$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json) Hash identifier: iqc1yx5zc9owyLVYGbExrjemNyHjWubhzaad1ZTG02Y= Subject key identifier: 23:56:27:EA:4C:D2:54:9C:D7:B7:73:02:DB:56:A4:0A:4C:AD:6B:15 Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 06F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft Manifest number: 0697 Signing time: Fri 16 May 2025 23:00:38 +0000 Manifest this update: Fri 16 May 2025 23:00:37 +0000 Manifest next update: Fri 23 May 2025 23:00:37 +0000 Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: CZdmrH4WLBF92UubW4OGUZ0Szrku65KSjNb+ZAfAKPU=) 2: C7764CC6FCA311EEACCA2B5CC4F9AE02.roa (hash: w9hh7nGa+IzYQq91+LbOOZ2ZnQW7jBprbMIRTAiArhU=) 3: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: hcht/YXysh3X1dr8CaoJBxlMC3qbTJz+i6wrzv8Ms9A=) 4: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: gryi7fow5ocrp+N/LztoAg8/BLYRCP85MRszc11lYeg=) 5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: GOKQjlSRbohhc3e25wKXwO0I9oCyjdoNjW5acBKmw0A=) 6: A716CA94954611EC9B320352C4F9AE02.roa (hash: rLljdPy6+LM7XSfK8///MT+Df5srLXCvVNKfYK4p6bw=) 7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: /Fi2NyP9RW+oE4JZ2QosLJgdN+J2La4mxZzLwfkB21c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1783 (0x6f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: May 16 23:00:37 2025 GMT Not After : May 23 23:00:37 2025 GMT Subject: CN=6827c395-49cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:6e:86:12:3e:e6:6c:86:24:74:a6:e0:44: 37:b8:f5:2e:68:49:64:95:c3:0f:bc:47:98:78:2e: 52:e2:56:1e:e6:82:f7:6b:ed:b5:88:e8:85:1f:c5: 28:67:55:5c:ee:d3:60:ab:41:2c:99:8d:77:43:71: 0e:c2:a7:7a:fd:e4:95:10:fd:10:fd:3a:fe:62:a4: 1b:19:a7:b3:a3:14:9e:fc:44:82:ef:ec:b9:f1:96: 2d:7b:6e:bc:df:73:5b:dc:7d:9d:0e:d4:5b:6d:1d: 10:37:8e:d7:10:b1:20:3c:8a:cd:99:db:0b:8f:c9: d6:f0:65:34:be:da:74:17:99:61:66:74:1b:4a:18: ce:1d:6b:a9:ae:8e:2d:0c:83:ba:13:cc:ef:69:ac: b3:ef:36:3d:c1:98:c0:86:1a:5a:bc:51:94:40:c2: a7:97:2b:3a:34:2d:fe:4b:47:21:70:0c:81:09:33: a8:d3:e3:d7:78:96:7b:c0:50:8b:bd:af:0d:56:9d: 98:7b:13:df:22:21:69:0f:aa:95:85:20:7b:6f:6a: 93:0c:62:33:f8:70:ed:2d:6c:de:b8:00:51:4d:c2: cb:42:e6:7d:bb:41:93:70:17:7b:e5:ae:94:be:7e: ba:5f:72:60:fd:48:4c:f2:53:3c:39:d3:53:15:56: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:56:27:EA:4C:D2:54:9C:D7:B7:73:02:DB:56:A4:0A:4C:AD:6B:15 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:11:20:14:b5:ef:5f:52:52:86:2d:cf:cb:59:cc:e4:e6:8a: 0c:a4:73:58:f7:b8:dc:af:f1:47:98:4e:96:c1:f6:87:0b:ef: 84:8f:8e:0a:47:60:e0:3f:c8:ec:b9:84:6b:e4:6b:02:7a:4d: bc:c9:9c:e8:0e:b1:77:ed:f8:d6:7d:8e:c7:6c:e4:ec:48:a1: f9:b6:8a:09:c9:4a:21:56:69:c6:3a:b9:2a:9e:75:c7:cf:b7: 77:f1:f5:6e:71:90:b4:00:42:74:47:34:5f:0f:0f:b5:6d:86: 76:13:e9:6f:c0:3d:5c:85:8f:10:1c:bf:b6:64:df:5d:96:b4: f9:9a:55:6e:ee:e5:09:13:91:89:11:a8:40:37:52:0c:fa:96: 42:9f:e9:c3:a9:a6:85:df:3e:fe:b1:d5:97:7a:87:11:7b:e1: db:40:ac:12:5b:e8:95:e1:01:1a:ac:6b:55:c3:1f:a3:f6:43: 11:15:f7:85:2e:87:28:ca:07:1a:50:97:06:c1:ef:d1:3b:1d: db:53:98:80:f5:c3:2f:78:42:e9:4d:19:6d:9b:4f:55:3e:3d: 86:75:56:70:b4:6e:cd:81:cd:89:59:e9:d0:b5:b7:ac:00:ac: 18:b2:d4:66:5c:fc:67:ef:29:2a:fb:f9:47:f0:c1:04:aa:4c: 66:74:8c:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUwNTE2MjMwMDM3WhcNMjUwNTIzMjMwMDM3WjAYMRYwFAYD VQQDEw02ODI3YzM5NS00OWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqG1uhhI+5myGJHSm4EQ3uPUuaElklcMPvEeYeC5S4lYe5oL3a+21iOiFH8Uo Z1Vc7tNgq0EsmY13Q3EOwqd6/eSVEP0Q/Tr+YqQbGaezoxSe/ESC7+y58ZYte268 33Nb3H2dDtRbbR0QN47XELEgPIrNmdsLj8nW8GU0vtp0F5lhZnQbShjOHWupro4t DIO6E8zvaayz7zY9wZjAhhpavFGUQMKnlys6NC3+S0chcAyBCTOo0+PXeJZ7wFCL va8NVp2YexPfIiFpD6qVhSB7b2qTDGIz+HDtLWzeuABRTcLLQuZ9u0GTcBd75a6U vn66X3Jg/UhM8lM8OdNTFVbn4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNWJ+pM 0lSc17dzAttWpApMrWsVMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALESAUte9fUlKGLc/LWczk5ooMpHNY97jcr/FHmE6WwfaHC++Ej44K R2DgP8jsuYRr5GsCek28yZzoDrF37fjWfY7HbOTsSKH5tooJyUohVmnGOrkqnnXH z7d38fVucZC0AEJ0RzRfDw+1bYZ2E+lvwD1chY8QHL+2ZN9dlrT5mlVu7uUJE5GJ EahAN1IM+pZCn+nDqaaF3z7+sdWXeocRe+HbQKwSW+iV4QEarGtVwx+j9kMRFfeF LocoygcaUJcGwe/ROx3bU5iA9cMveELpTRltm09VPj2GdVZwtG7Ngc2JWenQtbes AKwYstRmXPxn7ykq+/lH8MEEqkxmdIww -----END CERTIFICATE-----Generated at Sat May 17 05:04:01 2025 by rpki-client