$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: pOABcgyndf5USq+fdvpGhISJg5lS3CQjqcjab6MtyAE= Subject key identifier: B8:D8:A9:9D:36:AC:EF:E5:95:15:14:E2:E8:EA:D7:61:33:28:72:44 Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 2785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 270D Signing time: Fri 22 Aug 2025 15:43:41 +0000 Manifest this update: Fri 22 Aug 2025 15:43:40 +0000 Manifest next update: Fri 29 Aug 2025 15:43:40 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: v4j9AZVcfRbUAtyZYui2lVPOx+VagdHzxdvYTB078wA=) 2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=) 3: A225B08645C411F0BF201021C4F9AE02.roa (hash: IvX8ILiXhHWFM5uyZnAUJPESwgV0Xv5NKCdd1JDWi+U=) 4: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=) 5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=) 6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10117 (0x2785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Aug 22 15:43:40 2025 GMT Not After : Aug 29 15:43:40 2025 GMT Subject: CN=68a8902c-2f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:1b:3f:16:a3:20:4e:dd:4b:8a:e7:4d:90: 98:23:35:17:e5:99:fe:eb:10:bd:7a:6e:bb:24:ca: 74:3a:86:44:ee:8f:1c:1f:29:fe:e8:1f:b2:35:fb: eb:52:fc:05:2d:41:f8:5b:08:9b:c0:0a:04:de:c9: 97:c2:9c:81:7a:09:ab:ca:4a:ee:f3:af:8a:6f:53: 2a:54:2f:d8:78:10:87:09:ae:9a:78:a0:b6:33:b9: 1f:e8:68:ca:20:53:e7:7a:26:04:41:4c:28:49:79: 17:8b:a9:90:7b:8e:7b:b9:82:75:46:40:6a:38:5c: 94:7f:02:fa:7b:80:6a:b7:43:9d:01:bf:46:2a:59: e0:8e:2f:52:ad:b8:cf:0f:66:dc:a1:99:7d:f8:f1: c7:7e:18:a5:04:ee:35:79:26:e4:a1:44:ed:42:29: bc:2c:11:bf:95:59:ce:bc:c9:b3:c0:82:8d:1a:0e: d8:e7:a1:f3:a0:d0:52:eb:da:32:c6:d0:b8:c4:9b: d8:0f:2f:08:e1:bf:e1:76:8e:61:b9:a3:b4:16:24: 0a:b2:72:86:cc:69:de:96:b6:9a:82:24:f2:cb:62: d2:b7:03:f3:b9:cb:c7:a8:5e:bb:7c:a4:de:78:f6: 41:0a:fc:73:0d:ad:ec:55:4f:9c:b1:f8:e2:d0:3b: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D8:A9:9D:36:AC:EF:E5:95:15:14:E2:E8:EA:D7:61:33:28:72:44 X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7b:9c:a3:fa:94:ff:76:87:e6:16:a9:d1:82:b1:1b:2b:03: cc:a6:69:c7:12:90:e6:b8:82:f7:9d:65:0f:fa:46:e7:70:25: eb:e0:84:42:ef:01:e9:fd:c0:de:49:bc:46:c3:2a:3c:8d:55: c7:36:74:7c:9a:e4:e2:a9:a1:e1:e5:37:22:15:80:fc:b4:6e: 3d:e8:eb:a2:79:4e:41:28:72:b3:12:ae:79:e2:46:3a:07:68: e8:6b:7e:41:75:de:d8:22:86:1d:9c:c2:74:7d:de:12:ac:6c: e4:c2:43:59:8b:2c:f3:5d:07:21:41:b7:f2:bd:79:cb:4b:9a: 7a:de:3a:7b:66:82:0b:4e:32:3f:f6:cf:89:6e:ce:14:5b:75: 6a:16:d2:66:36:30:68:6b:b0:86:e0:7f:26:91:75:8e:7a:55: 91:24:94:4d:a8:b6:d9:07:80:9b:fb:3f:fb:a1:b9:c0:f1:aa: 1b:06:e7:a5:49:92:23:84:12:e3:d7:25:7e:3b:ed:31:48:0b: 6a:fd:95:10:e1:3c:23:c3:c3:d6:67:55:52:2b:df:c1:39:d5: e3:ae:e8:e1:af:e8:69:ca:2c:a9:ae:c4:bc:7d:89:9b:52:a2: 20:06:c8:61:ab:bb:75:31:bc:97:22:17:7f:5d:d3:12:59:ba: 12:ef:28:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUwODIyMTU0MzQwWhcNMjUwODI5MTU0MzQwWjAYMRYwFAYD VQQDEw02OGE4OTAyYy0yZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDobPxajIE7dS4rnTZCYIzUX5Zn+6xC9em67JMp0OoZE7o8cHyn+6B+yNfvr UvwFLUH4WwibwAoE3smXwpyBegmrykru86+Kb1MqVC/YeBCHCa6aeKC2M7kf6GjK IFPneiYEQUwoSXkXi6mQe457uYJ1RkBqOFyUfwL6e4Bqt0OdAb9GKlngji9SrbjP D2bcoZl9+PHHfhilBO41eSbkoUTtQim8LBG/lVnOvMmzwIKNGg7Y56HzoNBS69oy xtC4xJvYDy8I4b/hdo5huaO0FiQKsnKGzGnelraagiTyy2LStwPzucvHqF67fKTe ePZBCvxzDa3sVU+csfji0DtGMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjYqZ02 rO/llRUU4ujq12EzKHJEMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBte5yj+pT/dofmFqnRgrEbKwPMpmnHEpDmuIL3nWUP+kbncCXr4IRC 7wHp/cDeSbxGwyo8jVXHNnR8muTiqaHh5TciFYD8tG496OuieU5BKHKzEq554kY6 B2joa35Bdd7YIoYdnMJ0fd4SrGzkwkNZiyzzXQchQbfyvXnLS5p63jp7ZoILTjI/ 9s+Jbs4UW3VqFtJmNjBoa7CG4H8mkXWOelWRJJRNqLbZB4Cb+z/7obnA8aobBuel SZIjhBLj1yV+O+0xSAtq/ZUQ4Twjw8PWZ1VSK9/BOdXjrujhr+hpyiyprsS8fYmb UqIgBshhq7t1MbyXIhd/XdMSWboS7ygj -----END CERTIFICATE-----Generated at Sat Aug 23 14:23:16 2025 by rpki-client