$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json) Hash identifier: SDTHst/CUt63akwQ0fcsMqUGO3oltlzttNcaTI+6aK8= Subject key identifier: A4:44:0D:29:AE:AA:02:12:F4:42:91:D0:28:8D:E0:82:FF:8C:3D:63 Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 0780 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft Manifest number: 0708 Signing time: Sun 19 Oct 2025 00:03:19 +0000 Manifest this update: Sun 19 Oct 2025 00:03:18 +0000 Manifest next update: Sun 26 Oct 2025 00:03:18 +0000 Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: mJtQ7F5nyU0SLPiWxHtCuP+934E6zuxIEQIReNMWsak=) 2: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: nVi2F1h98I6eFhDtm7NoIpz9Is13r6Zxvgjimh4KJP0=) 3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: Ybb2csXFZo9W1XG+GRQhzLexAF28aEoPNkvLGKQiexs=) 4: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: 4/7UnX5ze5wrjMqFOLuyIDjnmWsUK84zcdUUtFoXAm8=) 5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: uZyAHanV/dsvce0LE5DxDJIkDTak4REE2s1BDI3t2SM=) 6: A716CA94954611EC9B320352C4F9AE02.roa (hash: 29eINthckTF8RKNey1Kdeos3g3mQUi6TqxaM8+tcS1o=) 7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: JkA2VjRkGVaoGTtSe3EFAkpmSjP2mBiftG09Gd2raHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Oct 19 00:03:18 2025 GMT Not After : Oct 26 00:03:18 2025 GMT Subject: CN=68f42ac6-2172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:8c:1e:4c:72:20:7f:d6:fc:53:89:83:a5: 22:87:47:4d:83:9f:ea:dc:ed:3a:7a:74:85:e8:c6: 3b:c7:52:51:ca:97:21:90:24:57:52:a5:81:d5:79: 88:49:82:41:f5:24:f7:9f:88:3d:66:5e:40:b3:6e: 54:b6:d7:b0:ae:67:92:d5:c5:db:63:25:80:06:a8: b9:63:e1:09:2d:6c:50:f2:ae:df:d0:f4:07:e9:72: 8f:68:6f:30:84:aa:92:4d:1b:65:f0:b4:91:74:56: d2:7d:1a:e1:32:7c:e0:ba:99:24:e2:c5:ad:c3:f7: d9:be:1a:2c:d4:84:8a:46:5e:93:ff:47:d4:8d:d0: 42:ba:33:dd:d9:15:99:1d:51:ee:da:a4:c4:bb:ce: ac:51:63:95:37:d3:75:d6:d1:cd:53:e1:82:13:b6: 60:92:3a:37:3e:33:68:19:17:52:85:47:98:e6:0c: 43:f4:7f:f4:ec:86:90:84:25:d3:e7:79:da:14:f3: 1f:58:1f:e1:95:e4:d5:6a:eb:19:40:08:46:e9:6f: 80:dd:d1:73:54:a4:29:b0:7d:7a:9e:96:e0:8f:81: f7:2e:0a:36:2e:21:41:56:34:28:75:69:89:7d:a1: 36:ab:69:3a:62:d8:94:c7:81:81:8b:53:ff:33:82: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:44:0D:29:AE:AA:02:12:F4:42:91:D0:28:8D:E0:82:FF:8C:3D:63 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c9:e6:e7:a0:ab:7d:07:26:37:70:46:10:56:0f:3b:34:67: 7f:ae:47:cf:68:b1:e2:d8:79:31:50:77:79:b5:37:b4:87:e3: 86:2c:dc:2f:80:bd:c6:c2:4e:fc:85:b0:df:a6:7c:bc:8d:b4: 10:7c:95:08:72:9d:ec:d5:e0:39:20:fd:4a:fb:3f:99:af:1c: fd:f2:ca:31:0e:82:e5:29:43:18:87:14:1d:a6:3f:9b:e8:b5: 24:17:df:6b:a4:e7:e8:87:67:a5:1a:25:98:80:dc:38:70:a8: ef:4f:29:9d:a9:0d:b6:cf:a5:ea:5b:e4:c9:ca:c8:90:6c:18: c1:af:b3:05:a7:c0:0b:30:26:9c:83:16:ee:c0:24:d9:3a:0a: 80:3d:50:90:75:ff:d5:67:5c:56:b0:f4:b9:78:ac:1f:20:7b: 5a:f4:99:05:6f:fc:be:ac:8d:6b:45:77:94:be:ec:15:89:d0: 17:31:74:67:2f:af:2e:82:70:ae:68:b3:be:b4:48:c3:e0:4c: 6f:c7:92:35:b1:91:44:b9:cb:20:15:f7:81:22:c5:30:a8:ad: 85:aa:f3:d2:24:d7:d8:a3:66:eb:80:5e:92:7a:c5:db:98:1c: ee:23:81:dd:c1:cc:ee:e4:1d:5b:6f:71:05:ce:b5:91:d1:41: 6b:db:4a:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUxMDE5MDAwMzE4WhcNMjUxMDI2MDAwMzE4WjAYMRYwFAYD VQQDEw02OGY0MmFjNi0yMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswKMHkxyIH/W/FOJg6Uih0dNg5/q3O06enSF6MY7x1JRypchkCRXUqWB1XmI SYJB9ST3n4g9Zl5As25UttewrmeS1cXbYyWABqi5Y+EJLWxQ8q7f0PQH6XKPaG8w hKqSTRtl8LSRdFbSfRrhMnzgupkk4sWtw/fZvhos1ISKRl6T/0fUjdBCujPd2RWZ HVHu2qTEu86sUWOVN9N11tHNU+GCE7Zgkjo3PjNoGRdShUeY5gxD9H/07IaQhCXT 53naFPMfWB/hleTVausZQAhG6W+A3dFzVKQpsH16npbgj4H3Lgo2LiFBVjQodWmJ faE2q2k6YtiUx4GBi1P/M4L3MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKREDSmu qgIS9EKR0CiN4IL/jD1jMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCayebnoKt9ByY3cEYQVg87NGd/rkfPaLHi2HkxUHd5tTe0h+OGLNwv gL3Gwk78hbDfpny8jbQQfJUIcp3s1eA5IP1K+z+Zrxz98soxDoLlKUMYhxQdpj+b 6LUkF99rpOfoh2elGiWYgNw4cKjvTymdqQ22z6XqW+TJysiQbBjBr7MFp8ALMCac gxbuwCTZOgqAPVCQdf/VZ1xWsPS5eKwfIHta9JkFb/y+rI1rRXeUvuwVidAXMXRn L68ugnCuaLO+tEjD4Exvx5I1sZFEucsgFfeBIsUwqK2FqvPSJNfYo2brgF6SesXb mBzuI4Hdwczu5B1bb3EFzrWR0UFr20ps -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:38 2025 by rpki-client