$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: IRo1Tj6+Ne8BIS6KRmn90+tiJ1jsq2YJ1O6oR97WS68= Subject key identifier: 8D:F4:E6:64:C7:46:F3:BC:A1:48:EE:A3:88:17:FE:FB:0F:1B:55:97 Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1C1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1BFC Signing time: Fri 22 Aug 2025 16:18:19 +0000 Manifest this update: Fri 22 Aug 2025 16:18:18 +0000 Manifest next update: Fri 29 Aug 2025 16:18:18 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: mcxh9GsBixyI/0s9xw/H8aBQGivM1YRaRFMv0/EM2zg=) 2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: 7vSMEGE2WKILnDsupDw245nI6InVKo+5RlyNwkMHa0A=) 3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: gkf5l1306jNCZlXkzkzc37H/VOhptBWvvDD29cbTyo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7195 (0x1c1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: Aug 22 16:18:18 2025 GMT Not After : Aug 29 16:18:18 2025 GMT Subject: CN=68a8984b-c99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:a0:86:f7:54:ad:aa:08:74:3b:2f:87:05: 55:2e:bb:77:7f:4d:a5:20:00:e4:2a:4f:e7:42:dc: c5:b3:00:ec:1e:2b:df:fe:22:1f:67:9c:73:9b:85: 6a:1b:46:a1:36:ac:6e:e7:3b:1a:c5:06:51:f7:86: 9e:80:78:17:c0:09:cf:10:9d:5a:1a:72:79:f0:a6: 41:c7:1e:28:b1:be:05:13:ae:b8:69:b1:f6:c1:e0: c4:fa:6e:89:9a:2e:c7:4c:d5:5f:97:42:91:60:29: e1:59:c8:9b:1b:0d:73:3a:c0:78:89:a1:af:ea:ad: 76:f9:0e:a9:b4:3e:b1:6b:dc:21:bb:52:a6:0a:1d: cc:31:19:54:43:34:61:36:05:4f:8e:40:94:d9:59: 2e:b7:e4:fc:58:08:92:fb:c0:e3:7f:3d:f1:94:57: 82:c5:0f:98:c3:52:41:b2:6f:4b:b2:fc:12:d4:0e: 6d:6c:67:11:a3:23:68:69:99:bf:32:a1:3b:13:e3: 84:d7:2f:a1:00:18:c0:88:72:49:9a:8d:61:ae:44: c2:f9:1d:3b:6d:ee:eb:86:72:6f:f0:b4:33:4d:8d: aa:a8:68:81:10:2f:a3:b2:d0:49:0e:31:d8:78:9b: da:a5:1e:f0:75:06:fa:32:d5:54:9a:4c:72:2d:64: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F4:E6:64:C7:46:F3:BC:A1:48:EE:A3:88:17:FE:FB:0F:1B:55:97 X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:47:36:3b:1e:8c:d3:e9:68:ce:c7:4b:6e:3d:f3:01:d1:2a: 60:a4:9a:c1:01:d6:8f:08:35:8e:3b:98:42:a6:85:17:99:e9: 12:08:f6:a0:d5:a6:f6:20:8e:df:15:ac:21:e2:57:1d:ce:06: 12:ae:8e:b7:80:73:25:31:d7:be:92:5c:d3:9e:da:21:58:43: cf:73:dd:62:1d:f5:77:aa:29:b7:91:36:c8:28:08:63:e0:5d: 0d:a3:8f:f6:e0:24:9d:c9:19:d2:8a:7d:a5:30:ab:a4:77:49: 2b:8c:a9:2b:fd:d2:91:2b:2c:50:3b:3f:06:50:ea:48:0c:51: 92:7f:aa:4e:25:33:62:20:30:2a:28:ef:83:db:f1:ae:ba:cc: 95:d5:70:9e:11:81:7b:fa:06:66:91:16:fb:7e:83:a1:05:cf: a5:dc:47:8b:95:5c:4a:0d:06:84:20:3c:c6:3d:86:70:7e:14: 97:e7:8c:84:fb:e9:fb:3e:c8:d9:e5:e1:9a:f2:69:75:18:34: 38:5e:8f:41:00:dd:6a:3d:78:dc:b1:2e:83:5f:98:c9:38:6a: 6d:7b:0f:15:95:d2:22:a3:e6:64:cf:d7:86:37:43:75:4d:33: 0c:fc:57:98:0f:e8:33:38:df:f2:00:e6:95:11:b4:7d:fd:c2: 72:df:0e:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjUwODIyMTYxODE4WhcNMjUwODI5MTYxODE4WjAYMRYwFAYD VQQDEw02OGE4OTg0Yi1jOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEqghvdUraoIdDsvhwVVLrt3f02lIADkKk/nQtzFswDsHivf/iIfZ5xzm4Vq G0ahNqxu5zsaxQZR94aegHgXwAnPEJ1aGnJ58KZBxx4osb4FE664abH2weDE+m6J mi7HTNVfl0KRYCnhWcibGw1zOsB4iaGv6q12+Q6ptD6xa9whu1KmCh3MMRlUQzRh NgVPjkCU2Vkut+T8WAiS+8Djfz3xlFeCxQ+Yw1JBsm9LsvwS1A5tbGcRoyNoaZm/ MqE7E+OE1y+hABjAiHJJmo1hrkTC+R07be7rhnJv8LQzTY2qqGiBEC+jstBJDjHY eJvapR7wdQb6MtVUmkxyLWQCDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI305mTH RvO8oUjuo4gX/vsPG1WXMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbRzY7HozT6WjOx0tuPfMB0SpgpJrBAdaPCDWOO5hCpoUXmekSCPag 1ab2II7fFawh4lcdzgYSro63gHMlMde+klzTntohWEPPc91iHfV3qim3kTbIKAhj 4F0No4/24CSdyRnSin2lMKukd0krjKkr/dKRKyxQOz8GUOpIDFGSf6pOJTNiIDAq KO+D2/GuusyV1XCeEYF7+gZmkRb7foOhBc+l3EeLlVxKDQaEIDzGPYZwfhSX54yE ++n7PsjZ5eGa8ml1GDQ4Xo9BAN1qPXjcsS6DX5jJOGptew8VldIio+Zkz9eGN0N1 TTMM/FeYD+gzON/yAOaVEbR9/cJy3w5Y -----END CERTIFICATE-----Generated at Sun Aug 24 06:32:15 2025 by rpki-client