$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: V9jUqb6GWmLHP1sKVqLzqqcxSuec7rs1nQRFdOW1SVY= Subject key identifier: 9F:43:FC:07:EA:B9:41:D4:EC:90:3D:98:7A:39:7E:56:D8:69:9C:AC Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 01CF Signing time: Sat 05 Apr 2025 02:22:21 +0000 Manifest this update: Sat 05 Apr 2025 02:22:20 +0000 Manifest next update: Sat 12 Apr 2025 02:22:20 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: Kn+YJ06d+sl/jjfIDIzhbjE4T/8z6TZ3mgqM5pO4LAU=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: SpdJdr/6VGGqS7iqp8sOU+UWcnaMd8YGOWCMqOpdTjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2 Validity Not Before: Apr 5 02:22:20 2025 GMT Not After : Apr 12 02:22:20 2025 GMT Subject: CN=67f093dc-2c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:cd:cd:68:ff:55:9e:86:4a:6b:14:b5:8e:ca: 56:9a:40:ba:bd:ea:85:db:ca:21:e9:a0:ab:86:b8: ca:7f:79:b1:15:bb:ed:34:ac:83:19:de:5c:f3:a7: c5:9a:c9:7b:8b:41:d4:b5:e7:fc:73:97:b6:e1:0f: 3b:30:3c:35:c3:aa:19:16:95:ae:8b:25:b1:1f:e7: 35:12:d5:a2:a0:37:dd:7f:d0:61:1c:c3:ad:9f:05: 98:1e:dc:86:c8:58:ea:63:4f:c4:90:0d:15:79:13: f3:25:68:e3:c5:57:e9:a4:b5:a8:f1:9a:78:4a:74: 85:c0:fd:4e:ec:01:7d:01:09:cf:ed:ac:5e:ff:75: ad:1c:9f:b1:bb:81:17:98:d5:be:dc:5d:b8:dd:53: 2e:7e:3f:b9:a1:11:dc:0d:fa:8a:bb:e6:c0:5d:31: f4:47:ee:b9:ea:64:35:59:b2:3a:ca:30:bd:c8:ea: f9:4d:ac:a5:15:6e:e5:9c:e9:61:66:89:2f:79:98: 71:3b:0d:b0:c0:6f:b6:65:9f:50:89:d0:1e:46:3c: 19:44:88:38:38:fe:ee:8c:ef:75:2c:68:f6:5c:ad: d7:30:01:83:3e:30:25:09:18:7d:16:da:b7:13:df: 18:2a:8e:e7:77:5b:d7:a8:4e:f0:75:50:3f:b3:64: 2f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:43:FC:07:EA:B9:41:D4:EC:90:3D:98:7A:39:7E:56:D8:69:9C:AC X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:12:6c:60:78:ed:cb:b5:34:f7:27:39:41:c3:38:09:23:d0: d7:ea:f0:f5:6c:c6:fb:8a:d8:cf:6f:7f:3c:37:bd:ed:74:5d: 51:00:71:1c:3f:98:ff:08:f4:55:d8:6e:de:73:47:db:e3:9f: 4d:c1:cc:e5:dd:8d:be:ac:f2:a5:15:61:3c:f1:1f:94:24:d7: 96:62:14:30:fd:53:2a:f5:04:8e:fb:c8:34:68:2d:e9:47:0c: 53:93:a6:cf:1c:e7:45:b2:6a:4a:a3:66:47:30:5a:da:1c:e0: 20:ba:f8:f7:a4:8f:4d:a3:00:61:bb:48:55:98:11:38:39:99: a8:b5:bd:68:3f:b9:7f:33:57:15:3d:1d:c4:fe:bf:52:29:b3: e6:86:ab:aa:48:57:49:89:31:64:55:22:ab:2d:1e:96:2d:df: 96:4d:79:6f:ae:6e:e2:46:d7:ec:23:e1:cb:81:d4:76:85:df: 28:dc:34:22:14:dd:35:a1:55:a2:28:12:1e:55:82:5c:bd:11: bd:41:72:46:0c:d2:aa:a7:03:51:41:32:22:4d:b9:e0:98:9a: 83:a4:7b:91:50:5f:2b:2b:58:a6:19:47:7a:e4:28:62:47:6c: c3:1c:9c:a2:ff:25:ff:ff:ef:21:67:d4:94:43:72:b1:e0:9b: 68:fd:c0:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjUwNDA1MDIyMjIwWhcNMjUwNDEyMDIyMjIwWjAYMRYwFAYD VQQDEw02N2YwOTNkYy0yYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6M3NaP9VnoZKaxS1jspWmkC6veqF28oh6aCrhrjKf3mxFbvtNKyDGd5c86fF msl7i0HUtef8c5e24Q87MDw1w6oZFpWuiyWxH+c1EtWioDfdf9BhHMOtnwWYHtyG yFjqY0/EkA0VeRPzJWjjxVfppLWo8Zp4SnSFwP1O7AF9AQnP7axe/3WtHJ+xu4EX mNW+3F243VMufj+5oRHcDfqKu+bAXTH0R+656mQ1WbI6yjC9yOr5TaylFW7lnOlh ZokveZhxOw2wwG+2ZZ9QidAeRjwZRIg4OP7ujO91LGj2XK3XMAGDPjAlCRh9Ftq3 E98YKo7nd1vXqE7wdVA/s2QvfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9D/Afq uUHU7JA9mHo5flbYaZysMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfEmxgeO3LtTT3JzlBwzgJI9DX6vD1bMb7itjPb388N73tdF1RAHEc P5j/CPRV2G7ec0fb459Nwczl3Y2+rPKlFWE88R+UJNeWYhQw/VMq9QSO+8g0aC3p RwxTk6bPHOdFsmpKo2ZHMFraHOAguvj3pI9NowBhu0hVmBE4OZmotb1oP7l/M1cV PR3E/r9SKbPmhquqSFdJiTFkVSKrLR6WLd+WTXlvrm7iRtfsI+HLgdR2hd8o3DQi FN01oVWiKBIeVYJcvRG9QXJGDNKqpwNRQTIiTbngmJqDpHuRUF8rK1imGUd65Chi R2zDHJyi/yX//+8hZ9SUQ3Kx4Jto/cAP -----END CERTIFICATE-----Generated at Sun Apr 6 09:04:59 2025 by rpki-client