$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json) Hash identifier: QO7stgLiPh4luXkiVrfGxwk3xTNvl/GicHdRTJAnnRw= Subject key identifier: AE:6A:32:23:01:7B:B3:A9:71:0E:9C:23:D9:8C:9A:C5:51:9D:E8:ED Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Certificate serial: 08C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft Manifest number: 08A6 Signing time: Sun 20 Jul 2025 20:40:20 +0000 Manifest this update: Sun 20 Jul 2025 20:40:20 +0000 Manifest next update: Sun 27 Jul 2025 20:40:20 +0000 Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: KHiNCnU0a2o5oeokdW15YoR5k1XTtCAp3Bi62IRkTf4=) 2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 437Z5enRuaQO92H2FAcbSA65gK3IxD6GTsjTk9iVKzU=) 3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: aSllRpcvN844MQkKpYVYqAr8n2r/52Cfde6x8KbnmRk=) 4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: K91u4jcxoGdVwNsfyPrjf+VTjR+CX+rH0W4KKBUnjNU=) 5: F814A546C01411EA912AC365C4F9AE02.roa (hash: /CldUEY4cGDwhLiLYXGQ01djQa6ApY49jgcW3InFkyE=) 6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: XAx1J/DLce82S0DJ6QETMIUPs/8svCL35NE1zYijtJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Validity Not Before: Jul 20 20:40:20 2025 GMT Not After : Jul 27 20:40:20 2025 GMT Subject: CN=687d5434-a114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:86:f2:f7:f4:4f:29:ef:d5:e7:0b:15:bc:d1: 84:99:9e:42:f9:f7:eb:30:3f:a7:5c:38:b3:06:67: 5a:a6:53:c4:14:1d:7d:d0:e7:aa:c8:3d:4d:82:bb: 35:a8:82:cd:7a:18:21:67:18:5a:0b:6b:71:f5:09: 04:e9:65:4c:29:8a:db:c5:0b:4e:c4:2d:ff:30:7f: f9:8e:16:28:2b:69:8f:8b:66:03:f6:1a:f6:24:53: 13:f2:33:ee:99:2f:a5:fa:ae:11:82:42:45:3d:8c: df:0a:d7:4d:9f:96:24:9a:0f:5c:6a:b8:a8:a1:a2: 26:89:10:77:a6:fb:94:41:5c:d0:4d:48:8b:92:ae: f5:96:2e:ca:48:57:c0:1d:12:12:ad:85:f5:a3:f3: 66:a8:6b:35:46:cf:6b:89:4a:cf:89:3a:4b:9d:8c: d8:2b:ab:f7:60:62:87:2f:aa:24:fb:db:d3:ec:d3: 61:0c:d5:f2:13:81:26:76:d3:f1:11:55:1f:92:17: 40:f8:67:1b:b6:58:4f:e6:a2:40:b0:8c:fd:f8:5b: 51:fa:ff:d1:3b:bf:3f:c2:b2:68:9a:80:02:ee:a4: 6b:a1:fd:58:86:99:7b:14:98:ca:5a:76:2b:bf:9c: ce:5b:e1:fd:b6:6b:8d:62:4f:fa:7c:fa:d9:d9:d8: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6A:32:23:01:7B:B3:A9:71:0E:9C:23:D9:8C:9A:C5:51:9D:E8:ED X509v3 Authority Key Identifier: keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:87:38:70:83:0f:ae:58:3d:cf:85:25:a1:44:f2:c4:47:ad: 8e:f8:7b:e2:bb:42:81:1f:da:ec:2f:d2:da:ea:21:04:95:ad: 6b:8c:a2:d3:b5:0a:47:49:99:18:8e:67:93:55:e1:16:7e:78: 45:ff:a1:ba:15:bb:f4:32:69:73:b5:46:31:51:a9:bc:09:f1: b5:d3:0a:8d:d3:00:b2:de:37:a3:2b:8f:25:49:bc:c8:8e:04: a3:a4:35:8d:6d:1c:8c:ee:c4:17:bb:7a:aa:39:5d:c2:ff:dd: 9c:5f:0e:e2:3c:94:eb:7b:69:a7:b8:e2:c7:18:f1:42:3a:ff: 95:75:87:d9:88:b4:84:58:a5:a7:93:e8:31:0b:34:08:c7:18: 1e:9d:9e:41:65:c5:3a:b9:63:cf:35:8a:1a:5b:4e:ff:cd:67: b0:03:10:68:f1:c6:83:a0:6f:b5:b8:00:b6:a0:97:32:80:03: d3:cc:9f:0a:64:10:49:44:e3:c5:e6:10:fe:5b:99:bd:74:6d: 35:6e:0b:16:a7:3e:70:f1:a2:77:83:da:92:c1:45:1c:db:74: 8b:96:4d:d9:88:3e:cc:3e:70:d0:c4:47:e7:a1:79:77:61:d9: 83:03:8d:b3:e5:5c:b0:78:6f:06:bb:3b:d3:1c:53:80:f5:ab: ab:3b:f3:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw REE2NTJERTQwHhcNMjUwNzIwMjA0MDIwWhcNMjUwNzI3MjA0MDIwWjAYMRYwFAYD VQQDEw02ODdkNTQzNC1hMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Iby9/RPKe/V5wsVvNGEmZ5C+ffrMD+nXDizBmdaplPEFB190OeqyD1Ngrs1 qILNehghZxhaC2tx9QkE6WVMKYrbxQtOxC3/MH/5jhYoK2mPi2YD9hr2JFMT8jPu mS+l+q4RgkJFPYzfCtdNn5Ykmg9cariooaImiRB3pvuUQVzQTUiLkq71li7KSFfA HRISrYX1o/NmqGs1Rs9riUrPiTpLnYzYK6v3YGKHL6ok+9vT7NNhDNXyE4EmdtPx EVUfkhdA+GcbtlhP5qJAsIz9+FtR+v/RO78/wrJomoAC7qRrof1Yhpl7FJjKWnYr v5zOW+H9tmuNYk/6fPrZ2diZ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5qMiMB e7OpcQ6cI9mMmsVRnejtMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTY0Ri8zQzlFMkI1Q0MwMTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2 bFZUUE5TMlRLX2dOcGxMZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAchzhwgw+uWD3PhSWhRPLER62O+Hviu0KBH9rsL9La6iEEla1rjKLT tQpHSZkYjmeTVeEWfnhF/6G6Fbv0MmlztUYxUam8CfG10wqN0wCy3jejK48lSbzI jgSjpDWNbRyM7sQXu3qqOV3C/92cXw7iPJTre2mnuOLHGPFCOv+VdYfZiLSEWKWn k+gxCzQIxxgenZ5BZcU6uWPPNYoaW07/zWewAxBo8caDoG+1uAC2oJcygAPTzJ8K ZBBJROPF5hD+W5m9dG01bgsWpz5w8aJ3g9qSwUUc23SLlk3ZiD7MPnDQxEfnoXl3 YdmDA42z5VyweG8GuzvTHFOA9aurO/OF -----END CERTIFICATE-----Generated at Mon Jul 21 12:29:11 2025 by rpki-client