$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json) Hash identifier: /1rZKk0Qs+1uClZWcplA3/8TesbDFneHp1W/0CnuXX0= Subject key identifier: DC:47:A0:00:ED:29:CE:43:8D:DE:17:03:23:78:A7:12:BA:C2:C3:6D Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 06CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft Manifest number: 0675 Signing time: Wed 02 Apr 2025 22:49:25 +0000 Manifest this update: Wed 02 Apr 2025 22:49:24 +0000 Manifest next update: Wed 09 Apr 2025 22:49:24 +0000 Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: cGN24ekbpVKcTuBrPSYuX9vTjU5ct56n8xEzMxfzpA8=) 2: C7764CC6FCA311EEACCA2B5CC4F9AE02.roa (hash: w9hh7nGa+IzYQq91+LbOOZ2ZnQW7jBprbMIRTAiArhU=) 3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: 2PtEBSXuAKl4QFaMfqrCf9uckFYxie6P+46y94SOfxs=) 4: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: qBSyYm549iy+a8EDu2vFxovVCFdMyyd8KGEsIOlUYDI=) 5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: GOKQjlSRbohhc3e25wKXwO0I9oCyjdoNjW5acBKmw0A=) 6: A716CA94954611EC9B320352C4F9AE02.roa (hash: yGZXLSerRpm90Yyxw95Zu4C3ZsLldwZ4vNYM7yjrqLo=) 7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: /Fi2NyP9RW+oE4JZ2QosLJgdN+J2La4mxZzLwfkB21c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4 Validity Not Before: Apr 2 22:49:24 2025 GMT Not After : Apr 9 22:49:24 2025 GMT Subject: CN=67edbef5-d8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:ec:70:4d:41:18:43:2d:f1:f1:50:b4:55: 08:b4:74:08:2c:92:66:81:1a:d4:54:9e:48:94:bd: 00:7d:28:f4:35:99:64:af:f7:12:c2:70:84:ad:79: 85:2d:6e:73:e6:ef:db:c7:13:68:14:a8:a5:e0:a5: 2e:9b:4a:4f:9e:a4:11:80:3e:af:98:39:a7:f6:2d: ab:b4:a0:3e:e3:e3:e8:d0:2b:c7:00:6a:fb:c8:34: 10:1c:5a:e4:fb:9e:f7:88:7d:2d:ed:09:5d:94:4a: 55:e5:4e:97:66:66:37:a4:5f:ec:d6:72:10:e9:c3: f0:97:d5:36:33:aa:16:4f:21:3e:7a:cd:ac:51:a7: 11:91:de:2d:40:3b:82:ff:df:7c:19:fc:7d:b7:9f: 87:61:7e:7a:17:5c:7f:16:b8:df:5d:df:75:62:76: 4f:a4:4b:ae:0e:4c:af:ad:f5:5c:ce:6a:74:db:3a: 5a:67:50:11:e2:f0:49:6d:d5:bf:90:0b:2a:50:f0: 46:7b:70:e9:26:54:41:dd:4f:1f:b9:55:23:c1:52: 24:26:68:f4:9b:e7:62:69:b6:07:2d:96:83:39:0f: 12:86:31:7d:c5:04:84:4b:01:b1:bc:47:54:0d:95: 96:70:dd:0f:9f:e6:11:f9:18:ed:0c:c6:7f:8c:11: 05:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:47:A0:00:ED:29:CE:43:8D:DE:17:03:23:78:A7:12:BA:C2:C3:6D X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:b4:9f:16:59:d0:3a:5a:08:83:62:54:b4:aa:44:0e:99:34: f8:ef:10:91:eb:26:48:1d:79:8a:c3:99:54:36:73:ba:0a:b4: 42:8f:3a:ae:34:e7:fe:2d:96:94:31:1f:91:5c:17:b1:42:db: c8:f6:37:2b:a3:55:88:a8:1a:32:50:6e:7c:5b:bc:70:e8:69: b4:92:3e:89:91:3d:cc:eb:d5:b0:87:53:af:31:11:f3:de:09: 63:70:d5:f7:9f:20:08:9e:87:34:92:da:c7:d2:c5:64:72:dd: a3:94:0a:06:41:d3:2f:32:e5:0b:e8:a7:86:93:63:1b:9b:17: ef:c3:eb:3b:6a:ac:05:49:83:f7:88:c3:bf:65:29:95:61:cf: 8c:7d:c8:78:81:f2:df:63:da:88:90:cc:24:dd:81:96:45:58: 1b:02:f2:25:31:98:27:6c:67:05:f4:d2:b6:71:db:e3:00:a5: 70:ed:c9:35:40:72:1e:73:61:eb:1f:ee:89:41:b2:90:99:f9: b1:a7:cc:63:54:ed:2f:18:d6:d0:9c:35:20:39:0b:e0:9e:f9: d7:48:f6:91:57:e1:84:ee:95:b7:25:63:93:f9:49:a7:7e:a1: 49:f9:59:04:53:58:95:b4:91:a4:12:2e:2a:d3:f7:be:a0:b9: 6c:98:66:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUwNDAyMjI0OTI0WhcNMjUwNDA5MjI0OTI0WjAYMRYwFAYD VQQDEw02N2VkYmVmNS1kOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvXscE1BGEMt8fFQtFUItHQILJJmgRrUVJ5IlL0AfSj0NZlkr/cSwnCErXmF LW5z5u/bxxNoFKil4KUum0pPnqQRgD6vmDmn9i2rtKA+4+Po0CvHAGr7yDQQHFrk +573iH0t7QldlEpV5U6XZmY3pF/s1nIQ6cPwl9U2M6oWTyE+es2sUacRkd4tQDuC /998Gfx9t5+HYX56F1x/FrjfXd91YnZPpEuuDkyvrfVczmp02zpaZ1AR4vBJbdW/ kAsqUPBGe3DpJlRB3U8fuVUjwVIkJmj0m+diabYHLZaDOQ8ShjF9xQSESwGxvEdU DZWWcN0Pn+YR+RjtDMZ/jBEFWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxHoADt Kc5Djd4XAyN4pxK6wsNtMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEtJ8WWdA6WgiDYlS0qkQOmTT47xCR6yZIHXmKw5lUNnO6CrRCjzqu NOf+LZaUMR+RXBexQtvI9jcro1WIqBoyUG58W7xw6Gm0kj6JkT3M69Wwh1OvMRHz 3gljcNX3nyAInoc0ktrH0sVkct2jlAoGQdMvMuUL6KeGk2Mbmxfvw+s7aqwFSYP3 iMO/ZSmVYc+Mfch4gfLfY9qIkMwk3YGWRVgbAvIlMZgnbGcF9NK2cdvjAKVw7ck1 QHIec2HrH+6JQbKQmfmxp8xjVO0vGNbQnDUgOQvgnvnXSPaRV+GE7pW3JWOT+Umn fqFJ+VkEU1iVtJGkEi4q0/e+oLlsmGb1 -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:16 2025 by rpki-client