$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: WmVoCnx1+5B3YKIhGpVVGGljdZuukgT2OlpErnZ2Ezo= Subject key identifier: 3B:D8:FF:92:60:E2:55:9D:ED:3D:D3:17:AD:B9:99:3E:C9:25:B9:1E Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 01FC Signing time: Sat 05 Jul 2025 02:41:45 +0000 Manifest this update: Sat 05 Jul 2025 02:41:44 +0000 Manifest next update: Sat 12 Jul 2025 02:41:44 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: ZwQGw6UiWZDcD7mL3rqNkiyB9SZhnZGtFuxb+pnw5e4=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: SpdJdr/6VGGqS7iqp8sOU+UWcnaMd8YGOWCMqOpdTjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Validity Not Before: Jul 5 02:41:44 2025 GMT Not After : Jul 12 02:41:44 2025 GMT Subject: CN=686890e9-62db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:25:1b:58:fe:86:da:11:d5:e2:a7:19:3e: 36:39:14:0c:8c:13:83:9d:d9:20:58:f1:6d:6d:70: 47:4d:2f:3c:ce:8a:af:7f:94:10:69:7d:df:dd:17: a9:bb:4b:88:4b:1d:e1:4b:c0:8c:c5:6a:b6:4f:c2: c2:c0:5e:06:ed:d4:98:0a:dd:80:36:6d:16:f8:ec: 1c:ca:fd:8e:2d:ff:52:5b:32:e6:18:b3:c2:97:75: 7d:f4:28:8d:f2:6e:6f:55:e2:63:90:9a:f3:b4:b1: 34:c5:2d:e4:1a:13:93:fd:85:45:56:f5:68:ed:44: 16:1d:ae:e9:13:31:33:36:fc:d3:87:29:cc:74:14: ee:f9:9f:9f:85:da:94:e7:77:18:ab:98:e2:02:26: 5d:d9:cf:a3:04:5c:54:8d:bb:c9:d2:08:3a:b7:8f: 88:b8:74:9b:a9:69:34:bc:5a:95:38:7e:1a:e9:c0: a4:af:78:a4:9b:50:d6:91:be:4d:41:0e:5e:fb:8c: 38:d8:6e:2e:0d:d8:26:f4:13:5e:63:0b:ae:46:1b: ba:e8:e4:ac:6e:bb:4f:09:ce:fb:a9:ed:56:ac:43: c6:55:c4:fc:75:4d:91:db:50:9f:ce:9c:b4:ee:35: 66:af:12:62:37:68:f7:08:65:de:cf:fe:ee:59:9b: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D8:FF:92:60:E2:55:9D:ED:3D:D3:17:AD:B9:99:3E:C9:25:B9:1E X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:0c:db:4b:a1:d4:5e:02:fb:c9:ac:b5:35:21:cf:c5:76:d3: 68:ba:73:61:1d:8a:67:d6:73:f2:ae:3b:5b:db:e8:c7:77:e4: b5:cb:de:6d:e7:41:0c:0e:2a:33:26:8d:b6:1b:a6:6a:03:86: 0b:dc:c4:59:14:3d:8e:32:cb:e0:4f:b3:57:dd:8f:be:49:6f: 78:d6:33:ef:63:9b:fd:a3:db:c5:c7:58:9f:2a:d1:d1:51:54: d0:2d:83:c6:7b:b5:90:f8:41:a3:9b:8f:c4:6a:15:90:a5:1f: 74:d6:dc:61:8b:9a:3c:3d:a4:e7:80:6c:82:ce:0b:d0:37:85: 43:68:81:f2:6d:fa:44:fa:d1:ce:65:ed:87:d2:ac:2a:a9:da: 85:65:e3:17:29:97:eb:5c:18:e4:fd:a5:ce:94:f9:58:dc:02: 47:a8:1e:3e:a1:f0:8d:18:e2:fa:60:f9:97:07:b0:e9:2d:95: d1:70:36:a4:f7:6c:45:d5:d6:62:9d:ba:d1:ee:e6:10:e9:3c: f1:7d:30:ee:57:c5:4e:25:f9:ad:f3:b6:7f:17:8b:e6:00:c3: 9a:50:7e:6f:63:7f:41:b9:b8:e1:dc:9e:5a:72:6f:c9:f8:f9: 0a:b4:70:82:9c:fa:d5:16:da:7a:08:29:c6:87:9e:3b:62:fb: 7e:d3:e2:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjUwNzA1MDI0MTQ0WhcNMjUwNzEyMDI0MTQ0WjAYMRYwFAYD VQQDEw02ODY4OTBlOS02MmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sMlG1j+htoR1eKnGT42ORQMjBODndkgWPFtbXBHTS88zoqvf5QQaX3f3Rep u0uISx3hS8CMxWq2T8LCwF4G7dSYCt2ANm0W+Owcyv2OLf9SWzLmGLPCl3V99CiN 8m5vVeJjkJrztLE0xS3kGhOT/YVFVvVo7UQWHa7pEzEzNvzThynMdBTu+Z+fhdqU 53cYq5jiAiZd2c+jBFxUjbvJ0gg6t4+IuHSbqWk0vFqVOH4a6cCkr3ikm1DWkb5N QQ5e+4w42G4uDdgm9BNeYwuuRhu66OSsbrtPCc77qe1WrEPGVcT8dU2R21Cfzpy0 7jVmrxJiN2j3CGXez/7uWZt2BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvY/5Jg 4lWd7T3TF625mT7JJbkeMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqDNtLodReAvvJrLU1Ic/FdtNounNhHYpn1nPyrjtb2+jHd+S1y95t 50EMDiozJo22G6ZqA4YL3MRZFD2OMsvgT7NX3Y++SW941jPvY5v9o9vFx1ifKtHR UVTQLYPGe7WQ+EGjm4/EahWQpR901txhi5o8PaTngGyCzgvQN4VDaIHybfpE+tHO Ze2H0qwqqdqFZeMXKZfrXBjk/aXOlPlY3AJHqB4+ofCNGOL6YPmXB7DpLZXRcDak 92xF1dZinbrR7uYQ6TzxfTDuV8VOJfmt87Z/F4vmAMOaUH5vY39Bubjh3J5acm/J +PkKtHCCnPrVFtp6CCnGh547Yvt+0+LF -----END CERTIFICATE-----Generated at Sat Jul 5 05:21:23 2025 by rpki-client