$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: GNAAChu/shDKRGv7Jljg9Fn+uU6VpokT1uvDZgczsDI= Subject key identifier: 8B:61:F3:34:76:A7:73:7E:AE:7C:AD:AF:01:E5:E0:BA:66:8E:69:81 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1FA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1F7F Signing time: Sun 02 Nov 2025 16:00:56 +0000 Manifest this update: Sun 02 Nov 2025 16:00:55 +0000 Manifest next update: Sun 09 Nov 2025 16:00:55 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: 0qVYUt38LJC/FSiZSjyY6gat0p2QgtxTkzCkE1mHaUM=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: XynjUTKTYazCZAgnFarsz0z7XLq0CMLJDFwXu2DvFy0=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dDmsnYnpk7eYJRQjeaKR7lmvE3DrcRr0DYnI4h6EWFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8103 (0x1fa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Nov 2 16:00:55 2025 GMT Not After : Nov 9 16:00:55 2025 GMT Subject: CN=69078037-c510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:09:1f:d6:db:19:0e:d4:78:72:78:e1:65: 18:d0:d3:da:7b:b2:36:83:6f:78:1d:84:70:9f:2a: 25:9c:72:32:92:ed:1a:ad:a3:6b:0f:ab:a8:ab:97: 45:6c:12:1d:be:36:b9:3e:e1:99:a8:ba:22:b7:83: b7:ab:03:18:97:29:d2:bd:37:72:66:06:67:f1:ec: 0f:c6:ce:36:32:2b:b8:61:88:be:01:7c:b1:83:ed: 12:89:20:99:8c:b9:d9:fe:10:cf:fe:01:cb:8a:a1: d3:1b:11:94:1b:3e:c3:ed:8a:da:4e:09:51:6f:53: 1c:d0:4e:21:04:6a:58:cb:d4:ba:96:9f:0b:74:e0: 74:32:58:42:e2:15:3e:7e:79:d1:5e:5e:6d:3d:4b: 35:0b:25:c7:4e:5e:55:07:a1:47:91:8a:5f:8c:5e: 3e:c8:18:87:60:8d:c7:f7:04:a5:b1:b8:aa:6e:37: e2:f4:23:34:76:f7:d7:2f:f4:2e:a0:f1:c4:ae:0b: 1a:c5:03:a1:f4:19:4d:96:f1:68:a4:25:4a:5e:e5: b4:d2:d6:ea:32:68:35:86:3a:74:b2:89:70:6e:70: d8:f3:0d:0f:7a:12:ad:7b:bd:98:df:b0:4c:88:09: 8c:9c:3f:e2:b6:05:fc:ff:a2:b1:d4:c2:d3:fa:0c: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:61:F3:34:76:A7:73:7E:AE:7C:AD:AF:01:E5:E0:BA:66:8E:69:81 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:24:7c:7e:aa:3c:76:41:15:bf:a2:66:28:c0:50:5b:f9:11: 67:24:f6:62:8a:51:64:e9:0a:30:45:75:ed:cc:72:fa:16:47: f4:14:ab:3c:31:84:1d:af:8b:fa:47:46:1a:e5:3e:97:36:1e: 72:36:77:3f:97:31:1e:d4:a1:45:4c:43:f5:98:ce:f8:e4:b9: e8:ee:f3:05:62:44:8e:ae:85:4a:cb:78:c4:86:a7:6a:d1:79: 35:cc:5a:1d:93:7d:9c:c1:cb:3b:e0:d8:fc:ea:e4:57:ef:ca: 86:e4:3e:f6:ac:ad:d7:ae:9d:cb:d3:f1:46:ae:ec:22:0b:63: 01:cd:de:da:c1:ea:bd:76:e7:c4:59:fd:40:ca:fb:89:9e:ed: 7c:42:63:70:0f:02:cf:69:a7:ca:49:9e:d6:13:b8:0d:34:41: 45:69:75:77:35:a8:ed:1b:96:5e:ca:bf:2f:59:c4:9f:b1:99: 20:36:0d:aa:06:e0:9c:42:e8:24:0c:ae:07:f1:40:cb:37:68: 69:50:61:63:82:1e:4a:99:e2:7e:20:ba:7f:d4:96:07:dc:48: c9:f6:c8:fc:cb:71:11:87:4d:83:c6:e8:3e:34:d4:01:3c:9a: 95:70:a3:80:d2:55:ce:0d:68:14:0c:90:60:f5:30:56:9b:bb: f3:6b:45:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUxMTAyMTYwMDU1WhcNMjUxMTA5MTYwMDU1WjAYMRYwFAYD VQQDEw02OTA3ODAzNy1jNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtY8JH9bbGQ7UeHJ44WUY0NPae7I2g294HYRwnyolnHIyku0araNrD6uoq5dF bBIdvja5PuGZqLoit4O3qwMYlynSvTdyZgZn8ewPxs42Miu4YYi+AXyxg+0SiSCZ jLnZ/hDP/gHLiqHTGxGUGz7D7YraTglRb1Mc0E4hBGpYy9S6lp8LdOB0MlhC4hU+ fnnRXl5tPUs1CyXHTl5VB6FHkYpfjF4+yBiHYI3H9wSlsbiqbjfi9CM0dvfXL/Qu oPHErgsaxQOh9BlNlvFopCVKXuW00tbqMmg1hjp0solwbnDY8w0PehKte72Y37BM iAmMnD/itgX8/6Kx1MLT+gzuDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIth8zR2 p3N+rnytrwHl4LpmjmmBMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxJHx+qjx2QRW/omYowFBb+RFnJPZiilFk6QowRXXtzHL6Fkf0FKs8 MYQdr4v6R0Ya5T6XNh5yNnc/lzEe1KFFTEP1mM745Lno7vMFYkSOroVKy3jEhqdq 0Xk1zFodk32cwcs74Nj86uRX78qG5D72rK3Xrp3L0/FGruwiC2MBzd7aweq9dufE Wf1AyvuJnu18QmNwDwLPaafKSZ7WE7gNNEFFaXV3NajtG5Zeyr8vWcSfsZkgNg2q BuCcQugkDK4H8UDLN2hpUGFjgh5KmeJ+ILp/1JYH3EjJ9sj8y3ERh02Dxug+NNQB PJqVcKOA0lXODWgUDJBg9TBWm7vza0Ve -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:20 2025 by rpki-client