$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: f/FZifkQc/edJ09rmB1mylbuJ8uBplrxcbXUu4l9s5E= Subject key identifier: 79:04:67:86:E1:BF:CD:02:43:C3:9F:9F:84:48:B1:9E:1B:FF:78:E6 Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1C01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1BE2 Signing time: Wed 02 Jul 2025 16:21:15 +0000 Manifest this update: Wed 02 Jul 2025 16:21:14 +0000 Manifest next update: Wed 09 Jul 2025 16:21:14 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: diOIe6bFScl1RLWXboP8GUyYrpQ2rKgvXvt3yzPr8jY=) 2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: 7vSMEGE2WKILnDsupDw245nI6InVKo+5RlyNwkMHa0A=) 3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: gkf5l1306jNCZlXkzkzc37H/VOhptBWvvDD29cbTyo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7169 (0x1c01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: Jul 2 16:21:14 2025 GMT Not After : Jul 9 16:21:14 2025 GMT Subject: CN=68655c7b-6ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:0d:2c:3e:53:60:a1:cf:3c:3e:d2:0a:cc: 52:de:72:d3:8d:7c:43:f2:16:fe:45:73:b0:39:2f: 16:ce:cf:f9:2e:2f:0f:78:94:71:80:5d:b3:7d:aa: 3f:fe:76:51:c3:a4:10:70:f8:62:9a:ad:15:d1:11: 9c:a0:40:05:6e:64:d9:9a:9e:9b:9f:60:82:56:73: 6a:b5:1c:55:f8:7a:ae:fd:94:92:1b:dd:bd:58:7a: 1a:6f:41:0c:d0:63:40:c9:dc:23:50:f9:a2:e1:41: ba:d8:91:3f:87:42:37:a0:3b:03:30:46:47:57:a8: 91:c6:3f:ca:ad:f5:6d:9d:68:75:0a:94:2f:bd:c0: 52:e8:58:52:5e:84:4c:57:c5:89:b5:51:35:68:27: 4e:6f:03:0d:fe:5a:bd:44:a0:17:31:30:d0:15:ac: 86:f3:ee:98:79:3c:d3:8c:de:09:9f:1e:6c:33:bd: 80:82:e6:e9:05:54:d9:7a:4d:ef:03:bf:44:52:a7: 7b:08:50:26:2e:ca:40:0a:a8:a1:cd:5a:10:82:48: e2:1d:60:e3:78:ef:e2:23:d0:3c:07:cf:4d:8f:df: 7d:c9:79:f2:b4:d8:f8:ae:bd:d3:b9:78:5d:f9:4c: 8b:1a:ab:64:1c:a3:0d:e4:1f:2c:58:cb:1b:ec:f0: 40:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:04:67:86:E1:BF:CD:02:43:C3:9F:9F:84:48:B1:9E:1B:FF:78:E6 X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:0e:b6:87:58:35:97:3e:5b:f0:5b:f5:ab:46:4c:f0:a2:39: 86:24:4b:4b:b2:11:00:b9:f0:6f:e3:f2:26:08:51:0e:e9:19: a2:51:5e:22:b0:39:e4:1e:e2:b4:da:3e:80:9f:59:8a:ab:99: b0:e3:e3:d2:e2:c7:8f:98:09:c9:ec:82:b7:d7:e8:4e:ef:7d: 3e:cc:cc:d8:b5:c9:41:20:c1:32:d7:ed:4c:41:ec:07:5f:e5: 57:5b:b2:3c:44:66:44:dd:2e:97:a5:f4:b0:38:ef:17:a4:ae: d8:cb:72:2b:b9:01:3b:e9:d1:88:09:1e:42:df:59:12:a7:34: a1:2d:9a:5d:58:db:f4:91:9e:fe:37:9f:fc:88:48:84:07:39: 19:f8:45:7c:1e:9d:5c:26:68:2c:52:c3:27:f9:f4:3f:da:19: aa:6a:51:66:48:b0:1d:bc:94:1c:9e:13:4f:78:63:29:e4:b8: c5:a2:ca:0d:9d:06:33:d2:13:ba:de:4c:51:64:07:60:c8:e0: 24:48:13:40:57:f3:9c:7f:ac:79:eb:8a:b6:84:2f:fa:dd:a6: 6c:30:d0:1a:80:1d:1d:d2:8e:45:57:9d:08:b7:9c:83:53:e5: 86:41:d5:64:f5:12:af:7d:c5:9a:e0:de:95:d7:e2:03:63:9f: 75:c9:b3:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjUwNzAyMTYyMTE0WhcNMjUwNzA5MTYyMTE0WjAYMRYwFAYD VQQDEw02ODY1NWM3Yi02ZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrwNLD5TYKHPPD7SCsxS3nLTjXxD8hb+RXOwOS8Wzs/5Li8PeJRxgF2zfao/ /nZRw6QQcPhimq0V0RGcoEAFbmTZmp6bn2CCVnNqtRxV+Hqu/ZSSG929WHoab0EM 0GNAydwjUPmi4UG62JE/h0I3oDsDMEZHV6iRxj/KrfVtnWh1CpQvvcBS6FhSXoRM V8WJtVE1aCdObwMN/lq9RKAXMTDQFayG8+6YeTzTjN4Jnx5sM72AgubpBVTZek3v A79EUqd7CFAmLspACqihzVoQgkjiHWDjeO/iI9A8B89Nj999yXnytNj4rr3TuXhd +UyLGqtkHKMN5B8sWMsb7PBAawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkEZ4bh v80CQ8Ofn4RIsZ4b/3jmMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGDraHWDWXPlvwW/WrRkzwojmGJEtLshEAufBv4/ImCFEO6RmiUV4i sDnkHuK02j6An1mKq5mw4+PS4sePmAnJ7IK31+hO730+zMzYtclBIMEy1+1MQewH X+VXW7I8RGZE3S6XpfSwOO8XpK7Yy3IruQE76dGICR5C31kSpzShLZpdWNv0kZ7+ N5/8iEiEBzkZ+EV8Hp1cJmgsUsMn+fQ/2hmqalFmSLAdvJQcnhNPeGMp5LjFosoN nQYz0hO63kxRZAdgyOAkSBNAV/Ocf6x564q2hC/63aZsMNAagB0d0o5FV50It5yD U+WGQdVk9RKvfcWa4N6V1+IDY591ybO9 -----END CERTIFICATE-----Generated at Thu Jul 3 16:52:50 2025 by rpki-client