$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: 72QseO7y2EVzVhvwz2GHBdqiaaeJSpvm5R/g3a9nc/g= Subject key identifier: 6A:08:FF:ED:04:46:B8:A3:06:D8:81:9D:89:39:88:73:AD:FB:8D:3F Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 057E Signing time: Thu 23 Oct 2025 00:26:23 +0000 Manifest this update: Thu 23 Oct 2025 00:26:22 +0000 Manifest next update: Thu 30 Oct 2025 00:26:22 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: uByZUdoGwSROq25dvtFc4ueQCRyp0+itK9uJMBGHfdc=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=) 3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: dSI8zY9bytp5eBJksSVe4bOFa/6h1+FUTuMvCdJDftM=) 4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 00:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Oct 23 00:26:22 2025 GMT Not After : Oct 30 00:26:22 2025 GMT Subject: CN=68f9762e-3d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:14:88:ee:d7:81:02:91:93:b7:45:49:8e: 6b:c9:58:9b:81:cb:55:bd:03:ab:06:16:60:75:22: b8:26:e6:d6:d3:13:4e:b9:62:43:e5:95:17:9c:9b: 6e:26:d8:67:8e:a8:e1:2d:2a:ce:a4:3e:98:dc:69: c6:9d:82:0a:4d:02:55:9a:63:25:90:af:ec:44:2a: e6:96:6a:b7:8a:03:f9:07:17:63:a0:57:a3:8a:a4: 63:aa:b4:a1:d3:69:d2:7b:66:9e:31:ce:2a:42:cb: 68:71:89:de:f4:7e:95:ff:d3:b1:0e:62:42:d5:11: 75:b8:47:d7:ac:de:e6:f0:8c:94:62:3c:7c:c8:a8: c7:c7:e4:fc:21:9b:03:a8:05:b7:65:33:d6:c6:10: e9:c4:14:cd:b6:63:6c:0e:0c:cf:9c:60:c2:49:0c: df:69:9e:a2:ce:64:40:4a:39:24:7a:e4:bf:70:24: 85:be:3e:a5:d7:11:df:eb:8c:f5:fd:00:d0:fc:b3: 76:3a:38:54:f2:61:ee:24:49:07:7a:db:f8:b1:0a: a4:cc:a8:01:23:36:b7:cc:a7:41:67:39:b8:ae:e0: b1:a9:a4:53:ac:61:af:0d:9a:7a:3b:6b:d5:39:cf: 57:61:dc:ef:40:69:c1:78:90:08:87:54:f4:23:9a: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:08:FF:ED:04:46:B8:A3:06:D8:81:9D:89:39:88:73:AD:FB:8D:3F X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:de:6c:23:34:41:65:6f:1e:e1:d9:a8:39:16:28:85:90:84: 30:02:2a:b7:31:4c:af:d1:f5:bc:8c:e3:13:7e:c7:65:2a:88: 26:8a:74:7a:cd:57:1a:a3:36:48:c3:39:09:9f:97:c2:bf:06: 76:f2:ad:dc:35:0a:e8:27:72:38:e8:72:f7:b7:e7:66:05:66: cd:00:3b:9d:bb:1c:12:6e:6b:d6:d7:c6:72:ea:e6:d1:33:48: cb:ab:d8:8b:0d:65:f7:ec:89:f1:4c:58:c4:a6:c7:6b:51:f1: 4e:60:33:dd:3a:77:e2:11:3c:70:ac:21:67:23:36:87:ed:db: 44:cf:13:69:a8:5b:ec:b4:23:20:bf:43:a8:83:85:63:85:de: e4:37:8c:8e:75:e9:c5:07:cd:cd:43:44:2b:4c:b7:e2:98:56: 9b:fb:5d:b7:c3:23:9f:a7:40:32:7a:45:00:c7:95:83:9d:fc: 5f:d3:0f:7a:e2:bf:76:64:aa:e6:f5:57:be:bd:73:a9:79:33: 83:b5:b3:5c:0b:3d:59:05:f5:47:7e:e5:1c:64:79:13:75:67: 44:2f:de:e0:7d:af:6e:c0:f9:93:91:e9:d1:a6:9c:19:08:aa: 39:6b:2e:86:e7:bb:30:ce:94:68:7f:14:93:9e:26:ad:69:7b: d9:85:8e:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjUxMDIzMDAyNjIyWhcNMjUxMDMwMDAyNjIyWjAYMRYwFAYD VQQDEw02OGY5NzYyZS0zZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyMUiO7XgQKRk7dFSY5ryVibgctVvQOrBhZgdSK4JubW0xNOuWJD5ZUXnJtu JthnjqjhLSrOpD6Y3GnGnYIKTQJVmmMlkK/sRCrmlmq3igP5BxdjoFejiqRjqrSh 02nSe2aeMc4qQstocYne9H6V/9OxDmJC1RF1uEfXrN7m8IyUYjx8yKjHx+T8IZsD qAW3ZTPWxhDpxBTNtmNsDgzPnGDCSQzfaZ6izmRASjkkeuS/cCSFvj6l1xHf64z1 /QDQ/LN2OjhU8mHuJEkHetv4sQqkzKgBIza3zKdBZzm4ruCxqaRTrGGvDZp6O2vV Oc9XYdzvQGnBeJAIh1T0I5p4PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoI/+0E RrijBtiBnYk5iHOt+40/MB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ3mwjNEFlbx7h2ag5FiiFkIQwAiq3MUyv0fW8jOMTfsdlKogminR6 zVcaozZIwzkJn5fCvwZ28q3cNQroJ3I46HL3t+dmBWbNADuduxwSbmvW18Zy6ubR M0jLq9iLDWX37InxTFjEpsdrUfFOYDPdOnfiETxwrCFnIzaH7dtEzxNpqFvstCMg v0Oog4Vjhd7kN4yOdenFB83NQ0QrTLfimFab+123wyOfp0AyekUAx5WDnfxf0w96 4r92ZKrm9Ve+vXOpeTODtbNcCz1ZBfVHfuUcZHkTdWdEL97gfa9uwPmTkenRppwZ CKo5ay6G57swzpRofxSTniataXvZhY5o -----END CERTIFICATE-----Generated at Thu Oct 23 05:55:53 2025 by rpki-client