$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: Q1vTCct5pW/OD9Xq5o0HCvGtf5WanyiYtJHP9nIqnJA= Subject key identifier: 39:EA:DA:55:4B:97:82:6D:83:37:9D:B2:22:5F:6C:35:EA:3F:28:CF Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 2719 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 26BB Signing time: Sat 10 May 2025 15:37:55 +0000 Manifest this update: Sat 10 May 2025 15:37:54 +0000 Manifest next update: Sat 17 May 2025 15:37:54 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: YdQApBfl6S3tH79ObEp8iUutLQPWV95ALkwxn4peqX0=) 2: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: GFzeDAO9Plz6JyrMZHiDXzp35gRfDc7EJraZ9vxIyx4=) 3: 631F9D58053611F08A2C940AC4F9AE02.roa (hash: qOc5hpcVcy9NSdSSshZOYM1+8Jzn2ju6wiEgdaZretI=) 4: 86E6EFE02B1D11F0A0D87F83C4F9AE02.roa (hash: xJZIsYSxPA6k0U5ByKD8Ou7VqCNqF6Caxc86+HoKlvs=) 5: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: lFXNtH/6SelyyHcFFn9+K9CF6YAl6za4tiRl9CCY85Y=) 6: 9B65C52C2B1D11F099117510C4F9AE02.roa (hash: lgQSUNGd3ZAHukXKyIam6pcIJCyoB8QOg26RQaNWUe4=) 7: F20038CA44A311E9AEF6F25AC4F9AE02.roa (hash: agY3g/9CMMz0WpLcTLUlA+lAMpIWkhNngvdK77DGk34=) 8: 1F8F28E09EB611EC8210607DC4F9AE02.roa (hash: dyG1DnB1I/vUfZT0K8S0d3Vc6r5P0G6OKFjjAi6nVx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10009 (0x2719) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: May 10 15:37:54 2025 GMT Not After : May 17 15:37:54 2025 GMT Subject: CN=681f72d2-f415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bf:d9:de:7e:76:d4:d7:c4:6e:8f:a3:ce:35: e7:2e:8e:a3:8b:90:6d:71:cf:92:ec:fe:f0:4f:81: fc:82:88:4b:f6:af:24:82:54:a6:30:b5:c9:96:e4: b8:ff:51:10:30:5b:1d:66:22:24:70:0f:a2:18:55: b7:03:9f:40:74:0c:10:c6:f7:3c:3b:5e:a8:6a:e3: f6:a5:28:87:86:e4:19:2d:c2:6f:6b:37:3d:ee:30: bf:f2:17:81:49:38:45:8c:4b:c6:76:ad:64:95:48: 22:45:02:44:7b:ec:56:f1:6c:83:4e:5e:78:b0:0c: 53:31:cb:04:ba:24:cb:fc:05:c7:61:96:da:8e:da: fe:03:05:d9:fe:4d:0a:15:84:77:1b:3a:d7:29:19: f1:12:10:7a:3b:5f:cd:1d:3c:3d:84:a8:5f:2a:39: aa:76:d2:25:09:65:de:6a:ad:c7:82:18:51:66:95: d4:5b:7a:23:8d:b9:84:51:8a:fb:b6:34:99:d0:83: 70:3c:c0:c0:5f:7d:17:6e:04:a5:71:a1:32:6d:ea: bb:1d:32:2a:2f:fe:56:8a:f3:0e:c3:7d:11:c4:16: f3:46:20:d2:72:bb:0e:0e:c5:aa:b9:a0:f7:f4:cb: 6b:14:df:fb:66:69:65:ae:ee:d8:88:5f:01:0b:0a: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EA:DA:55:4B:97:82:6D:83:37:9D:B2:22:5F:6C:35:EA:3F:28:CF X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0f:35:1b:f3:9d:12:f3:6d:ee:f9:df:4e:72:3c:f4:94:a4: cc:97:f7:46:d4:a3:ea:ed:cf:c2:4d:66:46:84:4a:13:66:b1: 4b:66:db:33:74:22:0c:36:cc:cb:7f:64:7e:09:c0:ed:20:cd: c5:75:24:1f:cc:90:a3:be:26:03:cf:a6:21:57:a9:05:19:b1: f4:fd:4b:c1:cb:02:c1:7d:de:fe:d3:e6:3e:bd:0b:c2:52:64: c9:72:40:ee:74:5e:97:c3:e9:26:f0:c0:d4:38:76:03:f8:c3: c9:62:de:0f:b8:f5:68:29:6d:3a:18:7a:6c:01:91:91:62:92: f5:2e:c2:07:4a:3f:81:5d:d0:d6:a9:4b:22:76:f0:5b:c3:f6: d0:08:2a:df:6e:1f:0f:0e:d0:1b:96:7a:52:0f:bb:5f:5e:6d: e5:6d:67:2a:50:a9:b3:5d:b4:d2:aa:29:82:97:d0:5e:c1:de: 68:ad:ec:2f:da:19:67:b8:e4:6f:d2:7e:2f:11:82:d7:8d:45: 90:6d:38:c4:17:2e:ae:aa:93:91:d3:e1:3f:90:e7:4f:73:60: 93:30:aa:b6:cc:cf:1a:29:f6:ed:b9:b1:28:27:22:13:34:8e: 42:4a:49:c2:9a:b9:3e:3b:51:02:72:ff:f1:05:95:13:45:76: a2:df:8f:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUwNTEwMTUzNzU0WhcNMjUwNTE3MTUzNzU0WjAYMRYwFAYD VQQDEw02ODFmNzJkMi1mNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8r/Z3n521NfEbo+jzjXnLo6ji5Btcc+S7P7wT4H8gohL9q8kglSmMLXJluS4 /1EQMFsdZiIkcA+iGFW3A59AdAwQxvc8O16oauP2pSiHhuQZLcJvazc97jC/8heB SThFjEvGdq1klUgiRQJEe+xW8WyDTl54sAxTMcsEuiTL/AXHYZbajtr+AwXZ/k0K FYR3GzrXKRnxEhB6O1/NHTw9hKhfKjmqdtIlCWXeaq3HghhRZpXUW3ojjbmEUYr7 tjSZ0INwPMDAX30XbgSlcaEybeq7HTIqL/5WivMOw30RxBbzRiDScrsODsWquaD3 9MtrFN/7Zmllru7YiF8BCwox9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnq2lVL l4JtgzedsiJfbDXqPyjPMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaDzUb850S823u+d9Ocjz0lKTMl/dG1KPq7c/CTWZGhEoTZrFLZtsz dCIMNszLf2R+CcDtIM3FdSQfzJCjviYDz6YhV6kFGbH0/UvBywLBfd7+0+Y+vQvC UmTJckDudF6Xw+km8MDUOHYD+MPJYt4PuPVoKW06GHpsAZGRYpL1LsIHSj+BXdDW qUsidvBbw/bQCCrfbh8PDtAblnpSD7tfXm3lbWcqUKmzXbTSqimCl9Bewd5orewv 2hlnuORv0n4vEYLXjUWQbTjEFy6uqpOR0+E/kOdPc2CTMKq2zM8aKfbtubEoJyIT NI5CSknCmrk+O1ECcv/xBZUTRXai349j -----END CERTIFICATE-----Generated at Sun May 11 05:00:01 2025 by rpki-client