$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft File: TH2sISA9rkFsH87q_FVlcgIiCKE.mft (raw, json) Hash identifier: QRWYt5iHjF1kO2NkbgkmK3aYSeD0128Flywpj5adgpM= Subject key identifier: 3F:C1:CA:73:BC:B0:8A:5F:3F:A9:82:88:B5:B2:1D:B0:74:48:48:7D Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 Certificate issuer: /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft Manifest number: 017F Signing time: Tue 01 Jul 2025 04:12:56 +0000 Manifest this update: Tue 01 Jul 2025 04:12:56 +0000 Manifest next update: Tue 08 Jul 2025 04:12:56 +0000 Files and hashes: 1: TH2sISA9rkFsH87q_FVlcgIiCKE.crl (hash: dhWk3s51lvlln9jPGk3OxvOQVzyzrYmS2f4iJtS9Gac=) 2: 6EB972341D6011EEB28A4323C4F9AE02.roa (hash: bQCg19K5xN+p4d0M6W+H8xOlCOrAN5+b0tebovRRHFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Validity Not Before: Jul 1 04:12:56 2025 GMT Not After : Jul 8 04:12:56 2025 GMT Subject: CN=68636048-6092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bc:56:85:74:3a:43:c7:03:be:13:8b:a5:8d: d9:d0:b6:99:7b:5c:23:58:57:77:88:65:4c:5b:1e: 19:09:0a:0b:fe:22:87:98:f8:9c:81:8a:8b:36:8b: 45:dc:d9:e8:91:d0:14:15:31:b9:f8:d1:75:07:21: 4b:f4:13:e1:55:e5:91:a8:dd:73:a4:c4:a0:4b:bc: 85:59:5b:df:09:e9:5a:e6:72:57:42:e4:aa:e8:e3: 17:aa:39:a9:d1:e3:e4:13:0e:25:e5:e9:2a:b0:a9: 5a:7e:77:12:f2:bb:31:7c:aa:07:8e:9a:b1:51:9a: db:b5:c2:03:44:46:de:d0:3d:02:d0:23:d3:d1:a7: 87:e7:b2:35:73:c5:de:48:9a:df:78:6a:f6:d0:7e: 1c:f0:4e:33:92:85:aa:d9:58:00:9d:2b:0a:b6:b0: 90:02:b8:da:62:a1:3e:28:7c:9e:9a:c4:1c:20:80: 45:b1:6d:91:19:87:b4:86:a6:b6:69:c0:f4:8c:59: e5:e5:04:5e:a7:22:d9:ab:ed:4d:4b:c1:38:2f:69: 20:34:11:aa:b4:47:c0:12:74:1a:2d:53:d0:d0:0d: e4:6e:8b:a5:7c:92:be:c2:34:a0:85:d6:25:3d:ba: 58:cd:61:23:26:b8:ec:d7:cb:da:c9:f6:a2:df:a0: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C1:CA:73:BC:B0:8A:5F:3F:A9:82:88:B5:B2:1D:B0:74:48:48:7D X509v3 Authority Key Identifier: keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:38:8e:0e:d6:ec:0e:b3:c0:37:16:1c:0b:27:c1:bb:41:88: 57:33:a2:23:81:e3:e6:6d:53:1d:6e:f6:55:9b:c4:d3:c0:d4: 05:fc:93:6a:d9:79:0c:f5:ef:4b:33:01:83:f1:08:9a:71:b0: a6:68:ba:c6:5a:d4:03:10:41:f5:f7:39:86:33:c0:b9:80:10: 70:fe:a9:7b:10:24:49:e8:da:d7:02:8d:9e:5f:31:9e:a0:06: 76:29:c0:8e:77:f8:ed:27:42:43:a8:94:01:c0:86:a6:c1:96: 7e:00:e6:44:2e:5f:06:8d:e0:e4:f8:36:e2:cb:3c:bc:73:e5: 14:fe:0d:ad:0b:ed:32:15:e0:8b:6b:52:7b:eb:65:0a:ea:13: 0c:bc:5c:d9:c4:9d:29:74:45:8c:4b:40:6f:e5:69:92:57:83: 4e:72:63:41:af:e8:1a:c5:f1:8c:4d:76:69:1d:8d:a0:71:5b: 83:a0:6d:4f:94:e2:32:ca:da:3d:8f:cc:21:ea:58:40:6c:2b: 4d:b9:f9:6b:fc:e0:cc:e7:9a:83:16:e5:a7:90:27:50:bf:93: d3:82:c2:f0:ac:84:02:1f:70:b2:67:e5:90:e5:ac:91:e7:b3: 02:d5:c4:53:fb:88:e3:2b:d4:87:8b:6f:b6:ff:5b:a0:de:f7: fc:7e:df:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDUxMTAvBgNVBAUTKDRDN0RBQzIxMjAzREFFNDE2QzFGQ0VFQUZDNTU2NTcy MDIyMjA4QTEwHhcNMjUwNzAxMDQxMjU2WhcNMjUwNzA4MDQxMjU2WjAYMRYwFAYD VQQDEw02ODYzNjA0OC02MDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rxWhXQ6Q8cDvhOLpY3Z0LaZe1wjWFd3iGVMWx4ZCQoL/iKHmPicgYqLNotF 3NnokdAUFTG5+NF1ByFL9BPhVeWRqN1zpMSgS7yFWVvfCela5nJXQuSq6OMXqjmp 0ePkEw4l5ekqsKlafncS8rsxfKoHjpqxUZrbtcIDREbe0D0C0CPT0aeH57I1c8Xe SJrfeGr20H4c8E4zkoWq2VgAnSsKtrCQArjaYqE+KHyemsQcIIBFsW2RGYe0hqa2 acD0jFnl5QRepyLZq+1NS8E4L2kgNBGqtEfAEnQaLVPQ0A3kboulfJK+wjSghdYl PbpYzWEjJrjs18vayfai36B5RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/BynO8 sIpfP6mCiLWyHbB0SEh9MB8GA1UdIwQYMBaAFEx9rCEgPa5BbB/O6vxVZXICIgih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENENS9DRDJCNEI0NDFE MEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJrRnNIODdxX0ZWbGNnSWlD S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIMnNJU0E5cmtGc0g4N3FfRlZsY2dJaUNLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENENS9DRDJCNEI0NDFEMEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJr RnNIODdxX0ZWbGNnSWlDS0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1OI4O1uwOs8A3FhwLJ8G7QYhXM6IjgePmbVMdbvZVm8TTwNQF/JNq 2XkM9e9LMwGD8QiacbCmaLrGWtQDEEH19zmGM8C5gBBw/ql7ECRJ6NrXAo2eXzGe oAZ2KcCOd/jtJ0JDqJQBwIamwZZ+AOZELl8GjeDk+Dbiyzy8c+UU/g2tC+0yFeCL a1J762UK6hMMvFzZxJ0pdEWMS0Bv5WmSV4NOcmNBr+gaxfGMTXZpHY2gcVuDoG1P lOIyyto9j8wh6lhAbCtNuflr/ODM55qDFuWnkCdQv5PTgsLwrIQCH3CyZ+WQ5ayR 57MC1cRT+4jjK9SHi2+2/1ug3vf8ft/j -----END CERTIFICATE-----Generated at Tue Jul 1 19:37:56 2025 by rpki-client