:bb:d8:f3:28: 1e:a9:00:c0:7c:97:1e:a6:21:0e:0b:0a:f1:c9:3d: b2:2b:98:bf:9e:d5:3b:b1:c8:2b:48:d7:08:e1:b9: f6:14:e7:23:26:65:59:88:91:ad:d6:12:50:1d:57: 75:ca:ab:e1:0c:9d:8f:a4:33:1a:8c:7d:54:89:86: 0e:88:56:67:46:97:34:d1:69:32:09:58:5c:16:4d: 89:e5:24:29:4b:6a:a1:75:6a:cc:04:9b:45:85:b6: f1:e6:55:d6:f7:71:22:50:ef:fe:e8:c0:5d:e4:e7: 1c:27:31:e2:c0:03:45:16:63:bc:dd:19:8a:bf:42: aa:3a:af:42:7b:8e:5f:5f:2d:75:5e:dd:02:bc:86: ec:e2:f4:83:8e:06:81:ee:00:1d:82:ad:2e:2f:33: 7c:38:5c:0b:24:d9:97:89:41:00:2b:b9:72:a7:f5: b9:1e:52:d4:26:61:96:30:4c:2c:f6:ae:28:3d:07: 78:ea:0c:80:d4:98:ba:74:73:45:f1:15:c2:90:a6: 6f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BE:9C:3A:EB:EB:8A:FD:5B:E0:71:88:0A:98:6D:6B:47:05:DB:FC X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:db:4a:48:77:1e:ba:86:d5:7e:7a:cc:3d:e9:73:21:f0:52: 51:4f:f2:7e:f0:2b:71:cf:f9:3a:d5:bd:99:b1:32:a1:44:89: 56:15:5c:c5:79:14:29:a8:29:47:1a:45:6d:d5:64:38:a6:ea: 87:6a:57:3a:cc:a9:02:23:2a:37:9f:ab:ec:61:76:42:17:3f: c3:3e:52:5a:16:32:91:eb:f6:a4:34:3f:7b:c7:22:6a:1c:d3: d2:c9:ba:1f:4d:08:9a:f1:c3:2b:e5:3f:74:2f:e4:10:06:e0: 7f:f7:89:83:f4:47:23:5f:95:7c:fe:c8:e0:1b:0d:5b:af:b4: 12:e1:45:33:3a:6a:1c:af:29:28:19:0e:7d:6f:fa:5b:05:03: 2e:b0:5b:7d:a4:78:a7:9f:d9:df:32:31:52:cc:70:4c:d8:6a: 6b:b8:53:65:05:d2:5d:bf:9e:29:88:28:63:81:13:d5:e6:dd: cd:e7:e5:17:37:3a:d4:c3:5d:0f:d1:7b:b7:d9:57:bd:a2:ac: 67:53:97:5d:89:e6:f6:09:ec:ef:54:b7:04:7e:fc:6c:cf:2d: 4f:a5:04:2f:e5:fc:ba:d6:93:d9:42:4f:0b:c4:f2:be:49:13: ba:1a:01:23:54:d7:a4:dc:9b:e2:ef:59:c6:a9:44:fb:53:88: 3f:1e:6b:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjUxMTA0MTQxNjUyWhcNMjUxMTExMTQxNjUyWjAYMRYwFAYD VQQDEw02OTBhMGFkNC1kM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6MNU4R/Q1J+QFI0Qs6vxAIdng/RIthQr39bFnoiImdjK6gO7NsD9sb+oNAos tgNHtCGxxXjYfLvY8ygeqQDAfJcepiEOCwrxyT2yK5i/ntU7scgrSNcI4bn2FOcj JmVZiJGt1hJQHVd1yqvhDJ2PpDMajH1UiYYOiFZnRpc00WkyCVhcFk2J5SQpS2qh dWrMBJtFhbbx5lXW93EiUO/+6MBd5OccJzHiwANFFmO83RmKv0KqOq9Ce45fXy11 Xt0CvIbs4vSDjgaB7gAdgq0uLzN8OFwLJNmXiUEAK7lyp/W5HlLUJmGWMEws9q4o PQd46gyA1Ji6dHNF8RXCkKZv2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNm+nDrr 64r9W+BxiAqYbWtHBdv8MB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc20pIdx66htV+esw96XMh8FJRT/J+8Ctxz/k61b2ZsTKhRIlWFVzF eRQpqClHGkVt1WQ4puqHalc6zKkCIyo3n6vsYXZCFz/DPlJaFjKR6/akND97xyJq HNPSybofTQia8cMr5T90L+QQBuB/94mD9EcjX5V8/sjgGw1br7QS4UUzOmocryko GQ59b/pbBQMusFt9pHinn9nfMjFSzHBM2GpruFNlBdJdv54piChjgRPV5t3N5+UX NzrUw10P0Xu32Ve9oqxnU5ddieb2CezvVLcEfvxszy1PpQQv5fy61pPZQk8LxPK+ SRO6GgEjVNek3Jvi71nGqUT7U4g/HmuU -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:34 2025 by rpki-client