$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: S6YXF1EOCDGRAivwuXdDrH6zJxNkzjGI8PAXgKlvn2Y= Subject key identifier: DB:49:14:98:49:01:CE:3A:C0:CD:A9:64:A8:1C:BC:6B:A2:48:0E:AD Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1F66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1F3E Signing time: Sat 28 Jun 2025 15:55:12 +0000 Manifest this update: Sat 28 Jun 2025 15:55:11 +0000 Manifest next update: Sat 05 Jul 2025 15:55:11 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: Sw0fKdLFRjZiX5me45wrKaRi6Pa6JfSLCMwbXlExp6I=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: XynjUTKTYazCZAgnFarsz0z7XLq0CMLJDFwXu2DvFy0=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dDmsnYnpk7eYJRQjeaKR7lmvE3DrcRr0DYnI4h6EWFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8038 (0x1f66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Jun 28 15:55:11 2025 GMT Not After : Jul 5 15:55:11 2025 GMT Subject: CN=6860105f-cc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:e8:ef:49:1c:a0:93:df:96:72:f6:a0:b2: 5c:4d:e4:3a:40:ef:36:84:0d:59:92:a6:bd:28:75: 9c:fd:8e:cc:f5:78:0d:46:ad:ac:60:c1:33:9a:e4: 59:c8:4d:fe:6c:a0:5e:a6:e4:55:d6:6b:e2:c7:3b: a4:fc:4f:7d:e2:f8:14:0d:e6:a5:97:f6:57:ab:d5: 17:0f:da:60:1f:1e:13:69:fb:42:e4:43:ea:03:e5: 1c:0f:4b:e4:25:4c:95:f8:f0:08:c1:19:63:7d:92: 02:f3:6b:aa:bf:20:6c:9d:23:d5:b0:a5:14:4f:3e: 9e:57:b9:43:88:e7:73:4d:09:92:e3:c3:9e:76:5d: 56:6e:56:f8:fa:c5:91:28:c7:9c:1a:a8:57:30:cb: d4:ea:6f:a8:b5:52:89:4e:76:a3:e2:37:2e:18:13: 52:43:7e:9d:0f:e2:3e:2e:cf:47:b2:46:1d:e2:11: c7:67:33:45:eb:3e:b6:f2:76:75:f5:3e:39:85:ba: ce:83:15:14:9c:09:70:03:19:76:bf:21:75:77:53: ce:8b:60:f9:61:47:61:92:ba:63:89:d0:0d:64:39: 9d:6b:32:e1:94:66:16:fb:51:25:ab:d5:02:7c:7e: 65:c6:40:f7:92:fd:cd:1b:e7:59:76:c8:9a:2e:1b: bd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:49:14:98:49:01:CE:3A:C0:CD:A9:64:A8:1C:BC:6B:A2:48:0E:AD X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:4e:cc:fa:30:c9:3b:aa:96:4f:bc:18:b9:42:27:ec:bc:0e: e4:69:d3:2e:7a:ff:b9:db:be:46:12:0c:ab:ce:21:40:5a:65: dd:b5:88:e5:61:bc:ce:75:10:42:e2:29:a8:89:af:53:4d:9b: 04:ec:5e:4d:c9:84:fe:1d:9d:85:99:f5:55:e8:66:69:e6:e9: d8:bf:b4:ba:b9:31:9e:bb:c0:74:c8:f5:d7:c1:16:85:93:0a: 6f:8f:fc:a9:70:36:40:b8:ef:19:9e:0a:bc:c4:09:1b:a2:4d: 87:40:7f:cb:07:fd:be:18:53:03:61:f6:7c:33:ce:c6:0e:fb: f0:cc:5c:79:b8:7b:c0:76:bc:6b:37:61:3a:9b:6a:f6:43:7c: f9:3d:56:24:2f:01:d5:d2:39:cd:05:d4:dc:1d:07:7c:36:da: 1b:58:3a:38:34:c0:5c:3e:3d:ad:1b:6f:5d:02:15:85:01:49: 0b:7b:5c:22:60:f7:79:e0:7a:42:54:e3:00:27:d3:a8:f5:3d: b9:cb:80:bf:5a:8c:eb:c3:69:da:8f:e3:4c:be:b6:5c:87:e9: 91:36:c1:1d:6f:21:03:b7:2d:b3:0d:b8:3f:b8:96:d9:39:35: 86:8f:5e:05:4a:02:9b:71:10:f8:02:8d:6f:f8:8d:c1:55:86: cf:65:98:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUwNjI4MTU1NTExWhcNMjUwNzA1MTU1NTExWjAYMRYwFAYD VQQDEw02ODYwMTA1Zi1jYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVvo70kcoJPflnL2oLJcTeQ6QO82hA1Zkqa9KHWc/Y7M9XgNRq2sYMEzmuRZ yE3+bKBepuRV1mvixzuk/E994vgUDeall/ZXq9UXD9pgHx4TaftC5EPqA+UcD0vk JUyV+PAIwRljfZIC82uqvyBsnSPVsKUUTz6eV7lDiOdzTQmS48Oedl1Wblb4+sWR KMecGqhXMMvU6m+otVKJTnaj4jcuGBNSQ36dD+I+Ls9HskYd4hHHZzNF6z628nZ1 9T45hbrOgxUUnAlwAxl2vyF1d1POi2D5YUdhkrpjidANZDmdazLhlGYW+1Elq9UC fH5lxkD3kv3NG+dZdsiaLhu9YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtJFJhJ Ac46wM2pZKgcvGuiSA6tMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApTsz6MMk7qpZPvBi5QifsvA7kadMuev+5275GEgyrziFAWmXdtYjl YbzOdRBC4imoia9TTZsE7F5NyYT+HZ2FmfVV6GZp5unYv7S6uTGeu8B0yPXXwRaF kwpvj/ypcDZAuO8Zngq8xAkbok2HQH/LB/2+GFMDYfZ8M87GDvvwzFx5uHvAdrxr N2E6m2r2Q3z5PVYkLwHV0jnNBdTcHQd8NtobWDo4NMBcPj2tG29dAhWFAUkLe1wi YPd54HpCVOMAJ9Oo9T25y4C/Wozrw2naj+NMvrZch+mRNsEdbyEDty2zDbg/uJbZ OTWGj14FSgKbcRD4Ao1v+I3BVYbPZZh8 -----END CERTIFICATE-----Generated at Mon Jun 30 11:38:02 2025 by rpki-client