$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: q3yQERFeVKKs8B5IDvqMXilxejAWI1yotYavLVRnCnE= Subject key identifier: 32:F6:01:4D:2E:CF:8A:BC:B3:8E:C3:26:6A:78:53:F2:BD:30:4E:D1 Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 27A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 272A Signing time: Sat 18 Oct 2025 15:53:43 +0000 Manifest this update: Sat 18 Oct 2025 15:53:42 +0000 Manifest next update: Sat 25 Oct 2025 15:53:42 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: tdszq+z/BgCuXo2q4NRcKcTZxZ+aOtRWOzuHzvVgIqg=) 2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=) 3: A225B08645C411F0BF201021C4F9AE02.roa (hash: IvX8ILiXhHWFM5uyZnAUJPESwgV0Xv5NKCdd1JDWi+U=) 4: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=) 5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=) 6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10146 (0x27a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Oct 18 15:53:42 2025 GMT Not After : Oct 25 15:53:42 2025 GMT Subject: CN=68f3b806-90e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1d:3f:37:47:1e:6c:fc:2b:38:e8:cf:c5:33: 59:1a:6a:c1:29:cd:e5:04:98:05:3c:52:83:81:8b: 39:01:26:b8:6e:be:e9:b7:c3:dc:9f:68:67:b6:66: d2:7c:0b:5b:14:99:8f:a0:ca:14:fd:a6:d7:19:1d: 45:ec:67:3d:46:44:f6:53:ab:3c:a1:b5:b0:b8:0c: 2b:82:21:a1:f9:22:b2:c2:c1:00:cf:bc:52:0b:97: 13:3c:34:86:f4:d4:42:68:09:c5:16:75:d2:f1:88: 25:32:dd:52:0c:af:cd:bc:92:20:4e:7e:00:40:1f: a0:43:82:fb:b8:64:44:fb:b0:18:a9:de:40:62:d4: ac:fa:ad:3c:d5:1b:68:81:3b:1c:9b:d5:3f:04:e9: 19:fe:f6:5c:bc:a1:55:05:9d:78:b8:5d:26:57:5e: 66:53:e1:14:be:47:98:67:a9:68:7a:21:ef:10:ba: c5:3b:7b:8a:e0:67:9f:7f:a6:94:45:da:13:0b:84: cb:c7:8e:c6:bc:56:72:90:25:12:c3:80:ad:26:13: 65:50:8c:68:4d:82:d3:36:fa:34:89:da:16:91:4c: 97:1b:f9:05:eb:f7:d3:6d:30:4c:95:0b:8f:4d:11: 36:12:14:44:19:40:1a:3a:8f:ea:03:50:45:3d:c0: 51:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F6:01:4D:2E:CF:8A:BC:B3:8E:C3:26:6A:78:53:F2:BD:30:4E:D1 X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:5d:96:d1:c3:15:0a:10:65:d5:21:63:3c:a7:af:16:e0:a7: 32:c2:9e:b3:23:96:46:24:ad:37:2f:f8:4d:d8:85:4d:e2:96: 2b:48:c6:18:c2:9c:86:da:49:d3:8a:09:b6:68:de:4c:6b:64: c3:c9:a8:28:52:9e:ca:5a:0d:e0:46:4a:78:06:45:5a:b7:bd: bb:1a:42:2a:06:22:0f:b3:fc:18:6b:0b:13:6e:49:f2:bd:e2: 57:7e:a9:72:ec:5d:3b:8d:b7:c9:6d:7a:41:2b:79:a3:3e:dd: 1d:4a:92:a0:c7:33:e6:fa:7d:f0:35:53:09:fc:9b:51:6e:23: f1:ed:d9:7a:ed:a9:e7:03:e1:ec:d2:36:b4:b4:f6:d1:e0:55: e6:94:86:f1:a0:04:5b:a3:07:5d:7e:a1:e1:8e:cd:12:00:c4: e6:83:f3:dc:a5:f5:65:31:b3:a5:cb:68:df:5d:44:ed:6e:b7: 4b:b1:cb:3f:58:c9:e9:7d:54:75:bb:c7:10:13:34:cf:46:50: 69:59:e6:a4:b4:5f:ec:24:29:45:e4:c9:d6:ab:85:fe:1d:f6: 4d:64:18:e8:49:1f:de:79:0f:08:b8:08:0a:02:bb:46:3b:a9: 9a:f6:fa:79:07:e4:df:d6:e7:f9:ce:a9:17:66:c0:d9:5c:1a: a8:b5:52:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUxMDE4MTU1MzQyWhcNMjUxMDI1MTU1MzQyWjAYMRYwFAYD VQQDEw02OGYzYjgwNi05MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3h0/N0cebPwrOOjPxTNZGmrBKc3lBJgFPFKDgYs5ASa4br7pt8Pcn2hntmbS fAtbFJmPoMoU/abXGR1F7Gc9RkT2U6s8obWwuAwrgiGh+SKywsEAz7xSC5cTPDSG 9NRCaAnFFnXS8YglMt1SDK/NvJIgTn4AQB+gQ4L7uGRE+7AYqd5AYtSs+q081Rto gTscm9U/BOkZ/vZcvKFVBZ14uF0mV15mU+EUvkeYZ6loeiHvELrFO3uK4Geff6aU RdoTC4TLx47GvFZykCUSw4CtJhNlUIxoTYLTNvo0idoWkUyXG/kF6/fTbTBMlQuP TRE2EhREGUAaOo/qA1BFPcBRkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDL2AU0u z4q8s47DJmp4U/K9ME7RMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZXZbRwxUKEGXVIWM8p68W4Kcywp6zI5ZGJK03L/hN2IVN4pYrSMYY wpyG2knTigm2aN5Ma2TDyagoUp7KWg3gRkp4BkVat727GkIqBiIPs/wYawsTbkny veJXfqly7F07jbfJbXpBK3mjPt0dSpKgxzPm+n3wNVMJ/JtRbiPx7dl67annA+Hs 0ja0tPbR4FXmlIbxoARbowddfqHhjs0SAMTmg/PcpfVlMbOly2jfXUTtbrdLscs/ WMnpfVR1u8cQEzTPRlBpWeaktF/sJClF5MnWq4X+HfZNZBjoSR/eeQ8IuAgKArtG O6ma9vp5B+Tf1uf5zqkXZsDZXBqotVJz -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:28 2025 by rpki-client