$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: b0FsdkmgXRxh7bdg3MYcKkqfB1JrX+MvrX5nbZwpspQ= Subject key identifier: 30:DB:3F:0E:29:96:3C:59:D5:74:42:AF:FB:91:E6:B0:B3:74:C7:63 Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 07DA Signing time: Tue 08 Apr 2025 20:50:01 +0000 Manifest this update: Tue 08 Apr 2025 20:50:01 +0000 Manifest next update: Tue 15 Apr 2025 20:50:01 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: 0eKatOb/OHLPNa/MEB86u1X8jZcWS/FSBK3Dy1O0cnc=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: YgGSKjf+yqS6tfXBHbo08Az10kPo68dPDcKOBD0yFMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C Validity Not Before: Apr 8 20:50:01 2025 GMT Not After : Apr 15 20:50:01 2025 GMT Subject: CN=67f58bf9-bb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:a4:21:e1:6d:cb:16:43:a2:73:cf:8a:20: ea:d5:74:70:ea:9a:e7:9f:0d:4d:f3:1e:62:07:07: a6:dd:a8:b0:69:e6:f5:ca:5d:20:d9:b9:f0:4d:77: 27:4a:f5:a3:e4:ec:94:c9:c3:d4:f6:0e:66:71:5c: cb:0e:4c:09:61:8c:56:eb:2f:11:bb:42:04:7e:a0: 2e:5b:78:3b:b6:71:60:f2:bd:28:82:6c:d9:16:08: 17:82:43:88:a2:13:92:56:9f:34:d3:10:24:6b:87: 3d:7f:c4:94:35:c3:41:b6:c6:9f:fd:dc:a4:32:03: 0d:25:e0:ce:e1:15:c7:0a:33:00:e5:4b:a0:2d:34: a7:db:5c:e7:08:43:a1:b9:ca:55:bb:65:5d:3d:9f: 58:ac:36:66:24:6d:00:ef:fc:cf:45:f1:c2:97:2d: 99:a3:3c:28:51:88:d0:f8:f3:9b:ec:12:23:67:cd: 22:6d:d4:25:56:eb:42:ca:6d:b7:ad:00:f3:0b:46: 43:cb:1d:74:7c:f8:64:b4:a8:b8:00:ac:b0:cf:a2: 2d:7e:57:73:1f:a8:ed:41:b5:cf:38:7a:31:3e:55: 94:a6:d6:37:72:fc:da:49:53:c8:f4:05:95:cc:02: db:13:f1:17:7a:03:cb:61:6a:22:8f:e1:3a:9f:08: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DB:3F:0E:29:96:3C:59:D5:74:42:AF:FB:91:E6:B0:B3:74:C7:63 X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:96:cd:57:d7:4e:ee:eb:a6:c8:f9:6f:45:72:63:29:c7:2d: c6:82:c8:94:fd:f1:3c:5f:0a:22:b8:69:84:c8:0b:de:d6:5a: 67:de:6c:21:bf:79:f3:5d:e7:91:81:89:b5:f8:ba:49:89:d0: 72:58:39:b1:93:04:b0:85:fd:3b:08:d6:6b:a2:46:e9:1a:c8: 7c:02:c3:02:73:38:8c:64:19:44:97:f5:50:a3:3d:f0:b5:d3: 9f:85:54:c5:8e:6c:83:4d:44:48:3a:54:71:e9:2d:d0:af:86: 61:e2:77:52:bb:08:a7:81:6b:0a:06:ae:38:b9:ae:b5:70:f8: 72:2d:77:e8:9c:2a:93:c4:fd:9a:e4:a5:63:90:77:17:02:7c: fa:fb:03:5f:63:22:f8:93:81:24:8a:d1:cb:6a:1a:7b:03:f8: ac:1c:76:3b:d1:88:32:24:40:57:e5:3c:b7:b8:bf:66:0a:86: 7a:d3:3a:4f:c6:02:04:53:78:ff:fe:f7:57:29:d3:96:c2:fa: d3:d3:06:dc:46:d8:bb:f4:06:8d:ae:35:02:fa:d2:a6:b2:c0: 16:6c:31:3f:0a:33:8b:30:fb:8f:c8:d5:36:15:c7:2f:cf:93: c1:6b:cc:26:c1:ed:a5:aa:4c:d4:97:f9:ad:6c:f2:3e:41:a4: 20:dd:62:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjUwNDA4MjA1MDAxWhcNMjUwNDE1MjA1MDAxWjAYMRYwFAYD VQQDEw02N2Y1OGJmOS1iYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpakIeFtyxZDonPPiiDq1XRw6prnnw1N8x5iBwem3aiwaeb1yl0g2bnwTXcn SvWj5OyUycPU9g5mcVzLDkwJYYxW6y8Ru0IEfqAuW3g7tnFg8r0ogmzZFggXgkOI ohOSVp800xAka4c9f8SUNcNBtsaf/dykMgMNJeDO4RXHCjMA5UugLTSn21znCEOh ucpVu2VdPZ9YrDZmJG0A7/zPRfHCly2ZozwoUYjQ+POb7BIjZ80ibdQlVutCym23 rQDzC0ZDyx10fPhktKi4AKywz6ItfldzH6jtQbXPOHoxPlWUptY3cvzaSVPI9AWV zALbE/EXegPLYWoij+E6nwgr0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDbPw4p ljxZ1XRCr/uR5rCzdMdjMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXls1X107u66bI+W9FcmMpxy3GgsiU/fE8XwoiuGmEyAve1lpn3mwh v3nzXeeRgYm1+LpJidByWDmxkwSwhf07CNZrokbpGsh8AsMCcziMZBlEl/VQoz3w tdOfhVTFjmyDTURIOlRx6S3Qr4Zh4ndSuwingWsKBq44ua61cPhyLXfonCqTxP2a 5KVjkHcXAnz6+wNfYyL4k4EkitHLahp7A/isHHY70YgyJEBX5Ty3uL9mCoZ60zpP xgIEU3j//vdXKdOWwvrT0wbcRti79AaNrjUC+tKmssAWbDE/CjOLMPuPyNU2Fccv z5PBa8wmwe2lqkzUl/mtbPI+QaQg3WJI -----END CERTIFICATE-----Generated at Thu Apr 10 17:48:25 2025 by rpki-client