$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json) Hash identifier: TGMtOGeBsO+kDf0TMmV1FV0zR4daHTPzEMafxDu9SIA= Subject key identifier: 2B:0D:9C:D4:3A:8F:C0:E8:F5:C8:D5:26:98:8C:CE:2E:EB:46:0A:E1 Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Certificate serial: 089C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft Manifest number: 0881 Signing time: Sat 10 May 2025 20:20:50 +0000 Manifest this update: Sat 10 May 2025 20:20:49 +0000 Manifest next update: Sat 17 May 2025 20:20:49 +0000 Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: 7eqWg9jqE2iHK3yBXF6vbShbJybD2HJBBvprUBKZlr0=) 2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: MbDPgGu0QclVT9FsJP5AAT1eEmuh3d/Dz6sn+R/b6KM=) 3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: cq2+wmybE1qpMjYmMXJ1sPoAauOtHlCzziVm+2eI9Iw=) 4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: 82RI8awYpynCWEC9v44MXxvIjgMncGXtmCbSpuF8EGw=) 5: F814A546C01411EA912AC365C4F9AE02.roa (hash: 55QHl+d6Jc6Afsomh5duijKv8tF3LE8W2FzT9OQDDqI=) 6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: NQcAjbSAwzYhxeooFE30slWX1sySx4pom2WdezOetYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204 (0x89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Validity Not Before: May 10 20:20:49 2025 GMT Not After : May 17 20:20:49 2025 GMT Subject: CN=681fb521-5ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:63:51:3c:94:a7:c7:4d:7b:b7:df:75:c3: 45:40:35:3e:21:00:53:02:16:4c:07:84:3f:de:8a: 1d:9c:a3:1a:fd:c4:cd:95:ac:e9:86:b2:88:ba:49: ba:ac:d3:27:e1:bc:cf:39:a4:51:7d:dc:98:e7:a0: 0f:06:c8:d6:af:50:5e:30:65:93:7d:ce:17:8a:be: b9:a8:65:3e:3e:7e:03:82:66:62:15:ed:1f:f4:4d: 5f:10:7a:0e:78:d7:99:2f:88:ac:78:4d:dd:75:45: 6e:0c:8b:91:ff:94:1f:48:ad:28:ad:3c:6a:61:64: 6f:70:d2:a2:ac:b0:ec:51:96:c4:2a:99:81:2a:31: 9f:e0:6b:0d:7a:dc:f9:44:e8:45:e2:1c:db:58:8f: a8:93:fc:2d:64:9a:de:b7:fa:3a:8b:20:f8:12:5c: 4d:6b:bc:f2:70:3c:db:b7:49:e7:fe:3c:54:7f:8a: 33:df:8d:4a:63:73:8e:13:6d:c6:a6:23:e5:6f:f5: 56:ec:2a:79:54:09:86:14:9e:76:70:65:b4:a1:70: 0b:9c:66:f0:ed:fc:6c:58:da:8d:44:40:b8:fa:01: 53:89:6b:43:c1:2b:2b:d3:ba:31:62:09:fe:68:ef: 41:46:b0:e9:1e:31:8e:95:3a:86:6d:ce:e9:71:f6: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0D:9C:D4:3A:8F:C0:E8:F5:C8:D5:26:98:8C:CE:2E:EB:46:0A:E1 X509v3 Authority Key Identifier: keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ca:8c:f9:08:e7:a4:6c:45:e1:10:48:64:99:db:3a:bd:b6: 27:ad:96:90:65:8f:0b:af:49:f3:4c:c9:e0:cf:05:03:56:87: 5c:c3:97:09:9d:b3:7c:72:0c:b9:89:f3:fc:31:5f:03:7e:7a: d7:4f:74:f3:28:30:b6:59:2d:9a:e9:16:72:13:49:36:4b:37: 47:e7:bf:15:96:1b:a8:6c:68:6c:78:5c:f8:91:c6:66:d5:65: 62:9b:2d:81:2a:8f:71:da:ce:79:14:7e:93:48:d8:ee:48:02: 28:e8:c6:f5:df:72:e0:1d:27:88:5c:eb:cc:4e:f1:3d:70:45: fc:47:ef:2a:ac:97:c4:44:6a:9d:a9:76:0a:39:13:42:3c:b3: e3:97:f9:7d:b8:ec:98:30:34:b6:5f:a9:e4:e3:f8:e5:ca:4a: fc:6b:8e:02:e2:2b:1c:09:49:c2:dd:76:bb:d5:3a:18:9c:ed: dc:97:e4:8c:bb:93:fe:4d:70:86:7b:7e:5a:06:bb:9e:c1:47: 6e:06:61:66:fb:5c:5e:8b:66:d4:30:95:47:3f:fe:2b:5b:4f: 01:22:fe:3a:89:b7:85:7a:26:3d:e5:cc:7f:f3:1a:b7:ea:17: 75:5c:34:4d:f4:f5:b9:9e:cb:14:bf:bd:44:4d:25:0b:61:53: 8e:81:47:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw REE2NTJERTQwHhcNMjUwNTEwMjAyMDQ5WhcNMjUwNTE3MjAyMDQ5WjAYMRYwFAYD VQQDEw02ODFmYjUyMS01ZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl5jUTyUp8dNe7ffdcNFQDU+IQBTAhZMB4Q/3oodnKMa/cTNlazphrKIukm6 rNMn4bzPOaRRfdyY56APBsjWr1BeMGWTfc4Xir65qGU+Pn4DgmZiFe0f9E1fEHoO eNeZL4iseE3ddUVuDIuR/5QfSK0orTxqYWRvcNKirLDsUZbEKpmBKjGf4GsNetz5 ROhF4hzbWI+ok/wtZJret/o6iyD4ElxNa7zycDzbt0nn/jxUf4oz341KY3OOE23G piPlb/VW7Cp5VAmGFJ52cGW0oXALnGbw7fxsWNqNREC4+gFTiWtDwSsr07oxYgn+ aO9BRrDpHjGOlTqGbc7pcfadnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsNnNQ6 j8Do9cjVJpiMzi7rRgrhMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTY0Ri8zQzlFMkI1Q0MwMTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2 bFZUUE5TMlRLX2dOcGxMZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfyoz5COekbEXhEEhkmds6vbYnrZaQZY8Lr0nzTMngzwUDVodcw5cJ nbN8cgy5ifP8MV8DfnrXT3TzKDC2WS2a6RZyE0k2SzdH578VlhuobGhseFz4kcZm 1WVimy2BKo9x2s55FH6TSNjuSAIo6Mb133LgHSeIXOvMTvE9cEX8R+8qrJfERGqd qXYKORNCPLPjl/l9uOyYMDS2X6nk4/jlykr8a44C4iscCUnC3Xa71ToYnO3cl+SM u5P+TXCGe35aBruewUduBmFm+1xei2bUMJVHP/4rW08BIv46ibeFeiY95cx/8xq3 6hd1XDRN9PW5nssUv71ETSULYVOOgUcQ -----END CERTIFICATE-----Generated at Sun May 11 15:48:40 2025 by rpki-client