$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json) Hash identifier: xTzCFp9wMXtc+YDnwDEXPW/UJR0SH5o2DhcDBcd6nUk= Subject key identifier: 01:D8:93:9E:CF:06:95:31:DC:10:FF:34:21:2A:08:6F:9F:86:EA:6B Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft Manifest number: 0892 Signing time: Sat 14 Jun 2025 20:24:12 +0000 Manifest this update: Sat 14 Jun 2025 20:24:12 +0000 Manifest next update: Sat 21 Jun 2025 20:24:12 +0000 Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: u6kxlm68vfg0+ROuK0GrBmDzgkXe5ReOWCtxdmFm6sc=) 2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: MbDPgGu0QclVT9FsJP5AAT1eEmuh3d/Dz6sn+R/b6KM=) 3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: cq2+wmybE1qpMjYmMXJ1sPoAauOtHlCzziVm+2eI9Iw=) 4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: 82RI8awYpynCWEC9v44MXxvIjgMncGXtmCbSpuF8EGw=) 5: F814A546C01411EA912AC365C4F9AE02.roa (hash: 55QHl+d6Jc6Afsomh5duijKv8tF3LE8W2FzT9OQDDqI=) 6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: NQcAjbSAwzYhxeooFE30slWX1sySx4pom2WdezOetYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Validity Not Before: Jun 14 20:24:12 2025 GMT Not After : Jun 21 20:24:12 2025 GMT Subject: CN=684dda6c-f821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:64:19:6f:47:26:8d:de:a1:3d:64:65:eb: 25:52:52:93:88:d8:80:db:5b:51:25:2b:94:10:eb: 97:93:de:62:d4:92:a8:6c:12:59:de:95:61:a0:80: b7:80:b2:72:e5:85:9f:7f:3f:a2:fd:f4:54:60:61: 82:49:c0:3e:62:89:23:55:a9:30:0e:34:0a:b3:f1: 81:30:37:95:f4:9c:21:77:f7:4d:3d:c1:93:b6:9b: 1d:26:56:9b:78:5d:bf:f3:a0:fd:c4:13:d0:de:75: 17:1b:3f:4b:7c:9e:92:e1:f0:5c:a5:9b:0c:87:f9: fc:dc:e8:8d:8f:b3:cb:a2:65:93:42:3c:fe:46:26: 80:30:44:b1:5d:24:e5:27:a4:a3:aa:9e:0b:a9:73: 9f:f9:4e:a1:c5:cf:bb:17:1b:8e:28:16:eb:6d:71: 08:ca:a6:f1:2e:b5:2a:74:09:f4:96:17:8e:c8:7e: db:05:10:5a:dc:3b:09:6d:89:02:0e:7e:95:2d:1a: 49:89:91:98:02:48:09:c1:b7:50:37:38:03:f9:06: ee:e5:84:93:d3:60:37:7f:5d:42:e2:a0:99:44:18: 7f:20:c6:d1:d4:0e:bc:d9:54:69:02:92:87:03:4e: 41:b1:53:86:95:6c:c1:d7:88:fe:18:54:4a:28:5d: b1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D8:93:9E:CF:06:95:31:DC:10:FF:34:21:2A:08:6F:9F:86:EA:6B X509v3 Authority Key Identifier: keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:71:44:18:6e:9c:57:52:83:5e:03:a5:df:8f:d0:4d:3e:da: d9:09:bd:9c:23:00:96:9e:cd:17:72:e4:26:ed:72:fd:f2:48: cb:12:d8:0d:6c:1f:73:65:95:a9:fc:bc:34:3e:fc:bf:7a:f7: 7a:41:f8:19:e1:7c:49:e1:23:00:7e:89:13:c5:10:25:8f:e5: 01:85:05:b6:70:5c:94:74:c1:74:4d:e9:50:e6:27:9b:f7:a4: 08:18:4b:6d:ad:98:c0:23:4f:cf:06:40:b9:bd:d6:a5:07:ae: 5c:12:3e:4e:8b:c4:eb:67:4e:00:8e:8d:7e:1a:ab:22:e3:12: 4f:f8:57:ba:27:d3:46:a5:5d:fd:23:65:1d:cb:d9:39:75:c6: 45:66:9e:b2:1b:96:48:69:1e:01:13:66:b0:de:a5:56:53:06: 9c:ab:51:3f:47:f8:74:b9:08:19:78:01:b4:95:f0:d8:2b:0c: ec:6c:5f:57:a4:7f:eb:32:30:c8:fd:9a:dd:06:22:3a:88:ca: 81:4d:0b:db:13:34:cb:1b:99:db:38:fa:20:e5:11:28:22:79: bc:71:00:a4:a2:69:79:1a:7c:2d:6a:56:bc:7d:47:4a:51:54: 02:d8:02:ed:e4:31:16:91:5c:d4:bd:c7:98:18:21:3e:1f:fe: d8:96:7e:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw REE2NTJERTQwHhcNMjUwNjE0MjAyNDEyWhcNMjUwNjIxMjAyNDEyWjAYMRYwFAYD VQQDEw02ODRkZGE2Yy1mODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEZkGW9HJo3eoT1kZeslUlKTiNiA21tRJSuUEOuXk95i1JKobBJZ3pVhoIC3 gLJy5YWffz+i/fRUYGGCScA+YokjVakwDjQKs/GBMDeV9Jwhd/dNPcGTtpsdJlab eF2/86D9xBPQ3nUXGz9LfJ6S4fBcpZsMh/n83OiNj7PLomWTQjz+RiaAMESxXSTl J6Sjqp4LqXOf+U6hxc+7FxuOKBbrbXEIyqbxLrUqdAn0lheOyH7bBRBa3DsJbYkC Dn6VLRpJiZGYAkgJwbdQNzgD+Qbu5YST02A3f11C4qCZRBh/IMbR1A682VRpApKH A05BsVOGlWzB14j+GFRKKF2xGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHYk57P BpUx3BD/NCEqCG+fhuprMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTY0Ri8zQzlFMkI1Q0MwMTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2 bFZUUE5TMlRLX2dOcGxMZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdcUQYbpxXUoNeA6Xfj9BNPtrZCb2cIwCWns0XcuQm7XL98kjLEtgN bB9zZZWp/Lw0Pvy/evd6QfgZ4XxJ4SMAfokTxRAlj+UBhQW2cFyUdMF0TelQ5ieb 96QIGEttrZjAI0/PBkC5vdalB65cEj5Oi8TrZ04Ajo1+Gqsi4xJP+Fe6J9NGpV39 I2Udy9k5dcZFZp6yG5ZIaR4BE2aw3qVWUwacq1E/R/h0uQgZeAG0lfDYKwzsbF9X pH/rMjDI/ZrdBiI6iMqBTQvbEzTLG5nbOPog5REoInm8cQCkoml5Gnwtala8fUdK UVQC2ALt5DEWkVzUvceYGCE+H/7Yln6Z -----END CERTIFICATE-----Generated at Mon Jun 16 10:19:35 2025 by rpki-client