$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: IOD8viw1czV1j54LBuXo2lkAPaWaY6lVv2gr8PIJpmk= Subject key identifier: 6C:67:D9:26:38:D4:14:17:4B:EA:03:5D:89:8D:50:47:3A:33:22:72 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 0555 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 053F Signing time: Wed 18 Jun 2025 23:22:36 +0000 Manifest this update: Wed 18 Jun 2025 23:22:35 +0000 Manifest next update: Wed 25 Jun 2025 23:22:35 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: fUZl8Kgcura6zFAIuEHklzfWL7AeEroFlWScV0ByqDg=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=) 3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: dSI8zY9bytp5eBJksSVe4bOFa/6h1+FUTuMvCdJDftM=) 4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1365 (0x555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Jun 18 23:22:35 2025 GMT Not After : Jun 25 23:22:35 2025 GMT Subject: CN=68534a3c-5e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:e0:80:a8:e9:fd:d1:b5:f7:b5:2d:61:d8: 35:fb:11:8b:a1:72:e6:ae:14:0e:6e:ba:ea:d7:ae: 37:51:39:35:39:a8:3d:25:72:28:4a:03:ec:52:a6: c3:83:11:89:5f:47:ec:ff:86:dd:5e:0f:63:d6:96: 47:e0:af:27:f7:46:c5:ac:bb:a0:56:75:f7:9f:b6: 8c:ef:23:09:e7:b4:a5:ef:a6:49:06:0e:dc:b5:ff: 9f:fc:0f:04:48:8e:76:44:04:7d:21:d7:64:0f:34: ce:f5:1e:c4:4a:a8:b7:5e:d0:85:ec:af:8d:a5:b1: d9:ca:91:53:50:61:cd:af:4a:35:07:d8:96:5d:89: 4e:b7:89:86:88:86:b9:33:e6:9a:1a:9d:ab:43:68: 6d:c5:2e:e2:55:bf:3c:d4:4a:e5:5f:2f:f4:94:d3: a2:fb:7a:5d:5b:8c:e9:dd:c2:ea:3f:c8:ac:bb:e3: c3:7d:cc:b0:ea:ca:27:ff:33:f3:e1:33:fc:94:6c: 6c:24:0a:c7:d8:c9:8c:ad:7b:e1:34:59:68:22:cb: 7e:17:a1:3b:5d:86:db:bb:95:a7:b3:47:22:98:3a: 9a:97:b2:54:43:31:78:02:7a:e4:d7:70:40:d7:51: b4:8e:4c:8f:ac:f9:ba:30:c8:cc:1a:e8:d7:34:37: 5b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:67:D9:26:38:D4:14:17:4B:EA:03:5D:89:8D:50:47:3A:33:22:72 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:7a:79:f3:40:4a:ef:c1:6b:6f:a8:54:4c:3e:3b:c1:56:48: 80:90:11:bc:b4:31:31:74:fe:a7:fe:9b:67:4a:ee:06:81:7b: be:25:e7:23:3f:a4:b3:81:56:66:63:9f:2e:00:0a:a0:9d:63: 48:91:7c:27:24:c7:45:e4:9c:a7:30:bd:da:93:a1:a8:fc:e0: 3d:e7:59:e4:81:65:27:a1:88:80:26:f9:85:81:39:e7:d0:75: a3:9a:04:4c:8b:e1:03:29:f9:5c:43:71:ce:40:31:fe:f3:5a: 19:59:ef:43:80:70:3d:25:4a:8d:41:3d:bf:18:6c:9f:6a:15: 38:3d:d0:b6:62:db:fe:44:2a:ab:86:4d:f5:96:30:0a:18:6a: 4d:c8:b7:8e:ec:59:c8:50:aa:d3:8a:ee:61:18:67:70:4f:cb: 89:40:ee:bd:9b:7e:06:b2:d0:a1:ec:35:74:27:d6:8c:90:2b: b1:d1:dd:6b:57:c9:97:73:12:af:25:08:6e:b6:92:85:93:ea: 35:99:48:7e:a9:dd:6f:e6:52:25:22:9e:b9:82:33:40:fa:3e: 7b:a9:f5:b0:a7:05:85:d5:ba:d5:2f:fb:7b:b7:53:47:f4:01: c2:6b:22:f6:db:c6:90:06:97:10:fa:94:10:f6:dd:b7:47:fd: 9c:f0:c0:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjUwNjE4MjMyMjM1WhcNMjUwNjI1MjMyMjM1WjAYMRYwFAYD VQQDEw02ODUzNGEzYy01ZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFzggKjp/dG197UtYdg1+xGLoXLmrhQObrrq1643UTk1Oag9JXIoSgPsUqbD gxGJX0fs/4bdXg9j1pZH4K8n90bFrLugVnX3n7aM7yMJ57Sl76ZJBg7ctf+f/A8E SI52RAR9IddkDzTO9R7ESqi3XtCF7K+NpbHZypFTUGHNr0o1B9iWXYlOt4mGiIa5 M+aaGp2rQ2htxS7iVb881ErlXy/0lNOi+3pdW4zp3cLqP8isu+PDfcyw6son/zPz 4TP8lGxsJArH2MmMrXvhNFloIst+F6E7XYbbu5Wns0cimDqal7JUQzF4Anrk13BA 11G0jkyPrPm6MMjMGujXNDdbZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxn2SY4 1BQXS+oDXYmNUEc6MyJyMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGennzQErvwWtvqFRMPjvBVkiAkBG8tDExdP6n/ptnSu4GgXu+Jecj P6SzgVZmY58uAAqgnWNIkXwnJMdF5JynML3ak6Go/OA951nkgWUnoYiAJvmFgTnn 0HWjmgRMi+EDKflcQ3HOQDH+81oZWe9DgHA9JUqNQT2/GGyfahU4PdC2Ytv+RCqr hk31ljAKGGpNyLeO7FnIUKrTiu5hGGdwT8uJQO69m34GstCh7DV0J9aMkCux0d1r V8mXcxKvJQhutpKFk+o1mUh+qd1v5lIlIp65gjNA+j57qfWwpwWF1brVL/t7t1NH 9AHCayL228aQBpcQ+pQQ9t23R/2c8MAe -----END CERTIFICATE-----Generated at Sat Jun 21 01:45:31 2025 by rpki-client