$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: ygkfAj544gIAlzVGynuoFosrmmiZ0GB9uT+mypzsmpc= Subject key identifier: AF:1B:04:E3:23:7B:AD:3A:27:AA:4D:D1:76:AA:56:BB:63:40:2F:28 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1F57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1F2F Signing time: Fri 30 May 2025 16:12:12 +0000 Manifest this update: Fri 30 May 2025 16:12:12 +0000 Manifest next update: Fri 06 Jun 2025 16:12:12 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: 53DWzSPmnO0Dtj2hjVYkd3A566XiIZgI83EIQnPFJL8=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: XynjUTKTYazCZAgnFarsz0z7XLq0CMLJDFwXu2DvFy0=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dDmsnYnpk7eYJRQjeaKR7lmvE3DrcRr0DYnI4h6EWFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8023 (0x1f57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: May 30 16:12:12 2025 GMT Not After : Jun 6 16:12:12 2025 GMT Subject: CN=6839d8dc-8c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:2b:0d:ec:9f:7e:1e:85:44:be:5b:e1:11: a4:15:6f:59:72:82:16:1f:f5:fd:c4:c1:69:6d:a7: 6e:98:7d:f5:1c:57:5b:68:b9:07:d7:81:95:67:1b: 96:7c:b0:49:9e:79:c0:db:7f:40:02:7f:77:27:88: 59:b5:cd:3b:0b:ea:3c:43:6b:02:34:14:44:e1:8e: 77:3f:59:86:6f:e4:9c:e4:45:a3:a1:74:23:0d:f9: e4:5c:b8:34:04:38:a7:c0:df:0f:59:6a:3d:99:69: af:e8:a1:28:5b:e3:64:10:24:45:7b:4c:3f:ba:8f: 87:3b:7c:7c:d4:7a:3d:13:f2:cf:98:37:63:ae:0a: 3a:f5:03:38:02:d7:43:d2:f4:b8:98:35:5b:6e:c7: 81:aa:fa:cd:8b:7b:32:46:f0:f2:fb:10:8c:c9:83: 9d:c2:ca:f4:c8:da:56:a4:a1:18:e0:24:6a:ce:59: d9:34:a6:7d:5c:7a:bd:df:c7:2b:ed:56:c1:8c:cd: 51:21:d1:c2:1c:9a:3c:89:ff:bd:22:ee:e1:88:24: 04:ad:58:ad:2d:08:33:5e:ad:b6:d8:d4:5a:e3:42: 47:eb:b7:25:bd:73:c5:6a:c5:b4:dd:31:36:01:7d: 15:fc:0e:d4:38:46:5f:07:57:2e:d7:13:11:b8:29: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1B:04:E3:23:7B:AD:3A:27:AA:4D:D1:76:AA:56:BB:63:40:2F:28 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:e3:c7:7e:d6:5a:df:9c:71:6d:55:4d:1a:14:78:29:44:af: e8:54:9b:1d:d3:fb:77:5d:02:bf:b7:a0:45:7a:dd:63:5d:29: e6:a1:dc:30:34:a2:07:82:db:bb:ca:82:60:cd:e7:de:87:92: 36:77:4e:9e:4f:5e:96:22:43:f6:a7:78:74:ac:5e:66:f1:a1: 26:7c:21:3e:2a:16:ff:a1:63:6b:b3:e8:75:52:a9:15:68:ca: 68:2d:bc:1e:d4:e8:ea:cf:66:34:01:03:7c:34:8e:52:4e:aa: e3:fb:b0:fd:a5:e8:f2:66:c5:6f:31:68:3b:e1:43:d8:38:03: b5:03:63:1b:8c:5f:13:cd:3d:3f:27:10:c3:a1:7b:c1:41:d1: 4e:c7:b0:7a:02:6f:85:b8:95:51:be:42:4e:60:85:b5:5c:9e: 8f:9e:e0:04:97:b3:d4:a0:1b:c9:d4:a5:df:97:ad:20:7b:57: f9:89:53:b9:69:65:81:d1:66:52:ee:b0:16:96:b5:eb:e7:8f: 15:d8:e7:a8:f8:29:b0:14:34:e5:e6:15:78:b2:fa:35:b2:75: 33:90:5b:5b:29:8d:34:b5:19:e2:13:fe:47:a5:33:da:ed:0c: a3:96:bf:d7:0e:e0:58:57:8c:21:ef:bf:94:be:69:4b:a1:97: a3:94:58:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUwNTMwMTYxMjEyWhcNMjUwNjA2MTYxMjEyWjAYMRYwFAYD VQQDEw02ODM5ZDhkYy04YzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V4rDeyffh6FRL5b4RGkFW9ZcoIWH/X9xMFpbadumH31HFdbaLkH14GVZxuW fLBJnnnA239AAn93J4hZtc07C+o8Q2sCNBRE4Y53P1mGb+Sc5EWjoXQjDfnkXLg0 BDinwN8PWWo9mWmv6KEoW+NkECRFe0w/uo+HO3x81Ho9E/LPmDdjrgo69QM4AtdD 0vS4mDVbbseBqvrNi3syRvDy+xCMyYOdwsr0yNpWpKEY4CRqzlnZNKZ9XHq938cr 7VbBjM1RIdHCHJo8if+9Iu7hiCQErVitLQgzXq222NRa40JH67clvXPFasW03TE2 AX0V/A7UOEZfB1cu1xMRuCkvBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8bBOMj e606J6pN0XaqVrtjQC8oMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz48d+1lrfnHFtVU0aFHgpRK/oVJsd0/t3XQK/t6BFet1jXSnmodww NKIHgtu7yoJgzefeh5I2d06eT16WIkP2p3h0rF5m8aEmfCE+Khb/oWNrs+h1UqkV aMpoLbwe1Ojqz2Y0AQN8NI5STqrj+7D9pejyZsVvMWg74UPYOAO1A2MbjF8TzT0/ JxDDoXvBQdFOx7B6Am+FuJVRvkJOYIW1XJ6PnuAEl7PUoBvJ1KXfl60ge1f5iVO5 aWWB0WZS7rAWlrXr548V2Oeo+CmwFDTl5hV4svo1snUzkFtbKY00tRniE/5HpTPa 7Qyjlr/XDuBYV4wh77+UvmlLoZejlFi/ -----END CERTIFICATE-----Generated at Sat May 31 16:30:28 2025 by rpki-client