$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft File: THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json) Hash identifier: 2iIuKv3Cf4XqJ6vqkmoAtbj2j7skTHQHOroiOHKV1rE= Subject key identifier: A1:21:3B:F2:6B:11:8C:10:EE:9B:C9:A2:BF:CC:9C:2A:5A:42:42:0C Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73 Certificate issuer: /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft Manifest number: 16 Signing time: Sun 19 Oct 2025 11:27:35 +0000 Manifest this update: Sun 19 Oct 2025 11:27:33 +0000 Manifest next update: Sun 26 Oct 2025 11:27:33 +0000 Files and hashes: 1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: xAW978VoJWfgaT9nfb0kCGX2zQnXIWx8qH2AeeiZW6I=) 2: 006500928EE611F094A24C77C4F9AE02.roa (hash: DbkaOgwAriP/Mwbxrm6lRAhlKWJ1+3EkIPcc3uOwQSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573 Validity Not Before: Oct 19 11:27:33 2025 GMT Not After : Oct 26 11:27:33 2025 GMT Subject: CN=68f4cb26-cf3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:7a:b9:9f:79:93:eb:c3:73:2d:47:c1:a5: 4d:9c:c5:2b:3e:db:4a:39:33:cc:c4:a2:c9:51:a3: 97:8f:7b:4f:3c:d6:5f:07:00:9f:3c:3e:4f:e4:c8: 20:93:8c:ee:46:ef:90:a6:58:6c:d7:8c:db:a3:d8: c0:a0:96:4e:f6:b2:ea:a9:cd:7c:36:c5:71:14:78: 3b:bd:3d:42:3f:c3:eb:21:4d:65:a5:4d:31:7c:c0: 15:18:1a:dd:7d:11:02:d1:f3:bd:a9:22:31:24:69: 3e:24:8b:06:b2:7f:26:0c:33:92:e0:d8:b9:ca:9e: 55:3c:65:b4:36:34:50:fa:52:66:91:0d:db:b2:0b: 51:fd:0f:39:c6:f0:83:bd:77:17:26:49:2f:bf:1c: 69:b2:fb:da:5b:94:5e:5b:8b:19:8f:92:e6:10:01: 23:82:cd:32:89:59:ec:46:ad:2d:8b:21:f9:2c:fd: 84:c2:25:d9:ff:88:70:c3:e2:df:55:28:88:65:b6: 3d:2f:a3:17:42:d9:8b:d9:48:da:e5:37:20:92:5f: d1:6e:9e:47:f0:93:f0:c8:6d:eb:fb:3f:b8:a8:8e: 3f:23:93:d5:21:bc:99:1c:b7:22:c8:a3:f3:75:eb: 81:81:ea:db:08:66:ca:85:62:db:7d:90:eb:03:80: 2c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:21:3B:F2:6B:11:8C:10:EE:9B:C9:A2:BF:CC:9C:2A:5A:42:42:0C X509v3 Authority Key Identifier: keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4a:03:a9:b2:8b:49:fd:6d:7b:15:71:a1:ab:3b:b9:b2:00: 76:d4:f1:dd:70:45:7f:83:ec:01:db:20:61:c0:22:7e:b1:4e: fe:8a:d4:6b:a7:54:07:da:bc:68:45:30:31:72:de:a0:76:77: d1:0a:98:27:4a:e6:ba:6f:47:38:b9:29:b9:33:48:3b:ce:ca: d3:f8:8f:62:d0:28:ca:ca:e4:75:b5:7a:17:60:9f:86:0a:29: d0:97:5b:21:94:dc:03:c1:a6:84:52:01:68:95:c8:8f:1e:dc: e0:9b:70:65:a2:20:4d:62:40:2e:dc:7e:37:43:d6:76:8d:11: 97:fc:c8:f1:0e:e9:dd:c5:90:28:01:0c:ac:a1:c8:f0:a8:1b: 68:6f:46:09:8a:0d:53:14:b9:e2:84:51:20:66:e4:f9:19:a9: 02:ad:4d:bd:06:aa:a6:9e:94:32:0a:7d:97:42:08:96:e8:2b: 3b:56:91:17:50:4a:98:b0:77:09:ba:9f:7f:09:96:61:d0:26: b2:9f:0d:5c:d8:98:37:91:06:83:c0:a4:92:69:76:59:80:93: a8:da:2e:dc:b9:87:a3:03:69:a7:2d:08:a9:f5:9d:b3:a8:06: 7e:f2:d9:f0:8a:b1:9b:a0:58:13:dc:ef:9a:3b:16:43:41:3c: 5f:d7:85:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODBBNDExMC8GA1UEBRMoNEM3MDhDOUVCMUE3MjA0NDMyQTc3RTI1OEMxNkNEMTgy MDdDNTU3MzAeFw0yNTEwMTkxMTI3MzNaFw0yNTEwMjYxMTI3MzNaMBgxFjAUBgNV BAMTDTY4ZjRjYjI2LWNmM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCps3q5n3mT68NzLUfBpU2cxSs+20o5M8zEoslRo5ePe0881l8HAJ88Pk/kyCCT jO5G75CmWGzXjNuj2MCglk72suqpzXw2xXEUeDu9PUI/w+shTWWlTTF8wBUYGt19 EQLR872pIjEkaT4kiwayfyYMM5Lg2LnKnlU8ZbQ2NFD6UmaRDduyC1H9DznG8IO9 dxcmSS+/HGmy+9pblF5bixmPkuYQASOCzTKJWexGrS2LIfks/YTCJdn/iHDD4t9V KIhltj0voxdC2YvZSNrlNyCSX9Funkfwk/DIbev7P7iojj8jk9UhvJkctyLIo/N1 64GB6tsIZsqFYtt9kOsDgCxfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoSE78msR jBDum8miv8ycKlpCQgwwHwYDVR0jBBgwFoAUTHCMnrGnIEQyp34ljBbNGCB8VXMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MEE0Lzc4RDI2OTNFOEU1 MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVReXAzNGxqQmJOR0NCOFZY TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEhDTW5yR25JRVF5cDM0bGpCYk5HQ0I4VlhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MEE0Lzc4RDI2OTNFOEU1MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVR eXAzNGxqQmJOR0NCOFZYTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJtKA6myi0n9bXsVcaGrO7myAHbU8d1wRX+D7AHbIGHAIn6xTv6K1Gun VAfavGhFMDFy3qB2d9EKmCdK5rpvRzi5KbkzSDvOytP4j2LQKMrK5HW1ehdgn4YK KdCXWyGU3APBpoRSAWiVyI8e3OCbcGWiIE1iQC7cfjdD1naNEZf8yPEO6d3FkCgB DKyhyPCoG2hvRgmKDVMUueKEUSBm5PkZqQKtTb0GqqaelDIKfZdCCJboKztWkRdQ Spiwdwm6n38JlmHQJrKfDVzYmDeRBoPApJJpdlmAk6jaLty5h6MDaactCKn1nbOo Bn7y2fCKsZugWBPc75o7FkNBPF/XhXQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:33:43 2025 by rpki-client