$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json) Hash identifier: dHgJkfzF+vkwc13Z1F9NFUAfviaXIBp6sRGrQ0meSmo= Subject key identifier: 44:B5:D2:DD:C7:25:75:0E:5B:31:1F:28:A8:7E:28:27:64:4A:81:1B Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 0764 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft Manifest number: 06EE Signing time: Fri 05 Sep 2025 11:33:39 +0000 Manifest this update: Fri 05 Sep 2025 11:33:39 +0000 Manifest next update: Fri 12 Sep 2025 11:33:39 +0000 Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: cEJMEAT1Cjv4ygryVeC7XPLqUXhalzwrMeU31vxEPQM=) 2: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: nVi2F1h98I6eFhDtm7NoIpz9Is13r6Zxvgjimh4KJP0=) 3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: 37QHYMs5XbAwWAtW6ZOI2Kmu6v/FD7PEpZdq6+cuweg=) 4: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: 4/7UnX5ze5wrjMqFOLuyIDjnmWsUK84zcdUUtFoXAm8=) 5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: uZyAHanV/dsvce0LE5DxDJIkDTak4REE2s1BDI3t2SM=) 6: A716CA94954611EC9B320352C4F9AE02.roa (hash: 29eINthckTF8RKNey1Kdeos3g3mQUi6TqxaM8+tcS1o=) 7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: JkA2VjRkGVaoGTtSe3EFAkpmSjP2mBiftG09Gd2raHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 11:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1892 (0x764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Sep 5 11:33:39 2025 GMT Not After : Sep 12 11:33:39 2025 GMT Subject: CN=68baca93-4d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dd:22:d5:f8:09:d5:38:53:1c:e3:98:67:03: 8f:6d:01:82:be:46:d3:da:8c:00:6c:33:7f:aa:9b: 19:89:31:68:28:08:4d:11:bd:f5:e0:65:90:65:0d: 13:0e:46:87:e4:d5:b2:29:7d:10:59:29:38:65:c9: 77:4c:e7:61:30:c6:cd:e0:29:51:3a:fb:dd:29:57: aa:07:76:5f:24:14:5e:15:b2:6f:b4:3d:24:aa:27: 24:27:28:c9:df:c9:88:c5:27:eb:be:15:e0:97:6d: 3f:1f:04:58:f3:75:cf:30:e1:63:49:f8:bf:bd:23: a8:73:62:da:0b:71:42:2a:db:34:1c:d7:d3:95:c6: 1e:8e:96:4a:75:0f:9e:e9:3a:b1:24:59:e0:3c:8e: 98:70:b3:f5:bb:74:f7:33:e4:c0:f8:c4:32:0b:6f: cf:49:da:3d:dd:3d:1a:12:c2:87:ab:6d:97:b6:27: 9d:df:16:f6:39:2f:45:9f:15:ce:52:eb:84:7c:ef: c7:62:31:44:6a:57:24:d2:a6:e1:cf:28:5f:8c:6e: c7:04:d7:5a:ac:f3:09:52:0f:b2:45:62:ad:85:44: c2:9b:8a:1c:f9:11:5a:d0:80:f8:23:2c:50:67:72: 87:aa:aa:c5:f6:1f:80:70:29:b2:c2:c4:32:d5:13: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B5:D2:DD:C7:25:75:0E:5B:31:1F:28:A8:7E:28:27:64:4A:81:1B X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3f:3b:4d:78:02:00:c8:6e:81:a9:34:bc:f8:7d:63:1c:b9: 73:51:f1:99:71:a2:e0:a0:97:d5:5e:50:9f:59:68:61:da:b8: ae:b7:c9:05:28:8a:16:f3:35:7f:e9:36:72:c9:06:fd:64:94: 88:65:6f:a3:82:d6:c5:49:a4:87:c6:01:2f:d0:52:2d:8d:5f: 80:6f:4e:e5:89:7c:4c:57:bb:5e:d4:ee:d8:04:ab:99:32:1b: 85:6c:8b:59:5b:19:cf:a3:f7:93:62:f7:d7:ac:6d:d1:06:7e: 23:08:7d:4f:b0:c1:44:a1:58:56:fc:b6:78:cd:a9:91:bd:6f: f4:45:c0:50:eb:dd:39:e0:da:cc:90:e8:0a:9f:fe:d6:e1:5b: e2:49:0d:95:42:4e:df:ee:3a:dc:70:4a:a2:af:11:0d:ba:22: 7b:c0:7c:bf:56:24:0a:bc:8b:6b:78:0e:85:a2:68:9e:fe:89: c0:a8:d3:de:c5:6c:4e:f9:b0:3a:7e:a1:e9:31:0d:d5:e8:de: a7:e5:10:f4:eb:ca:4d:f3:22:73:3e:97:0c:6c:e3:d9:0c:d7: d6:6f:1a:5a:88:fb:27:5e:18:84:ec:67:90:96:0f:37:74:a7: fa:db:d7:7b:9f:5b:bd:fa:c0:60:3c:1b:cf:39:80:ad:e2:1a: 0e:a2:62:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUwOTA1MTEzMzM5WhcNMjUwOTEyMTEzMzM5WjAYMRYwFAYD VQQDEw02OGJhY2E5My00ZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA090i1fgJ1ThTHOOYZwOPbQGCvkbT2owAbDN/qpsZiTFoKAhNEb314GWQZQ0T DkaH5NWyKX0QWSk4Zcl3TOdhMMbN4ClROvvdKVeqB3ZfJBReFbJvtD0kqickJyjJ 38mIxSfrvhXgl20/HwRY83XPMOFjSfi/vSOoc2LaC3FCKts0HNfTlcYejpZKdQ+e 6TqxJFngPI6YcLP1u3T3M+TA+MQyC2/PSdo93T0aEsKHq22Xtied3xb2OS9FnxXO UuuEfO/HYjFEalck0qbhzyhfjG7HBNdarPMJUg+yRWKthUTCm4oc+RFa0ID4IyxQ Z3KHqqrF9h+AcCmywsQy1RN5yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFES10t3H JXUOWzEfKKh+KCdkSoEbMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNPztNeAIAyG6BqTS8+H1jHLlzUfGZcaLgoJfVXlCfWWhh2riut8kF KIoW8zV/6TZyyQb9ZJSIZW+jgtbFSaSHxgEv0FItjV+Ab07liXxMV7te1O7YBKuZ MhuFbItZWxnPo/eTYvfXrG3RBn4jCH1PsMFEoVhW/LZ4zamRvW/0RcBQ69054NrM kOgKn/7W4VviSQ2VQk7f7jrccEqirxENuiJ7wHy/ViQKvItreA6Fomie/onAqNPe xWxO+bA6fqHpMQ3V6N6n5RD068pN8yJzPpcMbOPZDNfWbxpaiPsnXhiE7GeQlg83 dKf629d7n1u9+sBgPBvPOYCt4hoOomKs -----END CERTIFICATE-----Generated at Sat Sep 6 16:34:22 2025 by rpki-client