$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: h0ep2uAHPVtb3XJgMYPtV1I80WPaOS3zxzzdRa65jRk= Subject key identifier: AA:3A:F5:4D:E2:B2:FD:F1:58:15:E6:DA:16:26:08:79:C2:23:6C:DE Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 01B8 Signing time: Mon 03 Nov 2025 03:11:29 +0000 Manifest this update: Mon 03 Nov 2025 03:11:28 +0000 Manifest next update: Mon 10 Nov 2025 03:11:28 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: WR/LLjZdhuCB5GrMlZZPhflFFV0C5wHcmeAD8pBcx4I=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: Nov 3 03:11:28 2025 GMT Not After : Nov 10 03:11:28 2025 GMT Subject: CN=69081d61-923d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e1:1d:1b:0b:1f:fe:53:76:bb:87:06:6f:15: f9:7c:e4:4f:b0:0b:ad:f0:2e:ee:42:51:0e:92:78: 21:8b:23:5a:2d:9a:68:98:48:4e:82:9d:e3:61:56: 38:2f:96:fc:fd:45:c5:f9:66:b5:3d:8c:8a:24:d4: ad:b0:b8:60:23:08:a1:2f:31:49:d5:8c:02:27:01: 66:70:7f:ed:aa:cf:72:8a:2d:0b:04:5e:af:92:d6: 9a:4e:58:c4:a0:14:f4:0e:04:22:73:b3:9f:f1:dd: d8:b2:9d:c3:56:5e:21:51:a1:76:90:e2:ac:6d:88: fa:9c:e4:ac:2c:c4:db:f9:d5:85:d1:93:48:b3:1f: 65:d9:ba:1d:2c:64:27:e9:00:58:33:1b:ff:8b:54: b0:7b:ec:c4:ea:47:ff:02:21:56:c0:41:f6:46:99: 6c:da:bb:7f:ba:65:bf:4d:17:46:0c:52:99:f7:32: 35:6a:27:22:da:da:6a:a0:de:3f:26:da:29:7b:86: 68:57:ad:ff:61:2d:76:e4:35:71:36:44:f7:7b:78: a7:8d:12:fb:26:2b:ae:9c:f2:d7:37:87:e9:a7:4e: d7:56:94:c3:61:17:44:15:8a:20:a7:1b:07:0a:9d: ca:36:90:61:68:07:b6:1c:28:c0:3b:15:c0:ea:bb: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3A:F5:4D:E2:B2:FD:F1:58:15:E6:DA:16:26:08:79:C2:23:6C:DE X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:da:73:3b:8c:69:6a:b9:10:bc:94:34:e6:50:65:98:d4:cf: 91:30:97:26:ed:72:bd:e7:fd:a2:36:72:21:2e:4b:32:8a:31: 37:f9:cf:f9:48:e5:52:db:ad:83:0b:cb:ee:42:9b:b4:a4:dc: 13:df:98:66:a1:44:a1:39:86:d9:0b:5e:a7:e6:47:09:a5:83: df:37:bc:5a:0e:c7:9b:49:c7:db:e1:89:16:48:96:1e:42:06: 56:c9:82:bd:23:a6:d4:2c:7f:c8:a8:5d:67:4b:9f:c9:c7:50: e5:6e:d1:75:1e:ae:2a:a1:81:a0:e3:38:0c:3f:de:6e:c6:82: 9b:ed:f4:15:5f:58:79:b8:d8:b8:28:35:4f:4c:74:cc:a8:e9: a1:d6:86:db:1a:8e:aa:70:e2:57:fa:e0:fe:04:3f:35:d6:2c: 48:b3:25:66:f6:f7:1f:15:ff:2a:11:c1:26:b6:f1:7e:ef:a9: 05:5f:d5:f4:d4:f2:4e:0c:75:44:bc:71:02:43:b8:b2:63:03: 05:aa:de:59:a8:bb:49:99:68:c2:74:c6:45:6d:bd:a4:7b:72: d6:4b:48:83:85:71:b9:b3:3b:e5:a6:32:85:e7:70:5a:3a:fb: 19:6a:99:2e:82:46:4e:4e:9f:92:69:84:79:db:b8:70:0f:90: 99:50:13:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjUxMTAzMDMxMTI4WhcNMjUxMTEwMDMxMTI4WjAYMRYwFAYD VQQDEw02OTA4MWQ2MS05MjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+EdGwsf/lN2u4cGbxX5fORPsAut8C7uQlEOknghiyNaLZpomEhOgp3jYVY4 L5b8/UXF+Wa1PYyKJNStsLhgIwihLzFJ1YwCJwFmcH/tqs9yii0LBF6vktaaTljE oBT0DgQic7Of8d3Ysp3DVl4hUaF2kOKsbYj6nOSsLMTb+dWF0ZNIsx9l2bodLGQn 6QBYMxv/i1Swe+zE6kf/AiFWwEH2Rpls2rt/umW/TRdGDFKZ9zI1aici2tpqoN4/ Jtope4ZoV63/YS125DVxNkT3e3injRL7JiuunPLXN4fpp07XVpTDYRdEFYogpxsH Cp3KNpBhaAe2HCjAOxXA6rtIDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKo69U3i sv3xWBXm2hYmCHnCI2zeMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR2nM7jGlquRC8lDTmUGWY1M+RMJcm7XK95/2iNnIhLksyijE3+c/5 SOVS262DC8vuQpu0pNwT35hmoUShOYbZC16n5kcJpYPfN7xaDsebScfb4YkWSJYe QgZWyYK9I6bULH/IqF1nS5/Jx1DlbtF1Hq4qoYGg4zgMP95uxoKb7fQVX1h5uNi4 KDVPTHTMqOmh1obbGo6qcOJX+uD+BD811ixIsyVm9vcfFf8qEcEmtvF+76kFX9X0 1PJODHVEvHECQ7iyYwMFqt5ZqLtJmWjCdMZFbb2ke3LWS0iDhXG5szvlpjKF53Ba OvsZapkugkZOTp+SaYR527hwD5CZUBPy -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:09 2025 by rpki-client