$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: svtLpnEnyJqHRJsYFx4FUd5+JKq4Q5iNNY8OkCH+06M= Subject key identifier: 61:29:C8:4B:72:B6:C4:AF:B3:2C:7C:C5:7D:99:20:DF:11:2A:44:08 Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 270D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 26B1 Signing time: Thu 24 Apr 2025 15:42:34 +0000 Manifest this update: Thu 24 Apr 2025 15:42:34 +0000 Manifest next update: Thu 01 May 2025 15:42:34 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: afM8OzpBYq+qS9f0iKZlHRe/Ws2lR5lhaqW8UTWF9hM=) 2: 625FA0C0053611F08A2C940AC4F9AE02.roa (hash: lUWuoyHg+JW6ubrhc72OQUeOn+l4N45uOAAkNEtvihE=) 3: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: GFzeDAO9Plz6JyrMZHiDXzp35gRfDc7EJraZ9vxIyx4=) 4: 631F9D58053611F08A2C940AC4F9AE02.roa (hash: qOc5hpcVcy9NSdSSshZOYM1+8Jzn2ju6wiEgdaZretI=) 5: 8D7B467A09C211EB8B759828C4F9AE02.roa (hash: QVriqoD2qjw2rMECeREJ4WsqIRTkpJUqR7hdD0m8lcE=) 6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: lFXNtH/6SelyyHcFFn9+K9CF6YAl6za4tiRl9CCY85Y=) 7: F20038CA44A311E9AEF6F25AC4F9AE02.roa (hash: agY3g/9CMMz0WpLcTLUlA+lAMpIWkhNngvdK77DGk34=) 8: 1F8F28E09EB611EC8210607DC4F9AE02.roa (hash: dyG1DnB1I/vUfZT0K8S0d3Vc6r5P0G6OKFjjAi6nVx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9997 (0x270d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Apr 24 15:42:34 2025 GMT Not After : May 1 15:42:34 2025 GMT Subject: CN=680a5bea-98b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:d1:5d:8e:d4:1d:57:de:8d:60:fa:bd:ae: fc:5b:7e:e9:43:ff:93:86:05:58:02:a6:fd:2e:8a: af:74:01:33:51:30:a3:fb:d9:cc:05:ac:bd:48:3f: e2:0d:59:0a:14:b3:bc:6d:ea:6f:be:05:27:92:c0: e4:34:70:31:ff:94:40:56:01:89:c6:df:d0:b0:d2: 36:0e:cf:87:40:11:74:ea:e8:a3:2e:20:1a:9b:ae: bb:34:b4:97:7e:44:19:29:64:e0:ca:e5:36:7d:2a: 46:07:b9:35:cb:48:e3:02:15:65:17:da:a2:ea:d0: a4:37:53:91:81:a0:1e:6a:d7:5c:90:e1:48:f5:3b: 6f:47:08:6b:48:88:7e:ef:7f:a5:21:88:af:17:bb: c4:f9:15:b0:d7:88:78:13:a2:3e:be:05:62:8e:be: 54:23:d8:db:a1:63:25:79:b6:75:19:07:f3:98:5b: af:ed:03:0f:d3:2a:7c:18:7c:3b:04:a6:53:77:3b: ba:92:46:60:9d:ee:69:5d:ef:ac:73:54:b9:6c:2d: a4:24:e7:13:44:35:33:4e:a5:f4:c2:43:08:b6:72: 9e:ba:19:2b:89:81:01:cd:0d:b4:ef:75:dd:69:a4: 75:96:aa:b3:b6:b7:ba:82:1a:74:90:ba:20:2a:d5: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:29:C8:4B:72:B6:C4:AF:B3:2C:7C:C5:7D:99:20:DF:11:2A:44:08 X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:92:f7:2f:a0:e3:52:ad:4a:a2:fb:42:b5:60:e6:db:e3:ec: 30:3d:b1:14:8f:a7:81:40:3f:6c:39:20:17:c9:1d:50:53:97: b4:66:5a:81:2a:0e:9c:37:79:96:f7:d4:e1:f0:96:48:a4:6c: 24:47:97:94:83:26:30:12:40:12:0b:7f:a6:0b:70:c2:04:70: 50:d1:a1:5c:d6:bc:c5:8c:51:43:0e:f6:75:b6:9f:e3:78:80: df:2f:6e:b4:e8:fc:a4:ff:22:5a:e5:5f:b6:19:9f:ce:80:98: f2:a6:1d:77:a8:0e:57:7b:3c:f6:da:13:10:57:f2:9d:96:57: 3c:98:73:01:83:d5:a6:bb:54:be:f2:74:17:05:05:c1:be:99: ef:56:2e:07:db:e7:00:87:a4:c6:7a:90:93:6e:71:3f:95:51: 50:db:f0:c2:f7:1f:b8:a1:f6:62:34:d8:53:ef:27:a4:d4:03: 8c:dd:7c:cd:27:12:1a:7b:e3:df:76:0e:d8:27:7e:61:05:96: 9d:1a:04:ba:f9:81:3b:6b:de:a4:dd:cb:57:eb:0c:e7:58:98: 46:92:67:63:53:53:26:27:26:45:7e:0b:79:0b:ce:36:28:69: 17:52:25:53:3f:0c:e6:4a:8f:77:fa:0c:3d:a9:dd:4d:c7:a2: f9:a4:fd:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUwNDI0MTU0MjM0WhcNMjUwNTAxMTU0MjM0WjAYMRYwFAYD VQQDEw02ODBhNWJlYS05OGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKXRXY7UHVfejWD6va78W37pQ/+ThgVYAqb9LoqvdAEzUTCj+9nMBay9SD/i DVkKFLO8bepvvgUnksDkNHAx/5RAVgGJxt/QsNI2Ds+HQBF06uijLiAam667NLSX fkQZKWTgyuU2fSpGB7k1y0jjAhVlF9qi6tCkN1ORgaAeatdckOFI9TtvRwhrSIh+ 73+lIYivF7vE+RWw14h4E6I+vgVijr5UI9jboWMlebZ1GQfzmFuv7QMP0yp8GHw7 BKZTdzu6kkZgne5pXe+sc1S5bC2kJOcTRDUzTqX0wkMItnKeuhkriYEBzQ2073Xd aaR1lqqztre6ghp0kLogKtVStwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEpyEty tsSvsyx8xX2ZIN8RKkQIMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqkvcvoONSrUqi+0K1YObb4+wwPbEUj6eBQD9sOSAXyR1QU5e0ZlqB Kg6cN3mW99Th8JZIpGwkR5eUgyYwEkASC3+mC3DCBHBQ0aFc1rzFjFFDDvZ1tp/j eIDfL2606Pyk/yJa5V+2GZ/OgJjyph13qA5Xezz22hMQV/Kdllc8mHMBg9Wmu1S+ 8nQXBQXBvpnvVi4H2+cAh6TGepCTbnE/lVFQ2/DC9x+4ofZiNNhT7yek1AOM3XzN JxIae+Pfdg7YJ35hBZadGgS6+YE7a96k3ctX6wznWJhGkmdjU1MmJyZFfgt5C842 KGkXUiVTPwzmSo93+gw9qd1Nx6L5pP3R -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:00 2025 by rpki-client