$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: Zho5BBnG6rCZLngMoFazUbQIX+ENQyMMtbFHeuYjUP8= Subject key identifier: 46:9C:93:1D:A9:8B:21:55:75:05:65:D4:1C:F8:CE:E9:D1:81:FA:49 Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1BF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1BD1 Signing time: Fri 30 May 2025 16:24:56 +0000 Manifest this update: Fri 30 May 2025 16:24:56 +0000 Manifest next update: Fri 06 Jun 2025 16:24:56 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: 7eV1kU+H084rCB1GTn6rbqVoUvFi0BWwaIzX4hWmWvA=) 2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: 7vSMEGE2WKILnDsupDw245nI6InVKo+5RlyNwkMHa0A=) 3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: gkf5l1306jNCZlXkzkzc37H/VOhptBWvvDD29cbTyo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7152 (0x1bf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: May 30 16:24:56 2025 GMT Not After : Jun 6 16:24:56 2025 GMT Subject: CN=6839dbd8-3609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:fc:dc:32:8d:78:e7:a7:ea:05:bc:d9:6b: f5:09:a3:e7:68:7f:5c:6b:d4:6b:20:84:b9:46:3e: 84:49:2b:0d:ce:25:2e:02:1f:de:08:de:47:98:5f: bf:51:91:c0:77:25:11:a4:18:c7:ec:58:5c:e8:37: 79:10:60:8a:f4:66:04:69:f3:d7:1f:6b:f4:d9:cb: 0f:85:60:c1:c3:71:94:f6:bd:66:40:6a:63:03:14: 01:7f:23:06:66:1d:b3:b1:71:a3:76:4e:91:af:a7: f3:7f:97:47:1c:15:c7:82:15:f9:12:25:e6:ca:b6: ee:0d:02:80:0d:02:7a:6e:13:c1:29:90:8e:60:bd: fc:c6:7d:e9:b8:4b:e8:08:4d:41:74:1b:0f:f8:9c: ef:45:33:2b:29:9a:ea:b7:1c:dc:07:46:51:8c:2e: bd:6a:0f:9a:02:36:ab:e8:f9:aa:7d:b5:58:7f:f1: 99:41:2f:44:ca:08:2a:ea:57:0e:73:9d:22:53:f4: 33:37:71:c2:19:8c:1d:c3:fe:8e:33:3f:e8:33:da: 77:16:b3:a6:d7:4c:5d:f8:4d:c4:47:47:56:d7:f9: b2:16:56:f7:f1:98:c6:67:bc:99:95:c0:1e:98:f3: 0b:72:61:0a:63:54:7b:c2:4e:6d:a9:e6:13:cf:6c: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9C:93:1D:A9:8B:21:55:75:05:65:D4:1C:F8:CE:E9:D1:81:FA:49 X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e4:b3:21:2e:e2:99:96:7e:39:e3:fe:7f:d4:99:2a:a7:b3: 78:78:7d:89:51:e5:29:0a:66:b3:45:ee:39:a6:01:a7:4f:92: 2b:32:77:53:37:ad:22:a3:f2:68:f8:1a:91:73:6a:69:8b:0a: d0:c0:f5:4a:45:a1:93:07:22:e6:04:4e:e6:5b:6b:24:8a:cc: fe:74:d7:3f:c7:7b:ed:9c:c2:dd:e6:04:af:9b:a6:2f:09:05: 74:e7:f8:d0:2f:d5:5f:eb:59:73:83:0e:a7:2a:bc:72:d5:99: 12:cf:46:d3:f8:96:31:31:a8:74:69:dd:f0:ef:4f:1d:73:f9: 77:1b:38:56:c0:2d:e4:e0:2a:73:3d:5e:2f:5d:fb:42:87:0c: 4d:17:80:c2:89:d0:59:b7:31:ea:ea:20:06:89:58:2a:8c:e7: f5:9b:31:da:f9:39:7c:33:80:ad:88:c7:c3:2a:01:df:12:88: a7:6e:f2:0c:1f:e3:8f:3e:c5:46:ab:13:ad:57:bd:5d:0b:23: 4a:fc:6e:03:1f:8f:27:81:4b:5a:47:e0:e0:85:e3:83:b5:17: 2c:1a:7d:99:de:57:7b:7c:83:c6:8f:01:d6:e9:23:7f:f5:ce: 3e:20:f0:9b:07:77:4a:c3:1a:af:83:c3:13:2b:e6:b2:d4:d0: d4:d3:38:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjUwNTMwMTYyNDU2WhcNMjUwNjA2MTYyNDU2WjAYMRYwFAYD VQQDEw02ODM5ZGJkOC0zNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlv83DKNeOen6gW82Wv1CaPnaH9ca9RrIIS5Rj6ESSsNziUuAh/eCN5HmF+/ UZHAdyURpBjH7Fhc6Dd5EGCK9GYEafPXH2v02csPhWDBw3GU9r1mQGpjAxQBfyMG Zh2zsXGjdk6Rr6fzf5dHHBXHghX5EiXmyrbuDQKADQJ6bhPBKZCOYL38xn3puEvo CE1BdBsP+JzvRTMrKZrqtxzcB0ZRjC69ag+aAjar6PmqfbVYf/GZQS9Eyggq6lcO c50iU/QzN3HCGYwdw/6OMz/oM9p3FrOm10xd+E3ER0dW1/myFlb38ZjGZ7yZlcAe mPMLcmEKY1R7wk5tqeYTz2y+dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEackx2p iyFVdQVl1Bz4zunRgfpJMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa5LMhLuKZln454/5/1Jkqp7N4eH2JUeUpCmazRe45pgGnT5IrMndT N60io/Jo+BqRc2ppiwrQwPVKRaGTByLmBE7mW2skisz+dNc/x3vtnMLd5gSvm6Yv CQV05/jQL9Vf61lzgw6nKrxy1ZkSz0bT+JYxMah0ad3w708dc/l3GzhWwC3k4Cpz PV4vXftChwxNF4DCidBZtzHq6iAGiVgqjOf1mzHa+Tl8M4CtiMfDKgHfEoinbvIM H+OPPsVGqxOtV71dCyNK/G4DH48ngUtaR+DgheODtRcsGn2Z3ld7fIPGjwHW6SN/ 9c4+IPCbB3dKwxqvg8MTK+ay1NDU0zg+ -----END CERTIFICATE-----Generated at Sat May 31 17:01:19 2025 by rpki-client