$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json) Hash identifier: n/h26YYcFK2rXoxlk8kJ2kVAVTdm2JtV4THTcchq1+U= Subject key identifier: FE:69:C1:20:94:A8:4D:06:41:A9:A0:7B:4D:55:F4:C3:47:22:B7:5D Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Certificate serial: 08D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft Manifest number: 08B7 Signing time: Fri 22 Aug 2025 20:38:51 +0000 Manifest this update: Fri 22 Aug 2025 20:38:51 +0000 Manifest next update: Fri 29 Aug 2025 20:38:51 +0000 Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: 8oya/yVdeTuuekSfZBrGFHOzxpFiAWFjorYu2HbIt68=) 2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 437Z5enRuaQO92H2FAcbSA65gK3IxD6GTsjTk9iVKzU=) 3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: aSllRpcvN844MQkKpYVYqAr8n2r/52Cfde6x8KbnmRk=) 4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: K91u4jcxoGdVwNsfyPrjf+VTjR+CX+rH0W4KKBUnjNU=) 5: F814A546C01411EA912AC365C4F9AE02.roa (hash: /CldUEY4cGDwhLiLYXGQ01djQa6ApY49jgcW3InFkyE=) 6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: XAx1J/DLce82S0DJ6QETMIUPs/8svCL35NE1zYijtJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2263 (0x8d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Validity Not Before: Aug 22 20:38:51 2025 GMT Not After : Aug 29 20:38:51 2025 GMT Subject: CN=68a8d55b-092b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:59:4d:2e:ba:51:99:bf:f8:cd:00:31:fd: 1d:2a:3e:75:3d:a6:49:d0:f8:00:28:4f:cd:55:2d: e9:03:32:34:ee:89:9a:23:c4:d5:3b:c9:40:4f:ab: 48:d4:da:fc:32:86:29:fa:29:43:0a:a4:9e:03:1a: c5:f3:3f:07:a6:2d:e4:9f:af:ef:0a:77:42:ba:dc: 83:ae:de:9e:3c:c4:d3:5d:d0:3c:85:80:e9:9c:2a: 16:d0:39:e2:71:6d:24:67:c0:f2:e3:47:48:d2:78: 52:56:9b:66:77:da:8f:b1:b2:c2:15:ca:2d:c7:01: 52:f2:25:10:7f:08:5c:47:f1:f2:8a:33:5f:1f:5c: 9b:9c:f1:a8:ea:b4:a5:a5:00:4a:b4:87:b0:f6:92: 52:2e:01:9d:ff:b4:c1:53:b0:b3:09:14:d6:48:ac: 94:3e:b9:23:29:2a:27:0f:00:f7:34:35:5a:0e:9e: ef:cb:24:15:e4:5d:bc:ac:aa:23:c1:a6:42:7a:ae: 7b:02:c2:bc:a5:be:fc:11:f1:2f:82:a9:9c:78:7a: eb:96:ac:63:e7:40:46:af:e0:35:d0:25:9f:c6:5e: 75:af:b3:cc:f1:1c:c9:8f:cc:52:5d:8b:08:2d:de: 3b:57:3f:db:f4:b6:e5:78:97:a3:40:bc:2f:00:79: a0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:69:C1:20:94:A8:4D:06:41:A9:A0:7B:4D:55:F4:C3:47:22:B7:5D X509v3 Authority Key Identifier: keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1e:6e:1d:93:12:7b:f4:6f:ba:3a:1c:04:db:c1:87:c6:ca: 1f:8b:15:e6:ac:54:44:fd:78:32:30:37:c8:7a:9d:91:12:a7: 49:3b:92:91:fd:ce:11:4b:8f:29:7c:67:63:14:b5:e2:ae:bb: 2b:1d:ff:0d:a7:11:b0:6e:90:fa:c0:c7:a0:d5:d5:5d:06:22: 1c:0c:56:73:dc:f6:52:65:4e:5d:a5:eb:74:e1:3a:df:57:1c: a8:7a:e6:c8:0e:ba:b8:46:0c:d7:5e:85:4d:4e:28:df:b2:6c: ae:3d:37:31:90:e1:59:a8:8e:f4:77:85:d3:23:76:9d:b1:35: 3b:db:8c:dc:c9:4c:0e:b6:2c:17:d2:83:ee:4e:69:5b:bc:7d: a4:57:0b:cd:90:bd:d0:65:bc:3b:cc:13:e5:43:36:ab:c0:78: 9b:d3:ef:f6:3b:40:35:ad:77:6d:fb:17:47:0c:a2:de:65:66: 4e:09:75:b1:03:72:9d:c2:14:7f:ea:02:b9:81:f3:1d:ba:25: c4:52:4e:af:a0:33:ec:d1:1c:f0:81:6b:e3:b1:9b:c8:6e:2d: 71:59:77:24:79:b8:dc:bf:81:94:0e:eb:08:92:16:27:a8:ad: a1:79:54:ee:de:7e:87:0c:83:5a:5c:47:2a:cd:23:cc:40:60: b1:35:7c:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw REE2NTJERTQwHhcNMjUwODIyMjAzODUxWhcNMjUwODI5MjAzODUxWjAYMRYwFAYD VQQDEw02OGE4ZDU1Yi0wOTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSZZTS66UZm/+M0AMf0dKj51PaZJ0PgAKE/NVS3pAzI07omaI8TVO8lAT6tI 1Nr8MoYp+ilDCqSeAxrF8z8Hpi3kn6/vCndCutyDrt6ePMTTXdA8hYDpnCoW0Dni cW0kZ8Dy40dI0nhSVptmd9qPsbLCFcotxwFS8iUQfwhcR/HyijNfH1ybnPGo6rSl pQBKtIew9pJSLgGd/7TBU7CzCRTWSKyUPrkjKSonDwD3NDVaDp7vyyQV5F28rKoj waZCeq57AsK8pb78EfEvgqmceHrrlqxj50BGr+A10CWfxl51r7PM8RzJj8xSXYsI Ld47Vz/b9LbleJejQLwvAHmg/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5pwSCU qE0GQamge01V9MNHIrddMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTY0Ri8zQzlFMkI1Q0MwMTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2 bFZUUE5TMlRLX2dOcGxMZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaHm4dkxJ79G+6OhwE28GHxsofixXmrFRE/XgyMDfIep2REqdJO5KR /c4RS48pfGdjFLXirrsrHf8NpxGwbpD6wMeg1dVdBiIcDFZz3PZSZU5dpet04Trf VxyoeubIDrq4RgzXXoVNTijfsmyuPTcxkOFZqI70d4XTI3adsTU724zcyUwOtiwX 0oPuTmlbvH2kVwvNkL3QZbw7zBPlQzarwHib0+/2O0A1rXdt+xdHDKLeZWZOCXWx A3KdwhR/6gK5gfMduiXEUk6voDPs0RzwgWvjsZvIbi1xWXckebjcv4GUDusIkhYn qK2heVTu3n6HDINaXEcqzSPMQGCxNXwU -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:50 2025 by rpki-client