$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: Pk99IxUdUmjo5PnRFa92+HmK6nsciHmvH+8UEg2o9Kw= Subject key identifier: 4C:8C:9C:01:B1:08:24:3A:DE:F1:F7:3F:0E:F9:37:60:9F:58:D7:A2 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 0144 Signing time: Wed 17 Sep 2025 04:54:20 +0000 Manifest this update: Wed 17 Sep 2025 04:54:20 +0000 Manifest next update: Wed 24 Sep 2025 04:54:20 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: J518/Xs374ktc1+3LV67tdlC61OIClNFs9p/EBYRQRw=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: 7+HziPW8bdU4fmbvKj0ZUtapknCkvsD+7VoRTrV2tSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Sep 17 04:54:20 2025 GMT Not After : Sep 24 04:54:20 2025 GMT Subject: CN=68ca3efc-936f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a7:c1:cf:39:ca:63:43:ff:ca:d9:bd:a2:44: be:07:ec:58:32:b5:0a:8c:c3:b0:e6:26:4c:94:61: ee:df:a3:db:17:78:ca:36:4a:ca:3e:c5:22:2d:48: 4d:e9:d0:d1:28:ff:aa:ba:0b:96:02:61:32:01:3f: bd:45:dc:49:65:ec:eb:a4:23:c3:31:32:f5:09:75: 3f:89:ab:5c:5d:2b:8d:49:6b:8d:91:81:87:be:8b: 0f:9e:87:8f:71:60:e8:03:53:7c:d1:c9:02:42:16: d7:f7:0c:03:ff:b2:e1:64:42:45:c1:ef:0b:a6:dd: 1e:a0:39:94:27:c1:e6:e2:1b:a9:b1:c9:e9:34:96: 6f:07:0a:13:f5:d2:5d:b5:39:55:62:e2:ea:14:c2: 78:00:c9:cb:38:e4:88:d9:28:73:f0:e9:b4:1d:6b: 2a:91:61:43:19:09:0a:b3:76:a2:6b:54:ff:4c:a1: c4:c8:22:92:9a:19:ae:bc:bf:cc:fd:24:77:0b:08: fa:83:4e:82:b3:b3:36:1f:d1:56:5c:a6:b7:68:74: 69:58:68:3f:46:d3:db:3f:9b:89:6c:6a:38:46:67: 0b:60:b2:38:81:d7:eb:ae:f8:84:8b:20:8b:38:45: 54:19:fa:c9:dd:04:81:94:4c:38:2d:1c:aa:9c:71: c5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8C:9C:01:B1:08:24:3A:DE:F1:F7:3F:0E:F9:37:60:9F:58:D7:A2 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:28:60:be:91:d8:3a:23:9f:32:4c:1f:06:94:ca:5f:ae:59: 92:b6:bb:d7:6d:ed:a2:0e:1f:f5:7e:b8:53:c2:94:73:91:e7: 86:44:65:3a:73:99:fd:1a:e4:4c:a4:c0:00:ae:17:51:4f:9b: 57:61:bb:30:e4:96:14:e2:6c:13:55:5d:60:c4:67:5b:4a:13: ad:e1:33:85:2d:96:57:f8:a7:17:58:c4:30:47:dd:03:c3:2f: a4:64:d1:12:d2:54:09:c3:19:68:7b:4c:66:26:b6:d8:52:0d: 65:f0:b1:9a:e1:dd:c4:a4:ac:e8:27:cf:a3:60:b7:b1:0a:6b: a7:52:74:93:36:4e:db:0a:1d:47:f5:7c:3f:7c:55:89:f2:b6: 37:05:9c:ee:72:47:42:96:85:88:26:ab:e9:fa:6a:21:26:ad: c3:97:cb:28:8b:96:e7:54:b7:a1:18:b0:99:03:a4:c1:37:57: d3:e6:e0:f1:08:16:62:1e:a8:85:ab:3a:f8:4f:fd:91:75:08: bd:85:34:0d:8d:37:62:e0:60:fe:6c:cd:4d:1d:78:d9:ff:44: 3b:31:1b:95:93:04:40:03:0e:cd:f1:39:60:4c:05:55:a7:5f: 08:83:9e:4f:9e:3a:bc:d6:40:d2:6b:80:86:ce:e0:d4:aa:f1: f9:cf:57:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjUwOTE3MDQ1NDIwWhcNMjUwOTI0MDQ1NDIwWjAYMRYwFAYD VQQDEw02OGNhM2VmYy05MzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KfBzznKY0P/ytm9okS+B+xYMrUKjMOw5iZMlGHu36PbF3jKNkrKPsUiLUhN 6dDRKP+quguWAmEyAT+9RdxJZezrpCPDMTL1CXU/iatcXSuNSWuNkYGHvosPnoeP cWDoA1N80ckCQhbX9wwD/7LhZEJFwe8Lpt0eoDmUJ8Hm4hupscnpNJZvBwoT9dJd tTlVYuLqFMJ4AMnLOOSI2Shz8Om0HWsqkWFDGQkKs3aia1T/TKHEyCKSmhmuvL/M /SR3Cwj6g06Cs7M2H9FWXKa3aHRpWGg/RtPbP5uJbGo4RmcLYLI4gdfrrviEiyCL OEVUGfrJ3QSBlEw4LRyqnHHFbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyMnAGx CCQ63vH3Pw75N2CfWNeiMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASKGC+kdg6I58yTB8GlMpfrlmStrvXbe2iDh/1frhTwpRzkeeGRGU6 c5n9GuRMpMAArhdRT5tXYbsw5JYU4mwTVV1gxGdbShOt4TOFLZZX+KcXWMQwR90D wy+kZNES0lQJwxloe0xmJrbYUg1l8LGa4d3EpKzoJ8+jYLexCmunUnSTNk7bCh1H 9Xw/fFWJ8rY3BZzuckdCloWIJqvp+mohJq3Dl8soi5bnVLehGLCZA6TBN1fT5uDx CBZiHqiFqzr4T/2RdQi9hTQNjTdi4GD+bM1NHXjZ/0Q7MRuVkwRAAw7N8TlgTAVV p18Ig55Pnjq81kDSa4CGzuDUqvH5z1fE -----END CERTIFICATE-----Generated at Thu Sep 18 21:54:55 2025 by rpki-client