$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: cc2UwtbA0oMZoraNIZbxxQMGrIVl2zzmxMFsz/pomxg= Subject key identifier: E0:62:2B:1E:EF:5C:91:53:C0:BC:24:29:ED:5C:A6:EE:BB:D0:2E:E3 Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 080A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 0803 Signing time: Mon 30 Jun 2025 21:07:23 +0000 Manifest this update: Mon 30 Jun 2025 21:07:23 +0000 Manifest next update: Mon 07 Jul 2025 21:07:23 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: qfo0TscHrxTw61KzjSOODLZtkg+tmcHRC41eEN4+lcg=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: YgGSKjf+yqS6tfXBHbo08Az10kPo68dPDcKOBD0yFMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Validity Not Before: Jun 30 21:07:23 2025 GMT Not After : Jul 7 21:07:23 2025 GMT Subject: CN=6862fc8b-1d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:2d:cd:a0:55:cc:08:70:f8:7a:90:ce:73: c0:4c:1d:e0:4c:da:75:bf:f4:ed:74:33:a6:28:b6: 99:c7:82:19:e3:88:75:f3:50:b8:51:f8:99:b5:92: 20:94:02:48:20:7d:10:15:ec:bf:dc:aa:a6:9b:c4: 26:35:91:bb:66:9e:ca:9b:17:49:02:7d:d2:68:ea: 17:12:7a:c4:8d:1f:5d:6f:70:58:cf:c8:c3:c0:95: 36:f3:e8:58:bd:5e:43:17:2d:f0:e5:5c:1a:78:fe: 38:01:2c:93:95:15:6e:68:64:d7:a5:33:af:dc:f7: 29:03:62:e6:6f:ab:22:ab:e2:ed:f9:0a:b0:aa:f7: f3:97:6f:23:c6:91:40:f8:f4:82:80:52:f4:0a:4c: 09:28:ce:d1:55:35:bc:15:99:b9:68:87:c7:ea:c7: ea:fa:c0:14:c3:49:9e:98:19:02:b9:c4:e1:7e:85: eb:a9:80:bb:50:09:ac:68:c2:8c:3f:02:6b:dc:9a: 0c:02:e4:06:5b:54:28:82:7b:78:e9:65:59:ad:1e: 3c:2a:49:d3:40:2b:b3:20:ec:31:31:4d:ef:e2:96: cb:44:a3:2c:66:ed:78:4f:e9:cf:e9:e0:a6:2c:5e: aa:28:97:46:59:87:e0:09:94:2f:52:5d:98:49:5f: ab:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:62:2B:1E:EF:5C:91:53:C0:BC:24:29:ED:5C:A6:EE:BB:D0:2E:E3 X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:20:da:11:d4:51:94:6a:85:98:aa:a4:fd:b0:b6:06:33:64: 23:1b:73:71:bb:2d:cf:8a:7f:d6:8e:7f:3b:66:de:49:71:c8: c8:f9:36:97:2b:d0:85:60:08:1c:67:d5:d2:08:ee:a5:62:94: fd:d7:21:c5:63:cd:0c:97:54:4c:ea:ff:cb:dc:6d:33:b1:65: 28:bf:cc:36:4c:8a:7b:4d:8c:7f:00:b1:33:4e:ac:40:65:ce: 70:08:c6:46:63:63:4a:b9:17:20:15:8d:58:bd:61:1f:8b:41: 10:be:ce:13:2d:30:3e:66:10:e0:dc:73:be:10:a8:0e:8c:7c: d8:f5:f3:39:79:cf:5e:d1:a3:74:c0:73:ec:52:25:59:28:b3: 6d:91:81:0a:03:72:45:bf:42:14:77:c7:a4:26:9f:2a:f8:26: c0:3d:55:dc:fe:e2:2e:99:3e:ca:4e:cb:b9:ba:1e:51:e8:b4: ff:84:cd:8f:00:31:8c:d9:0c:8e:ab:84:ac:83:dd:9a:47:64: cf:57:0c:25:74:ef:e3:38:ed:fb:ac:16:5a:90:bf:10:3b:92: dc:d1:8f:2c:83:2b:f4:76:9d:62:ba:0b:bd:a0:6e:d8:7e:93: 87:bc:69:a2:72:49:83:b2:fc:7b:b1:76:a5:40:36:60:ad:9b: f4:21:35:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjUwNjMwMjEwNzIzWhcNMjUwNzA3MjEwNzIzWjAYMRYwFAYD VQQDEw02ODYyZmM4Yi0xZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6ItzaBVzAhw+HqQznPATB3gTNp1v/TtdDOmKLaZx4IZ44h181C4UfiZtZIg lAJIIH0QFey/3Kqmm8QmNZG7Zp7KmxdJAn3SaOoXEnrEjR9db3BYz8jDwJU28+hY vV5DFy3w5VwaeP44ASyTlRVuaGTXpTOv3PcpA2Lmb6siq+Lt+Qqwqvfzl28jxpFA +PSCgFL0CkwJKM7RVTW8FZm5aIfH6sfq+sAUw0memBkCucThfoXrqYC7UAmsaMKM PwJr3JoMAuQGW1Qognt46WVZrR48KknTQCuzIOwxMU3v4pbLRKMsZu14T+nP6eCm LF6qKJdGWYfgCZQvUl2YSV+rrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBiKx7v XJFTwLwkKe1cpu670C7jMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgINoR1FGUaoWYqqT9sLYGM2QjG3Nxuy3Pin/Wjn87Zt5JccjI+TaX K9CFYAgcZ9XSCO6lYpT91yHFY80Ml1RM6v/L3G0zsWUov8w2TIp7TYx/ALEzTqxA Zc5wCMZGY2NKuRcgFY1YvWEfi0EQvs4TLTA+ZhDg3HO+EKgOjHzY9fM5ec9e0aN0 wHPsUiVZKLNtkYEKA3JFv0IUd8ekJp8q+CbAPVXc/uIumT7KTsu5uh5R6LT/hM2P ADGM2QyOq4Ssg92aR2TPVwwldO/jOO37rBZakL8QO5Lc0Y8sgyv0dp1iugu9oG7Y fpOHvGmickmDsvx7sXalQDZgrZv0ITU8 -----END CERTIFICATE-----Generated at Wed Jul 2 15:37:39 2025 by rpki-client