$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: 6/fZW+Avf862jzri580Fqm6GrAQH5YM4qY7rSltjhlE= Subject key identifier: A9:C6:6B:7F:D5:31:00:9F:51:8C:57:90:D6:C4:95:74:0A:8A:97:09 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1F45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1F1D Signing time: Thu 24 Apr 2025 16:02:28 +0000 Manifest this update: Thu 24 Apr 2025 16:02:28 +0000 Manifest next update: Thu 01 May 2025 16:02:28 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: LjKCXNCIq5k+iridReBTM9rhrMFOzKp0nhaR7S+X/QI=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: XynjUTKTYazCZAgnFarsz0z7XLq0CMLJDFwXu2DvFy0=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dDmsnYnpk7eYJRQjeaKR7lmvE3DrcRr0DYnI4h6EWFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8005 (0x1f45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Apr 24 16:02:28 2025 GMT Not After : May 1 16:02:28 2025 GMT Subject: CN=680a6094-06c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:22:aa:f8:b1:6d:81:47:43:4e:c8:97:07:9f: fb:ad:16:3e:e3:60:2f:02:bb:fc:3d:3b:83:f7:4b: 82:c9:6d:79:57:89:b7:9f:6c:f8:e9:c2:b2:ca:d1: 94:af:86:03:3d:13:d2:cc:0c:12:80:3d:f3:c3:30: aa:c6:58:45:b2:d9:db:8f:58:ed:be:7b:3b:99:d1: ad:63:02:70:3b:69:ad:fc:2c:98:8f:69:68:7e:fd: 76:77:a6:a2:a6:be:45:3d:97:3b:04:03:09:73:ca: c4:bc:1a:43:32:4b:63:c8:2d:fa:d4:9b:16:ec:1e: 1e:5c:93:fb:a0:15:23:6a:45:f8:1d:41:a8:65:74: 43:b8:64:82:ce:29:b1:54:96:70:de:e1:4a:8e:87: 84:08:75:03:d9:57:54:35:29:97:74:6a:11:25:cb: 33:de:ab:8b:70:d2:15:c9:e4:6c:f2:2d:62:ca:66: 0b:35:43:a5:12:77:43:55:ab:4e:fc:5f:f3:10:73: 96:7f:06:8d:48:52:36:e5:38:e1:6e:34:8a:ba:79: 87:df:9e:dc:4b:29:3c:70:6a:2a:3f:cd:27:35:09: fd:36:e1:3f:28:3b:70:90:38:c7:12:b5:8a:42:2e: 9a:89:95:b6:6b:dc:3a:3e:c6:58:38:f8:f5:3c:7e: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C6:6B:7F:D5:31:00:9F:51:8C:57:90:D6:C4:95:74:0A:8A:97:09 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:58:3f:d0:77:96:75:b3:55:dc:57:2e:a0:a0:50:ae:f2:da: 63:74:dd:61:f8:36:10:e1:05:e7:24:e5:da:22:80:f1:6c:35: 58:f1:e3:13:7b:de:6d:50:54:4d:38:a7:4a:d5:bb:74:8c:6c: ed:d7:49:dc:34:46:07:85:9c:69:7d:aa:b0:87:4f:84:be:e4: ae:f0:3d:a4:cb:62:5d:91:fb:51:bd:38:40:6c:8d:39:b7:d8: 7a:bc:67:a8:e0:00:ef:1b:27:55:13:25:1d:d1:d0:92:f1:4f: 41:2e:8a:a4:ad:36:27:9d:77:39:d0:8b:62:e2:d0:22:be:61: 4d:42:e9:73:4d:3b:86:d6:4f:75:47:8e:61:95:e2:d3:47:db: 69:ea:4f:37:1d:c3:32:2c:3c:ea:fa:d0:1f:1c:07:49:52:41: 7e:1a:d6:f1:5b:e7:aa:5d:6a:f2:f8:35:af:01:2c:97:d7:f0: 12:c9:b5:ef:f8:dc:f1:9d:9c:b5:a0:3c:0e:fc:92:f2:48:29: 76:bf:62:7c:33:0f:1b:69:6f:c7:52:57:85:86:ca:de:22:8c: 2e:31:af:59:8c:14:4e:64:58:37:6f:df:8e:e9:3c:ab:ce:fd: 52:35:3e:ee:6a:fa:bb:15:b4:a1:b9:02:98:1c:a9:de:12:68: 5f:7b:ff:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUwNDI0MTYwMjI4WhcNMjUwNTAxMTYwMjI4WjAYMRYwFAYD VQQDEw02ODBhNjA5NC0wNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6SKq+LFtgUdDTsiXB5/7rRY+42AvArv8PTuD90uCyW15V4m3n2z46cKyytGU r4YDPRPSzAwSgD3zwzCqxlhFstnbj1jtvns7mdGtYwJwO2mt/CyYj2lofv12d6ai pr5FPZc7BAMJc8rEvBpDMktjyC361JsW7B4eXJP7oBUjakX4HUGoZXRDuGSCzimx VJZw3uFKjoeECHUD2VdUNSmXdGoRJcsz3quLcNIVyeRs8i1iymYLNUOlEndDVatO /F/zEHOWfwaNSFI25TjhbjSKunmH357cSyk8cGoqP80nNQn9NuE/KDtwkDjHErWK Qi6aiZW2a9w6PsZYOPj1PH6/uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnGa3/V MQCfUYxXkNbElXQKipcJMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXWD/Qd5Z1s1XcVy6goFCu8tpjdN1h+DYQ4QXnJOXaIoDxbDVY8eMT e95tUFRNOKdK1bt0jGzt10ncNEYHhZxpfaqwh0+EvuSu8D2ky2JdkftRvThAbI05 t9h6vGeo4ADvGydVEyUd0dCS8U9BLoqkrTYnnXc50Iti4tAivmFNQulzTTuG1k91 R45hleLTR9tp6k83HcMyLDzq+tAfHAdJUkF+GtbxW+eqXWry+DWvASyX1/ASybXv +NzxnZy1oDwO/JLySCl2v2J8Mw8baW/HUleFhsreIowuMa9ZjBROZFg3b9+O6Tyr zv1SNT7uavq7FbShuQKYHKneEmhfe//+ -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:29 2025 by rpki-client