$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft File: TH2sISA9rkFsH87q_FVlcgIiCKE.mft (raw, json) Hash identifier: DZZDjuues9tnVPAT+RuhBhi7zomx8GmCWuayr+OAn0U= Subject key identifier: C6:0C:FE:A8:42:0D:99:36:77:C9:B5:B8:E9:06:E2:74:07:ED:CA:F9 Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 Certificate issuer: /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft Manifest number: 0165 Signing time: Fri 09 May 2025 03:11:16 +0000 Manifest this update: Fri 09 May 2025 03:11:15 +0000 Manifest next update: Fri 16 May 2025 03:11:15 +0000 Files and hashes: 1: TH2sISA9rkFsH87q_FVlcgIiCKE.crl (hash: gickhkDlsszZ4CmTIur9ROY2hwMtCqD2ngqm56eBCeo=) 2: 6EB972341D6011EEB28A4323C4F9AE02.roa (hash: bQCg19K5xN+p4d0M6W+H8xOlCOrAN5+b0tebovRRHFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Validity Not Before: May 9 03:11:15 2025 GMT Not After : May 16 03:11:15 2025 GMT Subject: CN=681d7253-0c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:0f:fe:7d:ed:36:52:a6:15:ee:86:8f:ba: 34:45:d1:5c:9f:3b:df:4d:41:df:41:b2:ae:0c:a1: a0:3b:c4:8c:c3:25:fc:da:7b:65:e4:b4:6c:44:3b: dc:d8:f1:a0:70:2d:4c:86:5c:4f:4f:72:99:39:86: 4f:04:d8:2d:8d:4e:06:d2:c2:ae:a2:ca:1e:07:a3: 80:9a:18:db:3f:77:a8:65:de:4f:9a:bb:7c:9c:89: 6a:bd:36:7f:7d:8c:ea:fd:75:52:f4:6c:93:a7:e8: 7f:43:a1:37:b1:0c:0b:7d:88:e5:02:57:b3:21:54: 56:d0:0f:4a:80:3b:0d:e6:3d:ef:4e:74:91:d8:a1: cb:13:88:8b:bc:aa:e4:1d:11:35:bb:ab:73:62:ef: bb:a7:4e:e9:9e:90:66:f2:bd:9e:aa:3e:04:20:39: 3d:de:1d:1c:d5:83:18:c2:46:15:d8:e9:11:f3:01: 45:d4:de:4b:2f:32:ec:1b:31:06:af:3b:64:c0:e1: 8c:fa:b1:3e:d5:eb:49:b4:4d:86:ca:2e:9b:86:3e: 9c:0d:85:5f:9c:72:74:9a:1f:9b:2a:7f:4a:36:89: d7:54:c8:ad:0d:ec:0f:3d:18:00:18:5c:77:30:9b: 40:71:d3:10:5e:a1:57:f4:3c:be:e5:e6:5b:75:6a: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0C:FE:A8:42:0D:99:36:77:C9:B5:B8:E9:06:E2:74:07:ED:CA:F9 X509v3 Authority Key Identifier: keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c6:1f:44:c4:06:62:86:9c:23:ed:0d:c0:64:15:aa:63:66: b9:8a:a5:6e:b1:41:bb:8e:d8:52:92:da:de:35:57:57:67:9a: ac:98:16:e6:28:2f:55:e8:55:a0:3f:06:c0:02:3c:5e:14:3f: b2:63:97:4d:7b:b6:fa:94:2e:24:be:88:52:d1:13:8f:a6:20: 6b:31:10:ca:4f:11:48:89:bc:8b:60:a1:cc:91:9a:ee:50:15: 4d:2e:90:47:6c:50:50:f0:07:6d:c5:38:3b:5a:af:0e:65:3f: d5:ee:06:f1:6a:cd:e2:a7:7a:f0:8d:b2:a6:29:01:2c:c3:4b: ef:01:d7:b0:cc:78:7f:e4:15:e9:94:63:95:1a:0c:59:48:4f: e7:28:8c:2c:c9:56:89:30:39:71:02:e0:19:1d:6b:2b:95:ce: 5a:d6:4b:29:1e:d4:c1:1d:63:46:29:5c:67:34:94:ef:5a:e1: 2a:52:73:10:0a:6b:be:cb:8d:9c:9a:75:c1:a7:4d:14:59:05: d0:70:75:fe:da:70:3b:45:05:52:b8:05:05:4a:8b:15:b2:b7: 03:85:fd:4e:c9:aa:43:7a:14:3d:e3:9b:53:e9:f2:40:16:e7: af:e7:45:6e:ca:21:94:c8:e2:97:4a:89:56:cd:90:ef:36:99: 86:80:e8:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDUxMTAvBgNVBAUTKDRDN0RBQzIxMjAzREFFNDE2QzFGQ0VFQUZDNTU2NTcy MDIyMjA4QTEwHhcNMjUwNTA5MDMxMTE1WhcNMjUwNTE2MDMxMTE1WjAYMRYwFAYD VQQDEw02ODFkNzI1My0wYzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5cP/n3tNlKmFe6Gj7o0RdFcnzvfTUHfQbKuDKGgO8SMwyX82ntl5LRsRDvc 2PGgcC1MhlxPT3KZOYZPBNgtjU4G0sKuosoeB6OAmhjbP3eoZd5Pmrt8nIlqvTZ/ fYzq/XVS9GyTp+h/Q6E3sQwLfYjlAlezIVRW0A9KgDsN5j3vTnSR2KHLE4iLvKrk HRE1u6tzYu+7p07pnpBm8r2eqj4EIDk93h0c1YMYwkYV2OkR8wFF1N5LLzLsGzEG rztkwOGM+rE+1etJtE2Gyi6bhj6cDYVfnHJ0mh+bKn9KNonXVMitDewPPRgAGFx3 MJtAcdMQXqFX9Dy+5eZbdWqVUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYM/qhC DZk2d8m1uOkG4nQH7cr5MB8GA1UdIwQYMBaAFEx9rCEgPa5BbB/O6vxVZXICIgih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENENS9DRDJCNEI0NDFE MEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJrRnNIODdxX0ZWbGNnSWlD S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIMnNJU0E5cmtGc0g4N3FfRlZsY2dJaUNLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENENS9DRDJCNEI0NDFEMEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJr RnNIODdxX0ZWbGNnSWlDS0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAixh9ExAZihpwj7Q3AZBWqY2a5iqVusUG7jthSktreNVdXZ5qsmBbm KC9V6FWgPwbAAjxeFD+yY5dNe7b6lC4kvohS0ROPpiBrMRDKTxFIibyLYKHMkZru UBVNLpBHbFBQ8AdtxTg7Wq8OZT/V7gbxas3ip3rwjbKmKQEsw0vvAdewzHh/5BXp lGOVGgxZSE/nKIwsyVaJMDlxAuAZHWsrlc5a1kspHtTBHWNGKVxnNJTvWuEqUnMQ Cmu+y42cmnXBp00UWQXQcHX+2nA7RQVSuAUFSosVsrcDhf1OyapDehQ945tT6fJA Fuev50VuyiGUyOKXSolWzZDvNpmGgOju -----END CERTIFICATE-----Generated at Sat May 10 16:43:27 2025 by rpki-client