$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: KAqolxcZHhukrLfClbCMlfUfsluuGyiRj4sZgtbZV4g= Subject key identifier: 19:05:77:0C:57:84:24:30:22:91:1C:04:9F:CC:AA:42:26:C4:CB:A1 Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 0814 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 080D Signing time: Sun 20 Jul 2025 21:00:16 +0000 Manifest this update: Sun 20 Jul 2025 21:00:15 +0000 Manifest next update: Sun 27 Jul 2025 21:00:15 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: IadHsK8NhkowXwddkliWFgww3DQqNnnNmPOFD7RgDA0=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: YgGSKjf+yqS6tfXBHbo08Az10kPo68dPDcKOBD0yFMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2068 (0x814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Validity Not Before: Jul 20 21:00:15 2025 GMT Not After : Jul 27 21:00:15 2025 GMT Subject: CN=687d58e0-056d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:82:da:72:be:0a:7f:31:b2:46:6b:7d:bd:62: 97:a4:c2:04:d6:79:3c:f4:ae:ae:68:c9:80:e9:64: 3b:b2:41:a5:97:d2:bd:73:d0:1b:fa:83:c7:f3:72: fd:4d:ec:31:c3:a8:d3:55:13:78:58:97:b1:2e:ba: 10:71:6c:4f:33:a1:81:63:0a:e8:83:11:5c:37:e8: f5:99:df:13:08:04:1a:61:3e:2f:dd:30:95:13:ea: 41:f7:f5:af:59:69:43:39:61:af:96:25:8b:f7:c3: 1c:c4:77:c3:92:0d:44:35:54:6e:bc:9a:d5:c6:a2: cc:58:59:70:34:86:c2:b6:24:2b:6d:9f:01:66:86: dc:f7:43:c9:c0:00:e5:00:0a:5c:8b:f2:a0:d5:f6: dd:45:58:31:36:6d:ae:ab:11:d6:2a:1d:cb:40:77: fc:21:6c:a3:cd:94:6f:0a:c3:6d:25:c5:d9:7b:16: 29:83:4a:4e:02:25:0f:c8:ca:86:f4:cc:2f:ef:d3: 05:fb:ca:11:02:2f:8f:7a:0d:da:ec:b8:41:8b:10: a7:7c:c8:e9:a3:d0:07:bd:ae:47:f0:5e:81:dd:84: ed:1c:33:1e:19:f8:f4:d6:81:f8:c8:f4:ab:4e:2e: 48:4e:45:3f:2a:45:83:5c:db:7b:83:cd:c5:a0:92: 66:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:05:77:0C:57:84:24:30:22:91:1C:04:9F:CC:AA:42:26:C4:CB:A1 X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:25:83:bb:b0:2f:5a:a2:73:7b:bf:ca:1a:34:8f:df:69:78: 07:0f:41:00:f6:20:e0:ea:0e:0d:c4:5e:70:2c:c7:12:96:f2: fe:94:11:fa:0f:af:74:1f:97:44:7f:b8:48:38:d4:3f:d6:c4: 06:29:e6:93:df:45:ba:dc:83:79:ce:31:d2:e5:d1:b8:2a:38: cb:f5:8a:d8:80:54:1a:ca:40:14:89:5d:59:64:5f:e9:00:87: 91:16:ca:aa:54:37:a5:94:5a:1d:ca:18:30:3a:20:c8:3d:2d: 67:59:5a:9e:84:84:7f:da:4f:ef:a3:b5:b5:ce:ee:53:74:9d: bb:f3:3d:d3:48:3e:30:b6:e3:6d:7f:1a:ea:0d:81:b7:53:b3: 63:a6:4b:fd:93:ef:94:56:5d:e8:ff:98:9b:f0:7f:42:42:29: f5:c8:74:b0:96:58:3b:5a:13:75:c9:9e:1f:24:c6:d1:af:1d: df:fd:1e:4c:db:35:dd:8c:44:78:b7:93:7c:7c:63:d8:94:0f: 0e:8d:d5:8d:ef:6b:31:9d:ea:d5:5c:e0:ae:a7:2d:96:46:e3: 86:61:0c:a9:33:20:32:41:4c:57:97:44:bc:5a:9f:4f:0d:ee: 17:c1:d6:53:e5:e7:de:9c:e4:35:2f:31:df:1f:eb:da:d3:55: 02:fe:3b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjUwNzIwMjEwMDE1WhcNMjUwNzI3MjEwMDE1WjAYMRYwFAYD VQQDEw02ODdkNThlMC0wNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YLacr4KfzGyRmt9vWKXpMIE1nk89K6uaMmA6WQ7skGll9K9c9Ab+oPH83L9 Tewxw6jTVRN4WJexLroQcWxPM6GBYwrogxFcN+j1md8TCAQaYT4v3TCVE+pB9/Wv WWlDOWGvliWL98McxHfDkg1ENVRuvJrVxqLMWFlwNIbCtiQrbZ8BZobc90PJwADl AApci/Kg1fbdRVgxNm2uqxHWKh3LQHf8IWyjzZRvCsNtJcXZexYpg0pOAiUPyMqG 9Mwv79MF+8oRAi+Peg3a7LhBixCnfMjpo9AHva5H8F6B3YTtHDMeGfj01oH4yPSr Ti5ITkU/KkWDXNt7g83FoJJmBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkFdwxX hCQwIpEcBJ/MqkImxMuhMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAJYO7sC9aonN7v8oaNI/faXgHD0EA9iDg6g4NxF5wLMcSlvL+lBH6 D690H5dEf7hIONQ/1sQGKeaT30W63IN5zjHS5dG4KjjL9YrYgFQaykAUiV1ZZF/p AIeRFsqqVDellFodyhgwOiDIPS1nWVqehIR/2k/vo7W1zu5TdJ278z3TSD4wtuNt fxrqDYG3U7Njpkv9k++UVl3o/5ib8H9CQin1yHSwllg7WhN1yZ4fJMbRrx3f/R5M 2zXdjER4t5N8fGPYlA8OjdWN72sxnerVXOCupy2WRuOGYQypMyAyQUxXl0S8Wp9P De4XwdZT5efenOQ1LzHfH+va01UC/jts -----END CERTIFICATE-----Generated at Mon Jul 21 12:36:28 2025 by rpki-client