$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: b433n3pkJ4vfvzgIRaD4r0L//TwKcTiHDVpXReizOs8= Subject key identifier: D2:E8:CB:82:CA:79:68:4E:2B:EA:1B:44:AA:2E:63:30:C6:7A:AD:5C Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 057D Signing time: Sun 19 Oct 2025 01:03:12 +0000 Manifest this update: Sun 19 Oct 2025 01:03:11 +0000 Manifest next update: Sun 26 Oct 2025 01:03:11 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: I9ryqE8npCJOv/NALZGFHgSDxrVY8oGn2Tf8y++xtUw=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=) 3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: dSI8zY9bytp5eBJksSVe4bOFa/6h1+FUTuMvCdJDftM=) 4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Oct 19 01:03:11 2025 GMT Not After : Oct 26 01:03:11 2025 GMT Subject: CN=68f438cf-dcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:f8:54:ff:a9:6c:13:48:df:83:71:7b:21: 19:77:77:21:38:f6:e3:1c:c3:0a:9c:37:6b:a1:54: e6:17:78:01:f1:71:f5:aa:98:ee:81:f7:dc:00:fc: e5:ea:bc:e5:fa:09:8f:0a:e1:15:10:f6:7a:27:10: ac:77:ec:3c:aa:e4:8c:d3:e1:b5:3c:b7:da:47:a6: 66:67:a2:0c:c6:69:e3:20:4c:c4:24:d2:c2:4b:26: 2c:dc:62:9b:49:a6:80:19:4e:cf:b3:91:95:47:fc: ec:38:a0:61:4a:d4:03:31:e9:94:21:9b:b8:39:bb: b0:a3:e3:45:fc:7f:5c:97:1b:3e:35:62:54:aa:bc: 6c:06:8f:6d:31:7a:bd:b0:75:a2:13:f7:f7:d6:e5: f0:36:22:a7:dd:fc:4c:70:14:0d:76:34:cf:08:c5: ca:98:d6:f1:f7:7a:e2:af:01:52:22:1c:28:c3:9a: aa:43:b2:65:a3:67:50:fe:63:70:6d:35:b8:31:59: f5:9a:a1:e5:08:53:de:df:d4:c9:82:7e:0f:f2:5b: 6b:26:ca:43:47:72:aa:8e:c6:56:51:5e:0f:31:8f: 1d:04:60:2d:a6:5d:e9:41:f2:a9:df:1b:79:8f:61: fa:74:83:86:44:50:98:d9:10:53:f1:98:03:50:a3: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E8:CB:82:CA:79:68:4E:2B:EA:1B:44:AA:2E:63:30:C6:7A:AD:5C X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:79:af:a0:4d:83:fb:7a:c4:e4:2d:97:36:13:38:0e:f0:d0: 24:be:fd:19:05:3d:71:47:e0:4f:c9:ea:6e:71:f5:24:45:da: f2:92:fe:26:e9:9a:fd:90:a3:62:5d:3d:a8:7a:82:d0:25:65: 22:6e:2c:a3:dc:82:e0:dd:50:92:a3:12:78:ec:e8:e4:65:bb: 41:3d:43:21:66:fc:02:26:b7:b3:bf:bd:79:15:c7:84:41:82: d5:47:dc:7c:58:2c:b7:72:e9:56:10:35:45:d9:38:10:f1:a2: bb:97:97:1a:d5:f3:5d:99:6e:52:0b:32:dc:de:87:d7:a1:37: 91:7c:0e:a5:0a:98:c8:a5:e6:11:02:a5:f7:7a:14:74:8d:d6: d0:b7:dd:8f:c8:37:64:90:d7:5f:c6:9e:8c:d3:c8:61:b1:1c: de:ee:13:ee:a2:da:b6:f8:79:3b:c5:c7:90:f4:ab:ef:87:dc: 31:0c:11:be:2a:ff:4b:30:ad:25:fa:85:91:69:af:40:23:b8: 2f:44:97:36:1f:f5:14:6c:df:43:c0:e5:36:45:a1:61:93:3d: c4:50:0a:83:bb:3b:95:83:03:40:8b:47:55:57:5a:4d:1d:5f: a8:eb:90:bc:34:66:8a:9c:41:a1:46:04:9f:06:26:6d:34:22: 09:6a:fc:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjUxMDE5MDEwMzExWhcNMjUxMDI2MDEwMzExWjAYMRYwFAYD VQQDEw02OGY0MzhjZi1kY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOv4VP+pbBNI34NxeyEZd3chOPbjHMMKnDdroVTmF3gB8XH1qpjugffcAPzl 6rzl+gmPCuEVEPZ6JxCsd+w8quSM0+G1PLfaR6ZmZ6IMxmnjIEzEJNLCSyYs3GKb SaaAGU7Ps5GVR/zsOKBhStQDMemUIZu4Obuwo+NF/H9clxs+NWJUqrxsBo9tMXq9 sHWiE/f31uXwNiKn3fxMcBQNdjTPCMXKmNbx93rirwFSIhwow5qqQ7Jlo2dQ/mNw bTW4MVn1mqHlCFPe39TJgn4P8ltrJspDR3KqjsZWUV4PMY8dBGAtpl3pQfKp3xt5 j2H6dIOGRFCY2RBT8ZgDUKNX1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLoy4LK eWhOK+obRKouYzDGeq1cMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUea+gTYP7esTkLZc2EzgO8NAkvv0ZBT1xR+BPyepucfUkRdrykv4m 6Zr9kKNiXT2oeoLQJWUibiyj3ILg3VCSoxJ47OjkZbtBPUMhZvwCJrezv715FceE QYLVR9x8WCy3culWEDVF2TgQ8aK7l5ca1fNdmW5SCzLc3ofXoTeRfA6lCpjIpeYR AqX3ehR0jdbQt92PyDdkkNdfxp6M08hhsRze7hPuotq2+Hk7xceQ9Kvvh9wxDBG+ Kv9LMK0l+oWRaa9AI7gvRJc2H/UUbN9DwOU2RaFhkz3EUAqDuzuVgwNAi0dVV1pN HV+o65C8NGaKnEGhRgSfBiZtNCIJavzJ -----END CERTIFICATE-----Generated at Mon Oct 20 16:43:19 2025 by rpki-client