$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: jBldxw0IdZ/+Jk8LVFCJO2QJCxRVbt4oEy2sj7fEv9M= Subject key identifier: 12:43:D4:39:45:FB:8C:45:F3:DE:04:7A:9B:DD:6F:0D:3E:14:0C:3F Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 0544 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 052E Signing time: Wed 14 May 2025 23:37:52 +0000 Manifest this update: Wed 14 May 2025 23:37:52 +0000 Manifest next update: Wed 21 May 2025 23:37:52 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: uZb+BFkq3FZr5XJzQTjADlHMoNiZ1rbCiwrNK/ET1K4=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=) 3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: dSI8zY9bytp5eBJksSVe4bOFa/6h1+FUTuMvCdJDftM=) 4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1348 (0x544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: May 14 23:37:52 2025 GMT Not After : May 21 23:37:52 2025 GMT Subject: CN=68252950-4e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:e4:c3:02:2d:9e:20:21:8c:1b:8a:2e:33: a4:13:28:e8:fb:87:75:07:90:b8:51:08:f2:e3:c2: 29:00:84:a1:15:b9:6b:7b:69:a7:54:fe:90:d9:31: 7c:b6:a0:85:b8:d7:e0:3f:f9:45:62:5b:f1:26:c6: 3f:d4:27:fe:ba:f4:cc:46:07:28:33:30:26:00:b4: 7f:e0:d2:2d:ef:ae:6c:fa:5f:93:0f:ac:fb:d1:fb: 3d:39:df:8d:e0:1b:70:19:f9:17:71:4a:b1:02:dd: 98:ae:89:41:3f:97:92:39:55:1b:aa:28:fb:af:1d: 2d:30:0d:8f:1a:93:6f:50:71:3f:84:10:20:50:69: aa:5a:44:61:e0:4d:3d:b9:2b:1b:fb:83:55:a1:0c: 06:e1:80:a8:79:8c:a6:5a:20:7f:04:2c:a7:c4:d6: 64:55:4e:d4:00:18:ff:18:4e:49:c5:94:3d:59:19: df:db:04:06:d9:0b:ac:b5:30:16:89:70:55:26:ec: 60:5f:85:82:1c:37:78:3a:83:ce:98:e6:57:bf:fd: c3:93:97:c2:9d:30:4b:3d:12:18:3b:fb:a6:16:33: 88:87:21:d6:db:2a:51:b1:9f:81:99:00:32:cd:ba: b5:97:a9:7f:14:60:55:9b:e3:2d:d3:ae:a4:57:f2: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:43:D4:39:45:FB:8C:45:F3:DE:04:7A:9B:DD:6F:0D:3E:14:0C:3F X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:71:d8:69:48:0c:a5:c0:50:ca:24:8a:2a:6e:06:13:18:ae: 25:ef:d9:32:0e:d4:90:30:68:63:82:e2:c4:13:b0:6b:61:a1: 03:c8:80:f6:92:3e:54:56:c9:91:c7:fc:7d:04:1a:14:10:bd: f0:a8:36:9a:00:cb:5c:b8:be:6f:cd:77:03:c9:0e:41:d8:68: 65:11:1c:0b:ee:b3:40:68:fd:39:78:f2:28:a4:b7:2f:43:71: 3a:29:5a:3d:92:35:cf:73:eb:43:74:ae:46:50:c2:e4:bf:4f: 85:94:96:8e:91:ba:28:f6:65:47:7e:f5:8d:11:41:04:af:9e: a4:d4:e4:f5:59:c8:da:11:a2:a7:9d:ec:42:38:ed:67:10:c2: 7a:c0:a7:db:bf:57:cc:88:e1:0f:89:90:1e:99:52:d9:37:31: f3:38:64:9c:75:2d:ef:98:19:1b:7b:3f:3e:66:81:91:9f:af: 0d:1b:c8:c5:38:89:c8:3b:6a:5b:de:a1:0a:71:99:b4:44:a9: 7a:8d:9e:19:77:92:46:ae:f8:af:0d:c9:4c:42:46:9b:8b:a6: bd:d8:4f:e6:68:4d:23:f1:05:66:63:f2:17:32:0c:4e:b9:f0: cb:05:ef:68:67:90:c5:d8:6a:50:09:0f:81:2b:da:91:d7:04: b4:fd:14:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjUwNTE0MjMzNzUyWhcNMjUwNTIxMjMzNzUyWjAYMRYwFAYD VQQDEw02ODI1Mjk1MC00ZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxy3kwwItniAhjBuKLjOkEyjo+4d1B5C4UQjy48IpAIShFblre2mnVP6Q2TF8 tqCFuNfgP/lFYlvxJsY/1Cf+uvTMRgcoMzAmALR/4NIt765s+l+TD6z70fs9Od+N 4BtwGfkXcUqxAt2YrolBP5eSOVUbqij7rx0tMA2PGpNvUHE/hBAgUGmqWkRh4E09 uSsb+4NVoQwG4YCoeYymWiB/BCynxNZkVU7UABj/GE5JxZQ9WRnf2wQG2QustTAW iXBVJuxgX4WCHDd4OoPOmOZXv/3Dk5fCnTBLPRIYO/umFjOIhyHW2ypRsZ+BmQAy zbq1l6l/FGBVm+Mt066kV/LdTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJD1DlF +4xF894Eepvdbw0+FAw/MB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/cdhpSAylwFDKJIoqbgYTGK4l79kyDtSQMGhjguLEE7BrYaEDyID2 kj5UVsmRx/x9BBoUEL3wqDaaAMtcuL5vzXcDyQ5B2GhlERwL7rNAaP05ePIopLcv Q3E6KVo9kjXPc+tDdK5GUMLkv0+FlJaOkboo9mVHfvWNEUEEr56k1OT1WcjaEaKn nexCOO1nEMJ6wKfbv1fMiOEPiZAemVLZNzHzOGScdS3vmBkbez8+ZoGRn68NG8jF OInIO2pb3qEKcZm0RKl6jZ4Zd5JGrvivDclMQkabi6a92E/maE0j8QVmY/IXMgxO ufDLBe9oZ5DF2GpQCQ+BK9qR1wS0/RST -----END CERTIFICATE-----Generated at Fri May 16 13:21:11 2025 by rpki-client