$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: Hy+I1fRw8FX0oVJPiVdL8YTQfJi6IReQBPQ6rq1a9vM= Subject key identifier: 0A:BE:04:62:6F:94:70:B4:88:37:3D:18:5E:81:F0:76:F4:6B:CD:F3 Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 2775 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 26FD Signing time: Tue 22 Jul 2025 15:46:25 +0000 Manifest this update: Tue 22 Jul 2025 15:46:25 +0000 Manifest next update: Tue 29 Jul 2025 15:46:25 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: J3guCXuwDDtkzjHpCBNGecqozwzBQoWTK/Oezlpqf2Q=) 2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=) 3: A225B08645C411F0BF201021C4F9AE02.roa (hash: IvX8ILiXhHWFM5uyZnAUJPESwgV0Xv5NKCdd1JDWi+U=) 4: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=) 5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=) 6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 15:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10101 (0x2775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Jul 22 15:46:25 2025 GMT Not After : Jul 29 15:46:25 2025 GMT Subject: CN=687fb251-d161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ad:39:b4:5b:8c:5f:3d:31:7f:64:df:cc:ed: 0a:79:75:36:c1:e6:b3:d0:52:bf:ff:06:9f:b2:46: c2:60:59:e2:eb:3d:be:eb:1d:36:68:16:47:0a:22: 25:74:9f:c6:b1:69:78:28:0d:f4:c9:44:76:02:21: 6c:e9:09:f8:4e:cb:36:ef:f7:cf:dc:02:e8:8f:1d: 90:87:7d:4b:0b:3b:ab:e0:45:96:45:bf:84:67:16: 41:e7:f0:9b:5d:90:0b:d9:f1:bd:0b:bf:51:53:39: 4b:71:66:5e:2b:f2:26:9a:32:4c:55:01:a4:92:7c: b5:13:2d:36:0d:30:7c:ff:9e:e7:4e:8f:18:1d:fb: 76:3b:53:09:37:84:7f:55:19:17:c3:ca:f3:3f:26: a0:c8:9e:f9:a6:fb:d2:64:f5:42:79:1c:7f:7b:c4: ea:89:49:ed:d4:2f:82:06:b0:fe:55:2b:dd:76:34: 7e:73:35:21:3a:4f:c7:f7:0c:8c:36:1d:33:35:ff: 56:e8:f0:8c:cc:07:f9:0c:27:f6:31:57:20:65:65: 90:ab:8f:53:cb:92:49:0e:7f:7d:84:38:0c:86:a2: 65:1a:f2:3e:e5:22:2e:7c:23:1d:52:da:61:cc:5b: e9:f3:ea:19:1f:48:9a:56:18:c2:21:25:ea:d8:a9: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BE:04:62:6F:94:70:B4:88:37:3D:18:5E:81:F0:76:F4:6B:CD:F3 X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b3:f7:ff:3f:07:8b:e5:54:7d:e6:0d:df:49:79:32:9a:cf: d3:8b:48:98:e5:ca:50:89:eb:bc:94:e4:65:21:08:f0:9f:80: 99:73:8c:52:ed:13:ad:ee:c5:3a:42:99:35:8b:1a:e8:66:70: 67:0c:29:49:92:5f:c8:49:05:67:33:f6:d7:18:1d:3b:1c:b1: 25:9e:2c:3f:ae:ec:bb:d7:d5:6f:c1:84:33:77:79:13:14:5c: b3:ef:06:34:3c:02:3d:a2:c4:29:5d:b7:dd:f7:44:d8:e5:65: db:e0:04:2d:e2:96:99:1e:3e:9c:96:aa:75:8a:60:2c:ca:ed: f1:7f:27:72:73:5e:ef:9b:f3:84:92:5a:08:5d:35:1d:15:94: 60:dd:0f:06:5b:7f:92:11:22:ac:ee:b2:ec:11:79:4f:51:6f: 3a:73:7f:24:86:b7:34:bb:ca:c0:db:77:2f:7e:25:8a:55:44: bf:0d:9d:19:97:40:aa:41:f6:78:b9:27:c2:86:b6:e2:a9:7c: 83:1c:ce:cc:dc:75:4e:e1:92:78:5d:6c:61:86:67:29:3b:36: 50:33:7e:89:a9:11:b5:bc:0e:db:48:11:6f:81:e6:e9:9f:7b: 24:32:1c:0e:22:ff:81:dc:07:7d:bc:89:f0:25:01:60:09:62: 61:44:04:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUwNzIyMTU0NjI1WhcNMjUwNzI5MTU0NjI1WjAYMRYwFAYD VQQDEw02ODdmYjI1MS1kMTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+605tFuMXz0xf2TfzO0KeXU2weaz0FK//wafskbCYFni6z2+6x02aBZHCiIl dJ/GsWl4KA30yUR2AiFs6Qn4Tss27/fP3ALojx2Qh31LCzur4EWWRb+EZxZB5/Cb XZAL2fG9C79RUzlLcWZeK/ImmjJMVQGkkny1Ey02DTB8/57nTo8YHft2O1MJN4R/ VRkXw8rzPyagyJ75pvvSZPVCeRx/e8TqiUnt1C+CBrD+VSvddjR+czUhOk/H9wyM Nh0zNf9W6PCMzAf5DCf2MVcgZWWQq49Ty5JJDn99hDgMhqJlGvI+5SIufCMdUtph zFvp8+oZH0iaVhjCISXq2KnnvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAq+BGJv lHC0iDc9GF6B8Hb0a83zMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASs/f/PweL5VR95g3fSXkyms/Ti0iY5cpQieu8lORlIQjwn4CZc4xS 7ROt7sU6Qpk1ixroZnBnDClJkl/ISQVnM/bXGB07HLElniw/ruy719VvwYQzd3kT FFyz7wY0PAI9osQpXbfd90TY5WXb4AQt4paZHj6clqp1imAsyu3xfydyc17vm/OE kloIXTUdFZRg3Q8GW3+SESKs7rLsEXlPUW86c38khrc0u8rA23cvfiWKVUS/DZ0Z l0CqQfZ4uSfChrbiqXyDHM7M3HVO4ZJ4XWxhhmcpOzZQM36JqRG1vA7bSBFvgebp n3skMhwOIv+B3Ad9vInwJQFgCWJhRARC -----END CERTIFICATE-----Generated at Wed Jul 23 12:15:59 2025 by rpki-client