$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft File: ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json) Hash identifier: 0df8ca88SfmfWBBvdG09o1S9U26J3cj7QmPgexueDX4= Subject key identifier: 6C:4F:2C:76:DE:3A:66:84:7E:BB:5C:D5:94:77:7F:62:CE:BB:88:AC Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft Manifest number: 40 Signing time: Wed 05 Nov 2025 07:39:13 +0000 Manifest this update: Wed 05 Nov 2025 07:39:13 +0000 Manifest next update: Wed 12 Nov 2025 07:39:13 +0000 Files and hashes: 1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: 1L78wZ+Ww9h4a8zVxn5hedRWZx6nFnP+OQrnkQNr5DY=) 2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: ml1Kug9S1qOScffHzmjdmVF6lgBnT/45matCF9JTOhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Validity Not Before: Nov 5 07:39:13 2025 GMT Not After : Nov 12 07:39:13 2025 GMT Subject: CN=690aff21-3c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b8:32:f4:59:94:14:e5:df:54:52:1c:27:ea: af:bd:cf:a2:3b:4f:49:1d:69:0c:9f:47:57:bc:e0: 9a:dd:bb:a2:86:03:6c:b9:15:5c:6e:74:ad:83:2d: 49:57:b3:0f:5a:b1:49:0c:f0:9b:76:aa:e6:71:ef: c3:32:22:5e:fa:de:79:0e:26:55:72:15:07:2c:78: 95:22:95:44:09:87:29:b3:5b:5d:9e:40:c3:61:0a: 76:8f:df:f5:74:2a:61:fa:bf:b5:5f:40:5b:8c:2e: 54:80:90:6d:62:9e:6d:8a:33:de:0f:7b:a5:13:63: 17:d6:a1:3f:7e:2a:fb:39:3e:cf:96:d4:34:53:dd: 30:f8:1b:6a:ea:05:5d:ea:61:2c:e3:99:c9:ac:e1: 9d:68:b9:71:3b:84:3c:52:3b:62:66:4a:3d:d3:ae: 00:43:52:f5:19:19:5a:98:4b:75:d4:7c:f9:d5:84: f0:6d:f2:80:87:5e:3d:f6:03:f9:f5:1d:e5:fe:ff: bd:52:b4:46:49:b7:70:62:30:4e:a8:17:24:c3:ac: c0:71:a8:fb:47:3c:5c:b0:e7:fd:c6:49:03:62:e1: 64:1c:fe:dd:51:25:5f:a9:82:2d:b0:b0:7a:06:0b: c9:41:0d:9b:19:0f:75:00:58:3b:88:7c:f4:0d:9e: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4F:2C:76:DE:3A:66:84:7E:BB:5C:D5:94:77:7F:62:CE:BB:88:AC X509v3 Authority Key Identifier: keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:66:d6:f8:56:ee:88:42:ee:e5:89:ea:df:f5:7c:8e:fb:30: 8a:4a:78:0d:33:a1:86:2e:6b:3c:b5:0d:62:7a:66:a4:16:9e: 03:66:bc:74:ae:10:37:ee:68:b8:85:20:d1:62:a8:60:ec:0d: a8:0c:4e:10:ad:a6:29:6c:08:b1:d9:70:8f:0b:ac:91:ba:18: 39:60:36:00:29:8f:72:f9:17:87:02:d7:b3:17:a0:d6:c3:69: e3:f5:88:52:93:81:16:29:67:6c:e7:85:5f:6c:5b:e5:2d:0b: 2c:29:a2:c5:2d:d6:4a:ba:bc:56:1c:b9:01:c4:66:4b:b1:ad: 8f:f3:97:15:ea:7c:d5:03:0b:9a:71:77:62:c2:38:e0:68:36: 67:60:cc:80:33:b3:c7:e3:28:9a:e1:83:cd:cf:fb:d3:4f:a5: 29:52:8c:d1:0a:d8:84:0f:4c:47:64:32:84:49:6e:8b:2d:c5: 55:62:42:2b:e8:59:82:60:2b:27:d4:7d:03:da:57:f9:8f:0b: a8:26:73:c0:f8:15:2e:34:29:d0:20:d3:a4:30:2b:a5:2a:d0: 4c:1b:65:85:34:92:45:10:aa:fa:d8:95:90:6a:f3:3f:a3:b2: e7:b5:24:23:54:41:2e:c9:21:43:94:db:9b:f3:7b:ce:5d:a8: 91:27:54:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkM1QzExMC8GA1UEBRMoNzJEQUI3Q0VCRThBN0YyNzg4REU3ODJFREE3MDFFNDY3 RDhDNzhERTAeFw0yNTExMDUwNzM5MTNaFw0yNTExMTIwNzM5MTNaMBgxFjAUBgNV BAMTDTY5MGFmZjIxLTNjNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDauDL0WZQU5d9UUhwn6q+9z6I7T0kdaQyfR1e84Jrdu6KGA2y5FVxudK2DLUlX sw9asUkM8Jt2quZx78MyIl763nkOJlVyFQcseJUilUQJhymzW12eQMNhCnaP3/V0 KmH6v7VfQFuMLlSAkG1inm2KM94Pe6UTYxfWoT9+Kvs5Ps+W1DRT3TD4G2rqBV3q YSzjmcms4Z1ouXE7hDxSO2JmSj3TrgBDUvUZGVqYS3XUfPnVhPBt8oCHXj32A/n1 HeX+/71StEZJt3BiME6oFyTDrMBxqPtHPFyw5/3GSQNi4WQc/t1RJV+pgi2wsHoG C8lBDZsZD3UAWDuIfPQNnl2DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbE8sdt46 ZoR+u1zVlHd/Ys67iKwwHwYDVR0jBBgwFoAUctq3zr6KfyeI3ngu2nAeRn2MeN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQzVDLzM2Mzc4OEVDNUNC MDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnllSTNuZ3UybkFlUm4yTWVO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3RxM3pyNktmeWVJM25ndTJuQWVSbjJNZU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG QzVDLzM2Mzc4OEVDNUNCMDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnll STNuZ3UybkFlUm4yTWVONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJm1vhW7ohC7uWJ6t/1fI77MIpKeA0zoYYuazy1DWJ6ZqQWngNmvHSu EDfuaLiFINFiqGDsDagMThCtpilsCLHZcI8LrJG6GDlgNgApj3L5F4cC17MXoNbD aeP1iFKTgRYpZ2znhV9sW+UtCywposUt1kq6vFYcuQHEZkuxrY/zlxXqfNUDC5px d2LCOOBoNmdgzIAzs8fjKJrhg83P+9NPpSlSjNEK2IQPTEdkMoRJbostxVViQivo WYJgKyfUfQPaV/mPC6gmc8D4FS40KdAg06QwK6Uq0EwbZYU0kkUQqvrYlZBq8z+j sue1JCNUQS7JIUOU25vze85dqJEnVNw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:40 2025 by rpki-client