$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: mAEuBukosU1XPMhP/NGbHXvOeGdzy4JR2vvj2b5Z5Sc= Subject key identifier: 0D:09:C0:AC:62:C7:95:A0:0C:B7:A3:DB:B3:04:D4:9D:69:99:10:7A Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 023A Signing time: Wed 05 Nov 2025 01:58:16 +0000 Manifest this update: Wed 05 Nov 2025 01:58:16 +0000 Manifest next update: Wed 12 Nov 2025 01:58:16 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: c9xPcdvH+Sg8Ntxy45/FFQWT03wYn3dq7R88Sijhgh0=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: SpdJdr/6VGGqS7iqp8sOU+UWcnaMd8YGOWCMqOpdTjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Validity Not Before: Nov 5 01:58:16 2025 GMT Not After : Nov 12 01:58:16 2025 GMT Subject: CN=690aaf38-60b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:45:85:24:3d:b1:8e:ba:35:12:5b:3d:71:47: c5:c3:63:e2:61:fb:0f:6a:e0:0a:97:cf:eb:eb:ee: fc:9d:35:51:92:7e:33:09:eb:7d:2e:30:86:e8:05: b2:b2:e5:df:d4:bd:56:37:c0:fe:2e:87:a4:02:b3: b9:19:c9:29:dd:98:a1:26:10:b8:83:88:1e:7f:b1: c5:f5:52:bb:de:f4:40:2b:11:c9:5b:89:69:0d:21: 50:ae:c7:fe:a5:5e:b8:0d:7e:7e:6c:a2:11:3e:2f: e6:57:f4:a4:19:cd:d6:2b:fc:ef:ad:81:50:96:44: 00:0f:8e:ad:05:df:0e:69:d0:01:cf:2d:28:54:34: b4:5c:91:8f:2c:6d:f7:38:ca:bb:30:e4:3c:52:ec: 22:95:22:9b:63:15:bb:22:81:d6:b8:61:28:28:68: 4f:a4:eb:09:4a:c8:16:c4:56:dc:a6:ee:05:d0:d4: fd:7a:39:89:30:5a:f6:75:08:15:0e:79:c9:42:2e: 55:cd:54:f2:f4:25:4b:80:06:67:d6:ed:23:76:7f: cd:8d:d2:00:3b:8b:fe:42:7b:c5:b5:f4:d7:1d:f4: e1:8b:8f:12:a8:12:cb:fa:f2:04:08:e4:e6:d5:3e: e8:af:03:ef:c5:19:24:bb:af:90:e0:40:41:6a:0e: ef:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:09:C0:AC:62:C7:95:A0:0C:B7:A3:DB:B3:04:D4:9D:69:99:10:7A X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d6:d3:f7:10:5c:1a:b3:e4:58:62:05:9d:6f:cf:30:be:01: 5d:e9:4c:88:d2:b0:5f:a6:46:60:68:29:3c:1e:a4:a7:33:3b: b6:94:f5:ea:96:83:e1:20:10:73:6a:0f:c9:c5:7b:ae:62:e8: f3:71:1c:f2:8e:45:95:ac:4d:82:27:4a:80:1c:af:4e:92:ce: 33:2e:f8:ae:88:15:da:ff:d7:c1:81:c8:24:d2:e9:d4:ea:2d: b4:ab:a2:d5:65:42:26:97:b9:93:31:1e:eb:25:db:4a:a1:4e: 09:45:23:6a:ba:02:05:a9:dc:5f:d4:c7:39:a7:55:2a:7a:55: d7:1a:81:df:e1:f1:fe:bd:7c:91:f4:f7:32:e9:93:78:bd:55: d1:70:14:46:7f:1e:52:25:86:5c:27:e4:e1:ab:b7:66:f5:a5: 9f:07:75:be:19:54:81:e8:63:87:af:86:9b:d4:20:b0:1c:7d: 8f:ac:27:39:31:f2:b6:07:0b:44:43:9a:24:6b:9b:fc:37:97: 34:4b:f1:12:a3:ee:bf:30:50:3e:9a:3e:c0:11:bd:46:79:a1: 06:03:d7:4c:6d:0c:aa:24:7f:e5:95:e9:c0:bd:cf:82:41:9f: bf:4a:a8:18:8e:99:31:de:16:88:7b:fb:ac:dd:d6:db:c8:ee: e3:c0:6c:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjUxMTA1MDE1ODE2WhcNMjUxMTEyMDE1ODE2WjAYMRYwFAYD VQQDEw02OTBhYWYzOC02MGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EWFJD2xjro1Els9cUfFw2PiYfsPauAKl8/r6+78nTVRkn4zCet9LjCG6AWy suXf1L1WN8D+LoekArO5Gckp3ZihJhC4g4gef7HF9VK73vRAKxHJW4lpDSFQrsf+ pV64DX5+bKIRPi/mV/SkGc3WK/zvrYFQlkQAD46tBd8OadABzy0oVDS0XJGPLG33 OMq7MOQ8UuwilSKbYxW7IoHWuGEoKGhPpOsJSsgWxFbcpu4F0NT9ejmJMFr2dQgV DnnJQi5VzVTy9CVLgAZn1u0jdn/NjdIAO4v+QnvFtfTXHfThi48SqBLL+vIECOTm 1T7orwPvxRkku6+Q4EBBag7vaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0JwKxi x5WgDLej27ME1J1pmRB6MB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa1tP3EFwas+RYYgWdb88wvgFd6UyI0rBfpkZgaCk8HqSnMzu2lPXq loPhIBBzag/JxXuuYujzcRzyjkWVrE2CJ0qAHK9Oks4zLviuiBXa/9fBgcgk0unU 6i20q6LVZUIml7mTMR7rJdtKoU4JRSNqugIFqdxf1Mc5p1UqelXXGoHf4fH+vXyR 9Pcy6ZN4vVXRcBRGfx5SJYZcJ+Thq7dm9aWfB3W+GVSB6GOHr4ab1CCwHH2PrCc5 MfK2BwtEQ5oka5v8N5c0S/ESo+6/MFA+mj7AEb1GeaEGA9dMbQyqJH/llenAvc+C QZ+/SqgYjpkx3haIe/us3dbbyO7jwGyP -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:16 2025 by rpki-client