$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: XX2zRHcxvM/QUJNBRvCOmd1aSk35yIv7q6GiD3x27BY= Subject key identifier: 85:44:08:14:85:48:74:76:34:21:10:17:BC:6E:97:14:C0:E8:24:7B Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1C29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1C0A Signing time: Thu 18 Sep 2025 16:20:08 +0000 Manifest this update: Thu 18 Sep 2025 16:20:08 +0000 Manifest next update: Thu 25 Sep 2025 16:20:08 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: junJLG/jehuNX5cLCwXK1vm2/WgWERRhXF25MO8ARgc=) 2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: 7vSMEGE2WKILnDsupDw245nI6InVKo+5RlyNwkMHa0A=) 3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: gkf5l1306jNCZlXkzkzc37H/VOhptBWvvDD29cbTyo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7209 (0x1c29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: Sep 18 16:20:08 2025 GMT Not After : Sep 25 16:20:08 2025 GMT Subject: CN=68cc3138-f3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:5b:94:2e:61:37:b0:60:e4:75:56:24:83: b4:72:b7:d4:54:9b:c0:24:c9:5d:ef:f2:a3:fb:39: d9:e9:81:be:01:36:f5:f3:08:68:a8:44:72:e9:3a: 20:47:b6:b0:4b:56:73:09:07:70:8e:62:d4:df:30: 1d:7b:01:0e:71:6c:56:bb:1e:db:43:09:63:03:94: 31:c3:07:97:eb:0f:90:4d:6b:da:9d:d8:55:2a:06: 40:6b:e9:28:98:1a:84:4a:fe:3e:22:dd:ac:85:d0: 12:17:da:ae:db:86:d9:b0:6b:00:0c:f7:3c:e2:1b: 4e:d7:f5:b3:e4:82:71:4a:a6:0e:c8:ff:06:8e:b6: 31:d8:aa:ce:c2:71:27:a7:02:12:cf:6f:ad:f7:45: 02:bc:11:51:b3:88:f5:54:c7:fb:9f:79:51:5a:95: 8f:ca:6a:a2:23:e9:e7:dc:3a:28:b2:b9:b3:78:7b: 77:cf:7a:6f:18:d3:a9:e1:5f:77:f5:a4:d9:6f:32: ea:1e:b0:8d:06:0d:3a:0a:cb:ba:9a:39:be:d0:fc: a8:be:0d:a4:59:54:21:2a:d6:1f:2c:fd:80:cc:72: c5:06:da:03:b1:2f:13:00:fb:47:d0:83:46:4a:da: 63:60:33:e3:68:9e:25:40:4b:30:0d:51:77:f0:bc: 30:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:44:08:14:85:48:74:76:34:21:10:17:BC:6E:97:14:C0:E8:24:7B X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:65:cc:25:54:96:f4:c6:0d:6a:b2:5f:cf:a8:db:35:a0:c2: 97:7f:04:c2:bc:2f:6a:c4:f1:04:d0:a1:79:10:0f:a6:a4:9d: 31:51:e3:fd:d6:d4:18:55:f3:fb:d3:86:51:a4:a5:54:86:1a: 24:96:1e:97:d8:e9:9a:a1:41:77:ed:a3:d7:9b:4c:81:0a:06: 42:a5:44:12:45:51:e7:5f:4e:55:6c:90:7c:fb:f9:d3:48:b9: c9:a4:ea:d5:ce:18:24:96:eb:40:4c:ff:a2:44:07:7d:23:89: 60:20:42:e1:ed:ec:81:fb:29:26:21:86:37:5a:a0:07:ce:89: 4f:26:7a:09:19:2c:5f:29:8a:2f:8b:a2:18:11:5d:d9:3c:1c: a4:d7:3f:c9:9e:8a:8d:85:09:45:e8:3d:52:75:e6:98:eb:98: 88:32:12:3d:22:bb:ea:a1:d6:35:8f:1b:01:11:49:3c:ca:a8: f6:04:f3:50:73:bb:3e:ec:f4:f1:78:b5:1d:40:b5:64:a3:cb: e3:bf:b4:e4:21:6a:00:e6:fc:55:c7:dc:e0:45:0b:bf:37:71: d1:cb:92:9a:63:c7:8d:65:55:f2:f0:b3:a4:bb:80:13:ff:4b: c1:f3:e8:4a:b5:4f:fd:12:1e:7c:f4:69:ff:50:55:59:60:d1: 08:8c:7f:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjUwOTE4MTYyMDA4WhcNMjUwOTI1MTYyMDA4WjAYMRYwFAYD VQQDEw02OGNjMzEzOC1mM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkRRblC5hN7Bg5HVWJIO0crfUVJvAJMld7/Kj+znZ6YG+ATb18whoqERy6Tog R7awS1ZzCQdwjmLU3zAdewEOcWxWux7bQwljA5QxwweX6w+QTWvandhVKgZAa+ko mBqESv4+It2shdASF9qu24bZsGsADPc84htO1/Wz5IJxSqYOyP8GjrYx2KrOwnEn pwISz2+t90UCvBFRs4j1VMf7n3lRWpWPymqiI+nn3DoosrmzeHt3z3pvGNOp4V93 9aTZbzLqHrCNBg06Csu6mjm+0Pyovg2kWVQhKtYfLP2AzHLFBtoDsS8TAPtH0ING StpjYDPjaJ4lQEswDVF38LwwJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVECBSF SHR2NCEQF7xulxTA6CR7MB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ZcwlVJb0xg1qsl/PqNs1oMKXfwTCvC9qxPEE0KF5EA+mpJ0xUeP9 1tQYVfP704ZRpKVUhhoklh6X2OmaoUF37aPXm0yBCgZCpUQSRVHnX05VbJB8+/nT SLnJpOrVzhgklutATP+iRAd9I4lgIELh7eyB+ykmIYY3WqAHzolPJnoJGSxfKYov i6IYEV3ZPByk1z/JnoqNhQlF6D1SdeaY65iIMhI9IrvqodY1jxsBEUk8yqj2BPNQ c7s+7PTxeLUdQLVko8vjv7TkIWoA5vxVx9zgRQu/N3HRy5KaY8eNZVXy8LOku4AT /0vB8+hKtU/9Eh589Gn/UFVZYNEIjH/f -----END CERTIFICATE-----Generated at Thu Sep 18 20:34:13 2025 by rpki-client