$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: ew36OA6T3sLv5/67U/I97NmJqEC27GVlUSx5exjWnDs= Subject key identifier: 99:C2:F9:8D:15:53:4E:24:72:0B:50:09:EF:F9:C0:FB:88:59:87:8B Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 16CA Signing time: Fri 16 May 2025 17:08:44 +0000 Manifest this update: Fri 16 May 2025 17:08:43 +0000 Manifest next update: Fri 23 May 2025 17:08:43 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: L4vu/ZGnIog7H0WXCexquOqdAomoRJDskSsZfbLinLw=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: F7+/UI/IdrG7UJylIwMQeWeh8x4KccRZsFSY0IMAJig=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: G9R6UKF81vPpeZEj71HVNBUREkX7yk3WJ1Q6tTRHYYM=) 4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: kIvT/50E2laNc1gLfjO5rKE/sWwcpe4nrifpeBT23BI=) 5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: j6prxSOt5QlgU/NV/soMWbDX95ZjTIwaOn33GpJLHDk=) 6: 6D8B68F2ED9A11EF9E539B3FC4F9AE02.roa (hash: kZ+jd8B8AcPwmwughSCwbT73jv2WJDSnOzfRO+UQdiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6201 (0x1839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: May 16 17:08:43 2025 GMT Not After : May 23 17:08:43 2025 GMT Subject: CN=6827711b-77d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:7e:65:6b:e2:f8:ed:f8:24:48:cb:6b:28: 15:56:3a:d0:4c:35:f4:14:da:8b:7d:11:95:68:72: ef:e6:38:43:44:b5:6e:6f:01:68:57:0d:eb:ae:c2: 1d:87:a4:c8:7c:08:f7:84:81:80:0a:f8:60:42:0a: 15:97:aa:89:28:3a:8d:51:e6:17:ef:ac:cd:6d:74: c8:7a:03:6e:ca:09:62:fc:93:76:f3:d3:d4:7c:e2: 89:54:0d:5a:b1:b2:ca:c5:8d:72:36:2d:5a:75:51: f4:e4:c0:3a:1f:8d:b7:40:0f:88:9f:68:97:8e:56: 6a:6e:93:35:b5:52:40:3a:98:37:9f:5e:67:e7:e7: a4:aa:c1:49:e1:96:3d:0d:5d:4d:66:91:fe:25:07: cc:8d:bc:04:4d:8c:e2:35:b1:3e:48:70:04:03:ed: 9b:fc:1f:c8:b1:15:f8:71:6e:b2:8d:fd:ff:3a:50: 11:5a:18:4c:37:2e:ae:da:c3:35:57:e3:84:95:56: 2f:77:d4:41:76:09:08:2d:41:1c:6f:d7:e8:ed:c5: 74:34:74:ff:6d:69:fa:62:11:c3:b2:3e:93:53:27: 99:41:ba:c9:c1:ea:d3:1a:76:df:9e:d6:0c:5f:76: 1d:28:8e:3a:c4:3e:2e:b3:12:11:cb:a5:41:5a:6a: 6b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C2:F9:8D:15:53:4E:24:72:0B:50:09:EF:F9:C0:FB:88:59:87:8B X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:68:56:80:fd:96:31:6e:56:c9:cc:9d:c7:47:64:f2:3e:95: 44:88:03:58:1b:d8:f1:40:f3:d0:38:22:f9:42:c1:77:7d:4d: e0:69:48:7d:4c:27:83:ad:ab:41:af:cd:3b:df:6a:4c:f3:1a: 5a:22:db:38:93:05:b7:0b:fd:d2:a0:de:5b:0d:29:b2:44:cb: 81:c7:34:c9:f2:9c:57:82:96:57:0b:99:9d:a6:6d:4b:16:36: 13:ee:dc:d7:24:2c:b8:51:3e:16:67:b3:a1:ca:b9:b5:c8:f6: 8d:d3:67:5b:1c:b9:b1:3b:b8:0f:b7:08:f9:3f:99:64:21:b7: cc:2f:22:35:d2:ee:e3:b6:7a:18:2f:ad:4d:28:8d:fe:79:14: 25:cc:b5:0b:e9:e4:78:b5:45:01:2a:af:f6:e3:08:6b:76:9e: 19:c0:38:ee:7b:71:46:5f:c4:78:81:ce:62:86:f6:b9:02:2e: 75:0c:72:a0:a2:61:07:4c:54:c3:92:86:b5:0b:92:55:22:2f: cb:0b:52:c6:ca:73:3c:b7:6d:5f:fd:00:42:4f:24:e2:3f:20: 0a:f6:14:8c:e3:d2:15:84:3d:4e:7b:3d:30:af:7f:3a:7e:72: e8:0f:da:e9:ca:75:b8:75:af:d9:ab:52:68:bf:d1:d9:f7:39: f3:89:c6:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjUwNTE2MTcwODQzWhcNMjUwNTIzMTcwODQzWjAYMRYwFAYD VQQDEw02ODI3NzExYi03N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNV+ZWvi+O34JEjLaygVVjrQTDX0FNqLfRGVaHLv5jhDRLVubwFoVw3rrsId h6TIfAj3hIGACvhgQgoVl6qJKDqNUeYX76zNbXTIegNuygli/JN289PUfOKJVA1a sbLKxY1yNi1adVH05MA6H423QA+In2iXjlZqbpM1tVJAOpg3n15n5+ekqsFJ4ZY9 DV1NZpH+JQfMjbwETYziNbE+SHAEA+2b/B/IsRX4cW6yjf3/OlARWhhMNy6u2sM1 V+OElVYvd9RBdgkILUEcb9fo7cV0NHT/bWn6YhHDsj6TUyeZQbrJwerTGnbfntYM X3YdKI46xD4usxIRy6VBWmprlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnC+Y0V U04kcgtQCe/5wPuIWYeLMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHaFaA/ZYxblbJzJ3HR2TyPpVEiANYG9jxQPPQOCL5QsF3fU3gaUh9 TCeDratBr80732pM8xpaIts4kwW3C/3SoN5bDSmyRMuBxzTJ8pxXgpZXC5mdpm1L FjYT7tzXJCy4UT4WZ7Ohyrm1yPaN02dbHLmxO7gPtwj5P5lkIbfMLyI10u7jtnoY L61NKI3+eRQlzLUL6eR4tUUBKq/24whrdp4ZwDjue3FGX8R4gc5ihva5Ai51DHKg omEHTFTDkoa1C5JVIi/LC1LGynM8t21f/QBCTyTiPyAK9hSM49IVhD1Oez0wr386 fnLoD9rpynW4da/Zq1Jov9HZ9znzicYn -----END CERTIFICATE-----Generated at Sat May 17 02:36:03 2025 by rpki-client