$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: w6TRIYrbHopbFkqx99obHBa3QExwzKolxK2eHBRMhSY= Subject key identifier: D3:8A:3D:21:FC:18:C7:A4:2D:8D:1F:7E:7C:93:4C:9B:BE:55:B8:E0 Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 0194 Signing time: Sat 23 Aug 2025 03:41:30 +0000 Manifest this update: Sat 23 Aug 2025 03:41:30 +0000 Manifest next update: Sat 30 Aug 2025 03:41:30 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: vKqF6hdCEX9qP4DDaYmebwaHiDkuXCu/7dXegupYlYs=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: Aug 23 03:41:30 2025 GMT Not After : Aug 30 03:41:30 2025 GMT Subject: CN=68a9386a-d90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:40:02:2a:73:db:bb:2c:cb:c2:aa:e3:15: cd:71:fd:a6:83:d5:23:3c:d5:75:51:76:a6:a4:9e: 0b:9c:2f:4a:ec:38:ef:fc:2d:6f:29:71:71:0c:a3: f4:1b:42:62:a3:77:39:d6:96:3d:ca:3f:ab:2b:e9: 3c:ff:36:6a:35:0e:03:7f:f9:28:3d:42:fc:ed:ba: 0b:dd:a6:de:aa:89:2d:22:aa:d7:4d:30:f2:33:69: 3a:8f:33:3c:f4:13:3e:c6:04:ad:95:20:40:f1:62: 40:c9:78:a8:d0:c0:72:18:43:5a:6d:e9:38:c7:b2: f2:b7:b4:7f:cb:88:e4:1f:43:bd:fa:58:5d:1e:d3: 10:ed:9f:ed:9e:19:c5:a0:8f:76:57:b8:57:20:5e: 37:ad:eb:bf:8f:a6:93:7c:9b:3e:ed:07:b3:8d:28: 40:d9:09:eb:08:cb:64:7e:e6:50:1d:6f:49:1c:2f: 99:30:1e:b7:b0:c7:52:a4:51:8a:ed:7e:7f:19:8e: 04:e4:7b:16:ab:98:5e:05:2c:57:2a:53:8b:10:81: 55:f4:09:9f:c5:ad:67:47:91:5c:40:91:ca:95:1d: a9:5c:2d:f9:c7:d2:da:67:e5:7a:b9:4d:0e:0b:88: e5:48:10:ed:b8:0c:62:af:66:76:50:32:bb:3d:1d: e3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:3D:21:FC:18:C7:A4:2D:8D:1F:7E:7C:93:4C:9B:BE:55:B8:E0 X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e5:23:95:93:47:fa:01:00:a5:71:0f:f7:2f:38:44:f9:51: 54:bc:7f:08:e5:38:d5:5a:5c:0f:43:77:37:ad:d2:e8:ce:ac: 66:69:53:49:0a:a6:bc:33:ec:6f:43:60:a7:43:d6:87:7b:a5: 8c:34:e8:20:4c:d3:12:98:82:ea:ab:25:b0:0e:55:38:77:cd: e9:a8:76:58:59:f0:ee:ca:a7:a5:04:a4:e2:e8:d4:fe:51:fc: 8a:cf:ab:11:bf:c6:f9:16:83:46:4b:83:e8:e9:6f:c7:70:fe: a2:72:ba:60:ff:32:8c:12:de:9b:fa:aa:08:23:f8:92:35:ba: 93:da:90:9e:f4:c3:25:44:92:39:1f:f8:27:53:57:bb:a2:04: 88:9a:77:f4:53:9d:c4:ac:fa:17:5f:56:af:9c:e6:bb:55:54: c1:52:39:67:46:8c:e3:9b:fa:55:05:a9:b4:2e:6c:ef:4e:97: bf:da:9b:36:33:5f:99:2a:77:a2:5a:a8:d6:f6:12:5d:49:eb: a6:fe:89:0b:0d:2f:63:a5:a2:7c:9d:43:e1:88:6b:59:d5:7d: dd:83:76:72:fc:7a:b5:f4:3c:a4:02:d9:13:c5:24:05:1b:4e: 26:d6:19:5b:c1:00:27:77:6d:23:d4:01:1e:97:18:2d:dd:be: a4:d9:1c:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjUwODIzMDM0MTMwWhcNMjUwODMwMDM0MTMwWjAYMRYwFAYD VQQDEw02OGE5Mzg2YS1kOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAod5AAipz27ssy8Kq4xXNcf2mg9UjPNV1UXampJ4LnC9K7Djv/C1vKXFxDKP0 G0Jio3c51pY9yj+rK+k8/zZqNQ4Df/koPUL87boL3abeqoktIqrXTTDyM2k6jzM8 9BM+xgStlSBA8WJAyXio0MByGENabek4x7Lyt7R/y4jkH0O9+lhdHtMQ7Z/tnhnF oI92V7hXIF43reu/j6aTfJs+7QezjShA2QnrCMtkfuZQHW9JHC+ZMB63sMdSpFGK 7X5/GY4E5HsWq5heBSxXKlOLEIFV9Amfxa1nR5FcQJHKlR2pXC35x9LaZ+V6uU0O C4jlSBDtuAxir2Z2UDK7PR3jowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOKPSH8 GMekLY0ffnyTTJu+VbjgMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM5SOVk0f6AQClcQ/3LzhE+VFUvH8I5TjVWlwPQ3c3rdLozqxmaVNJ Cqa8M+xvQ2CnQ9aHe6WMNOggTNMSmILqqyWwDlU4d83pqHZYWfDuyqelBKTi6NT+ UfyKz6sRv8b5FoNGS4Po6W/HcP6icrpg/zKMEt6b+qoII/iSNbqT2pCe9MMlRJI5 H/gnU1e7ogSImnf0U53ErPoXX1avnOa7VVTBUjlnRozjm/pVBam0LmzvTpe/2ps2 M1+ZKneiWqjW9hJdSeum/okLDS9jpaJ8nUPhiGtZ1X3dg3Zy/Hq19DykAtkTxSQF G04m1hlbwQAnd20j1AEelxgt3b6k2Rzl -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:52 2025 by rpki-client