$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: WeIWSOb3HPD2KxL3WVaM+gywwmsYyPssBfB9nR72yWM= Subject key identifier: 6A:A1:57:37:0E:4C:D3:71:56:AB:F9:0C:4D:05:0F:2A:86:2D:45:DD Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 0232 Signing time: Sun 19 Oct 2025 04:09:24 +0000 Manifest this update: Sun 19 Oct 2025 04:09:24 +0000 Manifest next update: Sun 26 Oct 2025 04:09:24 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: sboa02PuP2OJQCQ0ZLW7beQn6GsryuKVUKeat481mXk=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: SpdJdr/6VGGqS7iqp8sOU+UWcnaMd8YGOWCMqOpdTjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Validity Not Before: Oct 19 04:09:24 2025 GMT Not After : Oct 26 04:09:24 2025 GMT Subject: CN=68f46474-794a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:75:39:87:7c:13:4e:32:f3:d6:fc:de:48: 06:a3:60:7b:86:3e:b7:c3:74:26:c4:81:43:d0:66: 9d:71:82:dc:ba:05:60:ba:7e:f1:d4:d6:a9:a4:20: e6:14:e2:ab:f0:f6:4a:92:3d:52:00:ef:94:77:7f: 71:07:ea:df:23:f0:df:e1:52:30:25:04:82:07:b4: 24:58:a5:e2:46:cb:cc:4f:67:1f:1f:a2:4e:d0:a7: f7:42:b8:a7:ad:f5:83:2f:54:d6:bd:f4:c7:c3:a0: aa:3e:f1:f3:f0:16:dc:22:d9:66:45:ad:57:59:16: ca:46:5d:eb:fd:ee:d5:96:55:b8:81:f9:8d:1f:a2: a4:ab:f5:40:07:0e:1f:8f:40:97:d5:fd:0f:ed:15: bf:7e:66:a9:71:02:10:84:3c:e1:a7:d2:65:09:cf: f0:53:3b:b5:6a:4b:b1:5a:c6:2b:d9:24:84:74:98: 80:0a:09:00:49:08:01:21:f2:5a:9c:b1:cb:b4:d5: 81:91:c6:0f:64:97:cf:31:f5:9e:ce:cd:8e:b8:63: bf:fb:79:23:f0:4f:69:62:8e:81:cb:87:b0:85:ca: 48:30:cd:4d:a9:59:c6:4f:e4:0e:b2:60:cd:00:17: 7b:d8:0c:68:42:99:d6:8d:e5:b0:36:ef:1c:1f:3a: b9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A1:57:37:0E:4C:D3:71:56:AB:F9:0C:4D:05:0F:2A:86:2D:45:DD X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ef:f6:fc:a8:7c:ec:f3:f5:62:fd:cc:ba:36:84:31:96:0d: b8:b7:2c:79:97:4d:4d:9e:f1:d1:59:a2:bb:20:f0:d3:8e:a6: 93:69:6d:8f:32:01:8a:9d:12:ff:c7:be:26:3a:5b:56:57:24: 0e:15:fb:46:ba:57:f0:02:72:0b:84:1c:c9:0b:83:b2:91:50: 4e:a0:25:c3:bb:47:a8:05:50:a6:c1:98:43:6b:79:d4:56:cd: fe:24:42:d7:77:4c:10:e0:f9:f1:e6:41:66:81:b8:0a:cf:af: ee:ea:88:bc:6d:3b:f5:bb:1a:b0:1e:93:78:80:24:bb:e9:43: 24:71:f9:d9:14:6d:d3:67:d4:31:ff:0b:23:23:5d:47:bc:f5: a9:95:0c:10:d0:cd:c0:89:7d:59:13:a9:0a:a5:01:55:d2:c2: fb:87:36:9d:7c:52:15:af:5f:25:f4:29:a3:dc:59:34:eb:b9: f8:d6:3b:75:0b:95:22:cc:be:27:49:02:76:be:06:96:b4:24: a5:1e:fd:73:30:44:e9:42:d4:89:21:44:47:f8:f0:b7:65:a3: 79:f2:3a:88:4d:12:9a:20:19:6c:d1:05:3e:54:9f:b3:d2:a4: da:09:99:7f:b1:7a:ba:b2:ea:e7:8e:b9:1e:93:d7:d1:fd:96: 2e:69:39:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjUxMDE5MDQwOTI0WhcNMjUxMDI2MDQwOTI0WjAYMRYwFAYD VQQDEw02OGY0NjQ3NC03OTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDl1OYd8E04y89b83kgGo2B7hj63w3QmxIFD0GadcYLcugVgun7x1NappCDm FOKr8PZKkj1SAO+Ud39xB+rfI/Df4VIwJQSCB7QkWKXiRsvMT2cfH6JO0Kf3Qrin rfWDL1TWvfTHw6CqPvHz8BbcItlmRa1XWRbKRl3r/e7VllW4gfmNH6Kkq/VABw4f j0CX1f0P7RW/fmapcQIQhDzhp9JlCc/wUzu1akuxWsYr2SSEdJiACgkASQgBIfJa nLHLtNWBkcYPZJfPMfWezs2OuGO/+3kj8E9pYo6By4ewhcpIMM1NqVnGT+QOsmDN ABd72AxoQpnWjeWwNu8cHzq5pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqhVzcO TNNxVqv5DE0FDyqGLUXdMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM7/b8qHzs8/Vi/cy6NoQxlg24tyx5l01NnvHRWaK7IPDTjqaTaW2P MgGKnRL/x74mOltWVyQOFftGulfwAnILhBzJC4OykVBOoCXDu0eoBVCmwZhDa3nU Vs3+JELXd0wQ4Pnx5kFmgbgKz6/u6oi8bTv1uxqwHpN4gCS76UMkcfnZFG3TZ9Qx /wsjI11HvPWplQwQ0M3AiX1ZE6kKpQFV0sL7hzadfFIVr18l9Cmj3Fk067n41jt1 C5UizL4nSQJ2vgaWtCSlHv1zMETpQtSJIURH+PC3ZaN58jqITRKaIBls0QU+VJ+z 0qTaCZl/sXq6surnjrkek9fR/ZYuaTne -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:26 2025 by rpki-client