$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: NPPCzJTnOJfZ4D2w0snYiygjV2oD/PSFOjfIIRo+VEo= Subject key identifier: 49:69:34:04:15:1B:64:33:CC:EB:66:38:00:73:D1:F3:47:5C:0A:17 Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 01F2 Signing time: Sun 15 Jun 2025 01:49:07 +0000 Manifest this update: Sun 15 Jun 2025 01:49:07 +0000 Manifest next update: Sun 22 Jun 2025 01:49:07 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: sxeKR/lHnaYrg2SIiyzuHGUjAkX+QQ9huREQ5K8em7Y=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: SpdJdr/6VGGqS7iqp8sOU+UWcnaMd8YGOWCMqOpdTjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Validity Not Before: Jun 15 01:49:07 2025 GMT Not After : Jun 22 01:49:07 2025 GMT Subject: CN=684e2693-1ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:80:4f:4d:d7:89:4e:d7:48:6a:fc:1b:74:47: 0d:d6:8d:f9:dc:9b:eb:bf:a2:81:ca:ae:b4:28:3b: be:ec:dd:f6:c9:60:d5:35:51:72:af:4d:89:a9:60: 94:48:36:2e:fa:3b:58:a6:aa:7e:60:f4:60:b0:f3: 89:c1:8f:1b:a4:83:6b:7e:90:4d:78:2b:e1:f3:c3: c7:ac:c0:83:1b:64:a4:bb:17:40:e6:e3:fe:53:11: 48:13:89:76:ea:a4:01:2f:c8:a6:e1:00:fb:26:46: e2:31:e1:0a:e6:6a:b7:b5:23:4c:6a:2c:df:b2:d2: ea:cb:54:fd:f5:74:12:f7:5a:bf:97:79:91:e9:d4: a9:26:26:50:5c:fb:20:8c:1d:a4:2a:e2:eb:a1:da: d6:f7:fc:06:ee:76:13:62:5b:af:38:31:b2:1f:bf: 0c:e7:6d:5c:1c:27:c5:c6:5f:49:44:1a:94:40:10: 26:d2:a4:4a:c3:c8:5c:64:e2:20:11:2c:a6:ac:0b: 72:79:48:16:5c:24:9f:fa:42:93:8a:c4:13:fb:41: 5c:16:0f:0c:e1:c9:83:bf:5a:aa:88:9c:af:38:a8: fe:0d:00:bb:38:45:d9:64:3c:93:f6:91:12:dc:3e: 84:d3:56:6f:ad:9d:c2:25:3f:d2:83:30:fa:25:da: 00:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:69:34:04:15:1B:64:33:CC:EB:66:38:00:73:D1:F3:47:5C:0A:17 X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:aa:61:4f:4b:9b:64:2b:c9:97:d2:b5:66:bc:1f:ba:43:c0: 9c:19:27:09:32:fc:0d:7e:81:b4:be:fb:27:fd:ec:f5:9b:2a: 3d:06:ad:f3:b0:c2:80:26:93:2f:d8:0d:c6:e4:21:2c:08:b5: f7:86:b6:27:e4:fd:f1:58:30:32:c1:92:5d:92:3c:6e:5c:eb: 59:9a:b1:2a:19:6a:ff:50:8c:85:73:6c:2e:1b:2a:38:cf:eb: 02:43:f5:f5:ac:82:c2:9f:8d:66:ed:0a:7b:91:c2:7f:e5:89: 33:9a:c4:e7:3b:6b:94:06:2c:9f:ae:df:8f:c9:f8:a2:3d:3f: 05:0d:a0:a4:ad:e1:b3:86:0a:4a:88:c2:95:79:e4:0c:ee:e2: 88:61:16:ac:48:2c:c1:54:63:0c:d3:73:f3:f2:40:a6:9d:e8: 0d:12:40:90:0c:00:be:00:26:98:52:c8:39:26:8c:25:9c:01: 5b:de:ac:2d:a3:7d:77:4b:5e:48:e5:e2:d3:19:e6:8c:fa:90: df:4e:fa:22:46:b4:8f:ba:c7:94:83:1f:08:85:66:22:7e:2c: 0c:d5:3a:3c:20:e8:dd:d1:ac:23:55:35:d9:06:d9:13:ac:9f: b4:ec:3b:38:5a:88:c5:ff:b0:38:87:3f:c5:df:51:a3:13:f4: fb:c0:8d:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjUwNjE1MDE0OTA3WhcNMjUwNjIyMDE0OTA3WjAYMRYwFAYD VQQDEw02ODRlMjY5My0xZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YBPTdeJTtdIavwbdEcN1o353Jvrv6KByq60KDu+7N32yWDVNVFyr02JqWCU SDYu+jtYpqp+YPRgsPOJwY8bpINrfpBNeCvh88PHrMCDG2SkuxdA5uP+UxFIE4l2 6qQBL8im4QD7JkbiMeEK5mq3tSNMaizfstLqy1T99XQS91q/l3mR6dSpJiZQXPsg jB2kKuLrodrW9/wG7nYTYluvODGyH78M521cHCfFxl9JRBqUQBAm0qRKw8hcZOIg ESymrAtyeUgWXCSf+kKTisQT+0FcFg8M4cmDv1qqiJyvOKj+DQC7OEXZZDyT9pES 3D6E01ZvrZ3CJT/SgzD6JdoAiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElpNAQV G2QzzOtmOABz0fNHXAoXMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAqmFPS5tkK8mX0rVmvB+6Q8CcGScJMvwNfoG0vvsn/ez1myo9Bq3z sMKAJpMv2A3G5CEsCLX3hrYn5P3xWDAywZJdkjxuXOtZmrEqGWr/UIyFc2wuGyo4 z+sCQ/X1rILCn41m7Qp7kcJ/5YkzmsTnO2uUBiyfrt+PyfiiPT8FDaCkreGzhgpK iMKVeeQM7uKIYRasSCzBVGMM03Pz8kCmnegNEkCQDAC+ACaYUsg5JowlnAFb3qwt o313S15I5eLTGeaM+pDfTvoiRrSPuseUgx8IhWYifiwM1To8IOjd0awjVTXZBtkT rJ+07Ds4WojF/7A4hz/F31GjE/T7wI3d -----END CERTIFICATE-----Generated at Sun Jun 15 08:43:08 2025 by rpki-client