$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: 21sRw7Ov4tpyokroPRr+jYGxLR7hIh+iiq2F6mSgtYE= Subject key identifier: 01:A5:0E:6E:9A:2D:AF:01:FF:68:DA:0A:49:C4:B5:F9:41:11:F5:38 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 054F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 0539 Signing time: Fri 06 Jun 2025 23:35:42 +0000 Manifest this update: Fri 06 Jun 2025 23:35:42 +0000 Manifest next update: Fri 13 Jun 2025 23:35:42 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: c1ostcUIvwYrWwDEBThmZXhqXgLYecMxjNNs0dUefdY=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=) 3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: dSI8zY9bytp5eBJksSVe4bOFa/6h1+FUTuMvCdJDftM=) 4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 23:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Jun 6 23:35:42 2025 GMT Not After : Jun 13 23:35:42 2025 GMT Subject: CN=68437b4e-e571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:a3:ca:b7:b0:64:03:9f:34:0a:95:e7:3e: bb:86:79:be:de:2a:7b:f9:fa:c6:56:a7:b5:56:41: 5a:21:c3:b1:a4:d0:3a:d5:54:1f:b0:8e:b4:00:d9: d8:9c:f8:45:51:13:f8:4b:58:00:1b:25:b5:fc:e2: 6f:ea:9f:e9:87:15:20:90:67:12:8b:d4:2f:70:ff: 11:51:a0:84:41:b6:74:34:11:4e:78:1d:d1:1e:55: 93:72:00:73:ac:d8:23:74:6a:c1:ab:a7:36:b0:61: 8e:d7:b0:70:08:d4:67:86:a7:2a:f3:da:dc:8d:bc: e6:15:d2:34:d0:88:58:7d:90:12:88:f3:e0:fb:de: ae:9a:8a:2b:8c:d1:41:a2:6a:86:b5:80:3f:2b:ce: 88:38:18:0f:bf:ad:6a:0c:16:6f:e5:71:7a:45:9e: 5e:cf:76:52:f8:2d:e4:8c:f8:5e:b4:e9:9f:89:6c: 2e:ad:7c:1e:1b:3d:f9:02:fe:fe:fc:6d:6e:50:58: b1:14:59:df:f1:19:64:29:b3:22:80:47:84:a9:9a: aa:04:cb:33:2e:9c:ee:da:18:94:f7:e6:83:11:09: 0e:d5:18:65:0a:8b:c5:c2:3f:ac:56:f6:6f:66:f1: 55:d9:7d:84:39:d5:6b:94:74:0e:a8:33:02:7f:9e: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A5:0E:6E:9A:2D:AF:01:FF:68:DA:0A:49:C4:B5:F9:41:11:F5:38 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:85:50:f5:be:cb:87:3a:e8:d4:8c:f8:74:70:a8:65:44:b3: bf:3d:44:c7:10:e9:5c:91:4c:90:9b:34:fc:54:98:f7:f9:d5: 53:16:82:1d:d3:95:ea:3e:3a:7a:8b:84:64:e5:0b:90:4d:b1: 5b:08:73:63:4a:a1:89:d5:c0:55:2c:c4:f3:94:ff:8a:d5:1e: bb:da:09:af:20:44:fc:ec:bd:81:e9:2e:bc:e6:f1:08:85:01: 57:06:b7:44:72:83:97:4c:48:da:55:ee:8d:ad:0f:de:83:e8: 8d:c4:48:2d:05:09:5d:87:d6:61:c8:f4:e9:4a:e3:4c:7f:65: ab:d8:5f:9a:54:3e:e2:03:31:ae:a9:c4:f7:41:e3:3c:1f:85: 08:f3:b7:cd:04:d0:5a:dc:97:f0:ef:b4:d9:a8:2b:2b:c1:27: c8:0f:6f:2f:42:d3:f0:ef:16:36:d5:65:c3:00:3a:26:2a:3e: 34:97:0f:77:ee:35:f5:2f:f2:1a:ef:30:6d:f2:d6:37:fa:eb: de:e6:cd:c8:50:2f:67:db:af:20:38:29:08:95:f9:67:de:ec: 2f:36:1b:96:19:bb:32:c4:ea:ed:00:c8:09:4a:a5:88:5a:10: e8:21:8b:4b:48:c9:66:81:b8:97:b7:40:58:ff:cf:31:ac:54: 58:01:e7:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjUwNjA2MjMzNTQyWhcNMjUwNjEzMjMzNTQyWjAYMRYwFAYD VQQDEw02ODQzN2I0ZS1lNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlYCjyrewZAOfNAqV5z67hnm+3ip7+frGVqe1VkFaIcOxpNA61VQfsI60ANnY nPhFURP4S1gAGyW1/OJv6p/phxUgkGcSi9QvcP8RUaCEQbZ0NBFOeB3RHlWTcgBz rNgjdGrBq6c2sGGO17BwCNRnhqcq89rcjbzmFdI00IhYfZASiPPg+96umoorjNFB omqGtYA/K86IOBgPv61qDBZv5XF6RZ5ez3ZS+C3kjPhetOmfiWwurXweGz35Av7+ /G1uUFixFFnf8RlkKbMigEeEqZqqBMszLpzu2hiU9+aDEQkO1RhlCovFwj+sVvZv ZvFV2X2EOdVrlHQOqDMCf55nmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGlDm6a La8B/2jaCknEtflBEfU4MB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJhVD1vsuHOujUjPh0cKhlRLO/PUTHEOlckUyQmzT8VJj3+dVTFoId 05XqPjp6i4Rk5QuQTbFbCHNjSqGJ1cBVLMTzlP+K1R672gmvIET87L2B6S685vEI hQFXBrdEcoOXTEjaVe6NrQ/eg+iNxEgtBQldh9ZhyPTpSuNMf2Wr2F+aVD7iAzGu qcT3QeM8H4UI87fNBNBa3Jfw77TZqCsrwSfID28vQtPw7xY21WXDADomKj40lw93 7jX1L/Ia7zBt8tY3+uve5s3IUC9n268gOCkIlfln3uwvNhuWGbsyxOrtAMgJSqWI WhDoIYtLSMlmgbiXt0BY/88xrFRYAefD -----END CERTIFICATE-----Generated at Sat Jun 7 06:58:16 2025 by rpki-client