$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft File: ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json) Hash identifier: 4y5T5OpTSTxl4T9FXd3Z851b1DOGROk9o/GejuZmV6o= Subject key identifier: 4D:F3:24:7B:64:90:95:1F:54:78:F2:4B:15:8C:85:0B:8C:A9:CB:7B Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft Manifest number: 14 Signing time: Sat 09 Aug 2025 08:32:40 +0000 Manifest this update: Sat 09 Aug 2025 08:32:40 +0000 Manifest next update: Sat 16 Aug 2025 08:32:39 +0000 Files and hashes: 1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: a26iXAA/LtuAoYc0vXn4YDAUlh1nm/7uwTGcXN0N1wY=) 2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: ml1Kug9S1qOScffHzmjdmVF6lgBnT/45matCF9JTOhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Validity Not Before: Aug 9 08:32:40 2025 GMT Not After : Aug 16 08:32:39 2025 GMT Subject: CN=689707a8-bd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:a1:8c:3c:1d:ba:af:b4:7f:e3:36:a8:c5: 46:c6:4f:69:b8:3a:a6:d9:11:83:a0:ce:d0:30:db: ca:92:12:56:b4:33:f2:1b:73:49:a8:52:5c:a9:6e: ee:50:06:60:47:59:f1:05:ef:10:f6:30:0c:70:f8: 9f:3d:2a:5e:ae:da:5c:94:8b:7c:91:4e:f1:8b:a5: 7a:14:17:d1:f5:b5:85:eb:c7:30:02:5e:fc:e3:dc: f1:d8:fa:90:a8:4b:ff:2a:86:03:7b:75:1f:da:3a: 43:40:f9:eb:95:13:a1:ea:c8:eb:9c:67:ea:e1:0e: fc:18:ea:54:9f:f4:03:35:85:7b:95:05:7d:0c:6d: f9:60:cd:75:0c:50:61:a0:74:60:61:91:6b:58:0c: 5e:a5:c9:62:b8:9d:87:3c:45:c5:a8:cb:cb:19:6e: d3:34:6e:0c:ff:dc:36:99:57:16:12:b2:dc:c3:33: 07:8c:6a:81:dc:0c:d7:f2:f1:33:65:cf:5f:01:bd: dd:c4:7a:5c:d9:bf:a9:23:b6:d1:bf:23:09:bd:e0: d3:f3:fc:2b:87:15:b6:b5:ea:8d:9d:b5:46:14:20: 78:d0:66:55:3f:b1:fd:b4:8a:68:a5:6d:22:16:fe: dd:74:ed:fa:0e:46:56:56:76:8e:97:c0:16:7c:b3: 7b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F3:24:7B:64:90:95:1F:54:78:F2:4B:15:8C:85:0B:8C:A9:CB:7B X509v3 Authority Key Identifier: keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3b:4f:b4:7b:76:a5:a3:90:9e:eb:56:57:bf:23:85:8c:8d: 79:55:c1:dd:b5:af:b0:b1:0e:e9:f0:b9:a1:2d:75:32:9f:bc: bd:90:40:49:a1:9d:d5:25:bc:be:4f:ed:f9:5b:2f:ef:01:34: 68:2a:f0:48:04:b5:ef:46:71:31:23:c0:de:66:56:b1:66:8f: da:66:c4:27:2e:53:b1:d1:62:b4:da:ba:6a:8c:44:8d:aa:03: 14:6f:73:bf:d9:6c:a0:ac:e9:c1:87:13:4c:d9:6b:40:4c:bf: 0a:0f:b3:1f:c2:7a:80:3e:a1:1b:69:41:4c:27:14:ab:03:85: 57:cc:31:c8:ad:3b:4e:fb:a6:25:54:fd:76:dc:62:dd:8e:54: 73:39:48:27:93:1f:6a:78:f2:1b:a4:24:61:2f:6d:85:72:1f: 32:17:a7:23:b8:e1:1f:e4:77:34:80:64:8c:9b:61:0f:c2:a1: 1d:1c:60:ad:b6:04:e5:b8:3e:c7:4d:8a:55:33:c4:16:de:9b: 41:45:8b:29:52:55:6c:a3:91:ce:0f:9d:83:d4:d4:9e:60:04: 53:3d:03:ea:28:8b:f8:18:0c:ad:6f:54:03:71:7e:11:74:eb: f2:64:5b:5f:4f:ef:9b:86:be:b3:9c:e6:a9:93:bb:f1:1e:d8: 16:d0:08:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkM1QzExMC8GA1UEBRMoNzJEQUI3Q0VCRThBN0YyNzg4REU3ODJFREE3MDFFNDY3 RDhDNzhERTAeFw0yNTA4MDkwODMyNDBaFw0yNTA4MTYwODMyMzlaMBgxFjAUBgNV BAMTDTY4OTcwN2E4LWJkOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClfKGMPB26r7R/4zaoxUbGT2m4OqbZEYOgztAw28qSEla0M/Ibc0moUlypbu5Q BmBHWfEF7xD2MAxw+J89Kl6u2lyUi3yRTvGLpXoUF9H1tYXrxzACXvzj3PHY+pCo S/8qhgN7dR/aOkNA+euVE6HqyOucZ+rhDvwY6lSf9AM1hXuVBX0MbflgzXUMUGGg dGBhkWtYDF6lyWK4nYc8RcWoy8sZbtM0bgz/3DaZVxYSstzDMweMaoHcDNfy8TNl z18Bvd3EelzZv6kjttG/Iwm94NPz/CuHFba16o2dtUYUIHjQZlU/sf20imilbSIW /t107foORlZWdo6XwBZ8s3txAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTfMke2SQ lR9UePJLFYyFC4ypy3swHwYDVR0jBBgwFoAUctq3zr6KfyeI3ngu2nAeRn2MeN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQzVDLzM2Mzc4OEVDNUNC MDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnllSTNuZ3UybkFlUm4yTWVO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3RxM3pyNktmeWVJM25ndTJuQWVSbjJNZU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG QzVDLzM2Mzc4OEVDNUNCMDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnll STNuZ3UybkFlUm4yTWVONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC87T7R7dqWjkJ7rVle/I4WMjXlVwd21r7CxDunwuaEtdTKfvL2QQEmh ndUlvL5P7flbL+8BNGgq8EgEte9GcTEjwN5mVrFmj9pmxCcuU7HRYrTaumqMRI2q AxRvc7/ZbKCs6cGHE0zZa0BMvwoPsx/CeoA+oRtpQUwnFKsDhVfMMcitO077piVU /XbcYt2OVHM5SCeTH2p48hukJGEvbYVyHzIXpyO44R/kdzSAZIybYQ/CoR0cYK22 BOW4PsdNilUzxBbem0FFiylSVWyjkc4PnYPU1J5gBFM9A+ooi/gYDK1vVANxfhF0 6/JkW19P75uGvrOc5qmTu/Ee2BbQCCM= -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:08 2025 by rpki-client