$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: xaKAZT3vOPNfNz6cLcyg4h6NCx7kfk+5+0lwdYxbJSY= Subject key identifier: 7D:0F:3E:3C:0A:40:97:F7:6F:0F:CC:5A:DE:7D:23:BE:63:AB:F7:F2 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1930 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 1769 Signing time: Fri 22 Aug 2025 17:00:49 +0000 Manifest this update: Fri 22 Aug 2025 17:00:48 +0000 Manifest next update: Fri 29 Aug 2025 17:00:48 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: FPZ4IVY2MHJyCF/5tSbQUV1M6n6qAkSxiHKKLDqLJx0=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=) 4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=) 5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=) 6: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: bKUs2FCkPNmMAj51EyqjN767TDd443hBV4PsE7lCiRw=) 7: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6448 (0x1930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Aug 22 17:00:48 2025 GMT Not After : Aug 29 17:00:48 2025 GMT Subject: CN=68a8a241-7170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:95:6b:24:c3:a8:78:be:9e:15:9c:a0:f9: 29:47:ae:22:29:6b:65:76:b1:9e:0f:8c:6e:cb:97: 27:60:21:55:5d:76:14:c8:3a:1f:50:f2:23:c9:63: c8:90:a9:1c:ef:4c:20:bc:29:f6:04:f1:0c:f1:9e: 20:6f:f2:4f:da:cb:10:34:84:c2:e8:e5:82:1d:d6: ac:90:e8:40:41:d5:6a:37:47:8a:0b:5e:9a:95:6d: 2e:a5:ae:a7:c0:70:86:f2:ce:af:9d:08:de:4b:15: 06:1b:ee:fd:5b:18:7e:fe:43:0f:8d:9a:f4:81:bb: 90:54:55:b2:79:d5:c3:35:33:81:39:11:54:59:2c: 9d:32:2f:eb:d1:bf:e0:6d:75:49:20:e1:8c:cb:a4: fc:31:d5:74:24:93:a7:2b:a2:39:b2:83:06:1b:23: 68:d8:a1:41:87:60:5c:fa:55:49:c3:b9:a2:b3:cb: aa:89:2c:f1:a5:22:c3:8a:ec:a9:8c:7f:65:bc:c1: 7a:1c:70:80:3d:82:7b:c9:e5:a3:d2:1b:34:0d:0b: 2a:bd:aa:80:3c:d4:a4:86:67:4e:da:50:64:8a:07: bc:dd:dc:b7:d7:eb:76:bf:e7:c8:2f:04:6e:55:6d: 31:a1:46:03:a8:f6:a1:18:89:19:5f:42:65:00:6f: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0F:3E:3C:0A:40:97:F7:6F:0F:CC:5A:DE:7D:23:BE:63:AB:F7:F2 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f5:d9:15:e7:d2:72:8f:fc:63:38:53:79:f3:88:2f:67:a9: 35:0a:dc:f2:c0:3c:0e:3f:dd:41:e8:7d:33:4b:53:d0:b8:ad: 49:18:cf:f3:04:50:4f:0d:3e:08:23:14:09:a9:cc:3a:cd:de: 89:45:6f:58:9b:70:72:ab:4b:8e:14:f4:01:ac:0d:5b:33:56: 35:e2:35:e6:d4:c1:51:34:e0:ab:8a:f2:8e:91:9c:bc:e3:aa: a5:5b:5a:ab:c9:55:b3:e4:3d:a2:3b:d6:dd:0c:c4:bb:0a:02: 6a:05:d5:c6:46:12:03:0f:6e:e9:9c:d8:59:cc:7c:67:de:e1: 4f:a4:32:4e:8c:f9:46:ef:3a:d6:f4:da:c0:39:f9:9f:e3:eb: b6:d6:85:5f:00:3a:fa:54:dc:19:f0:53:a0:a6:fa:30:4b:b7: a0:9a:c9:50:89:b7:a7:87:39:1c:ab:04:27:ad:7b:86:04:85: a6:7a:26:5b:c9:bf:ca:f0:74:f0:89:f1:41:56:cf:a3:07:90: 9e:ec:3c:9b:57:41:45:b0:62:59:81:71:91:94:f8:7c:b2:3e: 04:0d:29:a3:67:bb:65:c5:fd:28:31:50:37:98:a0:43:73:f2: 73:11:12:ff:ba:04:1f:cf:53:26:ce:5f:47:5f:0c:4a:b4:84: a9:6a:18:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjUwODIyMTcwMDQ4WhcNMjUwODI5MTcwMDQ4WjAYMRYwFAYD VQQDEw02OGE4YTI0MS03MTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwSVayTDqHi+nhWcoPkpR64iKWtldrGeD4xuy5cnYCFVXXYUyDofUPIjyWPI kKkc70wgvCn2BPEM8Z4gb/JP2ssQNITC6OWCHdaskOhAQdVqN0eKC16alW0upa6n wHCG8s6vnQjeSxUGG+79Wxh+/kMPjZr0gbuQVFWyedXDNTOBORFUWSydMi/r0b/g bXVJIOGMy6T8MdV0JJOnK6I5soMGGyNo2KFBh2Bc+lVJw7mis8uqiSzxpSLDiuyp jH9lvMF6HHCAPYJ7yeWj0hs0DQsqvaqAPNSkhmdO2lBkige83dy31+t2v+fILwRu VW0xoUYDqPahGIkZX0JlAG/UUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0PPjwK QJf3bw/MWt59I75jq/fyMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ9dkV59Jyj/xjOFN584gvZ6k1CtzywDwOP91B6H0zS1PQuK1JGM/z BFBPDT4IIxQJqcw6zd6JRW9Ym3Byq0uOFPQBrA1bM1Y14jXm1MFRNOCrivKOkZy8 46qlW1qryVWz5D2iO9bdDMS7CgJqBdXGRhIDD27pnNhZzHxn3uFPpDJOjPlG7zrW 9NrAOfmf4+u21oVfADr6VNwZ8FOgpvowS7egmslQibenhzkcqwQnrXuGBIWmeiZb yb/K8HTwifFBVs+jB5Ce7DybV0FFsGJZgXGRlPh8sj4EDSmjZ7tlxf0oMVA3mKBD c/JzERL/ugQfz1Mmzl9HXwxKtISpahiG -----END CERTIFICATE-----Generated at Sat Aug 23 07:06:54 2025 by rpki-client