$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: u7jViDJ0l5nssuAlweaaPM9pO9yLtjAwXlWXhpZErnc= Subject key identifier: CA:8B:96:43:30:76:AD:14:26:A4:EB:DC:A8:AF:A0:FA:1A:D3:55:12 Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 016A Signing time: Sun 01 Jun 2025 03:44:56 +0000 Manifest this update: Sun 01 Jun 2025 03:44:55 +0000 Manifest next update: Sun 08 Jun 2025 03:44:55 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: AZ2oT2wSn8P9GgZD2htkHIYH8F21XKpTRISHL7HWTnM=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 03:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: Jun 1 03:44:55 2025 GMT Not After : Jun 8 03:44:55 2025 GMT Subject: CN=683bccb8-b28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:93:73:a4:38:24:07:af:bb:94:d6:69:66:89: f3:34:b6:8d:18:e4:44:67:d0:3f:c9:bb:84:8a:7a: 57:cd:21:bc:7a:59:b9:2d:16:5e:97:0f:50:5a:90: 15:60:b8:79:27:2d:44:0b:ce:7f:df:f1:78:74:ad: 01:60:4f:4d:0c:b3:e0:af:54:f8:41:a3:62:4b:0e: 4c:22:d0:bc:42:0d:98:30:17:3f:23:a1:b9:af:d6: ad:1a:68:e8:5e:81:46:76:59:0c:37:c9:2a:8e:2a: c0:b5:74:b7:fa:53:be:0a:74:d9:17:b6:5f:5a:0d: 55:9c:13:cb:2b:fb:69:d0:d6:9d:ce:65:39:13:c8: 5a:bd:a2:69:ab:ed:41:74:5c:33:c1:ba:e5:f8:00: 25:71:51:f9:de:88:9d:41:77:f4:bf:22:5b:fa:30: 66:3a:a7:1b:4f:ec:dc:31:1c:57:85:ad:88:b1:c8: 80:b8:dc:03:c5:2c:b7:a3:9c:ff:99:b8:83:29:37: 7d:51:d1:cc:a7:4d:c2:a9:96:b7:ff:6d:0a:a3:82: 13:d4:12:fb:4e:b1:ce:e8:96:39:79:11:ec:c4:23: 63:b5:76:81:88:1b:ca:d5:d8:c3:81:0f:a8:e7:f2: 60:7a:43:91:39:74:05:5a:5e:31:87:1e:7a:36:ba: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8B:96:43:30:76:AD:14:26:A4:EB:DC:A8:AF:A0:FA:1A:D3:55:12 X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:74:1f:12:ed:78:58:52:b9:d5:9f:7e:37:4d:32:0d:e9:98: da:76:06:6d:dd:9f:10:bd:e6:99:24:d3:0a:90:a8:a7:0a:5c: 02:82:90:c4:39:7c:f1:1c:41:af:07:b8:92:1a:7d:f8:af:3e: a3:dc:6f:b5:58:59:d6:95:f3:7a:3b:8e:a9:74:88:c6:50:44: c4:fa:0d:10:7c:79:69:f4:ea:27:4a:ec:96:e4:12:34:b3:77: 8f:a3:44:08:48:da:d7:ca:c8:9f:5c:97:74:60:d0:2d:18:b9: 53:4b:7d:17:7e:31:22:30:20:8a:83:66:d9:91:60:a1:5b:b6: 38:56:c2:6c:7d:66:2e:aa:2f:66:e1:f3:c9:b5:bd:c6:65:6c: de:a0:26:dc:58:e0:15:10:dd:10:ac:05:91:2b:28:b0:29:4a: f3:c8:b9:bd:8a:78:02:82:70:8b:18:d4:53:8e:53:e9:83:ea: 5f:e8:01:81:34:cc:34:a8:79:84:48:ae:a0:c1:14:d2:70:05: ad:8d:3e:6b:bd:8a:1f:9a:0b:1f:34:ab:38:81:7d:d2:dd:4b: 08:40:ea:d8:e4:50:d2:8c:6e:91:5c:c9:c0:2e:79:8a:8f:b1: 61:73:00:9d:9d:a6:b5:7a:6d:f1:78:93:16:60:78:bf:47:2b: 46:39:d1:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjUwNjAxMDM0NDU1WhcNMjUwNjA4MDM0NDU1WjAYMRYwFAYD VQQDEw02ODNiY2NiOC1iMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JNzpDgkB6+7lNZpZonzNLaNGOREZ9A/ybuEinpXzSG8elm5LRZelw9QWpAV YLh5Jy1EC85/3/F4dK0BYE9NDLPgr1T4QaNiSw5MItC8Qg2YMBc/I6G5r9atGmjo XoFGdlkMN8kqjirAtXS3+lO+CnTZF7ZfWg1VnBPLK/tp0NadzmU5E8havaJpq+1B dFwzwbrl+AAlcVH53oidQXf0vyJb+jBmOqcbT+zcMRxXha2IsciAuNwDxSy3o5z/ mbiDKTd9UdHMp03CqZa3/20Ko4IT1BL7TrHO6JY5eRHsxCNjtXaBiBvK1djDgQ+o 5/JgekOROXQFWl4xhx56NrphPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqLlkMw dq0UJqTr3KivoPoa01USMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJdB8S7XhYUrnVn343TTIN6ZjadgZt3Z8QveaZJNMKkKinClwCgpDE OXzxHEGvB7iSGn34rz6j3G+1WFnWlfN6O46pdIjGUETE+g0QfHlp9OonSuyW5BI0 s3ePo0QISNrXysifXJd0YNAtGLlTS30XfjEiMCCKg2bZkWChW7Y4VsJsfWYuqi9m 4fPJtb3GZWzeoCbcWOAVEN0QrAWRKyiwKUrzyLm9ingCgnCLGNRTjlPpg+pf6AGB NMw0qHmESK6gwRTScAWtjT5rvYofmgsfNKs4gX3S3UsIQOrY5FDSjG6RXMnALnmK j7FhcwCdnaa1em3xeJMWYHi/RytGOdEW -----END CERTIFICATE-----Generated at Mon Jun 2 06:53:24 2025 by rpki-client