$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft File: TH2sISA9rkFsH87q_FVlcgIiCKE.mft (raw, json) Hash identifier: WQAulgISVGRr0Fx2MEAUPJT49vYQ3XWipU4q/vLqEss= Subject key identifier: 30:2A:FF:18:95:44:6C:31:E3:0B:26:0F:41:84:57:5D:3B:2F:C4:64 Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 Certificate issuer: /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft Manifest number: 019C Signing time: Sat 23 Aug 2025 03:35:43 +0000 Manifest this update: Sat 23 Aug 2025 03:35:42 +0000 Manifest next update: Sat 30 Aug 2025 03:35:42 +0000 Files and hashes: 1: TH2sISA9rkFsH87q_FVlcgIiCKE.crl (hash: 10k/gYN/nuCRlwDAwDMHoH53qncXTakV5AdWJqhPEA0=) 2: 6EB972341D6011EEB28A4323C4F9AE02.roa (hash: V7+xw0Oh19sCCsRJ/3dn3BE03yFJdR1cttirX6vRQc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Validity Not Before: Aug 23 03:35:42 2025 GMT Not After : Aug 30 03:35:42 2025 GMT Subject: CN=68a9370e-802b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:94:21:de:a8:43:21:83:14:07:af:07:67: 9a:70:f1:cb:2c:72:76:5d:d4:1c:2d:ef:68:b5:90: cd:83:fd:9a:f7:cc:5e:1b:33:49:47:00:15:e7:de: 1c:f4:cc:a8:91:95:1c:a6:3a:a5:6f:6c:98:09:cb: 87:f6:aa:86:c5:a7:0a:fe:00:97:de:f4:e9:31:73: ce:82:1c:cd:12:c4:a1:76:c1:fd:2d:d5:44:4b:39: 3c:0f:1e:57:6c:5b:fc:98:ef:e6:32:17:2a:b5:8f: 14:34:e0:86:c5:62:14:03:a2:a3:4a:2e:56:67:53: aa:1b:c4:e2:fe:85:00:fd:8b:22:ca:ab:4f:96:3a: 1a:2e:53:ef:9e:52:d2:a3:49:84:b2:74:90:3c:20: 27:f9:fc:5b:5f:4b:52:d6:43:ed:30:a9:5e:49:36: b2:4a:e6:dd:42:c7:77:1d:12:06:f2:a8:28:73:0b: ca:af:09:e5:db:9b:26:5b:9b:13:ba:22:7c:c6:ff: 1f:45:55:85:44:7d:81:ec:c6:ea:12:9b:fb:4d:9f: e7:f8:bd:a3:28:1a:a2:a0:d9:f8:0f:38:37:1d:8b: b8:81:9a:50:1e:f5:c1:fb:83:f4:0a:1c:0f:d4:c6: 58:56:a2:86:d4:1e:11:a6:20:d2:07:4c:0a:3f:38: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2A:FF:18:95:44:6C:31:E3:0B:26:0F:41:84:57:5D:3B:2F:C4:64 X509v3 Authority Key Identifier: keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:bd:60:f4:65:86:93:d9:79:95:a2:2e:d1:04:6c:3d:6a:15: c3:33:81:56:5b:8c:5d:c2:4f:50:48:14:1c:9b:32:87:c5:9c: 4e:cf:5f:f0:81:b0:5e:2c:af:b0:ce:47:85:9b:e1:67:ba:b7: 56:6d:ee:82:96:67:40:c6:24:f0:11:50:85:1e:09:b2:cf:6f: 6d:11:a8:bb:4a:45:7b:5f:e4:d7:8b:de:e9:68:2b:57:77:f0: a3:84:8e:9f:2b:42:93:56:ed:a9:fe:6e:47:07:0c:6b:63:73: a2:8a:31:35:ed:b4:d6:af:6a:74:a6:8a:a9:c6:80:0f:76:b8: eb:a0:ee:29:29:bc:cd:86:e3:e6:df:e2:0e:b5:c6:86:56:9c: 23:f1:09:6f:2c:39:3c:5e:39:0d:ae:38:1e:f5:73:79:c5:b9: 1e:5e:f0:95:47:00:f1:74:d4:2a:8c:d8:b5:3d:d0:6b:c6:6f: 78:62:93:ba:6d:42:94:1d:62:34:09:40:f3:06:0a:cf:a3:a2: 3e:16:e3:a1:1b:77:8a:12:f9:11:48:d6:2d:2e:7f:61:d3:6d: b3:e5:9c:09:3f:56:15:da:71:0c:3e:e7:7b:4d:49:eb:ae:44: b7:68:d5:81:d0:95:72:2c:ef:37:36:4d:32:79:ea:fa:8e:1b: f6:b0:a6:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDUxMTAvBgNVBAUTKDRDN0RBQzIxMjAzREFFNDE2QzFGQ0VFQUZDNTU2NTcy MDIyMjA4QTEwHhcNMjUwODIzMDMzNTQyWhcNMjUwODMwMDMzNTQyWjAYMRYwFAYD VQQDEw02OGE5MzcwZS04MDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7KUId6oQyGDFAevB2eacPHLLHJ2XdQcLe9otZDNg/2a98xeGzNJRwAV594c 9MyokZUcpjqlb2yYCcuH9qqGxacK/gCX3vTpMXPOghzNEsShdsH9LdVESzk8Dx5X bFv8mO/mMhcqtY8UNOCGxWIUA6KjSi5WZ1OqG8Ti/oUA/YsiyqtPljoaLlPvnlLS o0mEsnSQPCAn+fxbX0tS1kPtMKleSTaySubdQsd3HRIG8qgocwvKrwnl25smW5sT uiJ8xv8fRVWFRH2B7MbqEpv7TZ/n+L2jKBqioNn4Dzg3HYu4gZpQHvXB+4P0ChwP 1MZYVqKG1B4RpiDSB0wKPzjy1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAq/xiV RGwx4wsmD0GEV107L8RkMB8GA1UdIwQYMBaAFEx9rCEgPa5BbB/O6vxVZXICIgih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENENS9DRDJCNEI0NDFE MEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJrRnNIODdxX0ZWbGNnSWlD S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIMnNJU0E5cmtGc0g4N3FfRlZsY2dJaUNLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENENS9DRDJCNEI0NDFEMEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJr RnNIODdxX0ZWbGNnSWlDS0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIvWD0ZYaT2XmVoi7RBGw9ahXDM4FWW4xdwk9QSBQcmzKHxZxOz1/w gbBeLK+wzkeFm+FnurdWbe6ClmdAxiTwEVCFHgmyz29tEai7SkV7X+TXi97paCtX d/CjhI6fK0KTVu2p/m5HBwxrY3OiijE17bTWr2p0poqpxoAPdrjroO4pKbzNhuPm 3+IOtcaGVpwj8QlvLDk8XjkNrjge9XN5xbkeXvCVRwDxdNQqjNi1PdBrxm94YpO6 bUKUHWI0CUDzBgrPo6I+FuOhG3eKEvkRSNYtLn9h022z5ZwJP1YV2nEMPud7TUnr rkS3aNWB0JVyLO83Nk0yeer6jhv2sKYm -----END CERTIFICATE-----Generated at Sat Aug 23 20:58:39 2025 by rpki-client