$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: Ef0HSogsAFa/tkAcwDHXRAP1oLUajUinhHn4ugJIbEQ= Subject key identifier: 0A:DC:7C:68:18:CB:CD:2A:70:70:10:EF:E3:59:17:0D:15:C8:7E:48 Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 07E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 07E2 Signing time: Thu 24 Apr 2025 20:50:26 +0000 Manifest this update: Thu 24 Apr 2025 20:50:26 +0000 Manifest next update: Thu 01 May 2025 20:50:26 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: kZqDEQLOUmXzaWhqU5e6oV3jE3XgXeoENsg5Pdteltk=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: YgGSKjf+yqS6tfXBHbo08Az10kPo68dPDcKOBD0yFMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Validity Not Before: Apr 24 20:50:26 2025 GMT Not After : May 1 20:50:26 2025 GMT Subject: CN=680aa412-f6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a9:f6:cd:f4:0d:39:54:88:01:02:76:d5:4a: ca:78:dd:19:a5:9a:9b:6c:11:0a:de:c0:9a:04:5e: 3a:ea:67:c1:7b:71:43:d3:ca:6a:bd:23:3d:16:c3: df:8f:d3:96:4d:79:ae:4a:be:b3:58:9d:a6:50:e6: 66:31:6d:b7:5f:82:7e:fb:11:28:1c:82:bd:92:c2: 4b:fe:db:d2:60:94:aa:74:ea:c0:12:f4:39:5e:f7: a3:b1:92:54:d6:39:19:a1:ce:26:f7:cb:ee:1c:d8: bf:6d:48:f2:41:c5:be:87:03:10:0c:fb:a2:ee:98: d6:5f:88:8a:ee:36:fd:79:00:b2:c1:b6:5c:1a:83: 89:d7:51:56:55:53:de:31:6f:41:13:0e:1f:8c:b7: 5c:87:c2:21:06:0c:60:27:96:a1:a5:8c:58:75:2b: 37:ab:3b:0a:f1:1b:64:fc:26:91:2d:d3:d1:30:5e: 58:96:0b:60:8e:c1:79:e9:24:53:c9:10:44:0c:9c: b1:78:8d:ae:cf:83:a6:ff:f1:62:87:e5:aa:7a:1f: d9:7a:cf:22:23:88:e5:6f:80:e2:d3:d9:81:b5:6f: c7:3e:61:df:b5:64:83:b7:93:a2:8a:06:f3:e6:96: a4:25:00:d5:63:fe:52:a1:0a:e3:04:e7:8d:bd:29: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DC:7C:68:18:CB:CD:2A:70:70:10:EF:E3:59:17:0D:15:C8:7E:48 X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ce:37:b4:9a:fc:3b:d7:5a:f7:e5:5b:9d:3b:89:1a:aa:29: 65:5a:27:bd:09:1f:a1:e4:f2:5b:89:44:92:30:b9:66:c1:77: 7b:34:cd:8d:4b:c5:dd:a2:7e:30:72:e9:c8:92:57:d3:08:ca: 3d:4c:a1:9a:fa:3f:b7:2f:1a:fb:a9:5c:c6:9b:5e:9c:94:0d: 68:79:3c:b3:50:f3:60:e6:41:f6:7c:bb:aa:64:86:55:73:35: 7c:7f:fb:9f:ab:47:89:fb:c2:99:20:37:de:6c:06:7c:41:41: 12:2f:9c:00:f4:0f:ca:35:a1:46:7c:fb:5e:9e:8e:ba:55:84: 98:7e:e3:2f:0c:7f:34:9d:af:e7:37:72:89:c8:e0:98:24:89: 44:8b:40:9a:89:33:a0:f9:7b:9a:03:68:62:46:77:c4:11:b5: 49:52:c8:e4:14:92:20:ab:78:cd:67:44:50:53:15:7d:a7:f6: 37:dd:43:3e:5e:60:67:11:ba:5a:29:3e:31:ca:29:c1:ec:02: b1:b7:8e:30:cf:84:56:57:a6:fe:41:06:5a:45:72:6b:82:4d: 4e:a6:a2:74:e3:55:98:18:40:a2:d9:26:6b:c3:35:d8:21:67: f0:8e:57:22:b1:3a:ef:ad:07:dc:21:72:37:7f:53:3f:12:6b: 95:bf:41:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjUwNDI0MjA1MDI2WhcNMjUwNTAxMjA1MDI2WjAYMRYwFAYD VQQDEw02ODBhYTQxMi1mNmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Kn2zfQNOVSIAQJ21UrKeN0ZpZqbbBEK3sCaBF466mfBe3FD08pqvSM9FsPf j9OWTXmuSr6zWJ2mUOZmMW23X4J++xEoHIK9ksJL/tvSYJSqdOrAEvQ5XvejsZJU 1jkZoc4m98vuHNi/bUjyQcW+hwMQDPui7pjWX4iK7jb9eQCywbZcGoOJ11FWVVPe MW9BEw4fjLdch8IhBgxgJ5ahpYxYdSs3qzsK8Rtk/CaRLdPRMF5YlgtgjsF56SRT yRBEDJyxeI2uz4Om//Fih+Wqeh/Zes8iI4jlb4Di09mBtW/HPmHftWSDt5Oiigbz 5pakJQDVY/5SoQrjBOeNvSnVzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArcfGgY y80qcHAQ7+NZFw0VyH5IMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkzje0mvw711r35VudO4kaqillWie9CR+h5PJbiUSSMLlmwXd7NM2N S8Xdon4wcunIklfTCMo9TKGa+j+3Lxr7qVzGm16clA1oeTyzUPNg5kH2fLuqZIZV czV8f/ufq0eJ+8KZIDfebAZ8QUESL5wA9A/KNaFGfPteno66VYSYfuMvDH80na/n N3KJyOCYJIlEi0CaiTOg+XuaA2hiRnfEEbVJUsjkFJIgq3jNZ0RQUxV9p/Y33UM+ XmBnEbpaKT4xyinB7AKxt44wz4RWV6b+QQZaRXJrgk1OpqJ041WYGECi2SZrwzXY IWfwjlcisTrvrQfcIXI3f1M/EmuVv0G5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:50 2025 by rpki-client