$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: FEK+46CPElnDxnEsCzyKxMOJsGh3blhMWrisYkbCNWc= Subject key identifier: CA:F3:C9:45:A9:93:A2:83:A2:86:7C:AE:55:DE:95:5D:2B:E9:26:30 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 0522 Signing time: Thu 24 Apr 2025 23:23:54 +0000 Manifest this update: Thu 24 Apr 2025 23:23:54 +0000 Manifest next update: Thu 01 May 2025 23:23:54 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: CVIdc4af82y5XDfVddF47pYN7eLGi9UrZWbkPEziUpg=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 9EHn/O7TWbIzxUUf7sMxruBfENB+nlmVCyCtMi2XPLc=) 3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: lPjfdwsG9MxSbp4hrYgWXk0XAJ3QHf0VRvCcBo4gZRI=) 4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: QPyPuuXiEoxMRcuvSgY9i0fqsHr66Z613AzBKY7x8bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Apr 24 23:23:54 2025 GMT Not After : May 1 23:23:54 2025 GMT Subject: CN=680ac80a-1334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:30:51:cc:68:31:4e:15:1b:a0:15:67:d1:fb: 68:48:8c:25:45:ae:f9:9d:7a:d0:ba:e3:67:40:19: a7:b4:33:c1:23:da:cd:55:99:cc:d8:fe:6c:75:b6: d8:5d:52:5c:a2:37:58:b6:a3:f0:b9:a1:46:41:eb: 18:2a:20:dc:5f:4f:23:b9:39:7e:93:83:2c:29:69: 76:40:95:04:b2:94:32:2c:80:eb:6a:36:7c:fd:77: a3:00:ef:db:6f:65:00:50:18:ca:3c:c2:da:a0:89: cc:e3:50:58:94:1c:13:57:e7:95:ed:63:ed:4d:72: ca:e6:b1:2c:cd:20:3b:39:b0:ec:1a:52:9a:85:2c: 87:4c:7b:3e:5b:94:4d:86:f7:12:fd:6a:5f:b5:58: ac:ad:08:45:80:35:27:a1:4e:26:9d:9a:a6:55:1a: 3f:27:67:56:c9:11:c7:6f:e1:de:13:cc:ad:df:cb: 28:85:cf:b3:11:de:b7:13:19:63:60:f4:93:25:d4: 89:88:55:7b:88:b2:54:7b:53:18:07:0b:7d:4f:54: b0:70:55:0d:24:a9:bf:5c:46:ba:c5:9c:9f:08:b6: 9a:a2:cc:f5:63:7c:4c:95:5f:44:d6:fe:88:ae:9b: 45:00:2d:95:36:61:21:22:6c:03:77:85:f5:78:1f: fc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F3:C9:45:A9:93:A2:83:A2:86:7C:AE:55:DE:95:5D:2B:E9:26:30 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0a:8e:01:8c:7f:b9:98:5b:58:40:d8:87:5a:14:6d:d4:61: 7b:ed:a0:61:ce:76:bb:df:7f:18:6d:7e:d5:39:20:6d:8b:29: 92:4e:40:7c:a1:a0:3a:3e:31:46:6a:ba:b6:c6:de:30:19:b8: d4:79:76:b8:c9:12:bf:db:35:1d:75:e9:ea:11:23:37:d5:d2: bb:17:31:49:45:69:a5:64:e6:8c:e3:d0:e0:0b:83:89:04:f7: 57:fc:6a:8e:3f:d1:69:e6:83:62:8d:b3:f3:5b:5d:43:50:9c: 4f:b3:04:6f:13:c3:27:f2:86:a2:60:38:1d:c7:4c:60:28:64: c4:c9:ff:76:d5:dc:52:30:83:0e:59:81:be:c3:36:5c:cd:26: 27:44:fc:b7:18:5a:57:6b:43:dd:0d:bc:c9:83:cc:7e:a5:e2: bd:eb:7d:96:b2:94:68:4e:b6:7b:bb:61:50:f1:86:5e:65:0a: a3:aa:70:68:53:80:45:06:9b:e5:f7:ed:90:1d:31:14:39:47: 15:50:7e:05:42:34:18:99:1e:e5:e1:fd:f6:5a:f0:48:bd:09: 1c:d7:2c:58:95:13:47:f3:4b:80:08:9f:3e:3f:b8:71:4e:f8: 15:5e:2d:72:42:6f:12:a6:5d:20:58:e8:ac:fc:c7:30:12:29: e4:3c:d0:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjUwNDI0MjMyMzU0WhcNMjUwNTAxMjMyMzU0WjAYMRYwFAYD VQQDEw02ODBhYzgwYS0xMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTBRzGgxThUboBVn0ftoSIwlRa75nXrQuuNnQBmntDPBI9rNVZnM2P5sdbbY XVJcojdYtqPwuaFGQesYKiDcX08juTl+k4MsKWl2QJUEspQyLIDrajZ8/XejAO/b b2UAUBjKPMLaoInM41BYlBwTV+eV7WPtTXLK5rEszSA7ObDsGlKahSyHTHs+W5RN hvcS/WpftVisrQhFgDUnoU4mnZqmVRo/J2dWyRHHb+HeE8yt38sohc+zEd63Exlj YPSTJdSJiFV7iLJUe1MYBwt9T1SwcFUNJKm/XEa6xZyfCLaaosz1Y3xMlV9E1v6I rptFAC2VNmEhImwDd4X1eB/8KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrzyUWp k6KDooZ8rlXelV0r6SYwMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMCo4BjH+5mFtYQNiHWhRt1GF77aBhzna7338YbX7VOSBtiymSTkB8 oaA6PjFGarq2xt4wGbjUeXa4yRK/2zUddenqESM31dK7FzFJRWmlZOaM49DgC4OJ BPdX/GqOP9Fp5oNijbPzW11DUJxPswRvE8Mn8oaiYDgdx0xgKGTEyf921dxSMIMO WYG+wzZczSYnRPy3GFpXa0PdDbzJg8x+peK9632WspRoTrZ7u2FQ8YZeZQqjqnBo U4BFBpvl9+2QHTEUOUcVUH4FQjQYmR7l4f32WvBIvQkc1yxYlRNH80uACJ8+P7hx TvgVXi1yQm8Spl0gWOis/McwEinkPNCs -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:49 2025 by rpki-client