$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: JOUgazQwktTtSI23Aq+YQez2s9rR5vbR1OaYe+iWkrA= Subject key identifier: 0F:82:06:E1:1C:E5:DB:6B:96:74:82:F5:2E:5F:C7:69:B2:21:A5:E2 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 19FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 17EB Signing time: Tue 04 Nov 2025 16:57:49 +0000 Manifest this update: Tue 04 Nov 2025 16:57:48 +0000 Manifest next update: Tue 11 Nov 2025 16:57:48 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: GNhpjiXf4I2bU4/qEx2inAEZ4GUzOki9yJ0yfYSOXtM=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=) 4: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=) 5: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=) 6: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: sUeRjo4iDMTXRx9Mx6pxSJQSkY/CAgqRLrQP/NoXcBs=) 7: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6651 (0x19fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Nov 4 16:57:48 2025 GMT Not After : Nov 11 16:57:48 2025 GMT Subject: CN=690a308c-f8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:6c:8a:93:be:1c:de:bb:1f:57:e7:67:df: d0:19:36:2f:40:4c:c6:56:4c:e5:37:d3:5c:f4:3f: 00:17:3b:7d:26:87:56:d6:84:9b:6a:08:81:da:1f: ab:dd:f0:25:ce:bf:17:17:56:59:0e:45:32:1e:72: 42:5c:1f:2a:4b:22:09:10:df:26:81:8f:96:f1:1b: 45:82:52:fb:e4:e9:27:0d:bf:65:da:9e:fe:15:8b: 94:af:29:81:48:71:3e:8c:59:53:21:0d:62:5b:c8: 20:f5:d6:a3:c3:4f:b3:b2:be:55:63:cc:cc:b6:ca: ae:30:42:ba:12:33:ae:c0:a9:7d:c0:b2:e0:b7:77: 80:01:23:59:fd:1c:3d:9b:7e:4c:9d:4a:6f:2d:6b: ae:86:d7:19:cd:90:6c:a6:8d:09:c6:f6:a3:85:11: 91:04:6a:63:16:e7:1b:cb:7b:c1:16:07:a3:c8:71: 1b:39:49:ea:98:9a:60:20:df:7e:06:e7:3d:b0:91: 6c:6a:63:ea:24:ce:74:cb:f3:4d:60:db:30:3a:3a: e0:7c:32:ff:60:4d:4d:9b:52:4e:37:ea:20:75:c3: c1:03:a0:de:d0:9f:1c:0f:05:2a:73:d3:72:a5:1d: 0b:ae:8b:cc:85:e4:d3:80:cf:85:95:81:6a:c6:0c: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:82:06:E1:1C:E5:DB:6B:96:74:82:F5:2E:5F:C7:69:B2:21:A5:E2 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8f:0f:70:42:43:28:8a:0e:ac:81:92:75:55:30:b6:80:a2: e9:54:62:20:64:89:26:10:56:83:dd:7d:8a:a0:0a:73:36:8f: 1a:58:17:8a:b5:ba:c3:73:bf:8e:b3:a2:9d:f6:da:f2:f6:bf: f2:20:cb:45:9d:87:91:1b:98:f5:75:6d:42:70:b1:bf:24:4a: 96:46:bf:a0:36:b7:19:07:49:7d:2e:1c:96:8d:e7:f0:6a:01: 7b:77:5b:4b:80:7f:c0:a7:c4:59:dc:5c:0c:08:80:d0:02:cd: 37:f7:47:0a:5e:8e:c7:11:0f:78:b3:17:7c:bf:aa:8d:ca:0f: 02:ef:83:7f:d9:75:66:3a:f6:94:d5:ed:1a:1b:b6:09:d6:78: c8:b8:9d:d9:3e:eb:41:08:53:0b:a3:12:c8:2a:9b:05:d0:b9: de:8f:50:1e:19:1d:02:db:5f:9c:1e:a5:33:3a:4a:1f:83:23: 52:09:64:c2:9d:6d:bf:72:a1:85:9f:cd:98:df:b6:be:25:45: 97:2b:ae:ac:8f:4e:20:11:90:a9:58:00:e4:e2:4a:09:ac:0d: 04:85:7f:42:8c:51:a4:df:48:39:3f:b3:d3:42:d8:8b:2e:6b: 7c:43:83:6a:9e:ed:cc:e3:c0:55:9e:dc:4c:9c:2d:cc:8b:e3: 0d:93:f1:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjUxMTA0MTY1NzQ4WhcNMjUxMTExMTY1NzQ4WjAYMRYwFAYD VQQDEw02OTBhMzA4Yy1mOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AtsipO+HN67H1fnZ9/QGTYvQEzGVkzlN9Nc9D8AFzt9JodW1oSbagiB2h+r 3fAlzr8XF1ZZDkUyHnJCXB8qSyIJEN8mgY+W8RtFglL75OknDb9l2p7+FYuUrymB SHE+jFlTIQ1iW8gg9dajw0+zsr5VY8zMtsquMEK6EjOuwKl9wLLgt3eAASNZ/Rw9 m35MnUpvLWuuhtcZzZBspo0JxvajhRGRBGpjFucby3vBFgejyHEbOUnqmJpgIN9+ Buc9sJFsamPqJM50y/NNYNswOjrgfDL/YE1Nm1JON+ogdcPBA6De0J8cDwUqc9Ny pR0LrovMheTTgM+FlYFqxgx4kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+CBuEc 5dtrlnSC9S5fx2myIaXiMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALjw9wQkMoig6sgZJ1VTC2gKLpVGIgZIkmEFaD3X2KoApzNo8aWBeK tbrDc7+Os6Kd9try9r/yIMtFnYeRG5j1dW1CcLG/JEqWRr+gNrcZB0l9LhyWjefw agF7d1tLgH/Ap8RZ3FwMCIDQAs0390cKXo7HEQ94sxd8v6qNyg8C74N/2XVmOvaU 1e0aG7YJ1njIuJ3ZPutBCFMLoxLIKpsF0Lnej1AeGR0C21+cHqUzOkofgyNSCWTC nW2/cqGFn82Y37a+JUWXK66sj04gEZCpWADk4koJrA0EhX9CjFGk30g5P7PTQtiL Lmt8Q4Nqnu3M48BVntxMnC3Mi+MNk/F5 -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:18 2025 by rpki-client