$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft File: ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json) Hash identifier: SY0j95uzJQ9eZ7uf4L+JZKQLY1OGVZ5I3YNoyj+x7Zg= Subject key identifier: 55:13:5F:D4:BC:86:7A:CC:CD:C0:2A:3A:DB:C0:74:82:DA:2E:11:43 Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft Manifest number: 1B Signing time: Sat 23 Aug 2025 08:10:21 +0000 Manifest this update: Sat 23 Aug 2025 08:10:20 +0000 Manifest next update: Sat 30 Aug 2025 08:10:20 +0000 Files and hashes: 1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: MAErwHqWP+gbT3xt8gFM5mtjJMAtRQAT8p1xcg966nc=) 2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: ml1Kug9S1qOScffHzmjdmVF6lgBnT/45matCF9JTOhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Validity Not Before: Aug 23 08:10:20 2025 GMT Not After : Aug 30 08:10:20 2025 GMT Subject: CN=68a9776c-016f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a5:59:0a:bf:a7:c4:d4:c0:f3:51:93:b5:a0: 82:6b:bb:f6:a5:d2:98:6d:02:71:f4:d3:eb:fd:d5: 27:b7:76:26:ec:6d:91:bf:44:7a:8e:7d:bb:9c:a1: 51:95:09:7a:ea:bd:88:01:fb:63:e3:cc:16:33:af: 61:13:b7:99:f4:bd:1d:c5:29:47:62:66:82:c6:52: b9:b6:5f:53:bc:50:d6:8f:35:45:e5:f9:62:fc:6e: 1c:9c:e5:32:d1:4b:71:af:50:ce:c1:a2:7a:dc:a2: f8:7d:c6:78:15:58:b9:01:ea:7a:2d:9b:5f:fd:12: b2:c8:0a:e1:76:d7:91:e8:4d:d8:29:b5:bf:4e:28: 37:88:67:ed:37:71:4a:6d:45:fd:3d:41:70:7f:0b: 8f:a7:27:92:8f:b3:56:a1:46:69:24:35:57:ca:b6: df:bc:2a:5e:23:22:77:f9:1e:ba:32:bc:f7:8d:73: 47:cb:cc:d0:2a:6f:9b:39:18:90:45:00:3a:1c:a4: 98:72:bd:a0:ac:65:6e:2b:de:e0:de:bf:ec:27:34: bf:54:ac:f0:4d:f2:86:93:2b:1e:3f:3e:35:e7:c7: c3:1f:ae:20:64:d0:45:b2:ef:b2:6c:3d:60:4d:ca: c3:5f:0b:a0:53:19:27:a5:9a:c0:74:d6:48:77:95: 6f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:13:5F:D4:BC:86:7A:CC:CD:C0:2A:3A:DB:C0:74:82:DA:2E:11:43 X509v3 Authority Key Identifier: keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:86:86:93:73:91:21:74:a1:9c:f9:e6:13:63:4e:90:ef:51: 79:16:5c:33:24:5b:01:98:93:0e:3a:46:e8:70:94:27:82:a8: 5d:5f:8f:42:ce:6e:2a:04:78:3e:2a:10:4e:b1:c5:b5:69:de: 88:8c:c7:9a:79:6f:e1:ec:87:ef:42:6d:80:06:19:80:16:e3: ca:7d:62:53:20:66:5d:81:c7:bf:16:07:c4:f1:66:08:be:86: bc:36:5f:ac:5a:e0:57:3e:3c:bb:be:a1:f8:9e:1e:0e:40:e9: f7:cc:8e:41:bf:ad:46:a2:76:ee:6f:7d:c8:88:38:dc:89:b0: 4d:e6:c3:dd:26:52:b2:6d:eb:be:ca:7b:47:12:f2:c8:78:20: 02:87:9c:c6:49:5f:b0:9c:62:14:99:ac:bc:b3:46:58:3e:ed: 57:f2:d2:75:9f:27:87:b8:9d:98:d3:bf:4d:1d:9f:da:b2:0f: aa:e5:b6:eb:9c:e8:ed:d0:58:75:b5:08:ae:3e:d3:48:58:f4: 0c:c7:41:f4:15:e9:52:e6:c2:2b:58:7b:f5:8d:c0:a9:50:27: 55:12:fc:c8:ba:95:ef:a8:9e:98:3d:d3:e1:a7:32:80:20:d6: 6f:6e:a0:b8:6c:f2:00:f8:d8:81:d2:38:1d:0e:6f:93:1f:0d: 00:92:99:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkM1QzExMC8GA1UEBRMoNzJEQUI3Q0VCRThBN0YyNzg4REU3ODJFREE3MDFFNDY3 RDhDNzhERTAeFw0yNTA4MjMwODEwMjBaFw0yNTA4MzAwODEwMjBaMBgxFjAUBgNV BAMTDTY4YTk3NzZjLTAxNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtpVkKv6fE1MDzUZO1oIJru/al0phtAnH00+v91Se3dibsbZG/RHqOfbucoVGV CXrqvYgB+2PjzBYzr2ETt5n0vR3FKUdiZoLGUrm2X1O8UNaPNUXl+WL8bhyc5TLR S3GvUM7Bonrcovh9xngVWLkB6notm1/9ErLICuF215HoTdgptb9OKDeIZ+03cUpt Rf09QXB/C4+nJ5KPs1ahRmkkNVfKtt+8Kl4jInf5HroyvPeNc0fLzNAqb5s5GJBF ADocpJhyvaCsZW4r3uDev+wnNL9UrPBN8oaTKx4/PjXnx8MfriBk0EWy77JsPWBN ysNfC6BTGSelmsB01kh3lW/xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVRNf1LyG eszNwCo628B0gtouEUMwHwYDVR0jBBgwFoAUctq3zr6KfyeI3ngu2nAeRn2MeN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQzVDLzM2Mzc4OEVDNUNC MDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnllSTNuZ3UybkFlUm4yTWVO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3RxM3pyNktmeWVJM25ndTJuQWVSbjJNZU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG QzVDLzM2Mzc4OEVDNUNCMDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnll STNuZ3UybkFlUm4yTWVONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAICGhpNzkSF0oZz55hNjTpDvUXkWXDMkWwGYkw46RuhwlCeCqF1fj0LO bioEeD4qEE6xxbVp3oiMx5p5b+Hsh+9CbYAGGYAW48p9YlMgZl2Bx78WB8TxZgi+ hrw2X6xa4Fc+PLu+ofieHg5A6ffMjkG/rUaidu5vfciIONyJsE3mw90mUrJt677K e0cS8sh4IAKHnMZJX7CcYhSZrLyzRlg+7Vfy0nWfJ4e4nZjTv00dn9qyD6rltuuc 6O3QWHW1CK4+00hY9AzHQfQV6VLmwitYe/WNwKlQJ1US/Mi6le+onpg90+GnMoAg 1m9uoLhs8gD42IHSOB0Ob5MfDQCSmSo= -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:18 2025 by rpki-client