$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft File: ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json) Hash identifier: YSmD64cVbHIgCZi99KG3UrDkn92PMJVc8OCXN8GEj60= Subject key identifier: CB:12:4A:70:10:52:CE:D4:90:20:76:96:AB:91:AF:25:84:1F:E9:8D Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft Manifest number: 09 Signing time: Sat 19 Jul 2025 08:25:59 +0000 Manifest this update: Sat 19 Jul 2025 08:25:58 +0000 Manifest next update: Sat 26 Jul 2025 08:25:58 +0000 Files and hashes: 1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: G90maObA+JDCZ7rhY2nwH7CB5pXUUVenx39hOBrEnXc=) 2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: ml1Kug9S1qOScffHzmjdmVF6lgBnT/45matCF9JTOhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Validity Not Before: Jul 19 08:25:58 2025 GMT Not After : Jul 26 08:25:58 2025 GMT Subject: CN=687b5696-f2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:04:bc:81:92:08:b9:d4:4a:c3:91:14:45:19: 23:db:f7:d8:0a:f9:2e:0c:40:e1:58:5b:82:b1:57: 93:8f:72:57:40:8e:a7:4e:c6:88:b8:92:e4:53:14: 59:6f:ae:ce:1b:25:f4:5f:a4:ee:aa:33:54:39:27: 25:bd:4d:a7:6c:93:c7:9a:dd:41:9b:88:29:8f:40: 42:46:fe:4f:b7:41:e2:f9:b1:54:a5:aa:6e:37:7c: 85:9d:82:da:1e:58:6c:1b:37:95:e4:18:f7:b2:98: db:60:66:c3:34:2c:a7:49:ec:1a:a9:86:f2:6c:94: 29:f4:22:35:ef:3e:8c:98:70:16:5e:c1:6f:63:66: 0b:69:d4:c0:31:4d:b4:05:8b:3c:b7:76:11:ff:e7: 2d:c8:9b:8d:9e:bb:10:c7:35:8b:43:8b:7c:03:0c: 04:2a:ad:85:0f:20:08:6d:7e:73:90:9d:05:7d:58: 4e:80:ab:de:1b:4d:b3:d4:cd:f7:42:f5:0c:64:91: b4:f3:e0:5b:d6:5f:04:04:e1:9d:05:de:e7:2a:c1: 8b:15:cf:e3:db:4a:5b:ef:6f:de:d3:82:da:59:09: b6:f6:a8:e6:77:0a:e2:58:7c:1e:58:cf:19:09:a8: b6:c4:96:2e:30:25:5c:3d:93:80:36:f5:7a:2a:9d: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:12:4A:70:10:52:CE:D4:90:20:76:96:AB:91:AF:25:84:1F:E9:8D X509v3 Authority Key Identifier: keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:40:cd:a2:0a:25:00:af:6c:cf:b9:ab:a3:b8:48:95:6c:b2: b9:81:55:ae:2b:cc:53:a2:cd:bd:eb:0a:f4:fa:aa:f2:e5:6d: 68:ef:6c:4d:ae:2d:08:9e:06:bc:7a:15:5a:18:94:8c:35:13: 62:08:c1:20:a7:be:88:73:06:2f:3b:6c:41:79:31:86:2c:c6: cc:3b:72:56:1b:46:61:28:8d:18:b5:93:78:7c:68:fa:af:8f: a6:54:aa:b5:d2:12:63:f3:1b:87:eb:10:fe:14:d7:c3:84:92: eb:0c:62:04:9d:aa:84:55:1c:15:8f:cb:7f:46:4e:a5:5a:5f: 37:48:ff:49:9c:64:de:ec:27:9a:33:00:e4:9a:e4:6c:dc:ac: 53:58:1f:7d:d3:fc:f2:e7:ee:51:37:1e:47:88:69:71:ff:0e: 49:8c:d0:60:c3:9d:50:a2:53:10:f3:12:1e:0a:5f:9c:86:01: 15:88:0d:29:c5:81:61:83:3e:ba:11:53:a4:56:26:18:77:8c: 9f:2a:d7:01:b2:f5:6f:52:9c:5f:22:5a:2b:05:5e:c1:2d:d0: 82:1a:59:c7:17:b3:3b:55:3a:de:cb:2e:3d:68:e7:cb:71:34: 3b:ed:8e:a5:0a:56:cd:29:2f:c9:f5:15:47:48:2f:7d:23:2f: e6:75:d2:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkM1QzExMC8GA1UEBRMoNzJEQUI3Q0VCRThBN0YyNzg4REU3ODJFREE3MDFFNDY3 RDhDNzhERTAeFw0yNTA3MTkwODI1NThaFw0yNTA3MjYwODI1NThaMBgxFjAUBgNV BAMTDTY4N2I1Njk2LWYyYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLBLyBkgi51ErDkRRFGSPb99gK+S4MQOFYW4KxV5OPcldAjqdOxoi4kuRTFFlv rs4bJfRfpO6qM1Q5JyW9Tadsk8ea3UGbiCmPQEJG/k+3QeL5sVSlqm43fIWdgtoe WGwbN5XkGPeymNtgZsM0LKdJ7BqphvJslCn0IjXvPoyYcBZewW9jZgtp1MAxTbQF izy3dhH/5y3Im42euxDHNYtDi3wDDAQqrYUPIAhtfnOQnQV9WE6Aq94bTbPUzfdC 9QxkkbTz4FvWXwQE4Z0F3ucqwYsVz+PbSlvvb97TgtpZCbb2qOZ3CuJYfB5YzxkJ qLbEli4wJVw9k4A29XoqnT/1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyxJKcBBS ztSQIHaWq5GvJYQf6Y0wHwYDVR0jBBgwFoAUctq3zr6KfyeI3ngu2nAeRn2MeN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQzVDLzM2Mzc4OEVDNUNC MDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnllSTNuZ3UybkFlUm4yTWVO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3RxM3pyNktmeWVJM25ndTJuQWVSbjJNZU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG QzVDLzM2Mzc4OEVDNUNCMDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnll STNuZ3UybkFlUm4yTWVONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK1AzaIKJQCvbM+5q6O4SJVssrmBVa4rzFOizb3rCvT6qvLlbWjvbE2u LQieBrx6FVoYlIw1E2IIwSCnvohzBi87bEF5MYYsxsw7clYbRmEojRi1k3h8aPqv j6ZUqrXSEmPzG4frEP4U18OEkusMYgSdqoRVHBWPy39GTqVaXzdI/0mcZN7sJ5oz AOSa5GzcrFNYH33T/PLn7lE3HkeIaXH/DkmM0GDDnVCiUxDzEh4KX5yGARWIDSnF gWGDProRU6RWJhh3jJ8q1wGy9W9SnF8iWisFXsEt0IIaWccXsztVOt7LLj1o58tx NDvtjqUKVs0pL8n1FUdIL30jL+Z10ko= -----END CERTIFICATE-----Generated at Sun Jul 20 03:31:06 2025 by rpki-client