$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: 2ZY8RESd9FlOdcXZDJh8I2aGXVMJ317ED1bIJnnxhE8= Subject key identifier: 5B:68:64:4A:88:45:D4:49:5B:05:01:82:2C:B7:75:5D:3A:AB:96:3B Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 0585 Signing time: Tue 04 Nov 2025 23:23:44 +0000 Manifest this update: Tue 04 Nov 2025 23:23:44 +0000 Manifest next update: Tue 11 Nov 2025 23:23:44 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: JTUuapAe7xWzthsIwkihPkuRheyAVKIEUgZ2yw8dzJc=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=) 3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: dSI8zY9bytp5eBJksSVe4bOFa/6h1+FUTuMvCdJDftM=) 4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Nov 4 23:23:44 2025 GMT Not After : Nov 11 23:23:44 2025 GMT Subject: CN=690a8b00-4165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:56:d5:b7:4a:90:3e:aa:d0:a4:df:d2:76:31: 7c:7f:ba:fe:08:e0:2e:9f:8f:c4:00:fe:77:48:ee: e0:fa:23:b4:87:0d:c5:9b:2a:86:bf:a8:64:4b:d9: 41:5d:d1:6e:87:12:0d:73:15:90:1a:96:cb:02:79: db:3a:fd:c6:65:05:be:4c:ff:4d:cf:91:46:48:28: 6b:02:77:05:36:82:59:af:6e:23:a4:48:42:6a:6b: 02:c9:b2:7b:d0:11:7e:89:27:c8:65:da:59:a5:64: 6b:76:31:94:f6:19:81:ec:d4:ad:81:04:18:ec:59: a0:ec:c2:05:0a:b6:11:ab:d9:28:e5:c6:7e:e6:bf: a8:80:89:d5:a9:a1:7a:c6:1c:fb:58:46:d1:aa:c4: 78:a1:76:ff:4b:ab:34:17:d1:e7:0d:c7:d9:d7:55: a5:5f:7f:a6:af:8d:4b:b7:17:60:14:da:85:12:30: 7b:50:0e:39:3e:d7:d8:56:91:fc:ea:45:fa:bf:03: f8:47:eb:e4:5d:37:27:fa:bf:e1:02:ce:d7:ed:f3: 3b:21:53:c4:ed:ea:a3:1d:83:c7:3d:9a:9a:25:cb: c6:15:21:a7:53:62:5e:bb:1f:f7:b0:76:87:0c:f2: f2:3e:cf:2a:41:16:68:db:9d:6f:e0:40:48:a9:ce: e6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:64:4A:88:45:D4:49:5B:05:01:82:2C:B7:75:5D:3A:AB:96:3B X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:35:d7:06:37:65:fd:b5:66:6b:74:e6:ab:91:bd:75:4a:b4: 71:4f:ff:69:a6:6b:50:21:36:ef:41:cf:c1:ae:be:c2:6a:a4: cc:62:7d:09:2e:09:e7:ec:71:6e:bb:39:5e:a5:0d:21:70:ba: ba:ea:e3:95:15:72:6c:3a:ef:4a:3b:6e:9e:e1:74:78:63:43: 6f:59:77:97:f1:19:18:cb:d8:fc:58:bd:fd:3b:d9:fc:c1:b3: ae:9b:43:2b:70:db:0f:12:9a:2e:06:66:bb:8a:1a:22:e9:06: 7d:4c:9a:eb:14:3e:92:32:b5:ca:e0:1b:a8:30:d1:88:98:f0: 0e:da:55:87:1d:6e:a5:b5:e7:a7:9b:87:3a:db:6b:52:29:4c: 8e:5d:17:64:05:67:5a:8c:a5:28:32:5b:b1:ca:d5:c7:4e:2d: 4d:be:2d:1c:2f:77:89:b0:fd:45:58:19:05:42:51:02:9d:c3: b7:d2:7e:a7:5f:d9:10:5b:8d:20:d7:d1:c3:c9:4a:f1:42:d0: 07:f5:c4:b0:e0:df:ee:72:bc:d5:e8:4e:35:00:9d:05:8d:fd: 07:71:ac:0e:95:45:36:85:6c:e7:cb:5b:30:13:74:6b:a5:e3: 27:e3:7c:25:5d:94:18:23:22:63:d1:dd:14:d0:07:df:16:e3: 9d:df:94:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjUxMTA0MjMyMzQ0WhcNMjUxMTExMjMyMzQ0WjAYMRYwFAYD VQQDEw02OTBhOGIwMC00MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21bVt0qQPqrQpN/SdjF8f7r+COAun4/EAP53SO7g+iO0hw3FmyqGv6hkS9lB XdFuhxINcxWQGpbLAnnbOv3GZQW+TP9Nz5FGSChrAncFNoJZr24jpEhCamsCybJ7 0BF+iSfIZdpZpWRrdjGU9hmB7NStgQQY7Fmg7MIFCrYRq9ko5cZ+5r+ogInVqaF6 xhz7WEbRqsR4oXb/S6s0F9HnDcfZ11WlX3+mr41LtxdgFNqFEjB7UA45PtfYVpH8 6kX6vwP4R+vkXTcn+r/hAs7X7fM7IVPE7eqjHYPHPZqaJcvGFSGnU2Jeux/3sHaH DPLyPs8qQRZo251v4EBIqc7mtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtoZEqI RdRJWwUBgiy3dV06q5Y7MB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhNdcGN2X9tWZrdOarkb11SrRxT/9ppmtQITbvQc/Brr7CaqTMYn0J Lgnn7HFuuzlepQ0hcLq66uOVFXJsOu9KO26e4XR4Y0NvWXeX8RkYy9j8WL39O9n8 wbOum0MrcNsPEpouBma7ihoi6QZ9TJrrFD6SMrXK4BuoMNGImPAO2lWHHW6lteen m4c622tSKUyOXRdkBWdajKUoMluxytXHTi1Nvi0cL3eJsP1FWBkFQlECncO30n6n X9kQW40g19HDyUrxQtAH9cSw4N/ucrzV6E41AJ0Fjf0HcawOlUU2hWzny1swE3Rr peMn43wlXZQYIyJj0d0U0AffFuOd35QR -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:20 2025 by rpki-client