$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: RtZX2uXEIOSKjE/m3tX1BT8S1Z6jfLdL04c6YhyKTyE= Subject key identifier: 07:C9:7F:DA:75:21:55:99:45:D2:5F:8F:43:7E:62:0E:3D:3D:9A:D0 Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 0845 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 083D Signing time: Sat 18 Oct 2025 21:57:06 +0000 Manifest this update: Sat 18 Oct 2025 21:57:06 +0000 Manifest next update: Sat 25 Oct 2025 21:57:06 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: XqIAU9Vohvz17hJRYAF6kQ7jrcOdI0b93rUtlz9/T2I=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: QdFj4b+G66zoM24orGpWvQKYWAowBUe3I5QM3qjwxak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Validity Not Before: Oct 18 21:57:06 2025 GMT Not After : Oct 25 21:57:06 2025 GMT Subject: CN=68f40d32-3f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:aa:64:6f:6f:c4:e6:b0:c4:12:9e:29:a9: a1:fb:f0:78:be:87:a5:82:52:e6:15:f0:93:c0:51: 2d:c4:95:a1:bb:82:bf:2d:6e:8c:3d:98:b3:1a:43: b7:ca:f5:99:01:da:ff:8a:ee:59:d9:be:12:77:68: 08:32:68:19:be:d4:3a:35:cc:18:cb:47:28:86:63: be:54:c3:51:04:f2:7e:df:ba:2c:67:5f:34:34:a2: c6:53:ef:40:98:ad:91:da:b8:49:99:a2:ba:a0:e0: 39:70:c7:96:a7:87:27:90:7d:24:ac:e0:c3:3c:9e: 83:35:d3:c8:46:f6:43:c0:fd:79:48:6d:c6:47:79: 64:60:83:70:c9:b4:e2:fe:73:0a:7e:55:dd:a7:cb: 51:19:98:ed:64:1e:cc:34:9a:2d:0b:3d:15:ad:c8: 78:72:04:fd:04:2b:64:06:8b:79:1f:4d:98:55:df: 41:92:07:62:3f:87:10:59:ce:97:63:8d:cf:c6:f4: 7c:9d:53:11:0f:9c:78:21:4a:a2:cf:79:51:a2:f1: c1:33:f3:71:de:1b:ff:db:94:62:43:56:b7:fc:2d: ba:11:49:af:2e:64:10:18:5f:8c:ef:47:d3:27:3f: c4:a2:c4:39:1d:cd:58:2a:ad:03:85:c1:66:0b:7f: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C9:7F:DA:75:21:55:99:45:D2:5F:8F:43:7E:62:0E:3D:3D:9A:D0 X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:2d:79:a7:67:9b:6c:22:82:0a:60:42:00:17:6f:c4:d9:e4: 7f:dc:c2:0c:b5:66:73:d3:79:8f:82:fe:18:98:60:b3:74:bf: 7d:fd:c9:79:d0:6f:f8:96:1a:45:ba:a5:89:66:6b:79:14:ea: bd:f7:06:36:87:be:7b:2c:82:a4:f8:c4:49:8b:8b:30:99:47: 59:d0:f1:ef:c5:32:6d:f8:b1:15:eb:fd:2f:af:33:3c:b3:a9: d1:43:02:ed:1d:9a:82:d2:c8:b7:2d:75:46:59:0e:c9:1c:76: 15:dc:a8:b5:ba:cc:c2:cd:0b:6d:cc:9b:00:0f:89:59:ac:d5: 7a:70:5a:25:8e:8b:a9:04:03:4e:b2:6a:71:01:4e:31:5a:0c: 7d:ec:4e:00:a9:48:41:d5:73:64:7d:35:eb:fd:5e:23:39:92: dd:c4:d2:14:c7:92:99:57:e4:2d:f4:69:5b:68:cf:fa:2c:75: 5d:18:e7:dc:79:f0:f4:fb:35:ba:5a:21:a0:3c:54:b7:eb:e8: b1:07:3a:b9:75:d6:19:ce:6f:b1:71:3a:76:65:d2:f3:b2:3d: a5:8d:55:db:85:ee:89:6c:2c:e1:71:ed:7b:8c:66:ff:64:ac: 30:7c:72:71:d8:5c:c0:f5:6e:fb:33:fa:bf:4d:6e:73:41:50: 26:74:95:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjUxMDE4MjE1NzA2WhcNMjUxMDI1MjE1NzA2WjAYMRYwFAYD VQQDEw02OGY0MGQzMi0zZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXyqZG9vxOawxBKeKamh+/B4voelglLmFfCTwFEtxJWhu4K/LW6MPZizGkO3 yvWZAdr/iu5Z2b4Sd2gIMmgZvtQ6NcwYy0cohmO+VMNRBPJ+37osZ180NKLGU+9A mK2R2rhJmaK6oOA5cMeWp4cnkH0krODDPJ6DNdPIRvZDwP15SG3GR3lkYINwybTi /nMKflXdp8tRGZjtZB7MNJotCz0Vrch4cgT9BCtkBot5H02YVd9BkgdiP4cQWc6X Y43PxvR8nVMRD5x4IUqiz3lRovHBM/Nx3hv/25RiQ1a3/C26EUmvLmQQGF+M70fT Jz/EosQ5Hc1YKq0DhcFmC3/OKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfJf9p1 IVWZRdJfj0N+Yg49PZrQMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhLXmnZ5tsIoIKYEIAF2/E2eR/3MIMtWZz03mPgv4YmGCzdL99/cl5 0G/4lhpFuqWJZmt5FOq99wY2h757LIKk+MRJi4swmUdZ0PHvxTJt+LEV6/0vrzM8 s6nRQwLtHZqC0si3LXVGWQ7JHHYV3Ki1uszCzQttzJsAD4lZrNV6cFoljoupBANO smpxAU4xWgx97E4AqUhB1XNkfTXr/V4jOZLdxNIUx5KZV+Qt9GlbaM/6LHVdGOfc efD0+zW6WiGgPFS36+ixBzq5ddYZzm+xcTp2ZdLzsj2ljVXbhe6JbCzhce17jGb/ ZKwwfHJx2FzA9W77M/q/TW5zQVAmdJWW -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:28 2025 by rpki-client