$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: 6Qzf/14pxLRob4x98zzYe2WDti/Ix5tcsKcDQEb2nY8= Subject key identifier: D1:B0:6E:9B:5E:7C:97:00:14:77:E5:50:1D:E6:08:9A:AD:0A:35:1C Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 0411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 040D Signing time: Fri 19 Sep 2025 00:48:08 +0000 Manifest this update: Fri 19 Sep 2025 00:48:07 +0000 Manifest next update: Fri 26 Sep 2025 00:48:07 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: pfZNsEr23PttfRnwxay1wJYa0qZUKmw0HmdYMkWHoxY=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: gOa0TpZKNAKtEp1z7Y7hA0Mkc96+IudmzfWq1Ab24PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: Sep 19 00:48:07 2025 GMT Not After : Sep 26 00:48:07 2025 GMT Subject: CN=68cca848-0b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f0:5c:17:4f:f9:60:f3:9e:2c:3a:12:b5:37: 95:ca:44:c8:82:54:24:7a:33:f8:6b:8f:16:c7:1a: d4:a2:02:51:5a:f1:e4:8c:57:7b:a6:ed:25:21:5c: c8:93:e2:41:a3:92:a8:b6:e7:3a:79:e3:e9:49:25: f3:cd:2e:87:02:89:39:e4:11:24:72:5b:35:63:63: 50:1e:93:58:62:91:c5:1d:61:99:b3:4c:3e:a9:06: 87:d8:94:eb:2e:ab:d8:77:b5:eb:d5:ec:ac:45:c2: c1:59:c7:63:b9:0a:9a:9b:61:6d:a8:0b:51:92:9a: dc:35:4f:6a:b3:78:35:54:af:30:c7:36:f6:a7:e1: 5f:b7:60:76:9b:6c:db:8b:5a:01:bb:0a:33:50:58: 85:a6:27:35:65:f6:3c:75:59:04:70:5b:97:0e:d7: be:06:6d:df:72:42:15:65:19:46:3a:f9:23:5a:20: 55:b3:35:d8:24:47:dc:a3:1e:00:2d:d0:7d:bf:01: f5:bf:6e:a2:e3:3f:7b:e0:41:b0:0c:4f:9d:c7:5f: e9:5e:69:47:ea:78:87:5c:16:5a:5d:69:26:43:1c: 7d:e3:cd:6a:55:77:4c:44:53:d1:8e:57:9b:d1:dc: 4e:b3:10:fd:1f:9d:4b:78:da:d9:6d:21:54:f7:ef: 59:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B0:6E:9B:5E:7C:97:00:14:77:E5:50:1D:E6:08:9A:AD:0A:35:1C X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:67:39:c5:cd:46:fc:53:b4:d7:66:9e:34:b8:fa:ab:0e:c2: 34:3e:87:d5:94:af:14:46:bd:23:77:5e:74:b0:1a:0e:41:6e: cc:d3:94:31:1c:80:3a:4d:fe:94:9d:dd:f0:cc:7f:84:0f:a4: 44:8d:50:72:a8:e2:9f:0d:e4:21:20:95:5a:91:b7:77:40:81: a7:fa:ca:3c:dc:d3:49:87:b1:cc:f9:1d:4a:25:8d:c5:ae:9a: 5b:03:32:b4:52:ff:5d:3b:69:e3:6b:77:50:47:21:68:54:84: 55:61:35:ed:95:9c:34:9d:db:52:8a:fc:54:58:06:f8:7d:4c: 25:43:cb:4a:76:11:6e:fc:30:bc:2c:c8:f7:c1:6a:4b:22:2b: 44:5d:91:ad:46:de:78:8d:5a:99:ee:9f:b0:6c:34:93:d7:5c: 71:f8:26:51:67:fe:2f:db:26:f1:b2:eb:c0:ca:31:d7:03:e3: 23:c7:6f:98:8c:f4:f0:65:73:1b:ee:e7:e0:4a:49:ba:85:7a: 23:b4:7b:a4:18:ec:1b:bc:74:38:a6:28:f9:0e:dd:83:25:3f: 13:c3:79:22:76:24:81:ac:31:95:c6:e0:f2:91:7f:ea:98:b8: 58:fb:df:2b:bb:ec:cb:47:85:c9:a0:f9:cf:d7:d2:a5:02:05: 4c:92:91:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjUwOTE5MDA0ODA3WhcNMjUwOTI2MDA0ODA3WjAYMRYwFAYD VQQDEw02OGNjYTg0OC0wYjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+vBcF0/5YPOeLDoStTeVykTIglQkejP4a48WxxrUogJRWvHkjFd7pu0lIVzI k+JBo5Kotuc6eePpSSXzzS6HAok55BEkcls1Y2NQHpNYYpHFHWGZs0w+qQaH2JTr LqvYd7Xr1eysRcLBWcdjuQqam2FtqAtRkprcNU9qs3g1VK8wxzb2p+Fft2B2m2zb i1oBuwozUFiFpic1ZfY8dVkEcFuXDte+Bm3fckIVZRlGOvkjWiBVszXYJEfcox4A LdB9vwH1v26i4z974EGwDE+dx1/pXmlH6niHXBZaXWkmQxx9481qVXdMRFPRjleb 0dxOsxD9H51LeNrZbSFU9+9ZMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGwbpte fJcAFHflUB3mCJqtCjUcMB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQZznFzUb8U7TXZp40uPqrDsI0PofVlK8URr0jd150sBoOQW7M05Qx HIA6Tf6Und3wzH+ED6REjVByqOKfDeQhIJVakbd3QIGn+so83NNJh7HM+R1KJY3F rppbAzK0Uv9dO2nja3dQRyFoVIRVYTXtlZw0ndtSivxUWAb4fUwlQ8tKdhFu/DC8 LMj3wWpLIitEXZGtRt54jVqZ7p+wbDST11xx+CZRZ/4v2ybxsuvAyjHXA+Mjx2+Y jPTwZXMb7ufgSkm6hXojtHukGOwbvHQ4pij5Dt2DJT8Tw3kidiSBrDGVxuDykX/q mLhY+98ru+zLR4XJoPnP19KlAgVMkpHL -----END CERTIFICATE-----Generated at Fri Sep 19 09:07:51 2025 by rpki-client