$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: xgHJSsAcfx8QLv53jnXJIbkWIbTSGWexglHlac4s/IE= Subject key identifier: 2F:B0:70:07:67:4B:B0:73:81:6E:33:C8:7C:7A:87:E4:2B:A0:35:4B Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 277D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 2705 Signing time: Wed 06 Aug 2025 15:44:50 +0000 Manifest this update: Wed 06 Aug 2025 15:44:50 +0000 Manifest next update: Wed 13 Aug 2025 15:44:50 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: RZO8XoR6SEHXy+t2Zoy4N2erqMGWJ2/Z3044UzboJAk=) 2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=) 3: A225B08645C411F0BF201021C4F9AE02.roa (hash: IvX8ILiXhHWFM5uyZnAUJPESwgV0Xv5NKCdd1JDWi+U=) 4: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=) 5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=) 6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10109 (0x277d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Aug 6 15:44:50 2025 GMT Not After : Aug 13 15:44:50 2025 GMT Subject: CN=68937872-ec95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:95:09:25:d2:ad:36:15:c3:aa:c7:e0:0e: e0:57:6f:6d:84:15:4c:5b:71:09:cf:6e:75:70:41: a1:d5:67:7b:48:7b:96:c4:96:e7:7e:31:1e:fb:80: ef:51:34:15:d8:c4:c0:6b:43:b8:d2:a1:37:77:7f: 9c:7b:1d:89:4d:be:89:2d:74:e8:27:53:ab:0e:21: 3a:05:63:98:b0:37:7f:12:18:aa:6a:53:f1:2c:08: 0f:d8:70:da:d3:d2:38:c3:9f:f0:75:84:df:72:d3: e7:d6:cb:bc:ea:30:a5:30:37:4b:d4:24:5d:c5:8d: 21:f4:b1:42:66:8f:89:6e:df:34:29:c3:b6:ba:8e: 7a:ee:62:6e:87:6a:3b:52:4b:7a:13:93:19:7e:4e: 78:ed:66:e8:a7:0a:05:ae:f3:a0:79:18:b6:61:94: cc:97:0a:06:a3:a4:1a:73:a3:6c:66:2a:70:ed:2d: 50:1a:6e:78:6c:31:a0:83:8f:a0:55:0b:cd:a6:ea: 54:7c:1d:0d:46:f7:db:b4:03:dd:b8:74:cc:9b:ae: 4b:5f:08:bd:7c:83:32:56:4d:cf:b6:72:2d:fd:c7: b0:13:dc:f3:3a:f7:1e:bb:bc:a8:af:91:44:12:2b: c0:fe:83:43:ed:be:f2:24:a9:19:e4:29:76:c5:3c: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B0:70:07:67:4B:B0:73:81:6E:33:C8:7C:7A:87:E4:2B:A0:35:4B X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:4f:9e:33:1e:56:a1:73:5b:ca:98:88:c8:13:80:c2:a5:e3: a4:86:48:9f:7f:cb:a2:a1:7a:aa:61:3b:02:ab:5e:e9:da:65: 8a:6e:1a:79:4b:9f:0b:6e:6a:90:45:6c:27:ef:83:cc:ba:7b: c9:03:08:2c:fd:26:10:64:2d:5b:a6:12:bf:14:70:99:50:8d: ad:32:80:39:a3:50:78:5f:82:49:9b:dc:70:d6:4a:7b:e6:07: 14:aa:08:be:3b:8d:6a:9e:e2:cc:36:04:4c:26:7b:0f:ad:4e: 1f:84:70:05:b8:9a:22:0f:b7:20:96:4a:c7:8c:dc:9f:4f:4c: a6:8b:08:d3:84:6f:18:ed:0a:94:e9:77:42:52:e4:93:0e:27: 5a:dc:b1:29:7c:0b:6d:29:40:43:12:69:33:18:0e:92:70:42: 41:2f:d9:56:4b:ab:5b:13:28:1d:42:07:68:0f:f3:d9:55:b9: bc:b1:7d:dc:df:91:e3:e8:6e:98:26:8c:20:56:c4:58:b1:19: 54:4e:44:8c:dc:71:7e:ac:ca:39:90:c5:e9:95:82:49:cf:d8: b5:7f:67:6a:3a:9f:35:23:b0:ad:9e:90:f3:c4:ae:a5:69:7b: 68:34:28:9b:95:f8:1d:7c:74:89:33:d3:0c:79:68:47:07:fc: 64:5e:a8:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUwODA2MTU0NDUwWhcNMjUwODEzMTU0NDUwWjAYMRYwFAYD VQQDEw02ODkzNzg3Mi1lYzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9+VCSXSrTYVw6rH4A7gV29thBVMW3EJz251cEGh1Wd7SHuWxJbnfjEe+4Dv UTQV2MTAa0O40qE3d3+cex2JTb6JLXToJ1OrDiE6BWOYsDd/EhiqalPxLAgP2HDa 09I4w5/wdYTfctPn1su86jClMDdL1CRdxY0h9LFCZo+Jbt80KcO2uo567mJuh2o7 Ukt6E5MZfk547WbopwoFrvOgeRi2YZTMlwoGo6Qac6NsZipw7S1QGm54bDGgg4+g VQvNpupUfB0NRvfbtAPduHTMm65LXwi9fIMyVk3PtnIt/cewE9zzOvceu7yor5FE EivA/oND7b7yJKkZ5Cl2xTwn9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+wcAdn S7BzgW4zyHx6h+QroDVLMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxT54zHlahc1vKmIjIE4DCpeOkhkiff8uioXqqYTsCq17p2mWKbhp5 S58LbmqQRWwn74PMunvJAwgs/SYQZC1bphK/FHCZUI2tMoA5o1B4X4JJm9xw1kp7 5gcUqgi+O41qnuLMNgRMJnsPrU4fhHAFuJoiD7cglkrHjNyfT0ymiwjThG8Y7QqU 6XdCUuSTDida3LEpfAttKUBDEmkzGA6ScEJBL9lWS6tbEygdQgdoD/PZVbm8sX3c 35Hj6G6YJowgVsRYsRlUTkSM3HF+rMo5kMXplYJJz9i1f2dqOp81I7CtnpDzxK6l aXtoNCiblfgdfHSJM9MMeWhHB/xkXqjO -----END CERTIFICATE-----Generated at Thu Aug 7 04:34:31 2025 by rpki-client