$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft File: THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json) Hash identifier: VV/EcPNsirnoJqBQL6WteDUDMYCuBbKt30WZKSDxQr8= Subject key identifier: 19:08:71:57:EB:54:95:18:0C:4E:42:8D:AA:77:5D:43:F7:4A:AE:D8 Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73 Certificate issuer: /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft Manifest number: 07 Signing time: Wed 17 Sep 2025 08:54:38 +0000 Manifest this update: Wed 17 Sep 2025 08:54:38 +0000 Manifest next update: Wed 24 Sep 2025 08:54:38 +0000 Files and hashes: 1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: Jf93iul+Io/m3vuO1+rBiOyGMuFAu8Is+KS7Ax9KBQA=) 2: 006500928EE611F094A24C77C4F9AE02.roa (hash: DbkaOgwAriP/Mwbxrm6lRAhlKWJ1+3EkIPcc3uOwQSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573 Validity Not Before: Sep 17 08:54:38 2025 GMT Not After : Sep 24 08:54:38 2025 GMT Subject: CN=68ca774e-2a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:cc:cd:96:c0:7c:31:22:13:e2:d5:27:93: e2:96:55:93:ea:9b:a9:ce:ed:4e:7c:40:dd:28:3c: be:cd:2b:8c:c6:59:df:fd:54:bf:72:a0:0c:aa:54: b4:24:d5:23:b2:4c:2b:44:b2:91:2e:da:9d:83:92: d1:bd:86:6a:89:c5:54:62:c8:4d:f0:d0:95:11:d9: c8:37:54:c5:a3:0c:b4:d9:ad:12:81:9f:e7:d2:ac: 82:1d:88:11:67:d9:56:dc:70:26:f3:1f:d0:bf:1c: 56:19:a1:35:d9:63:5e:95:63:0b:1d:36:fe:64:d6: 8a:17:f3:65:f7:3c:da:cf:b4:24:20:f0:99:74:88: fc:ec:1e:b4:d8:32:66:dd:67:fe:40:75:45:ae:b1: 8c:29:12:76:20:12:5b:e1:ab:bf:1d:9d:22:62:2e: 5a:e8:4f:dc:1e:cf:c6:ad:07:75:30:5a:52:16:b3: 05:2c:87:21:a1:c8:03:63:cd:1e:89:47:79:6b:d7: 80:96:cd:fa:1e:70:e3:2e:9d:9d:b7:d1:67:c8:d9: 1b:48:e6:b1:7d:87:7a:7b:80:e8:55:4e:81:92:17: 2f:9a:7f:54:5a:db:11:cd:74:36:da:f8:19:72:fb: a6:47:d4:97:20:b6:2a:e8:44:b8:ed:67:72:be:89: 49:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:08:71:57:EB:54:95:18:0C:4E:42:8D:AA:77:5D:43:F7:4A:AE:D8 X509v3 Authority Key Identifier: keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7a:34:d6:90:70:8e:a0:c8:8e:73:18:79:6e:bc:0b:24:c0: 24:60:c0:a2:25:12:51:07:3a:d9:85:5d:88:b0:d4:29:da:74: 19:db:13:5d:80:a2:87:77:a0:0e:f9:e3:f6:3f:70:e3:41:31: 2f:70:1c:20:03:e1:5e:13:a4:98:86:e3:50:35:da:63:4d:39: b6:f8:46:7b:25:04:49:c2:db:dc:e5:d1:70:78:d7:13:ad:be: 4b:cb:23:fb:84:01:81:b5:a4:a4:58:08:ac:fc:c5:02:ec:3d: ab:c0:de:35:61:c3:6e:e7:de:ea:8c:3e:e9:aa:e3:28:c1:70: e9:5b:2e:63:3d:00:cc:3c:a6:8a:a1:e8:da:9e:ab:ae:e2:45: 3b:63:89:a5:f6:84:4f:bc:ae:61:aa:cd:6c:9c:6e:47:c9:d7: 79:4d:49:bf:c1:34:bc:a5:f0:c6:51:09:48:da:c7:10:7e:b9: dc:9d:c4:5d:95:e2:5b:cb:bf:05:01:ff:95:9a:5f:ae:16:d7: a8:59:ca:2d:31:c3:d6:fb:2a:db:33:db:c8:f1:b1:c3:56:0d: 75:b7:f4:5a:09:92:e4:58:f3:c9:8c:63:67:59:a6:18:45:ad: 6b:ac:64:1f:5c:71:b3:5e:3b:61:1f:9b:f9:f5:a4:67:a3:97: 18:c5:c3:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODBBNDExMC8GA1UEBRMoNEM3MDhDOUVCMUE3MjA0NDMyQTc3RTI1OEMxNkNEMTgy MDdDNTU3MzAeFw0yNTA5MTcwODU0MzhaFw0yNTA5MjQwODU0MzhaMBgxFjAUBgNV BAMTDTY4Y2E3NzRlLTJhNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeTczNlsB8MSIT4tUnk+KWVZPqm6nO7U58QN0oPL7NK4zGWd/9VL9yoAyqVLQk 1SOyTCtEspEu2p2DktG9hmqJxVRiyE3w0JUR2cg3VMWjDLTZrRKBn+fSrIIdiBFn 2VbccCbzH9C/HFYZoTXZY16VYwsdNv5k1ooX82X3PNrPtCQg8Jl0iPzsHrTYMmbd Z/5AdUWusYwpEnYgElvhq78dnSJiLlroT9wez8atB3UwWlIWswUshyGhyANjzR6J R3lr14CWzfoecOMunZ230WfI2RtI5rF9h3p7gOhVToGSFy+af1Ra2xHNdDba+Bly +6ZH1JcgtiroRLjtZ3K+iUmVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGQhxV+tU lRgMTkKNqnddQ/dKrtgwHwYDVR0jBBgwFoAUTHCMnrGnIEQyp34ljBbNGCB8VXMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MEE0Lzc4RDI2OTNFOEU1 MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVReXAzNGxqQmJOR0NCOFZY TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEhDTW5yR25JRVF5cDM0bGpCYk5HQ0I4VlhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MEE0Lzc4RDI2OTNFOEU1MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVR eXAzNGxqQmJOR0NCOFZYTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABp6NNaQcI6gyI5zGHluvAskwCRgwKIlElEHOtmFXYiw1CnadBnbE12A ood3oA754/Y/cONBMS9wHCAD4V4TpJiG41A12mNNObb4RnslBEnC29zl0XB41xOt vkvLI/uEAYG1pKRYCKz8xQLsPavA3jVhw27n3uqMPumq4yjBcOlbLmM9AMw8poqh 6Nqeq67iRTtjiaX2hE+8rmGqzWycbkfJ13lNSb/BNLyl8MZRCUjaxxB+udydxF2V 4lvLvwUB/5WaX64W16hZyi0xw9b7Ktsz28jxscNWDXW39FoJkuRY88mMY2dZphhF rWusZB9ccbNeO2Efm/n1pGejlxjFw2E= -----END CERTIFICATE-----Generated at Fri Sep 19 02:42:11 2025 by rpki-client