$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: 34Y6g3np7OcypDuF1G8tg7OOVaET9f10T/u0w3URwek= Subject key identifier: 2F:A4:C2:03:89:D0:F6:3A:EC:6B:63:1D:3D:98:1E:1D:D9:95:CC:F4 Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 084D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 0845 Signing time: Sun 02 Nov 2025 20:43:00 +0000 Manifest this update: Sun 02 Nov 2025 20:42:59 +0000 Manifest next update: Sun 09 Nov 2025 20:42:59 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: yKhO5xwXzyUhbd+2TSQH7XBipGp41DXZzbKt0rrP/vI=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: QdFj4b+G66zoM24orGpWvQKYWAowBUe3I5QM3qjwxak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2125 (0x84d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Validity Not Before: Nov 2 20:42:59 2025 GMT Not After : Nov 9 20:42:59 2025 GMT Subject: CN=6907c254-652f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6c:05:67:c3:28:2e:da:99:46:34:c3:0c:84: 06:75:be:b1:83:cf:65:7e:ae:c4:18:ce:af:d1:d7: aa:a9:65:c1:32:65:51:47:ba:da:3c:06:34:8c:a2: 3d:78:11:93:24:2b:a4:55:9e:09:ed:d3:6d:59:c7: c0:de:3f:c6:49:d4:28:52:72:53:a2:b3:7d:10:96: 61:be:18:34:f6:d3:1a:37:f9:07:01:49:05:84:fb: 5a:04:cb:17:82:db:11:44:11:79:c7:62:93:50:ed: fc:bb:a7:59:d0:ca:4e:b6:d2:fd:bc:af:35:1e:e5: ac:13:3d:0e:16:8c:4a:7e:49:a5:1f:13:a8:5f:12: 5f:b0:d5:d8:46:1d:5b:af:86:0e:c2:d9:e1:d3:73: 07:b3:28:ba:75:90:d5:d1:c3:4e:09:9a:82:7d:56: ed:0d:35:4e:e8:23:3c:a2:73:c6:79:dd:0a:95:68: 40:9e:08:f2:50:cf:ce:a8:8a:40:36:fb:f9:e3:8f: c0:1c:4a:e7:c3:fc:5a:99:70:b1:20:1e:d1:06:54: 80:88:0c:0f:22:d9:7b:d7:5e:f7:cb:5f:43:d9:21: 76:a7:ca:96:c3:89:30:9f:1c:f4:ff:7f:1c:69:65: 40:13:53:14:a7:2f:34:7c:c2:f9:c5:ee:a7:7a:6f: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A4:C2:03:89:D0:F6:3A:EC:6B:63:1D:3D:98:1E:1D:D9:95:CC:F4 X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:62:cc:b1:20:d4:a2:9a:38:66:05:ab:15:3e:f4:fc:a4:d8: df:d0:bf:f2:98:cb:44:61:73:c7:f9:09:ce:a3:eb:46:dd:68: 34:da:dd:a1:42:d7:58:36:73:0f:a5:91:da:6e:16:d9:24:09: 3c:1c:ca:c5:82:ea:3d:e9:8f:e3:22:0b:3b:61:b9:a6:43:ca: d9:18:b6:5b:ce:c0:69:68:67:c0:32:44:4c:28:c3:70:c9:f0: 69:ba:e3:ff:b1:5a:d5:81:91:b7:b6:60:a8:5f:d8:a6:ca:c3: 52:ce:cb:bc:fd:87:7e:6d:52:c0:e8:4f:c3:14:3c:bb:82:ad: 19:d5:72:42:2d:97:2b:a2:c8:d8:2f:1a:27:d0:d0:5c:9a:78: 37:8c:a7:15:07:77:62:08:7c:ca:44:67:9a:a2:48:9c:58:9b: d5:b7:d9:83:26:a7:17:22:a1:83:8a:fe:e1:a9:9d:fe:75:96: 7f:6d:21:7c:eb:14:60:f7:43:da:97:2d:2d:05:29:fd:2b:62: d9:5a:fa:4c:68:50:7d:4a:e8:48:b8:48:de:cb:8d:c4:ee:43: 19:e2:ef:7d:4d:33:56:eb:7c:2f:12:b9:2a:86:80:0b:e8:9c: 54:e7:76:48:ca:ed:e4:1f:36:35:1a:b4:a4:93:5a:b2:10:bc: 37:86:29:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjUxMTAyMjA0MjU5WhcNMjUxMTA5MjA0MjU5WjAYMRYwFAYD VQQDEw02OTA3YzI1NC02NTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12wFZ8MoLtqZRjTDDIQGdb6xg89lfq7EGM6v0deqqWXBMmVRR7raPAY0jKI9 eBGTJCukVZ4J7dNtWcfA3j/GSdQoUnJTorN9EJZhvhg09tMaN/kHAUkFhPtaBMsX gtsRRBF5x2KTUO38u6dZ0MpOttL9vK81HuWsEz0OFoxKfkmlHxOoXxJfsNXYRh1b r4YOwtnh03MHsyi6dZDV0cNOCZqCfVbtDTVO6CM8onPGed0KlWhAngjyUM/OqIpA Nvv544/AHErnw/xamXCxIB7RBlSAiAwPItl71173y19D2SF2p8qWw4kwnxz0/38c aWVAE1MUpy80fML5xe6nem+xhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+kwgOJ 0PY67GtjHT2YHh3Zlcz0MB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTYsyxINSimjhmBasVPvT8pNjf0L/ymMtEYXPH+QnOo+tG3Wg02t2h QtdYNnMPpZHabhbZJAk8HMrFguo96Y/jIgs7YbmmQ8rZGLZbzsBpaGfAMkRMKMNw yfBpuuP/sVrVgZG3tmCoX9imysNSzsu8/Yd+bVLA6E/DFDy7gq0Z1XJCLZcrosjY Lxon0NBcmng3jKcVB3diCHzKRGeaokicWJvVt9mDJqcXIqGDiv7hqZ3+dZZ/bSF8 6xRg90Paly0tBSn9K2LZWvpMaFB9SuhIuEjey43E7kMZ4u99TTNW63wvErkqhoAL 6JxU53ZIyu3kHzY1GrSkk1qyELw3hinY -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:54 2025 by rpki-client