$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: jGiRjycRzQOorPrW8wMbLf/E4/8COh1HWu9gPtSNjSo= Subject key identifier: F1:DF:F6:5A:78:4E:2E:ED:C1:FE:D1:A5:FD:AD:B1:72:E1:D2:42:A5 Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 01A1 Signing time: Wed 17 Sep 2025 03:57:51 +0000 Manifest this update: Wed 17 Sep 2025 03:57:51 +0000 Manifest next update: Wed 24 Sep 2025 03:57:51 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: jH7+aUNWT2fStobkHji0qF4JU72iLIC4nzFTs3uYdig=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: Sep 17 03:57:51 2025 GMT Not After : Sep 24 03:57:51 2025 GMT Subject: CN=68ca31bf-21a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:88:fa:43:90:bd:2c:79:12:3a:76:00:17: 86:c4:d9:cd:2c:c7:ce:32:a6:a1:dc:3f:cb:3e:08: 65:9d:f7:f3:a6:40:3e:2a:73:27:60:89:67:1f:a3: d3:38:23:e7:44:f7:aa:e8:38:78:94:24:21:11:a9: da:9a:ac:27:a9:4e:50:42:eb:96:94:28:40:30:70: 08:a3:69:2e:d0:18:2b:0b:49:b4:ec:b6:d1:35:66: 4f:48:e3:c9:85:76:e4:01:a6:5f:90:e9:11:4b:32: db:60:c7:6f:97:67:3b:92:6b:bd:bd:98:44:04:06: f2:61:61:58:94:e5:28:f4:5e:8e:e9:55:52:89:7f: 38:b7:99:d8:9f:21:b7:e2:94:22:46:e3:b0:ea:01: 7a:56:63:7f:33:16:4b:44:b7:8f:6c:4e:6f:a8:a8: 00:54:c0:ee:12:70:0b:02:bb:f0:70:74:9f:6f:22: 5f:35:d9:f0:51:ff:33:c3:45:1f:24:4e:c7:a5:95: f2:25:37:f7:b5:7c:87:f7:25:5b:54:95:e8:30:b1: 67:f3:81:44:ea:99:d7:a2:ed:82:9b:7c:20:06:cf: 55:55:ee:ec:ae:ef:57:69:2b:1c:28:c9:22:f5:8a: 5f:42:2b:8c:e6:0f:cd:d3:ac:46:23:a4:e0:b8:9c: 69:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DF:F6:5A:78:4E:2E:ED:C1:FE:D1:A5:FD:AD:B1:72:E1:D2:42:A5 X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d2:d6:9a:86:8e:1a:38:98:30:39:51:e8:c3:0c:62:5f:a8: e0:dc:e2:ae:a1:8a:fe:96:56:a6:60:6e:ce:4e:b8:69:a2:d2: b6:fe:ed:0e:29:7f:50:22:44:99:2e:fe:05:80:10:ad:b8:46: 6b:88:f4:f3:68:ee:d7:89:bc:1d:34:87:89:e7:e1:af:6c:8a: 61:b1:a0:e0:87:57:55:f5:48:b0:3b:eb:71:81:50:61:3b:85: 08:ec:db:71:11:de:a0:72:e1:f5:5c:1c:f3:62:32:16:21:c0: 4c:93:71:ff:94:05:08:52:f7:69:06:2e:e7:b3:e4:65:26:97: 85:93:a8:2d:e9:35:85:5e:2b:f4:a1:ff:b0:31:8d:f2:28:cf: 36:6f:1d:5a:af:4b:99:46:17:c9:0a:70:d7:88:f6:34:4e:c0: 55:b6:9d:6a:9c:cb:1c:8a:6c:c6:b8:a5:08:53:cc:67:6c:91: 7b:8b:c7:6b:b3:eb:5f:bd:f1:a5:33:d4:1f:86:ad:f6:2b:61: 81:e4:94:be:9d:81:93:0c:6b:c9:cd:d5:00:05:72:34:be:9f: 04:6e:11:6d:a8:93:0c:51:2f:72:5f:37:18:f3:fe:4d:52:00: bb:f8:9d:54:01:ec:5e:6f:3e:77:62:94:83:25:4b:c0:94:8b: 45:ac:b8:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjUwOTE3MDM1NzUxWhcNMjUwOTI0MDM1NzUxWjAYMRYwFAYD VQQDEw02OGNhMzFiZi0yMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3SI+kOQvSx5Ejp2ABeGxNnNLMfOMqah3D/LPghlnffzpkA+KnMnYIlnH6PT OCPnRPeq6Dh4lCQhEanamqwnqU5QQuuWlChAMHAIo2ku0BgrC0m07LbRNWZPSOPJ hXbkAaZfkOkRSzLbYMdvl2c7kmu9vZhEBAbyYWFYlOUo9F6O6VVSiX84t5nYnyG3 4pQiRuOw6gF6VmN/MxZLRLePbE5vqKgAVMDuEnALArvwcHSfbyJfNdnwUf8zw0Uf JE7HpZXyJTf3tXyH9yVbVJXoMLFn84FE6pnXou2Cm3wgBs9VVe7sru9XaSscKMki 9YpfQiuM5g/N06xGI6TguJxpPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHf9lp4 Ti7twf7Rpf2tsXLh0kKlMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe0taaho4aOJgwOVHowwxiX6jg3OKuoYr+llamYG7OTrhpotK2/u0O KX9QIkSZLv4FgBCtuEZriPTzaO7XibwdNIeJ5+GvbIphsaDgh1dV9UiwO+txgVBh O4UI7NtxEd6gcuH1XBzzYjIWIcBMk3H/lAUIUvdpBi7ns+RlJpeFk6gt6TWFXiv0 of+wMY3yKM82bx1ar0uZRhfJCnDXiPY0TsBVtp1qnMscimzGuKUIU8xnbJF7i8dr s+tfvfGlM9Qfhq32K2GB5JS+nYGTDGvJzdUABXI0vp8EbhFtqJMMUS9yXzcY8/5N UgC7+J1UAexebz53YpSDJUvAlItFrLij -----END CERTIFICATE-----Generated at Thu Sep 18 23:48:34 2025 by rpki-client