$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json) Hash identifier: WFxt4dCb1ddT8+QBIyTb3hPQYNjyZdR0JBW2fluK3ys= Subject key identifier: 4B:14:9B:BF:57:1B:82:2F:B8:BE:C0:B3:4F:6B:47:99:B6:5D:28:E8 Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft Manifest number: 0710 Signing time: Tue 04 Nov 2025 22:34:49 +0000 Manifest this update: Tue 04 Nov 2025 22:34:48 +0000 Manifest next update: Tue 11 Nov 2025 22:34:48 +0000 Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: qSFMxw3CqqWsLqSVKT8BskydwO9Oc2LF6NXcV2ym9JQ=) 2: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: nVi2F1h98I6eFhDtm7NoIpz9Is13r6Zxvgjimh4KJP0=) 3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: Ybb2csXFZo9W1XG+GRQhzLexAF28aEoPNkvLGKQiexs=) 4: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: 4/7UnX5ze5wrjMqFOLuyIDjnmWsUK84zcdUUtFoXAm8=) 5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: uZyAHanV/dsvce0LE5DxDJIkDTak4REE2s1BDI3t2SM=) 6: A716CA94954611EC9B320352C4F9AE02.roa (hash: 29eINthckTF8RKNey1Kdeos3g3mQUi6TqxaM8+tcS1o=) 7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: JkA2VjRkGVaoGTtSe3EFAkpmSjP2mBiftG09Gd2raHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Nov 4 22:34:48 2025 GMT Not After : Nov 11 22:34:48 2025 GMT Subject: CN=690a7f89-fdaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:25:cd:43:e2:e8:de:7c:7d:ef:9f:5c:e9: 7b:0f:f1:08:ab:5a:66:35:e9:8a:48:7c:c3:3a:ea: 44:76:d9:07:85:b5:9c:6d:69:ed:e4:0f:70:4f:52: d8:16:c0:2b:06:13:c4:da:e6:da:26:40:ff:68:b3: bc:1c:24:69:b4:22:3f:e4:7e:8d:a0:6e:a9:c0:b1: 64:fd:45:b1:9f:69:4a:ca:22:7d:ae:2f:6b:ee:b0: ad:70:b6:38:dd:75:a2:fa:62:53:cb:cd:50:e7:c5: 28:c0:ee:03:e1:33:68:2b:08:48:16:43:25:3d:21: b8:1e:35:f8:2e:36:a5:f6:65:c5:77:5d:10:bf:5f: 61:c4:f8:90:3c:1f:3e:cd:c7:ac:66:fd:d5:93:04: cf:b4:67:27:45:7b:c6:ac:f2:99:eb:05:5e:23:a6: 6a:cb:6a:b3:df:6e:0a:5d:0f:3d:ee:fa:f8:25:4a: ab:b6:9e:10:f4:ae:05:cd:55:18:1f:22:81:6c:9f: 5e:2b:7f:18:44:c4:ef:f3:3e:ec:4c:79:8c:50:5d: 7f:90:42:88:55:88:48:a5:93:d4:b5:82:6b:7d:ec: 62:9d:19:29:e1:4e:f8:7d:2a:85:97:2e:12:5c:14: fb:c4:dc:c9:cf:7c:d8:86:49:b8:10:d8:d3:e6:08: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:14:9B:BF:57:1B:82:2F:B8:BE:C0:B3:4F:6B:47:99:B6:5D:28:E8 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:87:06:be:2f:57:89:34:87:24:c3:73:9e:eb:86:85:c5:05: 76:73:65:b1:34:cf:16:40:31:09:57:a9:b6:3b:41:0d:6a:39: d0:de:4d:df:e1:87:d3:97:c0:6e:ec:0f:42:dc:0c:94:16:c5: 77:46:2c:c0:da:12:2d:ef:8a:ca:9d:ff:a7:b7:11:4c:76:e8: 93:a1:78:df:01:7d:ba:28:de:8e:14:34:fb:d1:fd:7f:be:aa: 02:5d:31:27:eb:a7:5f:be:f0:82:19:69:02:27:27:13:ac:4c: 13:98:c0:be:25:1a:89:f5:df:59:e2:14:39:1a:3c:8f:6c:56: 0e:60:c4:26:21:03:42:2b:0d:ae:88:13:69:25:eb:ae:84:80: 24:99:21:3d:b0:54:87:5e:9d:03:44:e1:a7:63:66:f0:7d:1d: 92:be:e2:c4:71:10:da:ab:45:55:dd:38:1e:58:e3:0c:9e:46: 46:8c:dd:74:c1:9c:b7:60:f6:c9:78:89:cf:64:ac:67:81:cf: b9:94:da:d8:11:88:6e:4d:a0:26:e9:2b:56:9a:14:4b:ee:43: 2a:e1:4b:14:7d:29:b1:eb:a2:72:f3:82:46:2f:b7:31:00:a3: 5e:de:8b:df:ab:fb:95:54:23:26:f3:6a:e7:11:f4:fb:2b:08: 04:c3:be:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUxMTA0MjIzNDQ4WhcNMjUxMTExMjIzNDQ4WjAYMRYwFAYD VQQDEw02OTBhN2Y4OS1mZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyAlzUPi6N58fe+fXOl7D/EIq1pmNemKSHzDOupEdtkHhbWcbWnt5A9wT1LY FsArBhPE2ubaJkD/aLO8HCRptCI/5H6NoG6pwLFk/UWxn2lKyiJ9ri9r7rCtcLY4 3XWi+mJTy81Q58UowO4D4TNoKwhIFkMlPSG4HjX4Ljal9mXFd10Qv19hxPiQPB8+ zcesZv3VkwTPtGcnRXvGrPKZ6wVeI6Zqy2qz324KXQ897vr4JUqrtp4Q9K4FzVUY HyKBbJ9eK38YRMTv8z7sTHmMUF1/kEKIVYhIpZPUtYJrfexinRkp4U74fSqFly4S XBT7xNzJz3zYhkm4ENjT5gj0XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsUm79X G4IvuL7As09rR5m2XSjoMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJhwa+L1eJNIckw3Oe64aFxQV2c2WxNM8WQDEJV6m2O0ENajnQ3k3f 4YfTl8Bu7A9C3AyUFsV3RizA2hIt74rKnf+ntxFMduiToXjfAX26KN6OFDT70f1/ vqoCXTEn66dfvvCCGWkCJycTrEwTmMC+JRqJ9d9Z4hQ5GjyPbFYOYMQmIQNCKw2u iBNpJeuuhIAkmSE9sFSHXp0DROGnY2bwfR2SvuLEcRDaq0VV3TgeWOMMnkZGjN10 wZy3YPbJeInPZKxngc+5lNrYEYhuTaAm6StWmhRL7kMq4UsUfSmx66Jy84JGL7cx AKNe3ovfq/uVVCMm82rnEfT7KwgEw77J -----END CERTIFICATE-----Generated at Wed Nov 5 21:13:06 2025 by rpki-client