$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: 7jz3Vm1gEf/qlA5+JfwNngylxu+BVnwyeY4X2PzLLv8= Subject key identifier: B2:3C:79:9C:7D:C6:C2:AB:16:6F:D8:A9:46:B5:32:B6:00:FF:08:40 Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 0816 Signing time: Wed 06 Aug 2025 21:10:37 +0000 Manifest this update: Wed 06 Aug 2025 21:10:36 +0000 Manifest next update: Wed 13 Aug 2025 21:10:36 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: EEFrBtJjRoWbNrfe/vnv3pB2fklpw1Y85Irpn+ElIQ8=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: YgGSKjf+yqS6tfXBHbo08Az10kPo68dPDcKOBD0yFMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Validity Not Before: Aug 6 21:10:36 2025 GMT Not After : Aug 13 21:10:36 2025 GMT Subject: CN=6893c4cd-11ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:74:f0:4b:7e:85:eb:55:06:b3:4c:65:92: 55:8c:61:32:eb:37:0c:ef:0a:f5:11:a0:2e:54:c8: 8b:14:18:c6:31:58:6d:e7:4e:aa:d0:9b:d0:6a:5f: 7f:72:92:92:82:cb:a8:b7:ce:cf:4d:df:14:1d:fe: 39:99:85:be:aa:fc:e1:45:4d:81:54:c9:f8:55:d6: df:ce:40:4d:11:af:4a:d8:e1:e5:ad:9a:f1:ce:91: 13:a4:f7:97:07:d8:67:be:f5:42:7e:af:c8:aa:57: 6b:dd:f8:48:29:f7:32:ed:c4:41:39:0d:d9:1e:98: 2f:41:e7:32:c1:e5:64:ff:c0:bc:51:f4:b9:2a:4f: bf:52:14:70:c0:30:b4:d3:e5:dd:82:ed:d5:5c:b2: b2:7a:e9:a2:87:04:8e:05:f4:42:2f:5a:18:d7:99: aa:46:08:96:3d:d7:b4:38:67:e0:fe:e7:32:09:3e: 5a:53:df:24:1a:27:ad:5a:04:63:22:f2:d0:ed:46: 08:ec:5e:b9:6b:dc:6f:80:36:ee:4c:f8:1f:da:e3: 28:a0:0e:27:87:05:8b:c2:8e:65:93:97:8a:e9:59: 02:0f:d8:95:1e:cf:d2:60:12:32:fa:3d:1f:6d:a9: 7c:c1:d4:d8:5a:07:b7:7a:8c:35:4d:df:fd:24:49: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3C:79:9C:7D:C6:C2:AB:16:6F:D8:A9:46:B5:32:B6:00:FF:08:40 X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:02:c7:a0:7c:e6:4d:fb:4d:05:96:c6:82:b2:eb:ab:c2:fa: 9c:cc:63:f6:fd:06:48:10:f3:3e:d3:ee:c9:a5:fa:ba:5f:96: 04:96:a7:94:fc:d4:c1:de:13:47:c8:7f:59:b3:a5:2f:13:d6: ee:0e:6d:c8:58:14:69:5e:62:e9:cb:97:6f:0d:af:ea:24:29: 30:99:c0:73:8e:da:84:0e:1d:06:8c:b0:dc:2c:a8:81:0d:08: e7:1e:b0:8a:25:0f:28:19:82:46:2f:6d:36:c0:f2:be:93:79: 88:f6:dd:58:7a:20:af:32:f4:ff:cf:5d:1c:c2:98:c3:94:73: 2e:fa:03:36:9e:ce:89:04:af:07:43:46:3a:80:7e:66:c5:33: 51:52:6a:d6:ce:ee:e4:99:7b:48:9b:e5:d4:70:67:19:99:ce: 82:3c:59:b4:fe:3c:0a:e9:bc:c8:d1:fb:75:d9:10:40:b4:b2: 8f:69:4c:dc:f0:a0:e7:d6:9f:f5:cb:8f:00:33:cd:67:25:b5: ff:c7:56:ab:cd:06:bd:f4:02:42:4d:94:6e:2a:3a:a6:08:2b: 27:10:31:a7:57:51:48:86:39:6d:a1:de:66:c9:f3:f4:c9:43: 50:6b:92:74:93:ae:ac:bd:7d:76:32:63:de:9d:19:4a:77:c5: 91:4f:d1:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjUwODA2MjExMDM2WhcNMjUwODEzMjExMDM2WjAYMRYwFAYD VQQDEw02ODkzYzRjZC0xMWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0c108Et+hetVBrNMZZJVjGEy6zcM7wr1EaAuVMiLFBjGMVht506q0JvQal9/ cpKSgsuot87PTd8UHf45mYW+qvzhRU2BVMn4VdbfzkBNEa9K2OHlrZrxzpETpPeX B9hnvvVCfq/Iqldr3fhIKfcy7cRBOQ3ZHpgvQecyweVk/8C8UfS5Kk+/UhRwwDC0 0+Xdgu3VXLKyeumihwSOBfRCL1oY15mqRgiWPde0OGfg/ucyCT5aU98kGietWgRj IvLQ7UYI7F65a9xvgDbuTPgf2uMooA4nhwWLwo5lk5eK6VkCD9iVHs/SYBIy+j0f bal8wdTYWge3eow1Td/9JEmLkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI8eZx9 xsKrFm/YqUa1MrYA/whAMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtAsegfOZN+00FlsaCsuurwvqczGP2/QZIEPM+0+7Jpfq6X5YElqeU /NTB3hNHyH9Zs6UvE9buDm3IWBRpXmLpy5dvDa/qJCkwmcBzjtqEDh0GjLDcLKiB DQjnHrCKJQ8oGYJGL202wPK+k3mI9t1YeiCvMvT/z10cwpjDlHMu+gM2ns6JBK8H Q0Y6gH5mxTNRUmrWzu7kmXtIm+XUcGcZmc6CPFm0/jwK6bzI0ft12RBAtLKPaUzc 8KDn1p/1y48AM81nJbX/x1arzQa99AJCTZRuKjqmCCsnEDGnV1FIhjltod5myfP0 yUNQa5J0k66svX12MmPenRlKd8WRT9FQ -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:01 2025 by rpki-client