$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: dAKXVMYyL7s/Y9Z2wa/yqtdroX2TquRUMDMbIJvY5L4= Subject key identifier: 2E:C3:38:69:4F:5E:CF:E1:9F:88:C2:DF:4B:A2:B4:48:ED:A9:4C:30 Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 2761 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 26E9 Signing time: Sat 14 Jun 2025 15:39:33 +0000 Manifest this update: Sat 14 Jun 2025 15:39:32 +0000 Manifest next update: Sat 21 Jun 2025 15:39:32 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: PIHOQVttYg97gEKg8vtPgtVvaGX9GdkimZ+46Z2/eco=) 2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=) 3: A225B08645C411F0BF201021C4F9AE02.roa (hash: IvX8ILiXhHWFM5uyZnAUJPESwgV0Xv5NKCdd1JDWi+U=) 4: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=) 5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=) 6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10081 (0x2761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Jun 14 15:39:32 2025 GMT Not After : Jun 21 15:39:32 2025 GMT Subject: CN=684d97b4-c066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:76:d2:b9:34:93:31:db:57:35:ad:d6:a8: a2:64:06:f7:3f:72:1d:1c:9b:6c:26:39:d2:0e:8b: 0a:26:c6:93:e6:93:d6:53:2d:a4:ce:9d:9d:ab:e3: 0e:42:ff:7b:c5:14:4c:31:9b:4f:29:5b:65:54:1a: 28:75:63:79:6e:f2:04:b2:6b:b3:68:dc:f6:9d:9c: 2e:92:6c:65:f6:87:59:c7:70:40:09:65:0d:ba:19: 94:28:4a:34:e9:f5:83:88:c2:01:db:2a:dc:21:44: 0d:33:52:09:a4:fd:43:78:71:98:5a:30:d8:4e:e4: 65:af:e5:44:d6:fa:40:1b:7f:95:e7:5f:48:7d:53: 54:31:14:1b:c1:5b:37:5c:33:48:34:1b:a7:01:68: d9:1e:2b:88:82:7e:a2:d0:fc:15:46:95:11:20:15: 34:83:9d:c7:83:11:c3:14:ef:4b:46:5a:09:8a:01: bf:56:74:a6:29:65:70:09:3d:03:7d:ee:f6:d7:5d: c2:1a:c9:2c:aa:72:ea:fd:2c:9e:3b:1e:cb:11:6b: 6d:04:79:2b:40:bf:a2:fc:20:8f:c2:b6:9f:6d:c0: 41:d3:80:25:f2:7b:a5:90:57:f2:0a:3e:3c:78:a4: f6:b2:d4:5c:e6:e5:8c:3d:7e:35:0b:cc:2f:df:34: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C3:38:69:4F:5E:CF:E1:9F:88:C2:DF:4B:A2:B4:48:ED:A9:4C:30 X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f7:17:56:af:31:20:05:05:cb:23:37:6f:f4:6a:9e:86:c2: 6a:e8:0f:a8:02:58:e9:66:d2:57:96:f5:5b:52:d7:87:5a:6a: 89:6e:e2:15:e4:7b:78:48:21:2c:c6:cc:01:ee:9d:8a:64:cb: b8:5d:ff:99:3d:95:fa:3f:d8:22:9e:b2:6e:6c:7a:3d:91:16: 63:cd:4b:07:56:c5:04:94:32:dc:01:52:13:34:57:f1:10:dd: e8:43:97:eb:56:dd:4a:58:c2:65:c7:14:06:c5:14:75:61:0a: 37:9f:46:26:9d:17:a2:b0:7e:5c:8a:b7:a1:90:41:02:4f:61: 64:57:14:23:57:78:46:84:65:aa:a3:3d:9d:16:c5:09:6a:c6: 1a:4e:f2:11:86:e9:b0:b4:30:b0:a0:06:1c:d8:1b:b3:b5:d8: 9b:e6:a0:a5:15:50:f3:33:77:ab:3f:ae:4d:5a:f7:a0:f9:60: 18:76:92:67:bd:38:89:d5:89:27:5b:ca:6e:52:bc:07:e0:d5: 1d:a3:3d:68:ac:0e:b5:2b:4a:a1:c2:ff:60:2e:88:4e:57:d1: 7e:e3:53:95:2d:d4:9b:8d:ae:41:9d:e2:0f:f5:35:62:f7:39: 11:82:92:df:f9:5b:cb:1a:ea:7d:b0:d9:76:0e:7c:2f:a2:a0: e7:43:05:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUwNjE0MTUzOTMyWhcNMjUwNjIxMTUzOTMyWjAYMRYwFAYD VQQDEw02ODRkOTdiNC1jMDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNB20rk0kzHbVzWt1qiiZAb3P3IdHJtsJjnSDosKJsaT5pPWUy2kzp2dq+MO Qv97xRRMMZtPKVtlVBoodWN5bvIEsmuzaNz2nZwukmxl9odZx3BACWUNuhmUKEo0 6fWDiMIB2yrcIUQNM1IJpP1DeHGYWjDYTuRlr+VE1vpAG3+V519IfVNUMRQbwVs3 XDNINBunAWjZHiuIgn6i0PwVRpURIBU0g53HgxHDFO9LRloJigG/VnSmKWVwCT0D fe72113CGsksqnLq/SyeOx7LEWttBHkrQL+i/CCPwrafbcBB04Al8nulkFfyCj48 eKT2stRc5uWMPX41C8wv3zTDNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7DOGlP Xs/hn4jC30uitEjtqUwwMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk9xdWrzEgBQXLIzdv9GqehsJq6A+oAljpZtJXlvVbUteHWmqJbuIV 5Ht4SCEsxswB7p2KZMu4Xf+ZPZX6P9ginrJubHo9kRZjzUsHVsUElDLcAVITNFfx EN3oQ5frVt1KWMJlxxQGxRR1YQo3n0YmnReisH5cirehkEECT2FkVxQjV3hGhGWq oz2dFsUJasYaTvIRhumwtDCwoAYc2Buztdib5qClFVDzM3erP65NWveg+WAYdpJn vTiJ1YknW8puUrwH4NUdoz1orA61K0qhwv9gLohOV9F+41OVLdSbja5BneIP9TVi 9zkRgpLf+VvLGup9sNl2DnwvoqDnQwUt -----END CERTIFICATE-----Generated at Sun Jun 15 06:09:06 2025 by rpki-client