$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json) Hash identifier: R2n+1QvVfjg6R+j1bwezxWKrBFE0G8EibhdogrIRAk4= Subject key identifier: 5B:53:65:D5:F9:27:5D:8C:E1:B2:20:10:04:3B:55:75:7E:78:2E:B8 Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft Manifest number: 06DC Signing time: Sat 23 Aug 2025 12:33:25 +0000 Manifest this update: Sat 23 Aug 2025 12:33:25 +0000 Manifest next update: Sat 30 Aug 2025 12:33:25 +0000 Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: 93TCChiqNw5LB0oqwELdm0fXHEeQyRL8LrS4BNSbVrA=) 2: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: 8/0p5mch1lOzxJGC3zlpDmvwoQsenGirWY8DqbHGuoU=) 3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: Cfqrfl0Q7E7E4GhK910Vq8lQBhtl7oKqC1/FgHItAsA=) 4: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: c+CQynLGvFw6zwfVMzfHa2UofKyQsyQszuE+ggwaCPA=) 5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: GOKQjlSRbohhc3e25wKXwO0I9oCyjdoNjW5acBKmw0A=) 6: A716CA94954611EC9B320352C4F9AE02.roa (hash: qiMy+zCmMBldsoS9j1R/9VIwq0fqKIHsFJqI5bZ3x10=) 7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: /Fi2NyP9RW+oE4JZ2QosLJgdN+J2La4mxZzLwfkB21c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 12:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Aug 23 12:33:25 2025 GMT Not After : Aug 30 12:33:25 2025 GMT Subject: CN=68a9b515-ff6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:32:de:26:3c:4a:f2:de:ca:55:71:6d:2d: 70:1a:78:b1:0e:ee:11:96:85:95:31:2d:07:13:bc: 6b:01:25:5f:4a:40:3b:47:a8:cc:4d:d0:d8:a6:72: 68:84:1e:13:f0:9e:57:32:64:ba:67:a1:bd:27:d9: 95:09:2a:56:5a:47:bf:a9:69:aa:89:16:87:b2:5a: 09:4e:39:38:e1:39:27:89:53:6c:f8:71:23:51:f4: 4c:38:90:3f:2c:c4:6e:1b:6b:9b:65:f3:1f:ed:e4: 5a:7b:0d:53:85:51:49:30:95:1e:11:e1:8d:01:0b: ba:ec:1d:2f:83:04:79:eb:45:f2:be:39:1b:a4:93: cb:bf:3e:eb:91:bc:1e:af:18:e8:74:01:b5:69:64: b3:cc:03:ff:21:7b:5a:05:eb:5b:cc:0b:5b:46:a4: 7c:83:6e:a2:00:9a:42:8b:90:5e:4f:48:74:af:8e: 69:dc:e1:e6:fa:a0:ea:c0:17:0a:e8:5f:47:f1:47: 5e:99:a8:9a:5d:1a:63:7d:0f:e6:0a:97:09:17:00: f5:13:8a:e6:90:7a:9a:f8:a3:fe:dd:1a:bf:6e:a7: c2:cf:64:f7:af:fc:aa:6d:7d:98:4c:65:99:ef:3b: a0:0a:27:24:31:46:13:b6:b0:72:87:24:fb:51:fa: 26:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:53:65:D5:F9:27:5D:8C:E1:B2:20:10:04:3B:55:75:7E:78:2E:B8 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:36:3e:1a:c9:8a:f8:26:b1:02:28:db:8c:07:d0:82:8a:6a: c7:94:d9:5c:65:9c:fb:be:4b:bc:62:93:97:e6:4e:eb:9b:2c: 04:cc:66:f2:0f:c4:5a:9b:99:b4:30:73:05:33:6b:19:d5:36: b4:28:b3:c6:84:87:e0:06:ec:90:85:41:d3:dd:fc:5a:a0:d1: 27:0c:45:b6:4a:7e:7b:09:83:25:8e:05:85:8d:10:58:87:85: 27:69:46:2c:fc:c8:f1:61:63:c3:86:b3:91:97:35:93:ee:43: a4:3e:28:dc:68:a4:29:f4:c7:07:87:46:37:e8:0c:e7:9f:7b: bc:6d:4c:45:6e:74:88:f0:60:ec:a9:cb:38:58:a0:76:be:9b: fd:2c:37:31:75:4a:fe:d1:6a:56:58:47:d3:51:cc:da:85:3e: bd:cc:e0:3d:4f:fe:c7:67:94:11:0d:10:be:76:c9:62:2f:f1: bb:82:19:e7:5b:7f:7f:82:66:d3:9d:c0:b2:78:75:92:35:bd: c6:08:69:75:63:7d:74:bb:05:a4:7f:93:1c:50:e0:24:2b:20: 21:2d:53:e4:61:7c:22:31:fa:21:de:00:c6:36:c0:7e:fe:ad: fd:18:db:44:e3:96:58:86:94:36:df:9c:c8:2f:7f:a9:c6:79: a5:80:99:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUwODIzMTIzMzI1WhcNMjUwODMwMTIzMzI1WjAYMRYwFAYD VQQDEw02OGE5YjUxNS1mZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslcy3iY8SvLeylVxbS1wGnixDu4RloWVMS0HE7xrASVfSkA7R6jMTdDYpnJo hB4T8J5XMmS6Z6G9J9mVCSpWWke/qWmqiRaHsloJTjk44TkniVNs+HEjUfRMOJA/ LMRuG2ubZfMf7eRaew1ThVFJMJUeEeGNAQu67B0vgwR560XyvjkbpJPLvz7rkbwe rxjodAG1aWSzzAP/IXtaBetbzAtbRqR8g26iAJpCi5BeT0h0r45p3OHm+qDqwBcK 6F9H8UdemaiaXRpjfQ/mCpcJFwD1E4rmkHqa+KP+3Rq/bqfCz2T3r/yqbX2YTGWZ 7zugCickMUYTtrByhyT7Ufom2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtTZdX5 J12M4bIgEAQ7VXV+eC64MB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMNj4ayYr4JrECKNuMB9CCimrHlNlcZZz7vku8YpOX5k7rmywEzGby D8Ram5m0MHMFM2sZ1Ta0KLPGhIfgBuyQhUHT3fxaoNEnDEW2Sn57CYMljgWFjRBY h4UnaUYs/MjxYWPDhrORlzWT7kOkPijcaKQp9McHh0Y36Aznn3u8bUxFbnSI8GDs qcs4WKB2vpv9LDcxdUr+0WpWWEfTUczahT69zOA9T/7HZ5QRDRC+dsliL/G7ghnn W39/gmbTncCyeHWSNb3GCGl1Y310uwWkf5McUOAkKyAhLVPkYXwiMfoh3gDGNsB+ /q39GNtE45ZYhpQ235zIL3+pxnmlgJkM -----END CERTIFICATE-----Generated at Sun Aug 24 00:51:34 2025 by rpki-client