$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: jA9K8x9+KtEZsNsCbZAdO+3Wuf3kqyxqSFNvF84q7Kk= Subject key identifier: 54:6D:AF:02:73:5C:2F:AA:CE:B1:EC:C7:A7:2E:CA:FE:E2:80:78:17 Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 0215 Signing time: Sat 23 Aug 2025 02:16:29 +0000 Manifest this update: Sat 23 Aug 2025 02:16:29 +0000 Manifest next update: Sat 30 Aug 2025 02:16:29 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: oLmLSFcLol+cjwSRAEjLWbIVB5Nz7bY/VayBlFpS3MU=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: SpdJdr/6VGGqS7iqp8sOU+UWcnaMd8YGOWCMqOpdTjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Validity Not Before: Aug 23 02:16:29 2025 GMT Not After : Aug 30 02:16:29 2025 GMT Subject: CN=68a9247d-bed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:b4:77:51:0d:23:62:79:fd:1d:fa:2a:cb: 8f:83:24:ef:da:15:a9:14:ac:e7:85:ad:6b:b7:20: 93:e7:f4:19:77:3a:fd:a5:c5:ed:90:3a:78:4d:fd: 6a:35:4c:c0:dd:b2:10:f0:09:50:f3:ad:28:d0:3d: 65:fd:21:d9:81:9d:f0:ad:7f:e0:37:96:e1:99:4a: 3b:0b:48:e3:ce:33:68:c9:ba:e7:78:93:40:41:17: ac:12:cd:46:17:66:0a:b1:93:d8:e0:46:ce:d0:bc: bf:f7:99:09:59:0e:6a:0a:16:b4:e0:b0:b5:72:4a: 19:59:8d:77:fd:93:52:51:ee:9f:1c:c8:23:4a:a5: 68:0b:0c:b3:af:36:77:e3:55:7a:39:6d:ca:5a:4c: 76:67:8d:46:6e:25:16:47:77:62:3d:8c:70:2e:c9: 01:77:38:77:78:c8:c8:4e:8d:d7:71:d2:24:5c:9a: 09:ea:86:55:4f:36:69:b2:9e:2f:c1:bb:aa:02:00: be:07:a4:82:57:06:b3:3d:e6:55:9a:43:b5:83:3c: 3b:ab:72:d0:69:71:d8:f6:50:66:ef:e5:39:74:5d: 18:25:b5:ca:58:48:dd:34:af:81:07:1c:e4:98:ab: fd:a6:0a:89:14:aa:cb:3e:51:fc:04:72:5f:58:42: 3e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6D:AF:02:73:5C:2F:AA:CE:B1:EC:C7:A7:2E:CA:FE:E2:80:78:17 X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ca:95:f4:24:4a:7b:63:11:e8:ff:19:d3:bf:ad:76:5c:26: a8:0d:4d:37:07:e3:f3:22:cc:c5:9e:51:fa:ff:c3:ed:b1:61: 32:3f:b8:02:4c:9e:84:e9:57:a4:f4:71:b1:74:fb:bc:8a:4c: ad:c0:03:4c:18:b6:7b:bf:15:9f:93:97:b4:4c:3a:f2:c9:7c: c9:1e:51:41:f9:0f:72:32:3a:38:f4:9e:a4:a5:97:6a:7b:9a: 74:ea:20:7f:bf:ea:e9:b6:bd:e3:a0:a5:0e:77:b7:e5:78:0c: f7:b5:55:43:3c:d7:ea:9a:66:37:0d:27:03:47:8d:7e:96:e0: 72:77:7e:69:68:fc:11:9c:2e:2c:0c:4a:72:40:81:e2:32:14: de:79:94:c6:ed:3b:0a:59:2c:c3:f8:b2:42:1c:5e:b0:22:c3: 06:55:cd:79:51:c6:13:c7:e7:76:5e:78:29:c0:bc:8c:42:fe: 15:21:76:26:be:de:ac:da:4e:dc:6a:9e:85:78:db:d1:20:66: d3:17:12:49:06:ee:99:f7:fc:6e:4e:23:b2:a2:64:10:6f:3a: 1d:b3:83:6c:2f:6b:71:b1:00:9d:ad:b0:04:ca:91:24:17:dd: 2d:f8:d8:cd:db:83:a7:df:66:4c:63:32:2d:36:f1:30:8d:f9: 80:5a:39:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjUwODIzMDIxNjI5WhcNMjUwODMwMDIxNjI5WjAYMRYwFAYD VQQDEw02OGE5MjQ3ZC1iZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDG0d1ENI2J5/R36KsuPgyTv2hWpFKznha1rtyCT5/QZdzr9pcXtkDp4Tf1q NUzA3bIQ8AlQ860o0D1l/SHZgZ3wrX/gN5bhmUo7C0jjzjNoybrneJNAQResEs1G F2YKsZPY4EbO0Ly/95kJWQ5qCha04LC1ckoZWY13/ZNSUe6fHMgjSqVoCwyzrzZ3 41V6OW3KWkx2Z41GbiUWR3diPYxwLskBdzh3eMjITo3XcdIkXJoJ6oZVTzZpsp4v wbuqAgC+B6SCVwazPeZVmkO1gzw7q3LQaXHY9lBm7+U5dF0YJbXKWEjdNK+BBxzk mKv9pgqJFKrLPlH8BHJfWEI+SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRtrwJz XC+qzrHsx6cuyv7igHgXMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsypX0JEp7YxHo/xnTv612XCaoDU03B+PzIszFnlH6/8PtsWEyP7gC TJ6E6Vek9HGxdPu8ikytwANMGLZ7vxWfk5e0TDryyXzJHlFB+Q9yMjo49J6kpZdq e5p06iB/v+rptr3joKUOd7fleAz3tVVDPNfqmmY3DScDR41+luByd35paPwRnC4s DEpyQIHiMhTeeZTG7TsKWSzD+LJCHF6wIsMGVc15UcYTx+d2XngpwLyMQv4VIXYm vt6s2k7cap6FeNvRIGbTFxJJBu6Z9/xuTiOyomQQbzods4NsL2txsQCdrbAEypEk F90t+NjN24On32ZMYzItNvEwjfmAWjl5 -----END CERTIFICATE-----Generated at Sat Aug 23 22:37:53 2025 by rpki-client