$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: YXCAIH9+CLAZLwbBKO9RmYTSHGrMFdJJ2KmTeXkT0Vc= Subject key identifier: ED:33:7D:79:7D:93:44:6B:19:A1:BD:EF:E3:EA:1C:DE:CE:F4:B2:67 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1F79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1F51 Signing time: Mon 04 Aug 2025 16:09:29 +0000 Manifest this update: Mon 04 Aug 2025 16:09:28 +0000 Manifest next update: Mon 11 Aug 2025 16:09:28 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: sYkZTACbV/QNL4ldzLBFieLagwFrRo8HmR/6WL3Wl10=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: XynjUTKTYazCZAgnFarsz0z7XLq0CMLJDFwXu2DvFy0=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dDmsnYnpk7eYJRQjeaKR7lmvE3DrcRr0DYnI4h6EWFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8057 (0x1f79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Aug 4 16:09:28 2025 GMT Not After : Aug 11 16:09:28 2025 GMT Subject: CN=6890db39-79b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:99:b2:03:2e:f2:d4:9a:fb:2c:c5:de:15:14: d5:e2:c8:de:2e:69:17:d1:96:f8:27:7b:47:59:8a: 96:58:4f:33:ad:6e:d1:41:b8:23:a7:40:d8:8d:b7: c6:d2:60:63:5d:26:ce:47:6e:75:ab:9a:6c:75:81: 6d:66:f0:82:f5:5f:91:6e:71:e4:bb:e5:b2:f9:16: 14:d2:1e:07:f2:eb:6e:74:97:a0:3b:1b:10:f8:a7: cf:22:f4:32:22:f5:7f:62:97:f7:4b:74:e6:f5:fc: fc:58:a3:28:ec:f2:b7:d1:d7:bc:5b:c9:39:cb:ac: 7d:de:e5:60:e6:51:c9:99:bb:0c:52:b7:b6:db:b2: 22:43:2f:bf:c5:1f:98:b6:31:7a:10:54:ec:55:f0: 47:77:76:28:47:0f:0f:c6:13:00:04:8b:e6:65:26: d6:4c:22:7d:21:62:76:a0:bf:7a:66:4a:b4:17:4c: e6:da:9a:d0:14:0a:97:45:e3:e7:10:e3:3f:17:f1: 04:8d:c9:10:b7:58:60:7a:a9:97:38:db:d6:c6:1b: 0d:31:92:70:74:e9:b7:a9:7c:48:d3:53:65:00:7d: 79:d7:4e:44:ad:bc:41:19:1e:e5:b3:98:a7:89:f0: 37:96:0b:80:f0:a2:cc:4c:0b:8a:9d:ca:c5:f3:3b: 67:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:33:7D:79:7D:93:44:6B:19:A1:BD:EF:E3:EA:1C:DE:CE:F4:B2:67 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:1f:20:91:38:87:9b:b9:a5:14:f9:29:c2:d5:ac:71:4d:05: f6:15:bc:04:b2:fc:31:d8:db:db:cd:11:4c:73:72:3f:bd:b2: 22:35:26:bc:4b:2d:48:a7:86:db:76:c0:6c:37:d9:d8:db:39: 55:a4:b4:38:df:9b:2d:1b:3d:ec:78:fe:13:5d:e4:3a:94:70: bf:be:0d:a6:d4:b8:31:f3:33:d3:26:97:5b:02:cd:0e:e7:24: d0:63:b2:f5:f2:4b:4f:19:51:c1:d1:ea:7c:23:99:97:3b:7d: 4e:e8:3a:f3:17:d7:45:f5:e1:15:0d:fd:ea:ee:7e:81:8c:95: 76:ea:48:63:34:e8:00:aa:61:a6:21:e5:b9:58:03:e8:3a:8b: a2:62:66:c1:8a:0b:2d:2a:15:8e:e2:9d:db:bb:42:8f:d9:b2: f8:a2:1b:75:7a:f9:0b:07:ea:c7:29:0a:b1:7f:8a:bb:e9:94: 90:13:fa:04:da:56:9c:9e:c3:16:23:d9:dd:19:4d:4e:48:da: 2a:6f:74:34:93:a7:d1:2f:83:42:94:ec:07:b0:97:6c:02:4e: 2e:cd:20:94:fe:8f:35:1f:8a:ee:70:4a:6e:48:2b:14:75:f7: 9e:af:ef:09:3d:4c:cc:ea:45:e2:f4:42:58:e4:b7:22:81:88: 48:7d:7b:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUwODA0MTYwOTI4WhcNMjUwODExMTYwOTI4WjAYMRYwFAYD VQQDEw02ODkwZGIzOS03OWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopmyAy7y1Jr7LMXeFRTV4sjeLmkX0Zb4J3tHWYqWWE8zrW7RQbgjp0DYjbfG 0mBjXSbOR251q5psdYFtZvCC9V+RbnHku+Wy+RYU0h4H8utudJegOxsQ+KfPIvQy IvV/Ypf3S3Tm9fz8WKMo7PK30de8W8k5y6x93uVg5lHJmbsMUre227IiQy+/xR+Y tjF6EFTsVfBHd3YoRw8PxhMABIvmZSbWTCJ9IWJ2oL96Zkq0F0zm2prQFAqXRePn EOM/F/EEjckQt1hgeqmXONvWxhsNMZJwdOm3qXxI01NlAH15105ErbxBGR7ls5in ifA3lguA8KLMTAuKncrF8ztnVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0zfXl9 k0RrGaG97+PqHN7O9LJnMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmHyCROIebuaUU+SnC1axxTQX2FbwEsvwx2NvbzRFMc3I/vbIiNSa8 Sy1Ip4bbdsBsN9nY2zlVpLQ435stGz3seP4TXeQ6lHC/vg2m1Lgx8zPTJpdbAs0O 5yTQY7L18ktPGVHB0ep8I5mXO31O6DrzF9dF9eEVDf3q7n6BjJV26khjNOgAqmGm IeW5WAPoOouiYmbBigstKhWO4p3bu0KP2bL4oht1evkLB+rHKQqxf4q76ZSQE/oE 2lacnsMWI9ndGU1OSNoqb3Q0k6fRL4NClOwHsJdsAk4uzSCU/o81H4rucEpuSCsU dfeer+8JPUzM6kXi9EJY5LcigYhIfXsS -----END CERTIFICATE-----Generated at Wed Aug 6 09:29:07 2025 by rpki-client