$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json) Hash identifier: uCZUoNRHwsMJjnbkePTZAOx82L9Qhz5EI2ykAKWj8yc= Subject key identifier: F0:18:7E:70:A8:C9:88:EC:97:CD:72:F4:52:93:56:6F:E0:30:5A:08 Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft Manifest number: 089D Signing time: Wed 02 Jul 2025 20:51:08 +0000 Manifest this update: Wed 02 Jul 2025 20:51:07 +0000 Manifest next update: Wed 09 Jul 2025 20:51:07 +0000 Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: tTnPxYDUD+tzQALMA0r1GewLFdtkyAxAwwDPcZNKhZg=) 2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 437Z5enRuaQO92H2FAcbSA65gK3IxD6GTsjTk9iVKzU=) 3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: aSllRpcvN844MQkKpYVYqAr8n2r/52Cfde6x8KbnmRk=) 4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: K91u4jcxoGdVwNsfyPrjf+VTjR+CX+rH0W4KKBUnjNU=) 5: F814A546C01411EA912AC365C4F9AE02.roa (hash: /CldUEY4cGDwhLiLYXGQ01djQa6ApY49jgcW3InFkyE=) 6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: XAx1J/DLce82S0DJ6QETMIUPs/8svCL35NE1zYijtJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Validity Not Before: Jul 2 20:51:07 2025 GMT Not After : Jul 9 20:51:07 2025 GMT Subject: CN=68659bbb-1e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:5d:e9:5b:75:b3:71:b2:fc:6b:a5:ca:cf: 35:54:5a:db:b5:35:83:6d:82:27:b9:4f:d8:01:dd: 0a:43:d8:f6:43:db:ab:d6:33:a7:a3:fd:19:17:b7: ec:6b:97:38:1e:31:24:f3:42:07:8c:1d:72:80:45: f0:9e:04:73:c7:f5:57:85:43:5b:b1:3f:c6:af:2b: 06:03:d2:43:0d:d3:7e:19:e5:bb:8c:f3:e1:9a:9a: 02:a8:01:80:74:df:e5:67:ee:ee:86:33:6d:67:29: dc:8d:06:46:41:46:1b:e9:7f:ed:1e:64:97:b1:3c: f2:9a:ea:96:cc:1e:3f:9e:c0:d5:f3:4d:1a:3d:5d: ec:79:58:e2:6d:16:b4:1d:e4:80:c6:c1:76:93:70: 41:0f:0f:c5:db:0b:2d:65:1e:a8:90:cb:b1:1c:81: 8c:5c:29:e3:00:1e:4c:dd:f5:6c:e2:70:f8:e0:66: a1:6d:9e:c0:f8:77:37:c5:e1:4c:d7:52:5b:99:f9: ac:b6:51:29:6d:2d:89:67:32:1f:c2:8a:03:61:43: ff:25:3f:46:0b:d0:4c:54:08:e7:d9:2e:eb:ad:75: 4f:c6:33:40:40:cf:3e:52:5a:65:be:cc:29:de:2d: 3b:43:fc:b5:71:4d:89:78:1d:e5:8b:a9:2c:a8:4e: 6d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:18:7E:70:A8:C9:88:EC:97:CD:72:F4:52:93:56:6F:E0:30:5A:08 X509v3 Authority Key Identifier: keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:2f:1c:c0:f3:28:05:16:13:ba:2b:ee:3d:eb:54:d1:c9:9f: e9:99:5d:4c:83:0e:1d:c0:1d:5c:df:47:4f:ec:3e:dc:44:cf: 4d:17:e7:ae:6d:8d:ff:bd:e6:fd:e6:75:f5:83:1f:58:80:0e: 6c:08:e3:d8:48:ce:83:d7:89:59:21:8a:df:fe:1c:c1:e0:7d: 58:48:0a:ab:65:b1:7c:fe:68:7c:e9:c3:2a:ac:dd:6c:12:7b: 74:e3:31:b6:a5:c1:b6:58:7a:00:4a:5b:c0:fb:96:d9:1d:2f: 34:3a:ed:cd:4f:71:74:32:ac:43:5b:7c:2f:c4:f8:65:94:3f: 2a:1c:53:4e:65:43:ce:92:08:d0:7f:5f:86:5e:23:cf:87:14: f2:aa:72:3c:fe:86:50:86:06:59:a6:62:d7:e5:0f:bf:bc:2f: 85:1a:8c:e9:a2:08:b7:1e:97:d7:1c:a4:57:2e:50:81:ff:b3: e6:99:34:f7:51:33:09:58:27:e4:9f:9c:ca:76:d8:2b:54:c3: 98:92:65:a7:11:8f:6c:f8:8c:55:a7:12:f5:7e:c1:39:92:aa: 27:5a:fd:48:2b:fb:b7:26:d3:bc:a0:54:fc:e3:c1:04:8b:d0: 26:c7:63:b1:32:b5:a6:14:3f:19:3f:c4:d4:83:81:ac:ce:c4: a1:2f:85:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw REE2NTJERTQwHhcNMjUwNzAyMjA1MTA3WhcNMjUwNzA5MjA1MTA3WjAYMRYwFAYD VQQDEw02ODY1OWJiYi0xZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5dd6Vt1s3Gy/Gulys81VFrbtTWDbYInuU/YAd0KQ9j2Q9ur1jOno/0ZF7fs a5c4HjEk80IHjB1ygEXwngRzx/VXhUNbsT/GrysGA9JDDdN+GeW7jPPhmpoCqAGA dN/lZ+7uhjNtZyncjQZGQUYb6X/tHmSXsTzymuqWzB4/nsDV800aPV3seVjibRa0 HeSAxsF2k3BBDw/F2wstZR6okMuxHIGMXCnjAB5M3fVs4nD44GahbZ7A+Hc3xeFM 11JbmfmstlEpbS2JZzIfwooDYUP/JT9GC9BMVAjn2S7rrXVPxjNAQM8+Ulplvswp 3i07Q/y1cU2JeB3li6ksqE5t2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAYfnCo yYjsl81y9FKTVm/gMFoIMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTY0Ri8zQzlFMkI1Q0MwMTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2 bFZUUE5TMlRLX2dOcGxMZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5LxzA8ygFFhO6K+4961TRyZ/pmV1Mgw4dwB1c30dP7D7cRM9NF+eu bY3/veb95nX1gx9YgA5sCOPYSM6D14lZIYrf/hzB4H1YSAqrZbF8/mh86cMqrN1s Ent04zG2pcG2WHoASlvA+5bZHS80Ou3NT3F0MqxDW3wvxPhllD8qHFNOZUPOkgjQ f1+GXiPPhxTyqnI8/oZQhgZZpmLX5Q+/vC+FGozpogi3HpfXHKRXLlCB/7PmmTT3 UTMJWCfkn5zKdtgrVMOYkmWnEY9s+IxVpxL1fsE5kqonWv1IK/u3JtO8oFT848EE i9Amx2OxMrWmFD8ZP8TUg4GszsShL4XB -----END CERTIFICATE-----Generated at Thu Jul 3 13:29:45 2025 by rpki-client