$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: XuQT5fDcZXTlj9ahaNjiSOnYAwof5W/+kSFz7EIGgcU= Subject key identifier: 1C:8B:07:CB:01:56:EF:DC:A7:05:4E:96:32:92:59:C2:39:57:3E:A0 Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: 0143 Signing time: Wed 17 Sep 2025 04:54:28 +0000 Manifest this update: Wed 17 Sep 2025 04:54:27 +0000 Manifest next update: Wed 24 Sep 2025 04:54:27 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: I0Vect0B9ld/SHPxHVYIiqlAZNNoseaCHPW3u3fzqoo=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: v8vLgjK5S+JdCLTZc8YYYPXnZStqFTZMOLbog1OTRVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Validity Not Before: Sep 17 04:54:27 2025 GMT Not After : Sep 24 04:54:27 2025 GMT Subject: CN=68ca3f04-7545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:65:9e:b9:c5:6e:f3:b8:51:9a:74:f9:76:e9: 5b:a6:8f:16:c9:35:c9:f7:d9:c8:d8:ee:9b:d5:72: e9:f5:c0:c4:96:9f:95:f0:fc:3f:69:24:84:85:42: 75:a8:24:bf:27:ca:ca:50:73:c9:52:cd:b5:be:30: eb:82:5e:83:53:71:37:46:aa:be:7e:ab:94:21:fc: cc:ba:eb:eb:a0:84:08:c0:58:02:37:b5:a8:4e:cb: d6:13:ae:47:6b:e2:2e:6c:9e:05:a3:6a:65:f0:fc: 0f:60:c0:7e:fc:5c:79:83:78:38:f9:fa:1a:7c:05: db:19:57:81:ff:76:97:b8:70:9a:33:9b:d7:ef:c5: e7:3e:01:84:05:f6:64:e5:97:ed:04:81:47:5b:cc: f9:af:08:8c:2f:18:3c:39:93:f0:aa:18:e5:ff:22: 1b:af:26:c1:67:0b:f8:54:68:e6:e3:94:0a:d5:0f: bc:03:ee:dc:8b:4e:e2:8a:e5:c7:5d:d5:18:d4:85: 16:a5:59:d5:aa:01:c3:bc:75:ab:35:ff:c8:90:9e: 90:64:26:27:f2:d4:26:61:ff:24:96:dd:dd:75:22: 94:3e:19:59:1e:be:34:d8:5e:83:3c:46:95:f9:fd: 6b:c2:a2:7b:20:e9:e9:c2:5f:6d:6e:ec:5d:01:39: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8B:07:CB:01:56:EF:DC:A7:05:4E:96:32:92:59:C2:39:57:3E:A0 X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f7:e6:82:cb:e9:48:6f:60:3f:11:01:15:82:89:dd:fb:69: 87:e8:0f:ac:cf:67:52:24:1f:29:40:5a:5e:42:4e:ca:38:34: 4f:64:71:06:94:e0:26:3f:12:c2:f5:2b:ff:f9:88:e7:ea:a2: e2:a2:0e:03:63:33:86:ec:9c:4b:35:15:cd:8a:79:8b:76:1d: 6a:98:58:1a:ae:b3:f6:cd:8c:0d:0c:d7:67:c0:4c:aa:a9:a6: 9f:44:07:eb:f6:12:29:71:d2:6a:30:8d:b0:42:2e:86:4d:07: cb:2e:79:df:3c:2f:a3:8a:f0:a1:a7:f2:4c:82:9b:33:b7:ff: d9:18:88:6e:28:8b:da:46:a7:c1:8c:cf:d0:2c:9f:f5:21:3c: 0a:00:1d:f1:4b:ff:34:65:fd:09:e4:39:17:b2:cc:7b:33:77: c8:1a:fe:2e:28:41:9e:cd:9d:ab:15:42:09:60:f6:04:27:5f: 3d:0a:e2:1d:ba:f7:4e:a8:8a:a8:8e:64:61:c3:4c:d6:84:c8: 28:c2:41:c1:56:27:08:3f:ea:f4:ce:e6:f1:93:e1:0f:f9:81: e5:80:5d:6e:6d:64:28:ac:e2:45:58:31:fc:eb:6e:f7:1d:4c: ac:9a:ed:d5:6e:6a:01:37:d9:86:28:f3:e1:36:57:0b:1b:09: 89:94:81:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURDMjMxODhFMzJB QUExQjFCNDQwHhcNMjUwOTE3MDQ1NDI3WhcNMjUwOTI0MDQ1NDI3WjAYMRYwFAYD VQQDEw02OGNhM2YwNC03NTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA72WeucVu87hRmnT5dulbpo8WyTXJ99nI2O6b1XLp9cDElp+V8Pw/aSSEhUJ1 qCS/J8rKUHPJUs21vjDrgl6DU3E3Rqq+fquUIfzMuuvroIQIwFgCN7WoTsvWE65H a+IubJ4Fo2pl8PwPYMB+/Fx5g3g4+foafAXbGVeB/3aXuHCaM5vX78XnPgGEBfZk 5ZftBIFHW8z5rwiMLxg8OZPwqhjl/yIbrybBZwv4VGjm45QK1Q+8A+7ci07iiuXH XdUY1IUWpVnVqgHDvHWrNf/IkJ6QZCYn8tQmYf8klt3ddSKUPhlZHr402F6DPEaV +f1rwqJ7IOnpwl9tbuxdATmvmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByLB8sB Vu/cpwVOljKSWcI5Vz6gMB8GA1UdIwQYMBaAFNBayQogf2CHzgLtwjGI4yqqGxtE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxMi80QjIzM0VFQUEy RDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJZk9BdTNDTVlqaktxb2JH MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJ Zk9BdTNDTVlqaktxb2JHMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ9+aCy+lIb2A/EQEVgond+2mH6A+sz2dSJB8pQFpeQk7KODRPZHEG lOAmPxLC9Sv/+Yjn6qLiog4DYzOG7JxLNRXNinmLdh1qmFgarrP2zYwNDNdnwEyq qaafRAfr9hIpcdJqMI2wQi6GTQfLLnnfPC+jivChp/JMgpszt//ZGIhuKIvaRqfB jM/QLJ/1ITwKAB3xS/80Zf0J5DkXssx7M3fIGv4uKEGezZ2rFUIJYPYEJ189CuId uvdOqIqojmRhw0zWhMgowkHBVicIP+r0zubxk+EP+YHlgF1ubWQorOJFWDH86273 HUysmu3VbmoBN9mGKPPhNlcLGwmJlIEw -----END CERTIFICATE-----Generated at Thu Sep 18 23:49:56 2025 by rpki-client