$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: qRyGhy3VP7FEM1aT9YoJWQUbU8SKIG1KXb8hQS2fJnk= Subject key identifier: 4A:24:8B:3E:23:FD:F8:E7:84:91:72:E1:84:56:33:6E:C3:23:38:B5 Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 017B Signing time: Sat 05 Jul 2025 04:08:15 +0000 Manifest this update: Sat 05 Jul 2025 04:08:14 +0000 Manifest next update: Sat 12 Jul 2025 04:08:14 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: fGPqbfsWMhIHOArgdIKdESEkarDl6yZpGoCxZNJYJ8o=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: Jul 5 04:08:14 2025 GMT Not After : Jul 12 04:08:14 2025 GMT Subject: CN=6868a52e-2bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:b4:be:71:fb:c9:61:25:f4:72:28:1b:0b: 02:30:03:32:b3:a3:be:99:3d:40:f3:c7:f0:1d:8f: 7c:30:5c:78:61:23:8d:c5:94:5a:7c:3d:1a:10:81: 6e:11:72:17:7d:7f:db:b6:78:d7:69:be:8d:7d:ad: 96:64:64:1e:f0:a7:4b:2f:44:c9:8e:45:3e:56:05: fd:4a:5d:89:4a:32:74:8e:00:77:f4:7c:3e:e8:3f: 6b:6d:5a:94:c5:fd:83:e3:24:a9:0c:cc:a0:fd:16: 5f:a2:38:3e:5c:ae:3b:71:e8:14:3e:a1:30:20:f9: 3a:fb:c5:f7:43:a0:30:5e:1a:aa:96:bd:dc:db:f0: 59:3a:94:1c:4b:3f:bb:a6:a1:4d:3e:de:91:5f:56: 01:68:ec:99:5d:7c:a2:e8:8f:43:f0:41:af:29:88: f7:1e:ab:2c:03:ac:de:f2:35:58:72:51:9f:3c:bc: c5:47:c7:71:c9:7f:84:e4:47:b2:99:69:6b:ca:79: 3d:9e:3d:9d:b8:77:b2:f2:49:36:59:8d:fc:19:3d: f7:72:f3:f0:a5:0b:70:04:26:35:f9:35:97:dc:e4: ac:55:91:fe:d1:06:82:a3:cb:85:64:de:58:9f:3c: 53:85:d2:ff:ea:53:19:6e:b1:5d:61:b5:9c:e2:f2: e9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:24:8B:3E:23:FD:F8:E7:84:91:72:E1:84:56:33:6E:C3:23:38:B5 X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c4:c0:89:c2:53:b4:6f:c3:82:78:29:ca:6f:ee:df:fa:d1: f9:ef:3d:84:fe:40:be:09:e1:bf:48:7f:d7:94:a3:a8:38:cd: df:2e:79:8e:c1:af:50:31:33:cd:5f:64:fa:29:6c:20:83:89: eb:aa:84:d7:0a:ee:d8:b8:a9:4d:67:3c:ca:37:a9:36:2a:90: 27:96:63:01:aa:5c:f6:26:8c:05:64:68:56:e7:d1:e5:4d:1f: 15:05:ec:46:7a:19:99:d6:b7:48:d9:73:88:40:f1:b3:cc:51: 92:d5:03:68:a7:a9:f6:4e:99:71:4b:83:c3:79:e1:8d:bc:66: 8f:e8:84:fd:58:76:a4:6e:ee:3b:b3:ad:0e:8a:03:be:c1:02: a3:83:86:f6:89:5b:4e:de:10:98:2a:2b:17:7e:c0:8a:78:1c: 10:cb:06:18:98:ef:63:3f:59:20:57:85:ba:9a:0c:c0:33:1a: 3e:fa:67:84:e0:ed:8a:82:4c:bf:82:a4:f3:2b:e5:68:4e:7b: b1:f3:c4:11:5a:5f:bd:fa:09:e8:b4:b6:73:9a:af:99:e0:81: 04:7f:38:77:a0:e0:8b:a7:66:17:c8:85:8f:f6:68:ef:97:4f: f5:59:92:27:2d:c3:09:88:0f:c6:54:b3:2f:48:4e:92:c2:1d: c1:5f:7c:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjUwNzA1MDQwODE0WhcNMjUwNzEyMDQwODE0WjAYMRYwFAYD VQQDEw02ODY4YTUyZS0yYmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiK0vnH7yWEl9HIoGwsCMAMys6O+mT1A88fwHY98MFx4YSONxZRafD0aEIFu EXIXfX/btnjXab6Nfa2WZGQe8KdLL0TJjkU+VgX9Sl2JSjJ0jgB39Hw+6D9rbVqU xf2D4ySpDMyg/RZfojg+XK47cegUPqEwIPk6+8X3Q6AwXhqqlr3c2/BZOpQcSz+7 pqFNPt6RX1YBaOyZXXyi6I9D8EGvKYj3HqssA6ze8jVYclGfPLzFR8dxyX+E5Eey mWlrynk9nj2duHey8kk2WY38GT33cvPwpQtwBCY1+TWX3OSsVZH+0QaCo8uFZN5Y nzxThdL/6lMZbrFdYbWc4vLpsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEokiz4j /fjnhJFy4YRWM27DIzi1MB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFxMCJwlO0b8OCeCnKb+7f+tH57z2E/kC+CeG/SH/XlKOoOM3fLnmO wa9QMTPNX2T6KWwgg4nrqoTXCu7YuKlNZzzKN6k2KpAnlmMBqlz2JowFZGhW59Hl TR8VBexGehmZ1rdI2XOIQPGzzFGS1QNop6n2TplxS4PDeeGNvGaP6IT9WHakbu47 s60OigO+wQKjg4b2iVtO3hCYKisXfsCKeBwQywYYmO9jP1kgV4W6mgzAMxo++meE 4O2Kgky/gqTzK+VoTnux88QRWl+9+gnotLZzmq+Z4IEEfzh3oOCLp2YXyIWP9mjv l0/1WZInLcMJiA/GVLMvSE6Swh3BX3yo -----END CERTIFICATE-----Generated at Sat Jul 5 05:27:25 2025 by rpki-client