$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: hunlOZFiIHADPznsi5XvDv7O1xjKTP7ydZzUnOyOlLU= Subject key identifier: 21:30:2F:91:3C:37:BC:DA:3D:6D:EA:E6:E5:63:84:D3:57:C0:A6:12 Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 0158 Signing time: Fri 25 Apr 2025 03:21:19 +0000 Manifest this update: Fri 25 Apr 2025 03:21:19 +0000 Manifest next update: Fri 02 May 2025 03:21:19 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: 4HFS2qdQbYaActBI+2S3EcPoNawBsId6eVvxxQCkhYo=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: Apr 25 03:21:19 2025 GMT Not After : May 2 03:21:19 2025 GMT Subject: CN=680affaf-05f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:57:0e:ad:25:67:34:d0:67:ef:1c:50:87: b6:b5:f4:ae:2d:a2:8e:21:89:8f:68:ad:48:b6:ff: 86:e3:71:71:38:14:29:f0:9b:ed:3e:42:d1:d6:d3: 9c:f6:f4:71:20:54:74:88:47:41:eb:3c:75:79:37: c6:75:77:7a:8f:72:e8:62:b8:4b:ee:71:a1:47:7c: 94:02:0c:e8:2d:c8:8c:ad:50:b0:6b:a1:9b:03:c0: 4f:15:f7:db:7c:23:6a:de:47:52:b6:34:7f:f1:ae: 55:ba:46:3a:22:db:67:8c:0c:cc:a1:fb:75:3f:05: d8:d8:1d:30:05:d6:48:8c:45:76:23:49:4d:ae:d9: c5:68:cd:40:02:df:aa:d6:7e:fd:13:4e:25:7b:48: fb:00:d3:4d:91:6b:db:85:6b:c4:5e:58:c3:61:dd: 9e:01:0c:cb:63:07:14:6d:79:22:9e:0a:6d:19:4f: 82:ec:89:b4:30:a2:a7:dc:87:09:d8:5a:6e:ba:02: e2:6b:00:3d:3a:3e:dc:d8:ae:33:78:a4:01:7f:a6: 9a:53:b0:67:cf:1e:ef:10:72:5f:a7:f7:94:7e:98: ba:e9:e8:5e:ae:4d:7a:ac:6d:6b:94:f8:01:c5:21: d1:c5:41:5b:bc:27:60:e1:96:75:8c:b4:ee:2d:0e: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:30:2F:91:3C:37:BC:DA:3D:6D:EA:E6:E5:63:84:D3:57:C0:A6:12 X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:00:89:d7:fb:e2:be:63:a6:81:f3:bc:7e:4c:52:9e:00:66: 2e:63:a5:4b:76:c9:77:86:ce:5a:e9:be:64:4b:3c:ec:6b:a1: 27:cb:ad:5d:c8:9c:f4:81:4c:2f:63:ff:da:6b:71:04:91:86: 5d:ff:c9:ff:fb:31:c6:51:5e:19:57:db:fd:e5:98:ee:ec:ed: 57:b2:c7:54:81:90:9e:24:b5:53:80:e2:0d:92:b5:19:6d:64: 36:ee:01:3d:2c:e2:7e:45:7c:d4:d1:c6:47:2b:7c:49:00:56: cc:09:66:ad:63:44:b2:ee:50:42:3a:33:5d:95:df:83:2d:4d: 08:7a:e6:a7:8e:f0:8a:d2:7a:4b:75:6f:2c:12:7d:63:7f:b1: 76:a6:6e:20:24:60:c4:b4:9f:7d:44:63:79:de:b0:92:8a:19: 3c:0f:85:db:a9:7d:07:a3:8d:9d:4c:8a:77:8d:b9:86:ec:aa: fd:51:b4:df:38:05:55:63:48:b6:59:a9:71:13:13:4d:cb:d2: 60:70:a8:a2:4d:0b:ba:76:c0:da:19:f5:87:c5:6b:07:3b:70: 5d:32:44:6e:59:71:84:8d:c4:12:2b:10:df:99:cd:70:f5:94: 2c:c7:99:19:d3:a6:63:02:ea:22:02:60:7e:6a:22:d0:a6:ab: 13:ff:d8:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjUwNDI1MDMyMTE5WhcNMjUwNTAyMDMyMTE5WjAYMRYwFAYD VQQDEw02ODBhZmZhZi0wNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArApXDq0lZzTQZ+8cUIe2tfSuLaKOIYmPaK1Itv+G43FxOBQp8JvtPkLR1tOc 9vRxIFR0iEdB6zx1eTfGdXd6j3LoYrhL7nGhR3yUAgzoLciMrVCwa6GbA8BPFffb fCNq3kdStjR/8a5VukY6IttnjAzMoft1PwXY2B0wBdZIjEV2I0lNrtnFaM1AAt+q 1n79E04le0j7ANNNkWvbhWvEXljDYd2eAQzLYwcUbXkingptGU+C7Im0MKKn3IcJ 2FpuugLiawA9Oj7c2K4zeKQBf6aaU7Bnzx7vEHJfp/eUfpi66eherk16rG1rlPgB xSHRxUFbvCdg4ZZ1jLTuLQ64LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEwL5E8 N7zaPW3q5uVjhNNXwKYSMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQAInX++K+Y6aB87x+TFKeAGYuY6VLdsl3hs5a6b5kSzzsa6Eny61d yJz0gUwvY//aa3EEkYZd/8n/+zHGUV4ZV9v95Zju7O1XssdUgZCeJLVTgOINkrUZ bWQ27gE9LOJ+RXzU0cZHK3xJAFbMCWatY0Sy7lBCOjNdld+DLU0IeuanjvCK0npL dW8sEn1jf7F2pm4gJGDEtJ99RGN53rCSihk8D4XbqX0Ho42dTIp3jbmG7Kr9UbTf OAVVY0i2WalxExNNy9JgcKiiTQu6dsDaGfWHxWsHO3BdMkRuWXGEjcQSKxDfmc1w 9ZQsx5kZ06ZjAuoiAmB+aiLQpqsT/9jY -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:00 2025 by rpki-client