$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: JrnDhxHq6Ve9m2yQG7Cf15wtR7RnXDytMu2jLFuvX7o= Subject key identifier: C0:81:36:10:AC:27:28:21:10:17:D7:9F:8F:FB:B4:4B:7C:3A:A5:AD Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 01B9 Signing time: Wed 05 Nov 2025 03:18:56 +0000 Manifest this update: Wed 05 Nov 2025 03:18:55 +0000 Manifest next update: Wed 12 Nov 2025 03:18:55 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: GvlIWFyPW+AQqc0BulsHIn/L5CLhi4tyBnaBEMgGIPs=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: 1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: c9nvOfU2KLrLRWXC99EhP9jGlFTmmacQblUfMAlz5U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: Nov 5 03:18:55 2025 GMT Not After : Nov 12 03:18:55 2025 GMT Subject: CN=690ac220-8b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ab:9f:96:d4:a4:e3:1c:73:b6:ad:72:1d:38: 4f:95:b7:80:06:4e:df:20:29:a6:36:c0:29:81:bd: f1:6e:1b:8d:f0:c3:d8:c1:c1:ac:4a:a2:d3:33:77: 18:e9:c3:5d:17:b6:3c:0b:b5:19:a2:7c:db:dc:54: 27:49:67:8f:5d:72:bf:7e:f2:0c:1d:c4:7a:08:71: f5:a4:8a:54:37:f8:a0:2c:8b:46:ec:2a:44:53:a7: 8e:c2:f2:11:2e:8d:34:be:a3:7c:f2:36:3a:9f:e6: a3:b8:f2:e6:55:6f:e4:97:8c:b0:9b:1c:2a:76:92: 16:4c:7c:04:c2:79:76:4f:2e:b7:25:43:62:06:9b: 0a:f1:78:20:57:87:72:c2:9f:51:66:c8:bd:42:c0: 38:10:59:f0:9e:8e:56:83:dc:a7:69:ea:5b:45:d2: ca:e9:95:0b:bc:16:39:e1:2b:c8:2f:96:a4:3b:92: 2e:a1:84:5a:aa:07:52:67:e9:f8:48:2f:fa:7d:d4: e0:d0:2d:06:8e:4f:15:a8:51:de:14:7f:0e:89:f8: 78:38:d2:96:0e:a8:de:08:7d:82:a1:b9:70:3c:0b: ef:5b:32:9e:6c:7b:c3:fa:6f:11:25:4a:de:33:e6: 6a:4a:6c:c0:c3:b9:fd:11:eb:5b:a4:47:0a:b9:4e: d7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:81:36:10:AC:27:28:21:10:17:D7:9F:8F:FB:B4:4B:7C:3A:A5:AD X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:08:85:df:5f:94:a3:93:4e:6d:33:c6:1f:9e:f8:91:b3:b9: ed:f3:b1:4e:77:cc:76:2f:1a:84:04:15:2b:1b:ab:8f:ff:e8: ff:f1:df:a5:4d:ae:21:5f:31:3b:d7:8b:f8:2f:bb:3d:a2:a0: db:a2:65:76:01:06:8b:6d:47:b9:48:ee:7b:b8:6d:d8:05:65: 11:45:1b:d7:c3:09:87:28:ed:e6:df:6b:6c:21:bc:24:45:65: e8:8e:33:a5:ea:cb:f4:a2:d2:28:dd:bd:d0:54:02:69:da:81: 29:91:76:0d:20:6a:f1:d3:52:7f:2f:30:85:48:55:1b:e7:13: 9f:e7:1a:80:60:a7:b8:35:de:ab:2d:60:5d:e3:68:82:b1:21: 18:91:b5:9d:bf:e9:84:be:e5:c4:a1:ea:9d:aa:e8:5b:72:dd: 5b:c4:24:4e:37:f9:51:06:3d:34:9e:4c:02:31:1d:75:05:13: ee:d9:dd:4f:6d:16:28:f3:70:d3:b2:26:78:79:61:91:a5:90: d0:96:36:3b:a4:cd:09:0a:79:20:c4:0d:ac:9c:7c:dc:8d:37: 57:5e:0a:54:5d:94:18:fb:e2:9f:95:bc:eb:7a:23:7e:c3:dd: 64:1a:ee:36:e9:c9:7f:a8:cf:3d:c4:c7:39:6b:0d:a0:52:05: 40:5d:08:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjUxMTA1MDMxODU1WhcNMjUxMTEyMDMxODU1WjAYMRYwFAYD VQQDEw02OTBhYzIyMC04YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA96ufltSk4xxztq1yHThPlbeABk7fICmmNsApgb3xbhuN8MPYwcGsSqLTM3cY 6cNdF7Y8C7UZonzb3FQnSWePXXK/fvIMHcR6CHH1pIpUN/igLItG7CpEU6eOwvIR Lo00vqN88jY6n+ajuPLmVW/kl4ywmxwqdpIWTHwEwnl2Ty63JUNiBpsK8XggV4dy wp9RZsi9QsA4EFnwno5Wg9ynaepbRdLK6ZULvBY54SvIL5akO5IuoYRaqgdSZ+n4 SC/6fdTg0C0Gjk8VqFHeFH8Oifh4ONKWDqjeCH2CoblwPAvvWzKebHvD+m8RJUre M+ZqSmzAw7n9EetbpEcKuU7X9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCBNhCs JyghEBfXn4/7tEt8OqWtMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlCIXfX5Sjk05tM8YfnviRs7nt87FOd8x2LxqEBBUrG6uP/+j/8d+l Ta4hXzE714v4L7s9oqDbomV2AQaLbUe5SO57uG3YBWURRRvXwwmHKO3m32tsIbwk RWXojjOl6sv0otIo3b3QVAJp2oEpkXYNIGrx01J/LzCFSFUb5xOf5xqAYKe4Nd6r LWBd42iCsSEYkbWdv+mEvuXEoeqdquhbct1bxCRON/lRBj00nkwCMR11BRPu2d1P bRYo83DTsiZ4eWGRpZDQljY7pM0JCnkgxA2snHzcjTdXXgpUXZQY++KflbzreiN+ w91kGu426cl/qM89xMc5aw2gUgVAXQgP -----END CERTIFICATE-----Generated at Wed Nov 5 18:36:00 2025 by rpki-client