$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft File: ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json) Hash identifier: ws4E5/YiDfRiIWLUdqoCIgim1d2yZdHM45dZI4uTG7M= Subject key identifier: 3A:14:24:23:3E:26:D2:04:05:06:2B:8C:A2:89:4B:77:C7:29:18:79 Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft Manifest number: 28 Signing time: Wed 17 Sep 2025 08:31:25 +0000 Manifest this update: Wed 17 Sep 2025 08:31:24 +0000 Manifest next update: Wed 24 Sep 2025 08:31:24 +0000 Files and hashes: 1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: RJYusQ4CvqspA3A+2AbMFOhtRRdUwnIoZ3ilzTFd4L4=) 2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: ml1Kug9S1qOScffHzmjdmVF6lgBnT/45matCF9JTOhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Validity Not Before: Sep 17 08:31:24 2025 GMT Not After : Sep 24 08:31:24 2025 GMT Subject: CN=68ca71dc-51ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:64:30:95:9c:fe:94:2e:bd:b3:cf:0b:81: b7:12:1b:1a:c5:57:df:b3:3e:87:01:78:b3:2a:14: 31:77:bc:0c:65:b3:87:df:79:b5:26:f7:af:cd:85: 1b:45:1c:1b:28:85:58:76:eb:27:20:65:bd:35:3b: 81:a4:ce:f7:ed:1e:c9:73:58:23:18:11:25:a5:50: 9c:dd:3c:ba:13:06:51:a9:ba:64:6d:18:42:5d:87: 9c:1f:15:15:a7:4f:c4:66:16:e0:3d:55:ba:b2:85: d1:2b:e1:30:21:9b:84:64:88:1f:b0:76:85:1d:fa: 2f:92:56:10:7a:89:6f:e9:b3:bd:ef:88:33:72:63: 24:2f:e8:2f:91:a5:08:87:c2:db:35:b8:09:81:09: 08:99:53:83:d1:03:ad:22:66:d0:43:36:8c:2f:fd: a7:45:1b:c4:df:95:a8:ca:0d:4e:dd:13:b8:4b:e7: 63:ac:98:46:6d:15:17:f9:7d:3b:9c:dd:61:e2:4e: 2d:40:de:03:4e:33:9b:39:b2:d4:3e:bb:1b:9b:12: db:44:ec:a1:32:e3:a7:ea:eb:5d:18:c8:90:de:02: 2d:ac:b6:ae:99:08:16:6c:23:65:25:0c:c6:dc:4e: 74:d4:f1:b4:c5:35:44:29:d2:d6:ac:95:a7:e5:42: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:14:24:23:3E:26:D2:04:05:06:2B:8C:A2:89:4B:77:C7:29:18:79 X509v3 Authority Key Identifier: keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:9e:94:e9:07:43:10:77:d7:49:6f:ad:9c:c6:2b:92:d4:74: e1:6a:52:80:be:7c:99:8e:a1:ad:99:02:3f:7f:b7:22:39:ed: ed:43:c8:c2:a1:a2:ff:d4:11:ca:d0:b6:e0:1e:63:b3:6c:59: 87:e8:ea:c2:69:1d:3a:c5:17:fe:18:c6:f1:bf:58:d5:98:f6: d9:2c:f6:be:ba:98:4c:74:77:1d:88:38:d0:d8:5c:10:23:35: 03:c6:d5:ce:d5:17:b9:1d:91:11:33:91:85:d6:35:e3:fb:10: 6a:3a:37:59:be:34:69:86:e2:82:d1:03:91:df:7f:2a:60:41: ab:57:66:cd:94:3d:2b:33:66:08:e5:b0:97:f2:99:53:ed:b1: ae:24:fc:83:5f:92:03:fa:02:1e:eb:47:0a:87:53:09:a5:1d: 4e:5f:46:d3:e2:ae:7f:6f:ce:2a:e0:05:72:0e:d2:f0:0f:23: fd:ae:e6:11:be:88:28:77:f2:66:70:0a:6d:a3:15:0f:1e:93: 8b:3c:d3:9c:97:32:6d:a0:bf:f4:ad:4a:5a:96:62:f6:e8:65: 58:e4:44:d5:9e:81:1d:48:42:43:c6:22:a6:1b:2f:b0:c6:e2: 45:00:db:94:83:f7:b2:b7:6b:df:05:2c:e4:08:59:4a:2d:6d: f9:38:a9:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkM1QzExMC8GA1UEBRMoNzJEQUI3Q0VCRThBN0YyNzg4REU3ODJFREE3MDFFNDY3 RDhDNzhERTAeFw0yNTA5MTcwODMxMjRaFw0yNTA5MjQwODMxMjRaMBgxFjAUBgNV BAMTDTY4Y2E3MWRjLTUxYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+y2QwlZz+lC69s88LgbcSGxrFV9+zPocBeLMqFDF3vAxls4ffebUm96/NhRtF HBsohVh26ycgZb01O4GkzvftHslzWCMYESWlUJzdPLoTBlGpumRtGEJdh5wfFRWn T8RmFuA9VbqyhdEr4TAhm4RkiB+wdoUd+i+SVhB6iW/ps73viDNyYyQv6C+RpQiH wts1uAmBCQiZU4PRA60iZtBDNowv/adFG8TflajKDU7dE7hL52OsmEZtFRf5fTuc 3WHiTi1A3gNOM5s5stQ+uxubEttE7KEy46fq610YyJDeAi2stq6ZCBZsI2UlDMbc TnTU8bTFNUQp0taslaflQknVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOhQkIz4m 0gQFBiuMoolLd8cpGHkwHwYDVR0jBBgwFoAUctq3zr6KfyeI3ngu2nAeRn2MeN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQzVDLzM2Mzc4OEVDNUNC MDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnllSTNuZ3UybkFlUm4yTWVO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3RxM3pyNktmeWVJM25ndTJuQWVSbjJNZU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG QzVDLzM2Mzc4OEVDNUNCMDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnll STNuZ3UybkFlUm4yTWVONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMKelOkHQxB310lvrZzGK5LUdOFqUoC+fJmOoa2ZAj9/tyI57e1DyMKh ov/UEcrQtuAeY7NsWYfo6sJpHTrFF/4YxvG/WNWY9tks9r66mEx0dx2IONDYXBAj NQPG1c7VF7kdkREzkYXWNeP7EGo6N1m+NGmG4oLRA5HffypgQatXZs2UPSszZgjl sJfymVPtsa4k/INfkgP6Ah7rRwqHUwmlHU5fRtPirn9vzirgBXIO0vAPI/2u5hG+ iCh38mZwCm2jFQ8ek4s805yXMm2gv/StSlqWYvboZVjkRNWegR1IQkPGIqYbL7DG 4kUA25SD97K3a98FLOQIWUotbfk4qSA= -----END CERTIFICATE-----Generated at Fri Sep 19 09:26:30 2025 by rpki-client