$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: wl76gyPZfoXhn0qCGCmflIp8LJeO+Ay8rTpbMUuWMWk= Subject key identifier: D8:1C:2E:E6:89:70:D5:F6:26:79:D1:58:00:60:3D:64:A2:2C:23:94 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1F9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1F77 Signing time: Sat 18 Oct 2025 16:17:13 +0000 Manifest this update: Sat 18 Oct 2025 16:17:12 +0000 Manifest next update: Sat 25 Oct 2025 16:17:12 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: nj40ZYBbflFMzp0qgNZ85+nsZMNJumWv7MOY/o3ZYPQ=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: XynjUTKTYazCZAgnFarsz0z7XLq0CMLJDFwXu2DvFy0=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dDmsnYnpk7eYJRQjeaKR7lmvE3DrcRr0DYnI4h6EWFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8095 (0x1f9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Oct 18 16:17:12 2025 GMT Not After : Oct 25 16:17:12 2025 GMT Subject: CN=68f3bd89-f023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:b5:84:25:ce:4d:a9:86:40:c2:9a:d9:c4: 10:ed:07:1d:e4:c5:97:32:fb:f4:ae:47:30:78:5f: fe:6d:b4:7a:4d:7e:0f:b5:6b:c7:b5:8e:e2:8a:04: 8b:c3:ba:dc:74:00:d4:b2:fc:26:be:ec:f3:1d:38: f6:2a:8c:ba:f4:a4:f6:74:eb:c7:44:66:29:34:4a: 10:f0:77:4f:29:ca:4a:08:cc:19:88:41:d5:d6:15: 98:27:e7:27:73:56:9b:0f:41:a3:e1:9c:ff:7e:d9: 19:f4:b1:1a:10:2b:da:bc:83:50:84:cd:4d:f1:56: 41:e3:53:71:86:d5:a5:71:93:71:8a:76:8c:0c:a4: 0b:ff:42:ef:90:79:e4:76:3f:55:ad:61:6c:98:62: 00:93:2b:f3:1a:f5:2e:cb:b4:2f:32:f0:a5:30:c8: 3b:9a:09:b1:20:b7:2d:79:7e:c1:30:d6:de:e1:66: db:9e:e8:d1:0f:05:83:ef:ba:b2:0f:72:9e:f8:f8: fc:11:f4:fd:5f:37:6f:ab:51:55:32:87:88:15:96: df:49:2f:72:82:c5:5a:21:fe:36:2b:b5:b7:3f:8e: bc:12:32:ea:36:0e:db:f1:05:2d:4b:62:ab:3a:d6: d9:94:41:c5:63:36:e0:94:5e:e1:bb:d9:13:70:59: a5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1C:2E:E6:89:70:D5:F6:26:79:D1:58:00:60:3D:64:A2:2C:23:94 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:49:90:0e:8e:c3:c7:bb:6c:26:b2:4a:6e:03:dd:db:9f:eb: c6:01:5a:b9:04:52:b3:e8:21:52:d1:dd:f4:76:5d:1f:90:2c: 51:b4:fa:32:0e:67:3f:8a:4c:17:a1:6c:0b:1e:e8:b5:92:f8: ac:ce:e7:4e:ad:b8:f9:3e:62:4f:1b:55:54:bc:23:9d:4c:d3: 8f:06:dc:d7:03:c0:19:bc:18:02:38:24:a7:d4:17:80:55:4f: 06:1d:7d:a6:cb:55:35:4f:1c:ff:64:6a:05:b7:b8:f3:77:3e: ed:fc:64:9a:73:43:ef:4c:a3:62:3e:51:5f:4c:b7:28:01:b1: d5:3d:89:ff:19:da:e8:c0:6c:48:0a:80:52:8d:05:38:5d:af: 3b:e2:d4:11:43:d4:f6:51:08:e8:ec:ef:6f:82:be:05:e9:71: dc:96:9f:73:ec:8d:ab:d5:28:68:6e:be:20:e3:1f:fc:fc:54: f9:b5:96:c3:36:70:41:60:32:ff:46:71:c6:5b:f9:d6:a4:3d: 33:c4:3d:7e:a2:f0:7a:ec:11:85:fa:c3:88:82:61:03:f4:db: 83:67:0c:89:3c:c5:72:ef:33:5f:e2:86:6b:a9:8d:68:ee:d0: 85:45:a4:7c:4c:ec:f0:20:25:b8:bd:16:27:73:30:21:92:2f: 50:4a:87:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUxMDE4MTYxNzEyWhcNMjUxMDI1MTYxNzEyWjAYMRYwFAYD VQQDEw02OGYzYmQ4OS1mMDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPC1hCXOTamGQMKa2cQQ7Qcd5MWXMvv0rkcweF/+bbR6TX4PtWvHtY7iigSL w7rcdADUsvwmvuzzHTj2Koy69KT2dOvHRGYpNEoQ8HdPKcpKCMwZiEHV1hWYJ+cn c1abD0Gj4Zz/ftkZ9LEaECvavINQhM1N8VZB41NxhtWlcZNxinaMDKQL/0LvkHnk dj9VrWFsmGIAkyvzGvUuy7QvMvClMMg7mgmxILcteX7BMNbe4WbbnujRDwWD77qy D3Ke+Pj8EfT9Xzdvq1FVMoeIFZbfSS9ygsVaIf42K7W3P468EjLqNg7b8QUtS2Kr OtbZlEHFYzbglF7hu9kTcFmlpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgcLuaJ cNX2JnnRWABgPWSiLCOUMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDSZAOjsPHu2wmskpuA93bn+vGAVq5BFKz6CFS0d30dl0fkCxRtPoy Dmc/ikwXoWwLHui1kviszudOrbj5PmJPG1VUvCOdTNOPBtzXA8AZvBgCOCSn1BeA VU8GHX2my1U1Txz/ZGoFt7jzdz7t/GSac0PvTKNiPlFfTLcoAbHVPYn/GdrowGxI CoBSjQU4Xa874tQRQ9T2UQjo7O9vgr4F6XHclp9z7I2r1Shobr4g4x/8/FT5tZbD NnBBYDL/RnHGW/nWpD0zxD1+ovB67BGF+sOIgmED9NuDZwyJPMVy7zNf4oZrqY1o 7tCFRaR8TOzwICW4vRYnczAhki9QSofY -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:43 2025 by rpki-client