$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: Ekw1t9ytQ9DG/vasszXhy42QGJXPb+DPAQZY7ommXmw= Subject key identifier: D8:88:FD:16:83:6C:AB:DA:AA:A4:41:86:DD:8D:52:45:75:FA:2E:1A Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 2752 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 26DB Signing time: Fri 30 May 2025 15:50:58 +0000 Manifest this update: Fri 30 May 2025 15:50:58 +0000 Manifest next update: Fri 06 Jun 2025 15:50:58 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: xV7TYabLd8STcRMmA3L3Insm7RB/tMGkK+D4aIV7b5M=) 2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=) 3: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=) 4: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=) 5: AD5A136A39E511F0AC386379C4F9AE02.roa (hash: RIcJzU/Ujywx/n2sjAzr0iwZDSz+JUE9CPr4nQgwl+I=) 6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=) 7: 212731C43CCA11F0A91F726FC4F9AE02.roa (hash: S0oxFF4ruRQeBiqtk5NJOn7nkp9kMBgX1aEIBo3hyO4=) 8: F20038CA44A311E9AEF6F25AC4F9AE02.roa (hash: MUajR7g1HWRk7TjqytjGarvqB9UPjBTaktOnykewwyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10066 (0x2752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: May 30 15:50:58 2025 GMT Not After : Jun 6 15:50:58 2025 GMT Subject: CN=6839d3e2-04b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5d:fd:3d:84:0a:d0:f3:90:06:21:fe:29:df: 46:50:5d:5e:59:57:46:68:45:2e:f8:03:9a:d7:16: f1:0f:c0:86:03:ae:3e:b1:f1:0c:66:c1:f8:3f:f3: 1a:41:83:bb:89:19:6c:40:ba:d5:81:48:3f:53:77: 90:07:c2:4d:14:4a:87:7a:a3:78:43:c1:f5:0c:1f: 55:16:60:e4:2a:c4:4d:56:7f:90:ef:21:69:20:3b: 9e:3f:62:84:bc:a5:de:e5:1c:be:b0:fd:ca:09:4c: dd:da:d2:4e:9f:45:2f:c1:a4:8b:21:ab:3d:04:07: 3b:02:88:ca:66:50:7a:f8:5e:d3:80:cf:40:24:36: dd:76:0f:4c:64:ee:8c:33:6f:08:c8:d4:3b:0e:a6: 75:02:83:61:32:0e:9c:92:b8:f2:cc:24:da:a6:b0: 60:98:1f:92:96:43:ca:20:7f:d6:f1:6a:18:b4:37: c7:a4:75:b7:e8:44:16:dd:ea:48:f8:b0:a4:e4:5d: e0:bc:79:4c:5c:32:20:f4:ca:50:3c:12:3a:78:17: cd:95:5c:1f:f3:7b:45:57:15:00:07:38:db:50:47: ee:e3:4e:1b:85:fa:d3:b7:a3:41:6d:c2:44:61:61: 29:ea:6e:11:ab:4c:8a:da:96:69:0e:56:1f:29:ca: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:FD:16:83:6C:AB:DA:AA:A4:41:86:DD:8D:52:45:75:FA:2E:1A X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b5:52:6c:bf:8e:4e:bd:c0:e5:1e:ca:77:5e:0f:9a:fa:25: 59:4a:d6:75:06:33:ca:54:3d:ff:2a:67:e0:9d:43:28:bb:a7: 4e:9a:63:77:85:fc:b0:c9:67:6c:41:03:8f:9c:81:89:b7:9c: dd:6e:09:17:14:29:5f:8e:17:bb:d1:f7:17:1f:c3:33:22:4e: 97:2b:3a:16:80:b2:ae:7f:0b:d3:9d:6a:72:f0:26:fd:ca:ab: 8d:36:c1:76:50:88:7e:ef:78:a1:29:76:5b:d1:e6:1e:7d:74: cd:32:93:57:5b:c4:f1:ca:b0:e5:91:b9:fd:7f:89:7d:c0:07: a0:df:84:a8:45:a6:3c:0e:1d:e8:b7:0c:71:b8:a0:eb:e5:3e: a5:ec:d5:4a:36:46:81:cc:80:24:7c:27:6f:33:92:56:fc:83: 57:11:88:6a:38:5a:23:f9:ae:03:68:56:ac:f8:b5:b4:2e:2f: 60:11:e0:f7:26:98:06:3a:67:e7:91:b1:6f:2e:90:85:f2:38: 29:56:e9:87:19:36:ea:ed:e1:70:89:93:38:f7:a0:e4:7c:fd: ce:e2:ec:93:7b:90:b2:55:f9:9a:f2:31:b1:4f:40:ff:0e:61: c2:5d:de:88:7a:1d:a2:66:9f:0d:fd:6b:8f:dd:76:ab:53:52: 23:84:65:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUwNTMwMTU1MDU4WhcNMjUwNjA2MTU1MDU4WjAYMRYwFAYD VQQDEw02ODM5ZDNlMi0wNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsl39PYQK0POQBiH+Kd9GUF1eWVdGaEUu+AOa1xbxD8CGA64+sfEMZsH4P/Ma QYO7iRlsQLrVgUg/U3eQB8JNFEqHeqN4Q8H1DB9VFmDkKsRNVn+Q7yFpIDueP2KE vKXe5Ry+sP3KCUzd2tJOn0UvwaSLIas9BAc7AojKZlB6+F7TgM9AJDbddg9MZO6M M28IyNQ7DqZ1AoNhMg6ckrjyzCTaprBgmB+SlkPKIH/W8WoYtDfHpHW36EQW3epI +LCk5F3gvHlMXDIg9MpQPBI6eBfNlVwf83tFVxUABzjbUEfu404bhfrTt6NBbcJE YWEp6m4Rq0yK2pZpDlYfKcpb2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiI/RaD bKvaqqRBht2NUkV1+i4aMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGtVJsv45OvcDlHsp3Xg+a+iVZStZ1BjPKVD3/KmfgnUMou6dOmmN3 hfywyWdsQQOPnIGJt5zdbgkXFClfjhe70fcXH8MzIk6XKzoWgLKufwvTnWpy8Cb9 yquNNsF2UIh+73ihKXZb0eYefXTNMpNXW8TxyrDlkbn9f4l9wAeg34SoRaY8Dh3o twxxuKDr5T6l7NVKNkaBzIAkfCdvM5JW/INXEYhqOFoj+a4DaFas+LW0Li9gEeD3 JpgGOmfnkbFvLpCF8jgpVumHGTbq7eFwiZM496DkfP3O4uyTe5CyVfma8jGxT0D/ DmHCXd6Ieh2iZp8N/WuP3XarU1IjhGUj -----END CERTIFICATE-----Generated at Sat May 31 16:37:58 2025 by rpki-client