$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: aHIzMKBS5Zusq6BKVCWC2ixWhuU3BOVQKpwIzo+qjpI= Subject key identifier: 19:17:EA:41:79:95:EC:94:B9:7C:52:33:4D:F4:8D:AF:2C:3C:3E:D5 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1F71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1F49 Signing time: Sun 20 Jul 2025 16:02:22 +0000 Manifest this update: Sun 20 Jul 2025 16:02:21 +0000 Manifest next update: Sun 27 Jul 2025 16:02:21 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: 1ntb3Z6rPH2tt5z+eMOXEn4UzarWdAIXz2Ij4YSfwVc=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: XynjUTKTYazCZAgnFarsz0z7XLq0CMLJDFwXu2DvFy0=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dDmsnYnpk7eYJRQjeaKR7lmvE3DrcRr0DYnI4h6EWFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8049 (0x1f71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Jul 20 16:02:21 2025 GMT Not After : Jul 27 16:02:21 2025 GMT Subject: CN=687d130d-8d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:5d:43:f3:e0:84:91:62:db:26:0e:c2:9c: 95:ca:be:e5:ba:cf:cc:08:bf:76:c9:7b:51:e8:48: a2:c7:a7:00:da:d6:b0:2c:1e:00:ba:0b:be:ab:33: 06:42:a5:31:2f:52:88:37:fc:28:7a:dd:13:54:14: 7d:bc:67:16:7c:0a:ea:72:2c:7e:ea:0e:bf:a3:cb: b9:76:7a:cc:d0:08:05:09:8f:f3:82:44:3a:bb:6a: 97:90:4f:87:4e:dd:b8:18:04:13:41:18:1e:73:dd: ad:6f:33:d4:12:ba:a0:04:a1:ee:c4:3a:3a:cc:d0: 93:e7:e1:9a:2b:77:77:64:35:77:38:3b:40:ad:c1: 0f:08:fb:26:1c:ee:51:1a:e5:97:cf:af:b9:e0:51: 90:24:9f:dc:99:6a:a8:ee:af:df:60:b8:f8:66:ea: 03:60:11:e7:78:52:f6:ac:63:dc:51:54:1f:44:0e: 52:76:fb:2b:75:52:63:2e:51:b7:78:4d:e1:a1:fe: 32:95:34:2e:dc:30:7f:f5:31:ae:d1:a9:c6:20:74: 77:06:53:50:fc:d4:42:8b:a7:fe:24:a2:25:0e:0e: b8:0a:c5:4d:b3:38:2f:07:f1:c7:d0:9d:7a:9c:e4: 92:52:cd:c7:cd:d0:98:d2:27:90:1f:f9:e5:d3:0d: dd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:17:EA:41:79:95:EC:94:B9:7C:52:33:4D:F4:8D:AF:2C:3C:3E:D5 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4d:3b:cd:91:ca:00:e6:eb:23:3f:ae:59:a8:2b:03:ec:13: 03:cd:91:a2:f4:66:3b:79:92:a0:28:06:67:f7:6b:b6:52:fd: ec:c8:ee:4f:69:1c:f3:58:6f:d3:55:5d:52:7b:bc:06:3d:d3: 5f:86:13:a5:0e:17:68:e5:0f:33:9e:24:36:8e:a9:ad:24:68: ca:44:58:b3:42:4f:fc:3b:58:e1:9a:36:c4:ed:f0:ff:96:c0: 3b:7f:cc:8b:94:a2:c2:ad:4b:12:64:7f:70:e5:1a:3d:32:07: ba:b3:bc:6f:1c:a4:29:7b:6d:07:f0:6d:e9:08:bf:04:eb:e8: 2e:21:46:55:cc:28:15:6e:bc:17:aa:23:79:14:a9:93:68:f6: bc:30:32:40:10:f1:65:2c:9f:64:d8:22:0c:72:ee:fc:9c:6e: 08:ff:07:e1:6c:28:ca:95:3b:62:28:55:61:04:ad:32:a6:ba: 54:a1:f7:01:c3:98:5b:62:47:52:bb:b2:5e:e7:e3:ad:a2:e6: d2:72:0e:41:08:1e:ad:32:da:dd:aa:e0:ba:90:d3:62:e7:65: 6c:c6:3b:12:10:f4:02:0b:62:cf:53:ee:8c:92:04:c0:52:07: 27:8e:b2:c0:96:60:bf:d0:b3:3c:38:17:cf:ee:4f:5b:24:9b: 5d:5c:45:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUwNzIwMTYwMjIxWhcNMjUwNzI3MTYwMjIxWjAYMRYwFAYD VQQDEw02ODdkMTMwZC04ZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+5dQ/PghJFi2yYOwpyVyr7lus/MCL92yXtR6Eiix6cA2tawLB4Augu+qzMG QqUxL1KIN/woet0TVBR9vGcWfArqcix+6g6/o8u5dnrM0AgFCY/zgkQ6u2qXkE+H Tt24GAQTQRgec92tbzPUErqgBKHuxDo6zNCT5+GaK3d3ZDV3ODtArcEPCPsmHO5R GuWXz6+54FGQJJ/cmWqo7q/fYLj4ZuoDYBHneFL2rGPcUVQfRA5SdvsrdVJjLlG3 eE3hof4ylTQu3DB/9TGu0anGIHR3BlNQ/NRCi6f+JKIlDg64CsVNszgvB/HH0J16 nOSSUs3HzdCY0ieQH/nl0w3dsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkX6kF5 leyUuXxSM030ja8sPD7VMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfTTvNkcoA5usjP65ZqCsD7BMDzZGi9GY7eZKgKAZn92u2Uv3syO5P aRzzWG/TVV1Se7wGPdNfhhOlDhdo5Q8zniQ2jqmtJGjKRFizQk/8O1jhmjbE7fD/ lsA7f8yLlKLCrUsSZH9w5Ro9Mge6s7xvHKQpe20H8G3pCL8E6+guIUZVzCgVbrwX qiN5FKmTaPa8MDJAEPFlLJ9k2CIMcu78nG4I/wfhbCjKlTtiKFVhBK0yprpUofcB w5hbYkdSu7Je5+OtoubScg5BCB6tMtrdquC6kNNi52VsxjsSEPQCC2LPU+6MkgTA UgcnjrLAlmC/0LM8OBfP7k9bJJtdXEWy -----END CERTIFICATE-----Generated at Mon Jul 21 07:29:28 2025 by rpki-client