$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: hFmncvIu1IuTaOPt3e7lbvnaddXMG/PnUXtHTgp7KYk= Subject key identifier: B1:A9:DC:86:24:02:01:12:90:8D:2C:9D:40:C1:0C:23:27:BC:81:35 Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 07FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 07F3 Signing time: Fri 30 May 2025 21:11:51 +0000 Manifest this update: Fri 30 May 2025 21:11:51 +0000 Manifest next update: Fri 06 Jun 2025 21:11:51 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: lCDmZAz9Ffkjz6myfOeS9loYhaB2kULT8Np9jfUoMow=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: YgGSKjf+yqS6tfXBHbo08Az10kPo68dPDcKOBD0yFMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Validity Not Before: May 30 21:11:51 2025 GMT Not After : Jun 6 21:11:51 2025 GMT Subject: CN=683a1f17-874a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:7e:4f:51:4f:ce:76:1e:70:da:90:78:b4: c5:69:2f:0d:3e:0a:70:fd:6b:b5:e5:c3:4d:13:1c: 16:78:4a:4e:2c:b2:20:c4:32:ce:5a:fe:e7:64:27: 10:95:b7:26:5f:17:f4:ca:2c:47:d2:3f:b5:b1:b0: e7:c4:63:b1:69:2e:e9:b7:15:fa:0d:59:b0:8a:d2: c4:52:64:25:77:28:89:eb:c5:67:36:50:ad:0a:dd: 84:02:2f:b5:9b:68:e6:37:be:11:50:a3:f4:a2:cd: 98:e1:71:d1:03:67:30:ff:72:da:84:2f:89:e2:d9: 09:37:4f:01:a7:0c:51:58:3f:36:54:7b:42:82:7f: 71:d4:44:16:62:0a:45:32:14:a9:10:cd:36:4a:ac: 65:a1:9d:dd:3f:1c:cb:c7:23:90:d3:44:12:93:a3: 48:0c:dd:10:46:c4:0d:f3:76:a3:9c:51:81:6b:fe: 2f:8f:8f:8f:60:e4:6d:7e:a6:f4:1b:8d:cd:95:b6: 12:18:d7:a3:07:2a:f4:3a:82:68:86:ba:6d:9c:f1: 87:e3:76:d9:b5:cf:01:b1:08:17:22:79:9f:75:36: ee:f1:ab:be:06:57:2d:12:0b:aa:19:5f:c2:b6:3d: 9e:34:3f:d8:42:2b:29:e1:31:db:4b:2d:78:0f:8c: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A9:DC:86:24:02:01:12:90:8D:2C:9D:40:C1:0C:23:27:BC:81:35 X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e5:fb:42:b9:a9:fe:1b:c5:5e:92:8d:20:31:c1:b3:74:ec: d3:8b:3e:22:fd:30:6b:6b:8c:a2:63:53:a5:3e:52:4c:d1:5e: 45:15:33:80:86:8b:df:9f:15:fc:9b:22:7b:7c:31:42:fc:7e: 93:21:d5:b2:c8:75:4b:55:58:53:21:8f:59:78:40:2d:52:c1: 98:4a:b1:a6:88:cf:27:53:e0:1e:a1:0c:74:a2:ed:c3:72:aa: 80:69:c8:e7:a5:ad:df:24:1e:51:03:71:9d:82:7a:1e:37:78: bd:1f:2a:28:84:8c:ba:a0:3d:f1:6b:09:bb:ae:d9:8a:d9:65: 5e:f1:ca:3f:6a:a9:b9:68:5a:d0:56:3f:e3:c1:1c:ed:4a:4d: 82:50:c0:1d:3a:2d:0f:c9:2f:4c:9b:93:8f:d4:87:f8:4b:14: 8a:a4:2a:f5:e6:25:e8:52:4d:a5:eb:b1:b6:f7:8b:19:37:c7: 43:89:6e:48:50:08:cb:12:d4:f4:0f:9d:8f:8d:b0:7f:d4:c3: dc:4a:e9:d7:fd:c3:92:91:29:cc:a8:d2:63:d3:6b:e2:00:1a: f6:69:c7:90:40:b1:09:28:57:a3:fa:c8:9b:15:79:e8:aa:7a: ef:35:d7:ef:5f:2c:81:08:b4:aa:36:de:a3:b4:5e:f8:7f:55: f8:39:37:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjUwNTMwMjExMTUxWhcNMjUwNjA2MjExMTUxWjAYMRYwFAYD VQQDEw02ODNhMWYxNy04NzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3d+T1FPznYecNqQeLTFaS8NPgpw/Wu15cNNExwWeEpOLLIgxDLOWv7nZCcQ lbcmXxf0yixH0j+1sbDnxGOxaS7ptxX6DVmwitLEUmQldyiJ68VnNlCtCt2EAi+1 m2jmN74RUKP0os2Y4XHRA2cw/3LahC+J4tkJN08BpwxRWD82VHtCgn9x1EQWYgpF MhSpEM02SqxloZ3dPxzLxyOQ00QSk6NIDN0QRsQN83ajnFGBa/4vj4+PYORtfqb0 G43NlbYSGNejByr0OoJohrptnPGH43bZtc8BsQgXInmfdTbu8au+BlctEguqGV/C tj2eND/YQisp4THbSy14D4ys2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGp3IYk AgESkI0snUDBDCMnvIE1MB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb5ftCuan+G8Veko0gMcGzdOzTiz4i/TBra4yiY1OlPlJM0V5FFTOA hovfnxX8myJ7fDFC/H6TIdWyyHVLVVhTIY9ZeEAtUsGYSrGmiM8nU+AeoQx0ou3D cqqAacjnpa3fJB5RA3GdgnoeN3i9HyoohIy6oD3xawm7rtmK2WVe8co/aqm5aFrQ Vj/jwRztSk2CUMAdOi0PyS9Mm5OP1If4SxSKpCr15iXoUk2l67G294sZN8dDiW5I UAjLEtT0D52PjbB/1MPcSunX/cOSkSnMqNJj02viABr2aceQQLEJKFej+sibFXno qnrvNdfvXyyBCLSqNt6jtF74f1X4OTeV -----END CERTIFICATE-----Generated at Sat May 31 16:47:49 2025 by rpki-client