$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: OHEXOqUZA9esh2dEUj1lrIIPaRSOOJqv0F04F6xSxsY= Subject key identifier: 04:D2:AF:3F:9D:15:09:9D:F3:61:D5:CD:7C:FE:61:42:4A:03:6F:77 Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 01E2 Signing time: Tue 13 May 2025 01:58:44 +0000 Manifest this update: Tue 13 May 2025 01:58:44 +0000 Manifest next update: Tue 20 May 2025 01:58:44 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: coN8QWXsCRuDQ21JQmL0rx8Rnwe20JetarDJ1ON5eQw=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: SpdJdr/6VGGqS7iqp8sOU+UWcnaMd8YGOWCMqOpdTjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Validity Not Before: May 13 01:58:44 2025 GMT Not After : May 20 01:58:44 2025 GMT Subject: CN=6822a754-0845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:d8:d4:bc:28:3d:ac:5a:3f:04:e4:bb:3f: 4d:5b:c6:9a:ce:59:69:38:a2:0a:fa:17:e3:41:73: 7f:69:4f:83:02:33:5d:84:d4:e0:15:94:a1:90:60: fe:db:8b:94:64:9f:21:f5:ed:12:04:97:75:12:db: 1c:f1:31:03:ed:3b:6b:0b:fb:08:3f:73:48:1c:dc: 2b:8d:7b:56:42:02:2f:59:5a:f1:4a:3d:67:90:a5: 25:1b:af:72:6b:ce:b2:e3:48:23:da:33:41:51:7c: ad:6d:63:5e:0f:e9:04:5e:d1:f8:eb:cb:58:6f:3e: eb:ed:45:be:70:dd:7b:ce:0c:2d:91:85:1a:9f:3a: 5b:a0:92:ae:8e:a4:f3:74:9d:46:00:70:28:b7:e5: 9d:a7:2f:00:9a:3b:3d:e7:f1:ea:8f:5e:d9:51:9c: 94:58:e2:6f:35:5e:19:38:b3:f7:e1:f4:cc:62:b3: b4:de:ed:7d:94:d4:87:25:d5:7c:76:eb:40:69:b5: d7:0c:43:4e:68:4d:0a:a3:60:99:e8:32:0a:a4:8a: 97:25:89:33:90:a0:b9:2f:f4:69:ee:93:5e:49:8b: f3:c7:b9:72:e5:9c:bb:1e:c4:6d:cc:20:af:dd:cf: 31:de:02:b1:f7:fb:9b:49:d1:d2:02:11:5f:61:97: 56:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D2:AF:3F:9D:15:09:9D:F3:61:D5:CD:7C:FE:61:42:4A:03:6F:77 X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4d:2c:7b:45:9a:53:88:f4:6b:be:19:e6:8d:db:34:55:a5: b9:64:a9:56:fb:64:f4:49:e0:af:e7:03:e8:82:4e:1b:2d:f5: 54:69:26:a0:59:0d:82:e1:10:57:ac:0e:66:e0:63:d5:c1:83: dc:29:94:30:1f:e7:41:3c:b5:ad:a0:7d:68:16:ad:5a:79:54: 5c:c5:43:5c:11:1e:34:a6:50:b0:7b:75:c7:2d:91:b2:54:a7: e1:24:e0:27:fd:f8:0a:20:ad:3b:b4:59:08:29:a7:67:b5:30: 64:86:90:a4:9a:c5:db:73:c4:c8:63:90:1a:92:c1:2a:19:3c: 13:66:93:93:c0:ea:d1:aa:34:cd:78:10:f4:94:c5:08:57:8e: 97:5d:9a:9a:f6:80:08:8a:d1:7e:80:27:8e:73:99:ce:dc:18: 7c:81:db:ed:e7:56:c5:97:97:ea:c6:ab:6e:bd:2d:d7:93:f8: 72:f1:c6:70:fd:84:f5:94:6e:8d:7e:56:af:3c:ce:ee:cf:59: 25:9c:ba:9f:85:74:7c:5e:f3:e1:e7:b3:c2:08:6e:6e:ff:c6: e7:7a:db:5a:84:b1:b4:0e:1f:28:8d:ec:98:25:2b:c5:e7:24: 21:89:26:80:93:ad:54:f3:24:a9:9a:ee:38:f5:fc:22:28:06: 12:cd:44:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjUwNTEzMDE1ODQ0WhcNMjUwNTIwMDE1ODQ0WjAYMRYwFAYD VQQDEw02ODIyYTc1NC0wODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNjY1LwoPaxaPwTkuz9NW8aazllpOKIK+hfjQXN/aU+DAjNdhNTgFZShkGD+ 24uUZJ8h9e0SBJd1Etsc8TED7TtrC/sIP3NIHNwrjXtWQgIvWVrxSj1nkKUlG69y a86y40gj2jNBUXytbWNeD+kEXtH468tYbz7r7UW+cN17zgwtkYUanzpboJKujqTz dJ1GAHAot+Wdpy8Amjs95/Hqj17ZUZyUWOJvNV4ZOLP34fTMYrO03u19lNSHJdV8 dutAabXXDENOaE0Ko2CZ6DIKpIqXJYkzkKC5L/Rp7pNeSYvzx7ly5Zy7HsRtzCCv 3c8x3gKx9/ubSdHSAhFfYZdWVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATSrz+d FQmd82HVzXz+YUJKA293MB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABTSx7RZpTiPRrvhnmjds0VaW5ZKlW+2T0SeCv5wPogk4bLfVUaSag WQ2C4RBXrA5m4GPVwYPcKZQwH+dBPLWtoH1oFq1aeVRcxUNcER40plCwe3XHLZGy VKfhJOAn/fgKIK07tFkIKadntTBkhpCkmsXbc8TIY5AaksEqGTwTZpOTwOrRqjTN eBD0lMUIV46XXZqa9oAIitF+gCeOc5nO3Bh8gdvt51bFl5fqxqtuvS3Xk/hy8cZw /YT1lG6NflavPM7uz1klnLqfhXR8XvPh57PCCG5u/8bnettahLG0Dh8ojeyYJSvF 5yQhiSaAk61U8ySpmu449fwiKAYSzUTB -----END CERTIFICATE-----Generated at Tue May 13 05:54:25 2025 by rpki-client