$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: x0fkaifdrBm0pIrR2JUt4g31Vog3/4ihFzZ1z6cK/xY= Subject key identifier: B9:B1:0E:D8:49:4B:9F:91:CC:A9:FA:3F:24:A4:AB:C6:D3:B8:E9:EF Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 18AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 1713 Signing time: Wed 02 Jul 2025 17:03:38 +0000 Manifest this update: Wed 02 Jul 2025 17:03:38 +0000 Manifest next update: Wed 09 Jul 2025 17:03:38 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: 2Y1qsbHRrbAUyed2DSIGGWW9Dydw5rrFS35HzNpqeMk=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: F7+/UI/IdrG7UJylIwMQeWeh8x4KccRZsFSY0IMAJig=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: G9R6UKF81vPpeZEj71HVNBUREkX7yk3WJ1Q6tTRHYYM=) 4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: kIvT/50E2laNc1gLfjO5rKE/sWwcpe4nrifpeBT23BI=) 5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: j6prxSOt5QlgU/NV/soMWbDX95ZjTIwaOn33GpJLHDk=) 6: 6D8B68F2ED9A11EF9E539B3FC4F9AE02.roa (hash: yx4fiWkeXS2J98lhCqqoYpBguCgiCzXNzrG9TkgDJWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6314 (0x18aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Jul 2 17:03:38 2025 GMT Not After : Jul 9 17:03:38 2025 GMT Subject: CN=6865666a-25fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:25:23:70:43:9f:8c:4d:dd:3d:12:e5:a7: fc:79:ba:09:9a:44:23:b6:9a:e7:36:a6:5b:ba:aa: 5a:d1:90:b6:c2:1e:2e:7d:4a:7a:35:f0:85:38:14: 1c:4e:27:45:1f:2d:79:d7:02:7a:5a:2a:83:73:f6: 90:a9:c6:60:ec:b9:98:94:72:df:ee:17:60:20:55: 75:7a:6b:05:4c:27:8a:2e:68:da:67:7f:50:5c:af: 32:8e:4c:75:26:a3:d8:ae:7b:6c:7a:7d:14:f9:1c: 48:29:60:3a:9a:88:fc:42:e7:5c:9c:6d:46:1a:c3: 2a:ab:94:23:e6:71:fc:92:7b:4c:bb:95:2d:15:5c: 19:55:a1:43:3d:4c:32:f5:22:45:7b:d9:8b:b0:33: 13:b6:be:bb:ac:2c:41:48:67:73:10:60:4b:04:64: 62:4a:0c:e6:81:45:be:c6:2b:bb:8c:fa:8d:4f:1a: 12:ff:e2:da:ba:f1:7d:f7:cb:dc:c3:3e:3c:19:d1: a0:59:78:54:ff:51:c3:f8:d1:0f:33:d5:da:b9:57: 39:70:c5:ae:f9:b1:1c:df:62:60:6b:d2:c8:68:1a: 4b:a5:9d:bd:0f:1f:24:f7:88:09:25:10:d1:a9:d0: 43:99:d4:18:f4:d6:e2:aa:7d:6a:73:2e:8e:b0:f5: 60:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B1:0E:D8:49:4B:9F:91:CC:A9:FA:3F:24:A4:AB:C6:D3:B8:E9:EF X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:9b:b4:b4:ea:2b:b4:ff:86:bd:cf:9e:72:97:21:88:0c:1d: e9:14:07:eb:f4:ce:cb:58:40:37:39:75:1f:f5:6e:42:12:50: f7:b9:be:d4:f2:7e:8e:86:be:53:86:88:19:38:5f:55:d0:d3: ae:ed:63:df:3f:38:36:1c:24:39:71:aa:a8:4f:38:a3:8d:f7: f1:de:09:9a:e6:4c:fb:26:79:71:89:4f:32:41:1f:3d:d4:6a: d3:8d:72:f1:c1:7c:5c:ec:7c:11:1c:15:0d:52:71:f9:9e:b6: 9f:b4:ea:1d:54:6c:68:2c:7c:8f:0e:98:00:39:3e:a7:ad:38: d7:5a:8e:4f:0f:b5:56:21:11:23:0b:c4:99:a3:32:72:ac:76: 17:52:0b:c6:08:e6:ac:e0:6a:aa:07:e9:ea:0b:3c:5b:31:55: eb:cd:03:a3:ac:fc:6c:78:1e:0a:97:c5:0f:3d:30:84:e2:ac: 01:c4:52:d5:68:a4:a8:ce:a6:7d:0d:2d:c0:b7:f6:0d:74:35: 14:d1:52:bb:1c:e9:80:01:42:94:4c:3c:5d:f2:2b:aa:49:d4: 8a:1a:79:94:bb:6f:32:48:06:7b:b8:c4:3c:a5:f0:cc:82:49: 05:61:16:67:6c:6d:db:d9:f2:c5:9d:3a:27:5b:3b:27:2f:0f: 6e:6d:bb:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjUwNzAyMTcwMzM4WhcNMjUwNzA5MTcwMzM4WjAYMRYwFAYD VQQDEw02ODY1NjY2YS0yNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8clI3BDn4xN3T0S5af8eboJmkQjtprnNqZbuqpa0ZC2wh4ufUp6NfCFOBQc TidFHy151wJ6WiqDc/aQqcZg7LmYlHLf7hdgIFV1emsFTCeKLmjaZ39QXK8yjkx1 JqPYrntsen0U+RxIKWA6moj8QudcnG1GGsMqq5Qj5nH8kntMu5UtFVwZVaFDPUwy 9SJFe9mLsDMTtr67rCxBSGdzEGBLBGRiSgzmgUW+xiu7jPqNTxoS/+LauvF998vc wz48GdGgWXhU/1HD+NEPM9XauVc5cMWu+bEc32Jga9LIaBpLpZ29Dx8k94gJJRDR qdBDmdQY9Nbiqn1qcy6OsPVgdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmxDthJ S5+RzKn6PySkq8bTuOnvMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2m7S06iu0/4a9z55ylyGIDB3pFAfr9M7LWEA3OXUf9W5CElD3ub7U 8n6Ohr5ThogZOF9V0NOu7WPfPzg2HCQ5caqoTzijjffx3gma5kz7JnlxiU8yQR89 1GrTjXLxwXxc7HwRHBUNUnH5nraftOodVGxoLHyPDpgAOT6nrTjXWo5PD7VWIREj C8SZozJyrHYXUgvGCOas4GqqB+nqCzxbMVXrzQOjrPxseB4Kl8UPPTCE4qwBxFLV aKSozqZ9DS3At/YNdDUU0VK7HOmAAUKUTDxd8iuqSdSKGnmUu28ySAZ7uMQ8pfDM gkkFYRZnbG3b2fLFnTonWzsnLw9ubbts -----END CERTIFICATE-----Generated at Thu Jul 3 08:54:21 2025 by rpki-client