$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json) Hash identifier: Acidx08EIE9owZwyArU7WIPuHI95aU3kl9rHWcTRYxw= Subject key identifier: 15:5A:80:B3:00:EB:AA:70:66:3C:C1:1F:02:A6:06:A8:CB:0B:29:88 Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Certificate serial: 171B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft Manifest number: 1708 Signing time: Sat 18 Oct 2025 17:03:33 +0000 Manifest this update: Sat 18 Oct 2025 17:03:32 +0000 Manifest next update: Sat 25 Oct 2025 17:03:32 +0000 Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: Wd0SVye5La3fyP/WEyQBa7WKIC99sfEEoYL1azflTOk=) 2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: 822Cv07i81nzITiBp8oPidqObRAFnQ5Dsa+D8sFZUvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5915 (0x171b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Validity Not Before: Oct 18 17:03:32 2025 GMT Not After : Oct 25 17:03:32 2025 GMT Subject: CN=68f3c864-2c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:01:3c:8b:6c:37:3c:db:8b:bf:ea:bb:6c:d1: a6:7e:d0:b4:a5:e8:11:79:3b:1e:e2:ab:b3:82:a3: 94:20:40:08:35:8e:c3:41:2d:c0:f0:9d:7a:ca:96: d9:61:bd:83:45:3b:43:25:cf:54:18:f4:80:ed:9a: d6:30:6e:c6:ff:0a:a5:5e:3d:94:56:07:9e:0c:87: f2:d6:dd:eb:f5:5c:76:da:66:09:73:6d:1f:a3:a7: 33:47:18:fd:80:53:f5:45:6f:ca:a7:09:97:2c:03: 78:75:b2:b6:eb:57:9a:7c:f1:c5:51:0f:b1:20:98: 8b:55:2f:b7:72:b5:c1:88:33:bc:a0:aa:eb:93:8f: 39:f4:2c:14:4c:a3:4c:b0:14:98:d6:eb:4b:76:5c: 81:fa:2e:0c:7c:2a:22:43:d7:75:38:29:a4:75:4f: 33:11:80:8b:63:b1:9b:b0:74:b4:98:3f:49:02:ee: f7:47:69:b2:6d:ea:cd:8f:38:90:8d:c4:14:2b:62: cd:f0:e6:71:22:5f:fe:f7:cd:e0:d8:63:a5:65:84: 20:5f:ee:d4:82:d1:98:f7:84:0d:7c:e7:ee:58:62: 65:d5:2c:d7:93:ab:20:ae:16:12:c3:91:61:ac:d3: 22:57:6e:23:d7:3b:09:58:78:bb:dc:78:83:6d:94: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:80:B3:00:EB:AA:70:66:3C:C1:1F:02:A6:06:A8:CB:0B:29:88 X509v3 Authority Key Identifier: keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:73:e9:f4:fb:6b:81:7c:e3:c0:85:c5:fb:58:86:73:68:1c: 5c:07:62:c6:39:7c:f0:02:6d:a9:73:76:62:58:ea:b3:8d:4c: 22:b6:dc:ce:02:a6:de:07:da:80:c6:1d:d7:a0:49:51:9c:70: 60:2c:16:e9:3a:0d:ee:d0:d3:fd:06:e3:ee:3d:51:7b:37:7a: 98:ec:e9:0e:54:44:92:fc:ed:72:7a:65:9b:f6:92:7e:13:3a: c8:29:31:19:35:6d:00:66:1e:b8:ac:73:bf:a2:53:fe:8a:66: 79:96:b5:c1:34:40:75:b1:6b:4f:da:88:3a:7d:eb:e7:22:33: 66:0b:a7:45:14:1c:e9:c9:25:8d:0e:53:de:14:40:02:7c:fb: cb:0f:22:57:05:4d:ed:3d:99:11:a0:ac:a7:30:af:ab:94:d8: 57:36:17:57:68:63:37:73:24:f7:e4:0c:6b:a2:49:d3:e0:bf: 2a:92:e7:9f:66:0b:b6:e7:96:04:f2:8b:37:62:d6:31:be:47: f8:be:ca:3d:da:a5:db:f1:bf:57:72:82:9e:31:e2:af:23:50: f5:82:85:24:84:e4:c0:de:72:d7:90:f5:47:24:b1:74:44:64: 8c:4d:4a:fb:40:77:66:0f:85:4b:bb:c9:29:41:ae:98:65:17: c1:95:40:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD M0MwMkVDRjQwHhcNMjUxMDE4MTcwMzMyWhcNMjUxMDI1MTcwMzMyWjAYMRYwFAYD VQQDEw02OGYzYzg2NC0yYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwE8i2w3PNuLv+q7bNGmftC0pegReTse4quzgqOUIEAINY7DQS3A8J16ypbZ Yb2DRTtDJc9UGPSA7ZrWMG7G/wqlXj2UVgeeDIfy1t3r9Vx22mYJc20fo6czRxj9 gFP1RW/KpwmXLAN4dbK261eafPHFUQ+xIJiLVS+3crXBiDO8oKrrk4859CwUTKNM sBSY1utLdlyB+i4MfCoiQ9d1OCmkdU8zEYCLY7GbsHS0mD9JAu73R2myberNjziQ jcQUK2LN8OZxIl/+983g2GOlZYQgX+7UgtGY94QNfOfuWGJl1SzXk6sgrhYSw5Fh rNMiV24j1zsJWHi73HiDbZTMkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVagLMA 66pwZjzBHwKmBqjLCymIMB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6 anpyN1dhaldKeFhEd0M3UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxc+n0+2uBfOPAhcX7WIZzaBxcB2LGOXzwAm2pc3ZiWOqzjUwittzO AqbeB9qAxh3XoElRnHBgLBbpOg3u0NP9BuPuPVF7N3qY7OkOVESS/O1yemWb9pJ+ EzrIKTEZNW0AZh64rHO/olP+imZ5lrXBNEB1sWtP2og6fevnIjNmC6dFFBzpySWN DlPeFEACfPvLDyJXBU3tPZkRoKynMK+rlNhXNhdXaGM3cyT35AxroknT4L8qkuef Zgu255YE8os3YtYxvkf4vso92qXb8b9XcoKeMeKvI1D1goUkhOTA3nLXkPVHJLF0 RGSMTUr7QHdmD4VLu8kpQa6YZRfBlUBf -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:45 2025 by rpki-client