$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json) Hash identifier: 5PoJ72cvixbIlN6Yd0tCdamjkPsv3XcLh/iud5J9xgQ= Subject key identifier: 10:C8:B4:00:02:8C:36:E9:65:1D:EE:17:A4:8B:F7:63:44:52:18:FA Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Certificate serial: 0D1D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft Manifest number: 0D12 Signing time: Thu 18 Sep 2025 15:38:15 +0000 Manifest this update: Thu 18 Sep 2025 15:38:15 +0000 Manifest next update: Thu 25 Sep 2025 15:38:15 +0000 Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: TVAxjw6ZCKeXFKC0wnf0I0wB7u6NMBGMEo3F9EkzZTs=) 2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: lu8oWRNPgJxFZ7Lozlet3TlMRukqbbGr2PrraLSuCsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3357 (0xd1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Validity Not Before: Sep 18 15:38:15 2025 GMT Not After : Sep 25 15:38:15 2025 GMT Subject: CN=68cc2767-dddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:18:35:04:fc:39:43:00:e0:29:2d:2c:e9: 05:9c:52:2c:54:2c:cb:f4:e9:44:40:f0:dd:19:e3: 18:07:a1:fe:04:65:46:3d:7c:21:21:34:0c:0d:5b: b2:26:08:04:28:d4:dc:65:4f:91:80:b8:b8:53:76: 0e:f1:fe:25:0c:ac:ef:7c:5a:03:1e:d9:27:ac:00: 25:5e:e8:ee:6a:5a:57:96:51:a0:ba:50:37:16:b4: b1:4f:eb:1f:b1:3f:5e:8c:de:e9:43:14:80:20:be: db:35:31:f5:57:84:8f:3b:12:5e:f2:86:22:5b:0b: 27:5a:c2:84:5c:e4:c2:10:27:72:85:ec:c5:36:a3: a0:c4:20:04:26:a7:a3:1a:2a:40:53:3a:70:a4:e3: d9:aa:18:d5:29:2f:fe:0d:30:04:b4:20:7e:5d:1e: cb:a0:ee:31:9e:2c:fd:31:47:39:ba:8b:cc:d7:7d: c0:ab:b1:bb:e9:c9:15:3e:e6:9c:7f:e5:b4:0d:36: 36:d8:95:47:d5:0c:11:2a:56:5c:bc:60:de:b4:08: 3b:b4:79:42:ad:be:22:ae:60:7f:9c:af:8e:3f:6d: f2:a2:ff:f6:5f:96:62:03:32:d8:a4:92:90:69:6f: 13:ef:62:37:65:dc:25:36:66:55:fd:63:b5:ce:f1: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C8:B4:00:02:8C:36:E9:65:1D:EE:17:A4:8B:F7:63:44:52:18:FA X509v3 Authority Key Identifier: keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1c:c4:98:4e:67:f6:6e:11:7f:1c:4d:60:33:06:41:44:00: e6:5b:cd:e9:23:38:48:3a:91:d8:f1:31:e4:2e:bb:d3:a6:9a: 87:77:28:e6:b8:90:cd:19:5f:5e:88:0d:7a:76:ac:ef:5a:91: 10:d0:f1:5e:3d:07:af:3d:bd:10:69:b7:8e:ef:a5:83:82:ba: 87:e4:34:aa:64:5f:7c:a8:c2:e0:71:1c:b3:45:4b:07:10:ce: bd:8a:d7:c0:3c:a2:54:ce:bf:47:02:c8:cf:3a:34:0a:7b:0f: 77:34:43:95:f7:cb:90:bc:d2:58:6f:ed:85:6f:95:b0:56:e8: a3:db:ab:3b:ba:27:55:2e:18:fe:78:78:82:46:24:dd:c5:77: 5a:cf:b3:51:75:97:44:c7:f7:8b:00:c0:0f:51:14:fd:62:5f: 49:56:a2:1d:fc:cc:e1:11:8d:f4:08:80:92:21:b6:d8:0d:15: 8d:64:54:77:43:2a:66:ea:ad:1c:ff:10:67:cf:95:d2:11:8e: e7:dc:55:70:4a:f5:68:0b:8d:ae:00:fb:ab:77:10:dc:a3:30: e0:df:58:c2:d0:ef:0a:2f:49:3c:d2:00:b2:09:ac:c7:27:de: ea:6a:5c:d2:2e:8a:67:6d:f8:00:cf:19:0b:ae:dc:5f:56:de: 86:02:11:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDBGREU4MkQyNzk0ODU0QzlBRkNERDg1RUZCN0VGRTQ5 QzQ3RDJFRUUwHhcNMjUwOTE4MTUzODE1WhcNMjUwOTI1MTUzODE1WjAYMRYwFAYD VQQDEw02OGNjMjc2Ny1kZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwecYNQT8OUMA4CktLOkFnFIsVCzL9OlEQPDdGeMYB6H+BGVGPXwhITQMDVuy JggEKNTcZU+RgLi4U3YO8f4lDKzvfFoDHtknrAAlXujualpXllGgulA3FrSxT+sf sT9ejN7pQxSAIL7bNTH1V4SPOxJe8oYiWwsnWsKEXOTCECdyhezFNqOgxCAEJqej GipAUzpwpOPZqhjVKS/+DTAEtCB+XR7LoO4xniz9MUc5uovM133Aq7G76ckVPuac f+W0DTY22JVH1QwRKlZcvGDetAg7tHlCrb4irmB/nK+OP23yov/2X5ZiAzLYpJKQ aW8T72I3ZdwlNmZV/WO1zvHonwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDItAAC jDbpZR3uF6SL92NEUhj6MB8GA1UdIwQYMBaAFA/egtJ5SFTJr83YXvt+/knEfS7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS84RjQ3QTlGQUU5 N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZNbXZ6ZGhlLTM3LVNjUjlM dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q5NkMwbmxJVk1tdnpkaGUtMzctU2NSOUx1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS84RjQ3QTlGQUU5N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZN bXZ6ZGhlLTM3LVNjUjlMdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+HMSYTmf2bhF/HE1gMwZBRADmW83pIzhIOpHY8THkLrvTppqHdyjm uJDNGV9eiA16dqzvWpEQ0PFePQevPb0QabeO76WDgrqH5DSqZF98qMLgcRyzRUsH EM69itfAPKJUzr9HAsjPOjQKew93NEOV98uQvNJYb+2Fb5WwVuij26s7uidVLhj+ eHiCRiTdxXdaz7NRdZdEx/eLAMAPURT9Yl9JVqId/MzhEY30CICSIbbYDRWNZFR3 Qypm6q0c/xBnz5XSEY7n3FVwSvVoC42uAPurdxDcozDg31jC0O8KL0k80gCyCazH J97qalzSLopnbfgAzxkLrtxfVt6GAhHd -----END CERTIFICATE-----Generated at Fri Sep 19 17:02:11 2025 by rpki-client