$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: O+8YRm2uuoVO2nIHtyLzj8pA0FmsbnzctEx7YyO9j2Y= Subject key identifier: 96:8B:35:95:2E:1D:4D:4C:57:AB:C5:7C:DD:47:10:D8:73:F5:36:E0 Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 0161 Signing time: Tue 13 May 2025 03:21:46 +0000 Manifest this update: Tue 13 May 2025 03:21:46 +0000 Manifest next update: Tue 20 May 2025 03:21:46 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: HEJxnQMrdGDXex5LDddZG5U4tFPc5JF2Vb9FGxmng08=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: May 13 03:21:46 2025 GMT Not After : May 20 03:21:46 2025 GMT Subject: CN=6822baca-fb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:60:7d:b7:0a:b6:83:65:8d:0b:70:f9:84: 3e:a9:6e:d2:83:cd:19:3b:00:de:2c:a0:eb:cc:b7: 7b:1b:f7:61:59:f8:6b:04:79:da:45:79:da:35:fc: 46:9d:0e:aa:98:96:f8:c9:af:5c:ab:d2:d9:45:cb: 29:ec:db:6c:6a:73:f4:2b:44:09:97:46:1e:28:c2: bb:cf:5b:8a:1a:61:69:92:c3:21:61:dc:73:3c:89: da:f7:70:5e:6d:44:f0:1f:87:97:d6:28:f3:10:43: 6c:87:3a:f9:20:55:4e:30:41:40:30:92:a8:b7:94: ba:52:24:26:dc:bf:bb:ef:e5:53:88:ed:67:91:87: 2e:d8:a3:87:f8:43:c3:c1:d6:90:de:64:5f:fe:a7: 9e:e0:62:61:a8:fb:52:46:90:74:ac:6a:97:06:4d: e5:3e:2d:a8:ce:76:d2:35:d9:7b:77:e0:16:77:9e: 0b:fa:ee:8c:60:26:31:b0:ba:8b:1b:c6:93:b1:ea: 53:b2:d8:15:59:a4:ac:43:3d:89:1d:1b:89:91:d4: e7:1e:a9:4e:60:4a:92:78:b4:1b:76:3c:c7:87:60: 9f:8c:90:88:45:da:33:28:5c:0d:b6:24:5f:4e:89: 03:9c:62:05:43:a9:84:1b:00:3f:19:ce:d8:c5:62: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8B:35:95:2E:1D:4D:4C:57:AB:C5:7C:DD:47:10:D8:73:F5:36:E0 X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:32:d5:6f:90:6a:77:ab:2b:47:fb:dc:54:1f:ee:28:c2:c6: 8b:5e:00:88:40:45:eb:a9:5e:e4:71:05:2f:a4:46:e8:39:3f: f6:ae:ce:d7:76:d0:17:8f:d1:a9:a9:b1:e1:ee:80:4f:89:f0: 3a:a8:dc:f7:7a:72:21:82:84:77:7e:d9:37:1a:3a:40:c5:cc: 99:90:e4:9b:3d:37:33:55:fa:f1:45:52:c8:74:e4:85:5a:ff: 6f:09:bf:db:06:b8:db:79:3a:4b:d7:54:ec:5d:a4:0b:b1:c1: 3a:80:20:60:3c:3e:0c:c1:63:2d:fa:c1:7a:4d:75:ef:ce:35: 91:2f:e1:77:07:ae:61:ff:ff:c3:fe:5a:bd:89:67:ba:97:9f: 7a:eb:69:02:92:ce:90:62:0e:63:45:11:84:f9:02:66:d5:9f: 52:e5:8a:df:9b:e0:9a:f9:8f:47:54:a6:e5:57:f9:5e:6e:b4: bc:98:72:2c:69:1a:62:cd:ed:e7:3f:ba:06:03:15:5a:8b:b5: 64:46:c5:f5:33:c7:dc:15:7e:62:b5:2b:1d:90:b3:5c:cf:62: 80:65:ce:06:3e:73:27:39:e8:b3:1d:a5:8c:f9:21:f8:61:11: 4d:b1:c2:41:07:1c:da:f2:90:d8:72:24:86:7a:eb:4f:f5:17: 6f:5c:85:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjUwNTEzMDMyMTQ2WhcNMjUwNTIwMDMyMTQ2WjAYMRYwFAYD VQQDEw02ODIyYmFjYS1mYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgxgfbcKtoNljQtw+YQ+qW7Sg80ZOwDeLKDrzLd7G/dhWfhrBHnaRXnaNfxG nQ6qmJb4ya9cq9LZRcsp7NtsanP0K0QJl0YeKMK7z1uKGmFpksMhYdxzPIna93Be bUTwH4eX1ijzEENshzr5IFVOMEFAMJKot5S6UiQm3L+77+VTiO1nkYcu2KOH+EPD wdaQ3mRf/qee4GJhqPtSRpB0rGqXBk3lPi2oznbSNdl7d+AWd54L+u6MYCYxsLqL G8aTsepTstgVWaSsQz2JHRuJkdTnHqlOYEqSeLQbdjzHh2CfjJCIRdozKFwNtiRf TokDnGIFQ6mEGwA/Gc7YxWJOwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaLNZUu HU1MV6vFfN1HENhz9TbgMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcMtVvkGp3qytH+9xUH+4owsaLXgCIQEXrqV7kcQUvpEboOT/2rs7X dtAXj9GpqbHh7oBPifA6qNz3enIhgoR3ftk3GjpAxcyZkOSbPTczVfrxRVLIdOSF Wv9vCb/bBrjbeTpL11TsXaQLscE6gCBgPD4MwWMt+sF6TXXvzjWRL+F3B65h///D /lq9iWe6l59662kCks6QYg5jRRGE+QJm1Z9S5Yrfm+Ca+Y9HVKblV/lebrS8mHIs aRpize3nP7oGAxVai7VkRsX1M8fcFX5itSsdkLNcz2KAZc4GPnMnOeizHaWM+SH4 YRFNscJBBxza8pDYciSGeutP9RdvXIUF -----END CERTIFICATE-----Generated at Tue May 13 19:54:36 2025 by rpki-client