$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: YyIR6tNNCK6w5rKCcI2HSoQEHdMXzFw09RPV0cAq8/A= Subject key identifier: 39:FE:24:EA:BA:9C:FC:AF:1D:E0:12:DC:D4:6E:84:B1:1E:A6:73:17 Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 278E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 2716 Signing time: Mon 08 Sep 2025 15:40:27 +0000 Manifest this update: Mon 08 Sep 2025 15:40:26 +0000 Manifest next update: Mon 15 Sep 2025 15:40:26 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: bosLzN9C/C1lvNlVZdxOj+9Ybcs3qtDeqN1g5/XC56M=) 2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=) 3: A225B08645C411F0BF201021C4F9AE02.roa (hash: IvX8ILiXhHWFM5uyZnAUJPESwgV0Xv5NKCdd1JDWi+U=) 4: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=) 5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=) 6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 15:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10126 (0x278e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Sep 8 15:40:26 2025 GMT Not After : Sep 15 15:40:26 2025 GMT Subject: CN=68bef8eb-a3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:df:f2:90:00:5b:ac:09:f9:a8:79:88:6a: 52:c2:0e:89:ad:2e:f7:e5:47:61:07:22:8f:f6:36: a8:57:e0:94:63:5c:a5:3d:48:7a:6a:fd:1a:26:9a: ff:eb:3a:b4:8c:c3:43:25:4e:ce:76:43:78:06:b6: 40:b3:b3:83:12:5c:e7:23:50:3f:c5:6e:d1:ce:39: 8d:f0:a6:56:10:e0:8c:0e:83:b9:47:73:c7:0e:da: 31:82:9c:79:5c:f1:5d:46:a0:d1:bc:92:96:d1:9f: e0:0f:78:06:ec:1c:96:81:b4:62:7c:cb:28:f4:ba: f2:ba:e5:d6:9f:f9:30:56:9c:ba:e9:a8:b7:93:c9: 18:74:bc:f0:8f:c5:1d:7f:3d:7d:6e:99:85:72:64: fd:75:e5:72:52:fa:1c:a7:6f:1b:c7:6d:04:15:ba: 91:23:5f:41:2a:77:6c:66:8e:aa:cc:00:11:84:7b: ba:e7:60:7b:fc:c8:25:a9:58:a9:bc:ac:0c:56:4b: ba:98:51:e4:dd:f0:82:21:c5:b2:a8:d0:26:58:3a: 1b:ac:18:de:cf:fe:b2:a3:7d:3e:3c:33:86:d5:6b: 24:7e:f7:3b:67:e2:52:33:27:a9:4d:20:d9:00:26: c8:7b:38:9a:ae:a2:3a:b8:b7:42:76:14:c7:b7:91: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FE:24:EA:BA:9C:FC:AF:1D:E0:12:DC:D4:6E:84:B1:1E:A6:73:17 X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f0:f8:7d:8f:27:69:fe:4e:bf:ce:0b:ff:82:a3:a1:9a:c9: 02:f1:68:fa:f8:9a:c2:38:0e:60:34:28:ac:14:dd:00:78:44: 30:07:76:55:f6:8d:fb:20:b8:7b:38:89:c5:90:b5:40:4b:4c: 97:75:e5:59:9f:57:db:1f:a6:f2:7d:92:1b:f8:5f:e9:c5:e4: 59:b3:fb:52:15:2d:15:15:26:1d:c3:32:0d:62:ef:f9:65:0b: ef:70:57:63:99:d9:89:3b:3d:f8:73:d4:3e:00:18:76:f3:e7: 7f:2b:1c:98:e4:04:6c:48:ac:59:1d:97:5b:ad:8c:f0:07:97: 58:7f:21:93:d5:17:3f:48:c7:66:a4:e5:cd:e8:59:00:be:ab: d7:b1:7e:ca:9a:05:ad:3e:01:74:53:1e:f2:b0:71:e6:81:be: 40:a0:4b:78:ea:ed:2e:64:11:1c:c9:b8:13:74:30:10:e4:66: 18:53:cc:80:45:8b:ab:8a:d8:90:f7:27:f0:30:89:44:f4:9d: 23:e0:48:9f:5a:9b:24:cb:2c:26:a3:f5:36:24:3a:aa:2a:83: 77:06:af:99:33:58:39:ec:b0:15:8f:d1:59:ae:5f:5e:b2:d8: 6a:1b:9d:db:99:36:e1:74:db:d3:9a:a0:8c:3e:16:77:90:14: 84:66:54:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUwOTA4MTU0MDI2WhcNMjUwOTE1MTU0MDI2WjAYMRYwFAYD VQQDEw02OGJlZjhlYi1hM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuE7f8pAAW6wJ+ah5iGpSwg6JrS735UdhByKP9jaoV+CUY1ylPUh6av0aJpr/ 6zq0jMNDJU7OdkN4BrZAs7ODElznI1A/xW7RzjmN8KZWEOCMDoO5R3PHDtoxgpx5 XPFdRqDRvJKW0Z/gD3gG7ByWgbRifMso9LryuuXWn/kwVpy66ai3k8kYdLzwj8Ud fz19bpmFcmT9deVyUvocp28bx20EFbqRI19BKndsZo6qzAARhHu652B7/MglqVip vKwMVku6mFHk3fCCIcWyqNAmWDobrBjez/6yo30+PDOG1Wskfvc7Z+JSMyepTSDZ ACbIeziarqI6uLdCdhTHt5FoaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn+JOq6 nPyvHeAS3NRuhLEepnMXMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt8Ph9jydp/k6/zgv/gqOhmskC8Wj6+JrCOA5gNCisFN0AeEQwB3ZV 9o37ILh7OInFkLVAS0yXdeVZn1fbH6byfZIb+F/pxeRZs/tSFS0VFSYdwzINYu/5 ZQvvcFdjmdmJOz34c9Q+ABh28+d/KxyY5ARsSKxZHZdbrYzwB5dYfyGT1Rc/SMdm pOXN6FkAvqvXsX7KmgWtPgF0Ux7ysHHmgb5AoEt46u0uZBEcybgTdDAQ5GYYU8yA RYuritiQ9yfwMIlE9J0j4EifWpskyywmo/U2JDqqKoN3Bq+ZM1g57LAVj9FZrl9e sthqG53bmTbhdNvTmqCMPhZ3kBSEZlT6 -----END CERTIFICATE-----Generated at Tue Sep 9 13:18:10 2025 by rpki-client