$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: 5/wvE2BPnL8PaH6yheSxy+5lpMyesh5KBM+nYOP01c4= Subject key identifier: 21:9F:76:F4:1B:29:25:74:FF:FF:CB:BE:8F:CE:94:76:AD:04:19:58 Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 34BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 34A6 Signing time: Sat 14 Jun 2025 14:16:54 +0000 Manifest this update: Sat 14 Jun 2025 14:16:53 +0000 Manifest next update: Sat 21 Jun 2025 14:16:53 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: CAFgY0ChS0dbf3touafm8UxhMyLhQ5i07PSgirlU+Qw=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: hYytIPmZWrKBo2kUKZ6RbyTlKDVjP2KD/kyPVrq80v0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13503 (0x34bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C, serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: Jun 14 14:16:53 2025 GMT Not After : Jun 21 14:16:53 2025 GMT Subject: CN=684d8455-0043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:17:84:d8:1e:f5:8a:49:41:7f:f1:c0:a7: e3:45:34:1f:f0:19:ad:c3:88:1a:a5:16:8e:bc:86: ed:45:66:97:78:6d:b8:b5:91:f7:3a:b6:d4:91:66: df:7d:b8:61:55:69:01:89:4a:98:68:7e:b9:08:ed: a8:f2:cf:89:ab:3f:92:67:82:b3:0d:07:8d:98:28: b6:02:0c:51:ad:3f:ac:a6:b8:36:ad:fd:7d:aa:bd: a8:af:da:f9:57:ef:6f:bb:ca:44:d0:ea:c0:d0:6f: d1:ee:b6:4b:97:5b:ec:d4:c7:36:7c:7d:f3:ec:69: d1:90:7d:80:cf:bd:d7:b5:a0:66:df:47:02:c8:4d: 88:b8:6a:55:d1:ca:8a:12:8c:07:88:9a:9e:00:26: 20:f5:bf:07:a9:57:44:d3:f5:48:f7:5d:9e:c0:9d: f5:c9:90:c4:1f:fa:24:a7:8d:ce:56:0f:36:44:60: d0:08:ed:93:47:e4:40:b2:ab:97:52:a8:91:6f:6e: 2d:c9:78:7d:b5:bf:bc:59:7f:31:13:cc:d9:83:c9: 2c:6d:37:b0:d9:69:b2:34:2e:ff:e1:91:f7:f4:d7: db:4e:37:1b:30:4d:c0:2c:94:f9:b0:15:db:b3:d4: 99:4f:d9:8c:05:43:60:2e:62:cb:28:9b:e6:25:ad: b8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9F:76:F4:1B:29:25:74:FF:FF:CB:BE:8F:CE:94:76:AD:04:19:58 X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d0:db:30:39:f6:db:67:1f:09:bd:54:9a:9a:91:9a:87:1a: 7c:60:81:f7:19:b8:0a:e9:ed:d7:94:c0:4d:d6:4c:7a:0c:74: 09:ea:83:0b:51:f2:af:8b:e5:3a:67:31:08:f3:b6:ac:ef:b5: 6e:4c:6c:29:2d:34:7e:0f:d7:ee:19:e7:e6:61:20:fc:d5:99: e6:70:59:bc:0d:c1:00:77:ba:a8:6a:80:63:7d:b1:66:e5:7e: 46:c6:de:69:68:6b:6e:af:44:41:0e:c6:72:4b:ea:fd:e5:b6: b9:3e:8f:11:04:59:47:c4:c7:9f:33:ba:49:f1:31:34:a2:78: 94:f7:ff:22:40:f2:0c:63:29:a6:ac:19:54:a5:4c:d8:e9:ee: 9f:f5:b3:06:37:6a:76:5d:0e:b2:83:9f:71:ad:f0:f0:16:68: 5d:8b:e0:28:96:23:69:53:7b:c6:54:dc:a5:e7:b7:90:a6:78: 17:27:6d:b1:b1:68:c6:f2:04:04:29:b8:54:40:1d:0f:12:89: 3c:87:ce:54:8f:ec:bc:06:f9:43:05:16:1e:a2:d3:24:6c:0f: df:10:a9:a7:87:65:8a:70:da:5f:5c:b6:e4:b5:00:fa:b8:3b: 42:08:d8:8a:18:6d:cc:b4:26:bd:c3:fc:77:fb:40:4b:3b:cf: a2:30:6c:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjUwNjE0MTQxNjUzWhcNMjUwNjIxMTQxNjUzWjAYMRYwFAYD VQQDEw02ODRkODQ1NS0wMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jYXhNge9YpJQX/xwKfjRTQf8Bmtw4gapRaOvIbtRWaXeG24tZH3OrbUkWbf fbhhVWkBiUqYaH65CO2o8s+Jqz+SZ4KzDQeNmCi2AgxRrT+sprg2rf19qr2or9r5 V+9vu8pE0OrA0G/R7rZLl1vs1Mc2fH3z7GnRkH2Az73XtaBm30cCyE2IuGpV0cqK EowHiJqeACYg9b8HqVdE0/VI912ewJ31yZDEH/okp43OVg82RGDQCO2TR+RAsquX UqiRb24tyXh9tb+8WX8xE8zZg8ksbTew2WmyNC7/4ZH39NfbTjcbME3ALJT5sBXb s9SZT9mMBUNgLmLLKJvmJa24NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGfdvQb KSV0///Lvo/OlHatBBlYMB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW0NswOfbbZx8JvVSampGahxp8YIH3GbgK6e3XlMBN1kx6DHQJ6oML UfKvi+U6ZzEI87as77VuTGwpLTR+D9fuGefmYSD81ZnmcFm8DcEAd7qoaoBjfbFm 5X5Gxt5paGtur0RBDsZyS+r95ba5Po8RBFlHxMefM7pJ8TE0oniU9/8iQPIMYymm rBlUpUzY6e6f9bMGN2p2XQ6yg59xrfDwFmhdi+AoliNpU3vGVNyl57eQpngXJ22x sWjG8gQEKbhUQB0PEok8h85Uj+y8BvlDBRYeotMkbA/fEKmnh2WKcNpfXLbktQD6 uDtCCNiKGG3MtCa9w/x3+0BLO8+iMGyh -----END CERTIFICATE-----Generated at Sun Jun 15 08:38:54 2025 by rpki-client