$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: mW3cEoOaUxxVmyD+pQo4aJatAHffcGg6v/+U8sfjOeo= Subject key identifier: AE:A3:CC:11:EE:B7:35:E6:54:6C:9F:BF:3A:16:CA:B2:BE:98:5C:43 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1F3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1F14 Signing time: Thu 10 Apr 2025 16:03:28 +0000 Manifest this update: Thu 10 Apr 2025 16:03:27 +0000 Manifest next update: Thu 17 Apr 2025 16:03:27 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: ldcxiWPBuhxYXCi2w7cEJXiJjZi3Ek5JxrQWa9BcszA=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: RIwHYJzTiAWJxrJm6ZlI9pwCw54A8DHzjwyPnvWV7go=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dCOIN/2nmGcz+3ww4TNjjrCMZCl/2EWyMlSqG1WrmiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 16:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7994 (0x1f3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Apr 10 16:03:27 2025 GMT Not After : Apr 17 16:03:27 2025 GMT Subject: CN=67f7ebd0-aa3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:64:8d:5a:c3:00:e2:f2:fe:2d:59:fb:c1: 7b:40:c5:7f:63:34:48:d8:11:fe:0a:0a:47:b3:4f: 0c:35:b9:6e:36:6a:de:60:19:55:3e:33:c1:d0:ce: b4:77:84:0e:48:73:85:2c:b1:e4:8f:87:56:92:e8: db:5f:87:f7:ea:36:b0:1b:dd:7b:3c:a0:57:3e:0a: 6e:63:d1:b7:5e:7c:bb:dc:88:5d:60:7d:a8:87:e5: 40:c3:c3:ab:1d:9c:b9:ac:a7:6a:89:bd:cc:d6:4c: 34:e7:26:bb:50:62:0b:53:fc:dc:3b:15:3e:9a:70: c7:bd:b3:25:fe:ea:63:ff:2a:51:65:73:80:62:39: c7:b4:be:2e:05:f0:94:02:5c:2b:ef:5f:33:62:85: a2:de:d4:07:58:0f:83:1b:72:87:07:d8:5f:0f:8a: 48:75:9e:b6:70:bc:e6:85:43:70:ea:ed:ee:e1:1f: 3f:c7:1d:00:88:b1:71:9e:2b:d4:79:86:eb:27:4c: f1:cf:0f:eb:78:83:1a:db:9e:5f:0a:40:1e:7f:64: ca:ba:2c:63:65:41:1b:a0:13:83:b8:d5:72:d5:dc: 8c:c8:57:2c:27:e2:0e:fc:22:b1:36:ed:13:f9:cc: f5:a3:4e:2e:eb:5c:73:bd:4d:0a:53:a2:de:17:69: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A3:CC:11:EE:B7:35:E6:54:6C:9F:BF:3A:16:CA:B2:BE:98:5C:43 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:03:0f:62:d1:b8:b5:5e:f0:34:7e:1a:b5:74:92:37:18:91: f0:fe:9c:42:4f:67:9c:d8:3f:26:60:24:9a:15:f4:d9:bb:34: 8f:8d:6b:8a:80:bf:01:ea:b0:ad:9e:39:47:33:2f:d1:a2:e2: ab:0c:5d:e0:b8:3c:5d:e3:48:18:a5:a6:5a:e5:26:a1:e7:b5: 79:07:a6:72:c3:b2:a3:62:ba:12:c5:fd:ce:c7:92:0f:ce:5e: e6:b1:bb:66:0f:26:ed:99:55:18:6c:ec:65:d7:0f:4c:66:f5: 1d:74:38:64:9c:b0:d0:44:6d:75:35:59:f9:47:48:08:66:48: d8:1f:73:6a:6c:19:6b:f4:4d:98:01:2b:84:01:4b:a3:b5:15: 8e:f8:0c:2f:f9:30:d0:6b:96:e6:4c:20:8d:79:c8:78:4a:19: 5d:62:4b:2d:c9:c3:33:e5:47:c6:0c:25:ba:28:1f:f0:fa:48: 69:a6:3d:15:1a:95:e5:a7:50:a5:98:ce:f9:f8:66:02:cf:37: 07:ab:54:8a:99:f8:67:b7:e7:04:34:74:ae:89:f6:c8:de:e6: 4a:85:f1:49:a2:34:8f:f1:de:6f:98:e7:bd:ed:0a:af:ee:d6: 15:4b:18:c1:d2:c1:05:da:a6:59:b6:6e:f5:8e:07:c2:69:85: c0:59:8e:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUwNDEwMTYwMzI3WhcNMjUwNDE3MTYwMzI3WjAYMRYwFAYD VQQDEw02N2Y3ZWJkMC1hYTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunVkjVrDAOLy/i1Z+8F7QMV/YzRI2BH+CgpHs08MNbluNmreYBlVPjPB0M60 d4QOSHOFLLHkj4dWkujbX4f36jawG917PKBXPgpuY9G3Xny73IhdYH2oh+VAw8Or HZy5rKdqib3M1kw05ya7UGILU/zcOxU+mnDHvbMl/upj/ypRZXOAYjnHtL4uBfCU Alwr718zYoWi3tQHWA+DG3KHB9hfD4pIdZ62cLzmhUNw6u3u4R8/xx0AiLFxnivU eYbrJ0zxzw/reIMa255fCkAef2TKuixjZUEboBODuNVy1dyMyFcsJ+IO/CKxNu0T +cz1o04u61xzvU0KU6LeF2kHiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6jzBHu tzXmVGyfvzoWyrK+mFxDMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGAw9i0bi1XvA0fhq1dJI3GJHw/pxCT2ec2D8mYCSaFfTZuzSPjWuK gL8B6rCtnjlHMy/RouKrDF3guDxd40gYpaZa5Sah57V5B6Zyw7KjYroSxf3Ox5IP zl7msbtmDybtmVUYbOxl1w9MZvUddDhknLDQRG11NVn5R0gIZkjYH3NqbBlr9E2Y ASuEAUujtRWO+Awv+TDQa5bmTCCNech4ShldYkstycMz5UfGDCW6KB/w+khppj0V GpXlp1ClmM75+GYCzzcHq1SKmfhnt+cENHSuifbI3uZKhfFJojSP8d5vmOe97Qqv 7tYVSxjB0sEF2qZZtm71jgfCaYXAWY43 -----END CERTIFICATE-----Generated at Sat Apr 12 16:20:02 2025 by rpki-client