$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json) Hash identifier: oWssdJybW722eYhXM+cbDO3qO6VER9lXELGF3SBWzx0= Subject key identifier: D9:FC:CE:08:C5:34:60:F2:37:D9:01:53:80:73:2B:55:07:74:57:A9 Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Certificate serial: 08E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft Manifest number: 08C4 Signing time: Tue 16 Sep 2025 20:42:22 +0000 Manifest this update: Tue 16 Sep 2025 20:42:21 +0000 Manifest next update: Tue 23 Sep 2025 20:42:21 +0000 Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: ZA+5FPW+Xf69thrUv7J4F2zQo2IhXQSXnxSMf3aG+bg=) 2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 437Z5enRuaQO92H2FAcbSA65gK3IxD6GTsjTk9iVKzU=) 3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: aSllRpcvN844MQkKpYVYqAr8n2r/52Cfde6x8KbnmRk=) 4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: K91u4jcxoGdVwNsfyPrjf+VTjR+CX+rH0W4KKBUnjNU=) 5: F814A546C01411EA912AC365C4F9AE02.roa (hash: /CldUEY4cGDwhLiLYXGQ01djQa6ApY49jgcW3InFkyE=) 6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: XAx1J/DLce82S0DJ6QETMIUPs/8svCL35NE1zYijtJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 20:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Validity Not Before: Sep 16 20:42:21 2025 GMT Not After : Sep 23 20:42:21 2025 GMT Subject: CN=68c9cbad-0dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:38:ac:c0:8a:a9:0d:f5:5f:3d:b0:cb:b2: cc:83:14:91:92:8d:35:94:91:14:2d:e5:67:55:9e: e1:b8:4e:e6:4e:d0:f4:ce:2d:d7:eb:dd:a3:14:a0: e7:2f:e8:e3:b0:5b:1d:63:4e:b4:2b:84:7c:06:97: 53:a6:79:24:87:d5:67:48:32:e5:81:53:c5:01:94: 80:d5:96:ff:48:c6:4c:51:68:b0:52:73:16:2a:61: d3:a6:fe:95:66:04:e5:79:c2:9c:28:d5:3d:28:64: cb:c0:58:ee:8f:54:81:b1:50:d3:d2:90:61:46:ab: 84:21:7e:77:3b:38:5b:bc:76:39:e8:0d:c7:3d:7d: aa:dd:e1:7b:de:65:f9:2f:33:70:b3:3f:f3:03:63: 47:74:31:72:1b:da:1e:cb:83:7e:6a:69:5b:b4:bb: 1d:c2:8d:00:c0:43:00:b3:28:e0:27:59:82:d0:e0: bd:68:a6:75:e7:87:16:96:6b:a6:3e:85:f6:ba:40: 0c:93:f1:17:c2:37:89:97:0c:e4:cf:d9:67:39:cd: a3:df:8b:53:aa:3a:5e:cc:6d:8f:3a:15:90:7a:4c: 01:58:55:0d:37:f6:11:60:58:8b:9d:c5:bb:62:3b: 4c:09:93:e8:3f:aa:bf:1d:5e:66:f6:c0:1f:b7:8f: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FC:CE:08:C5:34:60:F2:37:D9:01:53:80:73:2B:55:07:74:57:A9 X509v3 Authority Key Identifier: keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:9d:53:a3:27:d0:28:50:de:94:9b:41:66:09:b7:47:9a:aa: 57:fb:78:46:2f:00:e1:3a:f4:1b:ea:9a:f6:a1:19:c8:06:68: 6b:76:85:e3:48:20:02:d9:3b:d8:df:34:9b:f6:a0:80:99:7c: 67:60:e3:7b:bb:fa:7e:57:cd:4a:5a:d7:2d:43:1c:cb:d4:fb: 5d:2f:a8:ca:aa:1b:6a:fd:8f:07:fc:97:12:47:c9:ee:ac:55: 0f:86:a4:64:49:df:dc:ed:80:20:00:b4:eb:75:79:0b:a1:2e: 4b:77:1f:13:de:1d:33:ff:39:bc:6c:e0:d1:4c:65:14:31:ea: 6f:05:e0:42:5b:92:f2:8b:b8:69:7a:db:0b:3e:fd:45:db:cb: 9b:3a:46:02:50:ae:38:94:40:b7:1d:eb:b1:29:13:5d:68:82: c4:b4:54:f4:28:cb:f2:6d:a7:5e:ed:07:5f:1b:06:9e:2c:e5: b3:46:89:10:04:29:4a:ff:4d:9b:ee:d8:5c:6f:c1:7b:ff:2b: 91:8c:52:ba:99:45:2c:1e:28:b9:6a:12:8a:0d:cc:d0:6e:c3: a8:31:be:7a:1a:bc:b9:97:c9:94:39:f4:b3:f1:a8:06:17:ad: b4:93:e1:b2:15:12:37:b0:4e:2b:b2:4c:30:89:3c:ee:77:0f: 4f:75:60:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw REE2NTJERTQwHhcNMjUwOTE2MjA0MjIxWhcNMjUwOTIzMjA0MjIxWjAYMRYwFAYD VQQDEw02OGM5Y2JhZC0wZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMc4rMCKqQ31Xz2wy7LMgxSRko01lJEULeVnVZ7huE7mTtD0zi3X692jFKDn L+jjsFsdY060K4R8BpdTpnkkh9VnSDLlgVPFAZSA1Zb/SMZMUWiwUnMWKmHTpv6V ZgTlecKcKNU9KGTLwFjuj1SBsVDT0pBhRquEIX53OzhbvHY56A3HPX2q3eF73mX5 LzNwsz/zA2NHdDFyG9oey4N+amlbtLsdwo0AwEMAsyjgJ1mC0OC9aKZ154cWlmum PoX2ukAMk/EXwjeJlwzkz9lnOc2j34tTqjpezG2POhWQekwBWFUNN/YRYFiLncW7 YjtMCZPoP6q/HV5m9sAft4+SqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn8zgjF NGDyN9kBU4BzK1UHdFepMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTY0Ri8zQzlFMkI1Q0MwMTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2 bFZUUE5TMlRLX2dOcGxMZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhnVOjJ9AoUN6Um0FmCbdHmqpX+3hGLwDhOvQb6pr2oRnIBmhrdoXj SCAC2TvY3zSb9qCAmXxnYON7u/p+V81KWtctQxzL1PtdL6jKqhtq/Y8H/JcSR8nu rFUPhqRkSd/c7YAgALTrdXkLoS5Ldx8T3h0z/zm8bODRTGUUMepvBeBCW5Lyi7hp etsLPv1F28ubOkYCUK44lEC3HeuxKRNdaILEtFT0KMvybade7QdfGwaeLOWzRokQ BClK/02b7thcb8F7/yuRjFK6mUUsHii5ahKKDczQbsOoMb56Gry5l8mUOfSz8agG F620k+GyFRI3sE4rskwwiTzudw9PdWDV -----END CERTIFICATE-----Generated at Thu Sep 18 09:30:20 2025 by rpki-client