$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json) Hash identifier: HIGJjlLBkml3kEMrdrGdQbiWX7uysnAib33iKe1UtnI= Subject key identifier: 9D:C9:C9:37:A7:7A:C4:CA:FD:3E:3D:9C:09:4A:0F:8A:44:A3:F5:CA Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 071E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft Manifest number: 06B8 Signing time: Wed 02 Jul 2025 22:58:53 +0000 Manifest this update: Wed 02 Jul 2025 22:58:52 +0000 Manifest next update: Wed 09 Jul 2025 22:58:52 +0000 Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: MhaxdRRviBDTvQOf6wr9ORne0rH16GUOWKF++JxcTBw=) 2: C7764CC6FCA311EEACCA2B5CC4F9AE02.roa (hash: w9hh7nGa+IzYQq91+LbOOZ2ZnQW7jBprbMIRTAiArhU=) 3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: iN7rm8Wrk9fgKg1Lh3Xa/tBqsJImmURSqWf77QF7c2M=) 4: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: c+CQynLGvFw6zwfVMzfHa2UofKyQsyQszuE+ggwaCPA=) 5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: GOKQjlSRbohhc3e25wKXwO0I9oCyjdoNjW5acBKmw0A=) 6: A716CA94954611EC9B320352C4F9AE02.roa (hash: qiMy+zCmMBldsoS9j1R/9VIwq0fqKIHsFJqI5bZ3x10=) 7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: /Fi2NyP9RW+oE4JZ2QosLJgdN+J2La4mxZzLwfkB21c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Jul 2 22:58:52 2025 GMT Not After : Jul 9 22:58:52 2025 GMT Subject: CN=6865b9ac-8415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:8e:66:0e:cd:9c:f1:38:7d:cb:34:88:d8: 2e:d0:3d:1c:ce:f7:2b:c2:bc:33:73:f1:cb:a7:c7: 21:a9:22:2d:ff:01:65:ad:72:64:f1:9d:1c:dd:df: e3:80:ff:b1:c8:7f:dc:d1:4a:63:34:73:89:84:e9: e5:08:99:b4:2c:7b:6c:e4:f0:4f:5b:18:d4:89:38: 6d:4e:94:96:77:31:e6:2d:24:d0:38:3f:0e:47:60: cd:07:8c:77:1c:7b:2d:42:10:8c:ca:5e:ea:eb:19: ca:51:5c:5d:7b:d8:27:37:43:76:b7:20:ae:96:01: 97:6e:29:96:46:ce:c7:d9:d4:a6:3a:35:eb:12:e9: 16:a6:d4:ab:1b:b1:ee:c3:4a:78:8d:e6:9d:b4:a1: c1:c4:f4:7e:96:3d:c5:aa:73:a5:19:34:da:2b:64: 0f:79:6d:39:dd:b0:2f:2c:2a:da:fa:ff:29:74:cc: 82:8b:76:08:8e:51:1a:fa:cd:15:3c:15:ff:d4:e0: 43:d8:83:61:66:7a:7f:96:6b:e5:d9:40:92:c6:e6: e4:9f:04:49:2a:12:c1:7d:b9:5d:16:73:94:8a:f0: 2c:19:94:fd:e5:b7:12:28:cc:89:35:5a:09:08:98: fb:43:ea:cd:02:00:6b:a2:8e:43:ef:d9:3e:bb:e3: 03:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C9:C9:37:A7:7A:C4:CA:FD:3E:3D:9C:09:4A:0F:8A:44:A3:F5:CA X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fa:90:22:10:e6:7b:bd:85:7c:be:46:ce:33:59:b7:53:d1: 80:b4:79:83:62:3a:54:e1:9f:1a:9c:1b:97:6b:d3:00:7b:a9: 99:f7:02:05:19:2f:ee:a4:ec:b3:0c:b2:28:7d:2b:9f:1d:48: ca:c2:9f:05:97:f2:46:bc:04:76:05:4c:bb:66:7e:bc:9c:2d: 44:03:77:60:b6:05:de:f0:e0:13:b6:15:76:8a:c8:26:01:06: f3:7f:68:25:60:34:83:c5:af:ac:fa:92:bb:75:93:3e:80:70: 78:87:ee:cf:30:e0:53:7a:42:45:e5:9a:65:ff:8d:ff:df:d8: 8e:f2:39:12:34:13:f8:c1:85:56:d9:d9:56:67:75:42:d9:c3: bd:64:83:43:be:71:68:b0:f0:ba:62:a8:72:6e:e6:4e:21:e9: cf:3d:e4:01:45:42:39:07:8b:07:9a:c9:fa:66:fe:10:28:a6: eb:4d:1c:34:a0:38:c1:7e:72:24:35:8a:cf:09:df:8a:bd:83: 42:77:a9:4b:e3:c6:a5:f8:d8:7f:ae:bc:a2:0a:34:24:17:46: ce:95:b6:b5:44:da:cd:29:be:63:d8:97:b0:72:a5:2c:3f:e5: 6a:c0:c5:4b:20:8d:da:37:a6:fc:29:6d:cd:6f:de:82:0c:00: cc:cf:6f:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUwNzAyMjI1ODUyWhcNMjUwNzA5MjI1ODUyWjAYMRYwFAYD VQQDEw02ODY1YjlhYy04NDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscyOZg7NnPE4fcs0iNgu0D0czvcrwrwzc/HLp8chqSIt/wFlrXJk8Z0c3d/j gP+xyH/c0UpjNHOJhOnlCJm0LHts5PBPWxjUiThtTpSWdzHmLSTQOD8OR2DNB4x3 HHstQhCMyl7q6xnKUVxde9gnN0N2tyCulgGXbimWRs7H2dSmOjXrEukWptSrG7Hu w0p4jeadtKHBxPR+lj3FqnOlGTTaK2QPeW053bAvLCra+v8pdMyCi3YIjlEa+s0V PBX/1OBD2INhZnp/lmvl2UCSxubknwRJKhLBfbldFnOUivAsGZT95bcSKMyJNVoJ CJj7Q+rNAgBroo5D79k+u+MDdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3JyTen esTK/T49nAlKD4pEo/XKMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu+pAiEOZ7vYV8vkbOM1m3U9GAtHmDYjpU4Z8anBuXa9MAe6mZ9wIF GS/upOyzDLIofSufHUjKwp8Fl/JGvAR2BUy7Zn68nC1EA3dgtgXe8OATthV2isgm AQbzf2glYDSDxa+s+pK7dZM+gHB4h+7PMOBTekJF5Zpl/43/39iO8jkSNBP4wYVW 2dlWZ3VC2cO9ZINDvnFosPC6YqhybuZOIenPPeQBRUI5B4sHmsn6Zv4QKKbrTRw0 oDjBfnIkNYrPCd+KvYNCd6lL48al+Nh/rryiCjQkF0bOlba1RNrNKb5j2JewcqUs P+VqwMVLII3aN6b8KW3Nb96CDADMz29T -----END CERTIFICATE-----Generated at Fri Jul 4 01:13:29 2025 by rpki-client