$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: UrOYfjz2vRcNyYk5sWKnIbAmrtgjAXH5qD2xvZTMbyw= Subject key identifier: DD:6E:C7:7F:DC:F5:FB:89:77:74:E0:24:33:07:91:1A:08:6A:B2:D6 Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 0183 Signing time: Mon 21 Jul 2025 03:49:30 +0000 Manifest this update: Mon 21 Jul 2025 03:49:30 +0000 Manifest next update: Mon 28 Jul 2025 03:49:30 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: 2P8G1xnV6lcID2jwukKZ+Oy4lWoGMo7Us33MEjhTiog=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: Jul 21 03:49:30 2025 GMT Not After : Jul 28 03:49:30 2025 GMT Subject: CN=687db8ca-f6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:b9:db:bc:e8:8d:26:c2:93:9b:f1:38:59: 02:c3:7d:e1:8e:87:74:f0:01:a1:89:f3:2e:09:05: 5f:c7:32:e1:36:8b:2b:52:1b:0d:cd:43:13:aa:f9: 7c:0d:d5:f2:97:bf:4d:62:a8:e4:25:1c:99:c9:bf: 52:17:dc:d5:87:07:16:82:6d:e1:93:59:27:d6:6b: c4:40:dd:61:d9:e8:2c:58:c3:c2:b4:04:72:8e:23: 92:c9:f8:58:69:16:b0:2a:39:17:8a:c9:40:a3:eb: c1:d4:75:82:45:2d:0a:e2:20:bc:30:1d:0d:57:47: 2a:be:b1:1a:64:fa:fd:1b:2e:a8:22:39:9e:25:6e: 13:12:a0:f9:b3:9f:5a:f1:4b:99:85:66:08:74:de: 5d:dc:21:04:be:d1:ac:d3:ea:44:68:24:8d:2a:81: 6c:55:50:a0:94:b0:10:7c:43:a6:dd:61:dc:6f:0a: fa:c9:a8:fa:f5:72:84:b4:75:cc:b6:a1:4a:d9:e0: ad:f7:d6:8c:16:8b:02:1c:df:86:11:3e:75:99:2c: 02:26:ee:45:33:20:28:04:b7:3c:9f:cb:c8:52:3a: 90:ed:ba:f2:00:ff:d2:31:46:b5:c9:5f:cc:d8:e1: b0:aa:18:5b:3e:dc:56:78:0f:76:04:1d:fb:9d:da: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6E:C7:7F:DC:F5:FB:89:77:74:E0:24:33:07:91:1A:08:6A:B2:D6 X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b5:e6:af:46:a3:8a:f2:b6:c8:e3:87:d6:fa:87:46:c6:dc: a2:7b:d6:37:1b:45:dd:41:21:32:1c:60:b8:49:5e:93:a9:a8: 41:07:ef:17:05:d7:c1:de:fd:9c:53:af:88:b8:68:9c:97:44: 40:32:7b:b1:8e:f2:be:b0:78:35:13:78:9f:80:16:f1:e6:45: 61:a4:d3:5b:fb:46:b5:b7:34:90:0b:8c:6f:e5:1d:46:7b:0e: d6:75:ab:74:95:2f:a9:7c:e6:ca:86:83:08:3e:2d:b7:1a:b1: b2:c9:86:d7:36:0d:1f:f1:8d:05:1e:b6:fc:7a:22:1e:70:ee: 3c:8a:7e:72:1b:c7:bb:6f:f4:da:4d:1c:fd:e6:5a:bf:7d:5d: ba:2b:cd:76:df:f3:ff:61:d7:24:1c:75:80:d4:36:31:db:38: 21:78:69:c5:02:eb:a4:8d:39:ff:18:b1:2d:73:d1:38:97:cb: 85:41:07:d0:28:b7:15:40:85:7a:de:3a:5d:5d:b6:9f:db:cd: ab:e8:f3:a1:aa:88:47:70:81:37:97:22:c6:08:02:61:07:b1: 54:f7:3d:58:bb:65:67:75:7c:41:d7:f6:40:ac:7d:19:a6:81: e4:63:1b:93:0f:75:ed:a9:7d:f2:85:26:f7:a0:de:b2:b5:82: 54:4e:95:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjUwNzIxMDM0OTMwWhcNMjUwNzI4MDM0OTMwWjAYMRYwFAYD VQQDEw02ODdkYjhjYS1mNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNK527zojSbCk5vxOFkCw33hjod08AGhifMuCQVfxzLhNosrUhsNzUMTqvl8 DdXyl79NYqjkJRyZyb9SF9zVhwcWgm3hk1kn1mvEQN1h2egsWMPCtARyjiOSyfhY aRawKjkXislAo+vB1HWCRS0K4iC8MB0NV0cqvrEaZPr9Gy6oIjmeJW4TEqD5s59a 8UuZhWYIdN5d3CEEvtGs0+pEaCSNKoFsVVCglLAQfEOm3WHcbwr6yaj69XKEtHXM tqFK2eCt99aMFosCHN+GET51mSwCJu5FMyAoBLc8n8vIUjqQ7bryAP/SMUa1yV/M 2OGwqhhbPtxWeA92BB37ndqgfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1ux3/c 9fuJd3TgJDMHkRoIarLWMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZteavRqOK8rbI44fW+odGxtyie9Y3G0XdQSEyHGC4SV6TqahBB+8X BdfB3v2cU6+IuGicl0RAMnuxjvK+sHg1E3ifgBbx5kVhpNNb+0a1tzSQC4xv5R1G ew7Wdat0lS+pfObKhoMIPi23GrGyyYbXNg0f8Y0FHrb8eiIecO48in5yG8e7b/Ta TRz95lq/fV26K8123/P/YdckHHWA1DYx2zgheGnFAuukjTn/GLEtc9E4l8uFQQfQ KLcVQIV63jpdXbaf282r6POhqohHcIE3lyLGCAJhB7FU9z1Yu2VndXxB1/ZArH0Z poHkYxuTD3XtqX3yhSb3oN6ytYJUTpVR -----END CERTIFICATE-----Generated at Tue Jul 22 01:21:49 2025 by rpki-client