$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json) Hash identifier: lxVEKeykA5QxEeJPxA9uy8GHiHwFThYQt0J7kmV5Iz4= Subject key identifier: B7:BA:8A:17:BE:11:34:23:99:31:6F:35:2C:ED:1F:6E:B3:68:93:44 Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft Manifest number: 068F Signing time: Mon 05 May 2025 10:33:29 +0000 Manifest this update: Mon 05 May 2025 10:33:29 +0000 Manifest next update: Mon 12 May 2025 10:33:29 +0000 Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: d0Z7EgecdYzsCUAFhTZD9fGN8SU5lFQgY6e/o9JmrWA=) 2: C7764CC6FCA311EEACCA2B5CC4F9AE02.roa (hash: w9hh7nGa+IzYQq91+LbOOZ2ZnQW7jBprbMIRTAiArhU=) 3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: gryi7fow5ocrp+N/LztoAg8/BLYRCP85MRszc11lYeg=) 4: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: qBSyYm549iy+a8EDu2vFxovVCFdMyyd8KGEsIOlUYDI=) 5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: GOKQjlSRbohhc3e25wKXwO0I9oCyjdoNjW5acBKmw0A=) 6: A716CA94954611EC9B320352C4F9AE02.roa (hash: rLljdPy6+LM7XSfK8///MT+Df5srLXCvVNKfYK4p6bw=) 7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: /Fi2NyP9RW+oE4JZ2QosLJgdN+J2La4mxZzLwfkB21c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 10:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: May 5 10:33:29 2025 GMT Not After : May 12 10:33:29 2025 GMT Subject: CN=681893f9-1b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:6d:b5:dd:99:02:d0:ef:0c:18:ae:70:03: c1:63:30:f6:8c:da:78:42:ff:23:7e:b6:18:82:52: c0:4f:70:0c:9b:cc:7b:b8:4f:8d:3a:4c:3c:a7:fa: 88:c4:f5:22:94:1d:49:67:85:90:6b:0e:da:9c:f8: fd:f6:c8:ea:ce:8d:98:2a:bf:03:7e:9b:2b:08:3c: 1b:d1:43:b9:12:1c:c1:67:ab:af:8f:9d:2a:4b:ab: 16:c3:b9:72:e6:ef:8b:47:9e:bf:c3:e7:67:bc:84: 98:95:f0:88:35:70:0d:0f:2e:a0:d4:54:1a:61:35: 21:cd:69:33:e3:1d:7d:67:f1:ce:fc:ae:bd:db:02: 76:be:46:a8:15:f8:20:ed:f0:15:85:cb:b5:4d:30: d3:02:8c:a5:6d:96:00:d7:fb:bb:b0:99:6f:18:e8: ea:78:ad:35:4d:cd:81:0c:a1:c9:2a:60:1e:c3:85: cb:08:80:e1:88:e8:39:a7:a8:78:74:03:96:f7:7c: 02:b5:fe:30:1b:7e:0d:a4:af:5d:e9:b2:a8:3d:25: bc:31:08:8d:84:e2:71:d9:77:f3:4e:d8:34:59:a6: 97:bb:a1:6d:07:bc:cc:a8:f0:1b:05:2d:48:0a:75: cd:f5:42:a5:68:1b:c5:1a:2a:64:21:77:ec:a7:69: 50:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BA:8A:17:BE:11:34:23:99:31:6F:35:2C:ED:1F:6E:B3:68:93:44 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:a4:72:1a:76:4f:34:6b:12:01:76:2a:8e:a3:2d:e4:c7:9b: 95:81:53:52:63:46:1a:26:1a:21:07:5e:3d:fc:7e:1a:93:5e: c2:a6:92:29:0f:45:26:1a:70:57:be:77:9d:b3:9c:05:d5:87: c2:29:65:96:44:65:19:8d:2f:41:0c:ad:11:52:a8:56:0d:fd: f2:8e:0e:cf:31:12:76:91:81:15:09:89:e7:3a:a9:f1:fb:97: 71:b0:d5:29:76:f7:ed:67:d4:7d:6c:b1:93:f5:0d:ef:af:e2: b2:9a:dc:db:b9:a0:ce:c8:6b:22:cc:03:53:52:2a:a9:1d:c4: c9:b6:43:15:53:3b:65:aa:e3:54:b6:4a:4a:6c:ee:4e:9a:b9: bc:6d:5b:8d:a4:49:c9:50:49:14:71:bb:0f:9b:5e:19:83:cb: 36:3d:43:1f:64:92:12:06:0d:a4:e9:fd:71:42:10:03:89:a5: 40:a5:e0:f1:0c:18:44:1c:fb:94:71:46:ad:00:0c:59:79:0b: f4:b1:8a:50:9e:e3:76:a7:4b:d9:90:6d:70:63:2e:24:90:12: ac:08:5d:d1:4e:6a:b2:53:ba:9e:77:29:9d:f6:1f:87:b4:08: df:e2:d0:e9:72:e0:12:35:c3:f6:13:e4:47:12:24:0a:12:2e: 97:a9:1f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUwNTA1MTAzMzI5WhcNMjUwNTEyMTAzMzI5WjAYMRYwFAYD VQQDEw02ODE4OTNmOS0xYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLZttd2ZAtDvDBiucAPBYzD2jNp4Qv8jfrYYglLAT3AMm8x7uE+NOkw8p/qI xPUilB1JZ4WQaw7anPj99sjqzo2YKr8DfpsrCDwb0UO5EhzBZ6uvj50qS6sWw7ly 5u+LR56/w+dnvISYlfCINXANDy6g1FQaYTUhzWkz4x19Z/HO/K692wJ2vkaoFfgg 7fAVhcu1TTDTAoylbZYA1/u7sJlvGOjqeK01Tc2BDKHJKmAew4XLCIDhiOg5p6h4 dAOW93wCtf4wG34NpK9d6bKoPSW8MQiNhOJx2XfzTtg0WaaXu6FtB7zMqPAbBS1I CnXN9UKlaBvFGipkIXfsp2lQYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLe6ihe+ ETQjmTFvNSztH26zaJNEMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMpHIadk80axIBdiqOoy3kx5uVgVNSY0YaJhohB149/H4ak17CppIp D0UmGnBXvneds5wF1YfCKWWWRGUZjS9BDK0RUqhWDf3yjg7PMRJ2kYEVCYnnOqnx +5dxsNUpdvftZ9R9bLGT9Q3vr+KymtzbuaDOyGsizANTUiqpHcTJtkMVUztlquNU tkpKbO5Omrm8bVuNpEnJUEkUcbsPm14Zg8s2PUMfZJISBg2k6f1xQhADiaVApeDx DBhEHPuUcUatAAxZeQv0sYpQnuN2p0vZkG1wYy4kkBKsCF3RTmqyU7qedymd9h+H tAjf4tDpcuASNcP2E+RHEiQKEi6XqR+A -----END CERTIFICATE-----Generated at Tue May 6 04:30:16 2025 by rpki-client