$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft File: THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json) Hash identifier: VNRP8Q3sJ77BIUzCtO6YXnZtYkYonJ+ed0TYX92YTDQ= Subject key identifier: 8B:93:A7:1F:17:96:49:AA:2F:BD:C9:17:D0:08:F7:83:50:33:8A:1F Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73 Certificate issuer: /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft Manifest number: 1D Signing time: Mon 03 Nov 2025 07:47:57 +0000 Manifest this update: Mon 03 Nov 2025 07:47:57 +0000 Manifest next update: Mon 10 Nov 2025 07:47:57 +0000 Files and hashes: 1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: am6FlVXhnvdoBfyir13tqslASj70ZRAvZK32GUKtTFs=) 2: 006500928EE611F094A24C77C4F9AE02.roa (hash: DbkaOgwAriP/Mwbxrm6lRAhlKWJ1+3EkIPcc3uOwQSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573 Validity Not Before: Nov 3 07:47:57 2025 GMT Not After : Nov 10 07:47:57 2025 GMT Subject: CN=69085e2d-92ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:6d:fa:2f:53:f4:85:38:74:34:15:ca:5f: 8a:5a:bf:31:d2:f8:2f:e8:0a:f1:87:0c:94:c1:9a: 37:d1:2d:df:17:7a:e6:95:93:f5:37:d9:a6:4a:93: 2a:8b:49:90:52:3a:3d:29:32:ba:23:3b:e8:09:e0: 64:b3:b1:35:6c:93:9b:d9:62:68:48:73:ad:3b:5a: 68:0d:e1:a8:7a:55:24:8e:e9:8e:d4:94:fc:2f:4f: 69:a6:ea:61:3f:b4:0d:30:90:c8:9c:be:03:b5:34: a7:f1:11:76:0d:1d:bb:8e:20:9b:a0:43:0a:7b:10: e3:f6:d6:2c:e4:3d:36:71:d2:f5:ad:24:d2:e9:65: 4d:8c:0f:0d:9c:87:6b:72:f4:f0:b7:8c:74:91:0c: 33:5d:e3:b2:65:a0:be:13:3d:88:01:a0:da:29:99: 33:7e:77:8d:6e:a9:ed:1a:0c:19:bd:25:27:66:85: c4:13:38:a2:ed:49:f7:ad:6a:b9:67:5b:f7:e7:a2: 6d:47:e8:3e:44:b0:08:c9:31:b7:6a:c8:0a:55:74: a3:57:bf:44:a6:ba:0d:ef:98:65:36:ba:f0:dc:52: 97:a1:f1:90:5d:2a:ff:ef:68:a8:0f:2b:38:4c:be: 7a:08:6e:b0:49:79:08:5d:58:6d:7f:44:18:44:db: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:93:A7:1F:17:96:49:AA:2F:BD:C9:17:D0:08:F7:83:50:33:8A:1F X509v3 Authority Key Identifier: keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:da:4e:86:bb:e7:14:b6:04:e4:c1:db:e2:47:76:b9:f0:1e: 66:07:69:fe:59:05:83:9d:3e:cb:76:3e:9c:58:52:fe:c5:44: b7:fc:97:d3:e8:8f:4a:fb:7a:51:2c:9b:54:9d:15:78:2f:26: 70:3a:ac:7c:a3:78:2c:e6:e0:87:fb:68:5d:ad:90:23:5b:9e: 80:4d:e4:d7:80:c1:9e:69:0f:13:d7:78:39:6e:4c:99:40:1e: bd:a4:0b:59:42:5f:8b:97:d9:96:4c:f7:44:d9:59:c1:50:3e: 93:20:b8:68:92:8d:d2:cb:00:84:5b:2a:08:88:13:c8:94:34: 12:8d:ec:5d:d8:6d:83:5e:d7:4d:79:67:ad:60:95:27:f1:86: 71:be:54:37:17:03:b3:20:23:2c:8b:f3:77:91:1f:3e:5a:23: 2f:7e:e7:50:bd:f6:64:8e:51:28:93:75:a9:dc:ce:2f:7b:6a: 38:23:76:d8:6a:16:da:45:4d:5b:0c:25:21:de:c9:c5:eb:05: eb:0d:43:38:f8:5d:db:c3:70:b7:1c:e5:7c:4f:47:5e:a4:e8: 55:0d:65:d2:cb:5e:56:72:02:10:8b:c4:f1:d0:9d:2d:be:62: e0:23:a5:f2:f7:32:57:4e:ce:6d:bf:e4:27:db:e0:d1:8b:3a: 78:3e:49:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODBBNDExMC8GA1UEBRMoNEM3MDhDOUVCMUE3MjA0NDMyQTc3RTI1OEMxNkNEMTgy MDdDNTU3MzAeFw0yNTExMDMwNzQ3NTdaFw0yNTExMTAwNzQ3NTdaMBgxFjAUBgNV BAMTDTY5MDg1ZTJkLTkyZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8B236L1P0hTh0NBXKX4pavzHS+C/oCvGHDJTBmjfRLd8XeuaVk/U32aZKkyqL SZBSOj0pMrojO+gJ4GSzsTVsk5vZYmhIc607WmgN4ah6VSSO6Y7UlPwvT2mm6mE/ tA0wkMicvgO1NKfxEXYNHbuOIJugQwp7EOP21izkPTZx0vWtJNLpZU2MDw2ch2ty 9PC3jHSRDDNd47JloL4TPYgBoNopmTN+d41uqe0aDBm9JSdmhcQTOKLtSfetarln W/fnom1H6D5EsAjJMbdqyApVdKNXv0Smug3vmGU2uvDcUpeh8ZBdKv/vaKgPKzhM vnoIbrBJeQhdWG1/RBhE2yj9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi5OnHxeW SaovvckX0Aj3g1Azih8wHwYDVR0jBBgwFoAUTHCMnrGnIEQyp34ljBbNGCB8VXMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MEE0Lzc4RDI2OTNFOEU1 MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVReXAzNGxqQmJOR0NCOFZY TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEhDTW5yR25JRVF5cDM0bGpCYk5HQ0I4VlhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MEE0Lzc4RDI2OTNFOEU1MDExRjA4NzNERUIwQ0M0RjlBRTAyL1RIQ01uckduSUVR eXAzNGxqQmJOR0NCOFZYTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK/aToa75xS2BOTB2+JHdrnwHmYHaf5ZBYOdPst2PpxYUv7FRLf8l9Po j0r7elEsm1SdFXgvJnA6rHyjeCzm4If7aF2tkCNbnoBN5NeAwZ5pDxPXeDluTJlA Hr2kC1lCX4uX2ZZM90TZWcFQPpMguGiSjdLLAIRbKgiIE8iUNBKN7F3YbYNe1015 Z61glSfxhnG+VDcXA7MgIyyL83eRHz5aIy9+51C99mSOUSiTdanczi97ajgjdthq FtpFTVsMJSHeycXrBesNQzj4XdvDcLcc5XxPR16k6FUNZdLLXlZyAhCLxPHQnS2+ YuAjpfL3MldOzm2/5Cfb4NGLOng+SR4= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:42 2025 by rpki-client