$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json) Hash identifier: GU5SPs6Pex96l+4owZZ+sTmML640d0XGivzDkh2dfoE= Subject key identifier: BD:68:3B:1A:D7:6E:A1:1F:B9:1D:0A:09:0C:94:53:46:7A:55:FD:E3 Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 0700 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft Manifest number: 069F Signing time: Fri 30 May 2025 22:56:25 +0000 Manifest this update: Fri 30 May 2025 22:56:24 +0000 Manifest next update: Fri 06 Jun 2025 22:56:24 +0000 Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: /nQ4keBhH7UOs9TbigXxDxnonteaJ7UeLR68oeHhA1o=) 2: C7764CC6FCA311EEACCA2B5CC4F9AE02.roa (hash: w9hh7nGa+IzYQq91+LbOOZ2ZnQW7jBprbMIRTAiArhU=) 3: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: c+CQynLGvFw6zwfVMzfHa2UofKyQsyQszuE+ggwaCPA=) 4: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: gryi7fow5ocrp+N/LztoAg8/BLYRCP85MRszc11lYeg=) 5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: GOKQjlSRbohhc3e25wKXwO0I9oCyjdoNjW5acBKmw0A=) 6: A716CA94954611EC9B320352C4F9AE02.roa (hash: rLljdPy6+LM7XSfK8///MT+Df5srLXCvVNKfYK4p6bw=) 7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: /Fi2NyP9RW+oE4JZ2QosLJgdN+J2La4mxZzLwfkB21c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: May 30 22:56:24 2025 GMT Not After : Jun 6 22:56:24 2025 GMT Subject: CN=683a3798-2b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:d0:26:8e:81:2c:72:d4:b0:ce:0f:96:9c: f2:5f:b2:b6:53:bc:7e:ab:8e:e9:39:a7:8b:97:68: 40:73:63:d2:d2:6a:5c:45:d4:a6:09:e0:d9:ae:ef: e2:98:84:f5:2e:dc:d3:38:41:2c:2c:fa:7e:22:33: 27:e6:5f:ae:f0:79:1a:7d:0b:16:00:0d:8b:46:cb: 65:ae:6e:c9:e1:ed:fe:19:39:7e:1e:14:38:16:70: 82:51:3b:b2:63:c9:c3:b2:8c:de:d8:96:60:f5:d0: c4:20:45:db:ba:7e:d1:d7:fb:ac:43:d0:03:23:3b: 09:a8:08:d2:f6:3a:13:cd:f3:c5:b6:8b:cc:ae:56: c5:22:27:6e:4b:71:09:d6:0b:85:cc:4f:da:93:30: af:4e:e7:56:b9:03:da:07:a0:91:66:7e:5a:6e:83: 3d:c2:f9:a5:af:e4:db:27:37:9d:99:75:da:62:a5: 0f:44:f7:ca:74:57:37:7a:71:31:fe:6b:46:e3:43: 9f:93:69:56:c5:b1:54:67:d1:89:c1:f4:0b:14:13: 09:b7:ce:6f:82:a7:1e:94:88:62:e3:52:a8:50:32: 76:40:b2:8b:5b:66:1b:2c:fa:ff:fd:f6:50:45:95: 36:7f:f1:ce:ae:9f:be:e9:2a:c1:7d:83:e8:65:c4: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:68:3B:1A:D7:6E:A1:1F:B9:1D:0A:09:0C:94:53:46:7A:55:FD:E3 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9d:83:83:79:64:bc:ae:4f:66:36:90:3d:bf:ae:87:d0:61: 92:9e:e1:e6:23:ed:5e:67:38:7e:29:25:f4:2c:a0:40:c7:20: 2e:d6:4c:77:f4:82:37:90:d5:04:b1:64:41:84:a2:bb:ec:f7: 02:e5:6c:c0:da:08:75:3c:b6:77:0a:72:e5:6c:5d:85:11:57: 17:63:c8:e8:ac:3b:3c:e0:45:ba:6e:2c:bd:f7:75:d6:d5:43: fd:1f:ed:53:83:24:82:09:d9:b6:be:8f:51:b7:4c:0b:33:9a: 1b:14:d2:a2:b4:3c:e2:e2:66:e3:b6:56:59:3b:7b:4f:25:9a: c2:2d:70:7e:4e:49:2d:0a:0b:33:3e:53:88:01:2d:ba:72:62: db:3a:35:1e:d7:86:92:11:4c:55:08:02:43:7f:03:a5:74:36: 05:07:38:2b:9b:3b:05:c8:4c:a2:be:1a:b3:aa:44:24:47:99: 59:2e:10:ac:3e:ef:99:3e:2a:4f:a6:44:4b:fb:4c:ad:fa:83: f0:3d:13:d8:28:5b:03:8b:cd:02:b7:14:d6:90:95:05:40:1a: ff:b6:66:17:b8:81:38:19:d6:30:20:6b:8b:2a:b2:e4:a2:42: 35:cf:b1:3b:ff:02:7e:ee:81:04:5b:7f:45:b1:25:10:80:0f: a2:27:0b:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUwNTMwMjI1NjI0WhcNMjUwNjA2MjI1NjI0WjAYMRYwFAYD VQQDEw02ODNhMzc5OC0yYjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9PQJo6BLHLUsM4PlpzyX7K2U7x+q47pOaeLl2hAc2PS0mpcRdSmCeDZru/i mIT1LtzTOEEsLPp+IjMn5l+u8HkafQsWAA2LRstlrm7J4e3+GTl+HhQ4FnCCUTuy Y8nDsoze2JZg9dDEIEXbun7R1/usQ9ADIzsJqAjS9joTzfPFtovMrlbFIiduS3EJ 1guFzE/akzCvTudWuQPaB6CRZn5aboM9wvmlr+TbJzedmXXaYqUPRPfKdFc3enEx /mtG40Ofk2lWxbFUZ9GJwfQLFBMJt85vgqcelIhi41KoUDJ2QLKLW2YbLPr//fZQ RZU2f/HOrp++6SrBfYPoZcSKIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1oOxrX bqEfuR0KCQyUU0Z6Vf3jMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANnYODeWS8rk9mNpA9v66H0GGSnuHmI+1eZzh+KSX0LKBAxyAu1kx3 9II3kNUEsWRBhKK77PcC5WzA2gh1PLZ3CnLlbF2FEVcXY8jorDs84EW6biy993XW 1UP9H+1TgySCCdm2vo9Rt0wLM5obFNKitDzi4mbjtlZZO3tPJZrCLXB+TkktCgsz PlOIAS26cmLbOjUe14aSEUxVCAJDfwOldDYFBzgrmzsFyEyivhqzqkQkR5lZLhCs Pu+ZPipPpkRL+0yt+oPwPRPYKFsDi80CtxTWkJUFQBr/tmYXuIE4GdYwIGuLKrLk okI1z7E7/wJ+7oEEW39FsSUQgA+iJwvd -----END CERTIFICATE-----Generated at Sat May 31 17:54:49 2025 by rpki-client