$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json) Hash identifier: bYD4Ks4DkBYezGb16wbuQSNRE3cOaLBd4TInUSpbNMs= Subject key identifier: C4:7E:2F:57:E3:60:E6:01:1F:0E:8C:C9:FF:21:69:A5:97:B1:F2:17 Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Certificate serial: 08F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft Manifest number: 08D4 Signing time: Sat 18 Oct 2025 21:34:08 +0000 Manifest this update: Sat 18 Oct 2025 21:34:08 +0000 Manifest next update: Sat 25 Oct 2025 21:34:08 +0000 Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: ELDxIKiqnvK4vhdVeK9480uB4J/LXBewkEpXaUoazz4=) 2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 437Z5enRuaQO92H2FAcbSA65gK3IxD6GTsjTk9iVKzU=) 3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: aSllRpcvN844MQkKpYVYqAr8n2r/52Cfde6x8KbnmRk=) 4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: K91u4jcxoGdVwNsfyPrjf+VTjR+CX+rH0W4KKBUnjNU=) 5: F814A546C01411EA912AC365C4F9AE02.roa (hash: /CldUEY4cGDwhLiLYXGQ01djQa6ApY49jgcW3InFkyE=) 6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: XAx1J/DLce82S0DJ6QETMIUPs/8svCL35NE1zYijtJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2292 (0x8f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Validity Not Before: Oct 18 21:34:08 2025 GMT Not After : Oct 25 21:34:08 2025 GMT Subject: CN=68f407d0-0dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7d:59:62:77:37:8a:29:d5:ab:d9:55:72:aa: 63:fc:a4:76:e4:ff:69:8e:f1:f8:5b:c0:c6:7d:dc: ea:cd:68:6a:6e:3b:52:61:2c:40:ba:47:65:4d:12: 76:50:79:cc:00:0c:eb:97:65:3a:c8:30:7d:30:3a: 0c:88:a8:21:6c:4e:96:14:2f:37:8f:5a:75:e5:03: ed:cb:1d:93:54:e1:09:fa:97:9a:4c:21:b6:6a:a7: 9a:90:b5:59:0d:b1:a7:7c:18:de:a9:cd:8c:6a:4e: 2e:d8:1f:29:63:6b:da:5c:e7:90:ed:9f:d2:c4:ac: b6:5f:96:cb:95:1b:66:02:b7:2d:e7:0b:a9:88:29: 4d:9a:f3:4a:0f:eb:da:7b:94:a1:b3:24:7c:08:e0: d8:35:40:69:45:24:ac:2d:c9:08:e3:58:cc:1f:98: 94:84:fb:50:be:7a:2e:82:4e:d1:73:d2:56:36:ab: ee:15:4f:32:13:60:ae:9b:03:b3:a5:e3:09:34:4b: 6b:9e:53:60:8a:d7:d6:76:4d:47:46:5b:a2:7d:7c: 77:7f:8d:a9:b9:16:37:de:43:be:e9:78:e7:37:d4: 9d:a4:71:2e:4a:a7:9d:69:9a:c8:96:7a:ce:4f:19: 74:ae:81:da:ac:18:3f:71:04:a9:8c:e0:25:dc:a9: 2a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7E:2F:57:E3:60:E6:01:1F:0E:8C:C9:FF:21:69:A5:97:B1:F2:17 X509v3 Authority Key Identifier: keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:64:8c:ec:ab:d7:02:de:f9:92:0a:1f:4c:5a:ba:5b:44:dc: 3e:70:cc:bd:16:33:c7:0b:7e:f6:53:9b:b4:2f:99:66:9e:d5: e8:7d:7d:7d:08:47:75:3b:ed:cd:b0:0c:18:26:47:9c:9a:66: cf:07:55:b3:08:58:03:f1:65:45:41:e4:44:69:0e:38:5b:97: c5:b5:35:eb:02:8f:9b:b7:3e:f2:a1:42:29:50:e4:43:b4:5e: 98:89:04:4a:5b:25:a9:87:d1:17:c1:c2:d5:34:d6:4d:15:62: bd:49:bc:ec:c2:39:2f:7d:b1:0b:f3:b8:f6:bb:55:d1:cc:61: 20:76:3c:39:b0:95:c4:8a:92:e2:89:ff:95:72:4d:94:29:05: 44:fd:d2:4d:0c:6e:f7:3e:95:37:50:58:e2:a7:dd:a3:50:8d: df:d9:39:65:14:42:50:ba:7e:59:32:e2:63:0b:e1:4f:6f:c2: bc:99:12:07:21:b0:5e:45:59:16:75:6d:c1:d0:dc:e3:eb:3e: 1d:fa:b8:a3:3c:d9:fa:c0:0e:d9:43:64:f5:ed:69:13:ba:fb: 00:2f:b0:18:78:b0:32:b8:52:d5:96:6e:1d:08:d0:bf:66:6c: 8a:76:f7:3d:80:31:d7:01:73:3a:5f:ce:29:68:77:b1:5a:2a: 57:8f:c4:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw REE2NTJERTQwHhcNMjUxMDE4MjEzNDA4WhcNMjUxMDI1MjEzNDA4WjAYMRYwFAYD VQQDEw02OGY0MDdkMC0wZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmX1ZYnc3iinVq9lVcqpj/KR25P9pjvH4W8DGfdzqzWhqbjtSYSxAukdlTRJ2 UHnMAAzrl2U6yDB9MDoMiKghbE6WFC83j1p15QPtyx2TVOEJ+peaTCG2aqeakLVZ DbGnfBjeqc2Mak4u2B8pY2vaXOeQ7Z/SxKy2X5bLlRtmArct5wupiClNmvNKD+va e5ShsyR8CODYNUBpRSSsLckI41jMH5iUhPtQvnougk7Rc9JWNqvuFU8yE2CumwOz peMJNEtrnlNgitfWdk1HRluifXx3f42puRY33kO+6XjnN9SdpHEuSqedaZrIlnrO Txl0roHarBg/cQSpjOAl3Kkq6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR+L1fj YOYBHw6Myf8haaWXsfIXMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTY0Ri8zQzlFMkI1Q0MwMTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2 bFZUUE5TMlRLX2dOcGxMZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoZIzsq9cC3vmSCh9MWrpbRNw+cMy9FjPHC372U5u0L5lmntXofX19 CEd1O+3NsAwYJkecmmbPB1WzCFgD8WVFQeREaQ44W5fFtTXrAo+btz7yoUIpUORD tF6YiQRKWyWph9EXwcLVNNZNFWK9SbzswjkvfbEL87j2u1XRzGEgdjw5sJXEipLi if+Vck2UKQVE/dJNDG73PpU3UFjip92jUI3f2TllFEJQun5ZMuJjC+FPb8K8mRIH IbBeRVkWdW3B0Nzj6z4d+rijPNn6wA7ZQ2T17WkTuvsAL7AYeLAyuFLVlm4dCNC/ ZmyKdvc9gDHXAXM6X84paHexWipXj8T1 -----END CERTIFICATE-----Generated at Mon Oct 20 07:58:03 2025 by rpki-client