$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: HKomFnl5iZGP0oJK6C348nefXSRe4A600JhCXw51QQE= Subject key identifier: 0F:38:B6:6D:5B:07:EF:19:68:81:20:6F:9C:C1:F5:9E:58:D2:7A:2C Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 189B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 1706 Signing time: Sat 14 Jun 2025 16:51:09 +0000 Manifest this update: Sat 14 Jun 2025 16:51:08 +0000 Manifest next update: Sat 21 Jun 2025 16:51:08 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: YHf1+Iah7lTM00FUp6yMEvq3t45JKP348JhR1hOL4c0=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: F7+/UI/IdrG7UJylIwMQeWeh8x4KccRZsFSY0IMAJig=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: G9R6UKF81vPpeZEj71HVNBUREkX7yk3WJ1Q6tTRHYYM=) 4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: kIvT/50E2laNc1gLfjO5rKE/sWwcpe4nrifpeBT23BI=) 5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: j6prxSOt5QlgU/NV/soMWbDX95ZjTIwaOn33GpJLHDk=) 6: 6D8B68F2ED9A11EF9E539B3FC4F9AE02.roa (hash: ruR/ShQIv0dCG3FeCHomTrHYuPdOIn8lj4JNUtTPIFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6299 (0x189b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Jun 14 16:51:08 2025 GMT Not After : Jun 21 16:51:08 2025 GMT Subject: CN=684da87c-f7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c1:2b:8f:0e:49:f3:eb:6d:52:71:d6:b0:7f: 61:56:ed:6d:d1:96:d3:35:b8:c0:f4:c3:96:42:82: 68:ba:79:25:c9:f2:34:14:27:85:84:0b:33:b1:9c: ae:73:46:f1:48:2c:d0:b7:ff:aa:c2:55:60:dc:e7: 3f:63:ab:2e:b2:4f:ee:d8:c2:be:fd:94:32:f5:7f: f0:9a:70:a2:05:9b:21:11:b4:c2:5e:eb:6a:6a:67: 64:23:8f:81:57:f2:64:ba:bd:4c:4b:c6:ba:f7:f5: 74:77:03:d3:b9:02:b8:8b:fb:ce:0f:07:2a:5a:b2: 24:b8:83:53:9d:1d:13:64:d4:01:cf:e4:d8:3a:3e: ef:40:1f:6e:b8:65:dd:1b:13:51:3c:be:ae:3e:9a: 9a:ec:96:9b:78:be:bb:a2:ec:56:71:bd:a6:e5:d3: 1b:e9:6f:4a:12:af:b2:92:af:d6:03:cc:8e:c6:19: a5:e9:ff:4c:13:ac:c3:d1:20:e3:67:04:e8:d6:a6: d4:65:a2:56:af:f9:d3:6b:f6:8e:de:53:8c:0e:26: 5f:e2:17:4e:e5:8f:14:28:fe:de:f9:d7:7b:31:b3: d7:58:ba:4c:22:29:f4:d1:66:0e:12:cc:41:27:66: dc:1f:f6:e7:fb:cf:e2:d5:70:08:43:75:c0:c4:ad: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:38:B6:6D:5B:07:EF:19:68:81:20:6F:9C:C1:F5:9E:58:D2:7A:2C X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:08:51:3d:77:16:a6:37:61:09:4f:d7:df:f9:a4:5b:50:50: 0f:32:04:2f:27:6c:83:0c:65:e3:a6:91:5c:c0:c9:00:6d:f9: af:7b:33:62:90:1b:31:7f:a6:eb:29:ab:2b:39:54:31:7c:22: a5:af:84:2c:af:40:ea:3b:49:0b:cb:29:14:1d:1e:e8:58:13: 42:41:1a:a1:6a:b0:cc:50:88:83:fc:8e:19:7c:10:54:c6:8a: 2a:45:81:74:4f:ff:ea:4e:b9:08:db:1e:aa:3d:fe:17:ad:ef: 64:1b:e9:22:a9:49:0e:ca:48:cf:dd:9c:4c:d6:c9:8c:c1:86: 65:40:d9:78:68:ba:7a:bc:ef:bb:35:52:6b:5b:6d:59:00:08: 55:22:f3:5b:8f:67:9f:4d:22:df:9d:d1:68:1b:76:f0:5e:c5: bf:51:11:71:1f:4a:d9:ab:19:c4:1d:3f:ad:2f:52:7c:50:ca: 6f:77:d3:67:c9:ce:2d:84:b9:03:b9:9d:8a:4d:d1:6e:a7:9e: 58:29:67:17:fa:29:c2:d6:e7:78:f9:6b:f8:be:17:4c:5e:2c: 7b:46:6a:4e:a1:da:7f:69:1c:f2:1d:c9:b4:16:3e:ba:83:07: 7e:93:ed:1c:1d:7c:de:29:f4:87:81:d6:89:73:ce:f1:24:5c: de:17:40:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjUwNjE0MTY1MTA4WhcNMjUwNjIxMTY1MTA4WjAYMRYwFAYD VQQDEw02ODRkYTg3Yy1mN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MErjw5J8+ttUnHWsH9hVu1t0ZbTNbjA9MOWQoJounklyfI0FCeFhAszsZyu c0bxSCzQt/+qwlVg3Oc/Y6susk/u2MK+/ZQy9X/wmnCiBZshEbTCXutqamdkI4+B V/Jkur1MS8a69/V0dwPTuQK4i/vODwcqWrIkuINTnR0TZNQBz+TYOj7vQB9uuGXd GxNRPL6uPpqa7JabeL67ouxWcb2m5dMb6W9KEq+ykq/WA8yOxhml6f9ME6zD0SDj ZwTo1qbUZaJWr/nTa/aO3lOMDiZf4hdO5Y8UKP7e+dd7MbPXWLpMIin00WYOEsxB J2bcH/bn+8/i1XAIQ3XAxK2jGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA84tm1b B+8ZaIEgb5zB9Z5Y0nosMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLCFE9dxamN2EJT9ff+aRbUFAPMgQvJ2yDDGXjppFcwMkAbfmvezNi kBsxf6brKasrOVQxfCKlr4Qsr0DqO0kLyykUHR7oWBNCQRqharDMUIiD/I4ZfBBU xooqRYF0T//qTrkI2x6qPf4Xre9kG+kiqUkOykjP3ZxM1smMwYZlQNl4aLp6vO+7 NVJrW21ZAAhVIvNbj2efTSLfndFoG3bwXsW/URFxH0rZqxnEHT+tL1J8UMpvd9Nn yc4thLkDuZ2KTdFup55YKWcX+inC1ud4+Wv4vhdMXix7RmpOodp/aRzyHcm0Fj66 gwd+k+0cHXzeKfSHgdaJc87xJFzeF0AN -----END CERTIFICATE-----Generated at Sun Jun 15 10:24:09 2025 by rpki-client