$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: LfzOLYywfaWTWvvUdGmEIvubMm/hg0SxrYQF3joE1Ss= Subject key identifier: 16:15:C4:F2:55:8A:33:D5:C0:B6:0F:01:B3:89:2B:AC:FE:83:8E:2A Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 07EA Signing time: Sat 10 May 2025 20:39:26 +0000 Manifest this update: Sat 10 May 2025 20:39:26 +0000 Manifest next update: Sat 17 May 2025 20:39:26 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: CRAE8Kd4g3yY5wv9ehsMyFJTd2AyTVtRNCwJ5gPrCss=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: YgGSKjf+yqS6tfXBHbo08Az10kPo68dPDcKOBD0yFMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Validity Not Before: May 10 20:39:26 2025 GMT Not After : May 17 20:39:26 2025 GMT Subject: CN=681fb97e-208a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:cf:44:e4:66:1c:49:de:ab:34:ab:cc:67: 74:9e:bd:59:eb:16:c9:3e:76:bf:72:e9:28:28:5b: d7:fa:cc:e4:3b:df:ca:cd:39:4c:b1:6e:a5:f0:39: bb:d8:7c:3a:e0:e0:0d:fb:56:d2:4f:60:e4:49:b1: 7f:9d:14:c7:63:d4:0c:5c:69:53:f1:16:42:ac:38: cd:43:53:24:e0:13:dd:ee:f6:8e:1c:3e:d7:57:82: 3a:f5:4e:7d:c6:54:6b:d5:9f:2b:78:7f:f8:c5:cb: 54:6e:3d:2b:85:87:02:db:79:ef:6e:1e:f7:e8:79: f1:65:93:e1:f4:d3:0e:6c:4b:56:4a:ed:70:cc:7a: 20:2e:d2:79:09:e0:c6:51:7b:ee:ae:1c:0d:33:7d: 73:a6:a0:22:87:ca:ac:18:8e:99:16:9e:ad:17:85: b7:c2:d2:2a:ed:49:ba:78:0a:8f:5e:98:db:3e:e7: 8d:30:8a:34:ec:5d:be:f1:98:36:d6:16:53:75:f5: 6c:f6:ad:e6:8a:47:64:33:8c:d4:94:27:62:7f:a3: 2b:05:d3:b7:23:66:f9:ca:df:77:9b:a4:f8:ce:26: 42:d2:8c:52:7c:25:bf:0c:cb:60:1c:3c:8c:7b:9c: 84:be:b6:88:34:10:f1:de:0f:5d:58:f3:e5:e5:f7: 3a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:15:C4:F2:55:8A:33:D5:C0:B6:0F:01:B3:89:2B:AC:FE:83:8E:2A X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:01:af:25:ea:36:34:27:e9:68:58:90:2b:f5:66:d3:94:0e: ed:75:5b:7f:f7:77:04:13:f4:33:7e:62:d0:ee:5e:f5:c3:f2: 61:e8:a6:6c:de:3d:61:82:74:10:5c:bb:a7:6d:3f:29:af:8c: 8a:1f:c2:b1:9e:27:9b:01:4a:df:7a:2d:f9:14:d8:56:b3:88: d3:41:39:5e:6b:5a:9a:ef:b4:c5:01:02:74:19:7f:0c:5e:52: af:40:ec:2a:7c:42:b9:12:af:fc:d0:c6:e4:9e:e7:03:38:71: ca:99:b4:9b:9f:85:29:c8:4b:fa:7e:24:15:0c:ff:d5:0c:88: 13:e6:57:99:77:88:6b:fb:c4:ed:9c:3d:7e:dd:9c:f2:8d:92: 8c:fe:ce:13:29:2b:c0:28:b8:8c:77:07:3e:a4:34:e5:14:79: c1:cd:fd:ed:20:c4:e1:ec:5b:a7:f4:84:82:cc:8a:ad:db:f2: 54:dd:83:2d:bf:d6:2c:80:fa:6f:45:b4:93:0e:20:99:36:c0: b7:4f:9f:28:71:5a:aa:49:77:1e:fc:8b:1a:f9:73:c4:d7:da: 62:09:4e:c8:79:92:9c:71:e8:9e:5b:e6:91:3d:18:1b:47:b5: 67:b4:63:b4:b3:39:a6:47:95:db:f2:c6:ae:c4:1e:40:7d:9b: d8:94:f5:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjUwNTEwMjAzOTI2WhcNMjUwNTE3MjAzOTI2WjAYMRYwFAYD VQQDEw02ODFmYjk3ZS0yMDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugrPRORmHEneqzSrzGd0nr1Z6xbJPna/cukoKFvX+szkO9/KzTlMsW6l8Dm7 2Hw64OAN+1bST2DkSbF/nRTHY9QMXGlT8RZCrDjNQ1Mk4BPd7vaOHD7XV4I69U59 xlRr1Z8reH/4xctUbj0rhYcC23nvbh736HnxZZPh9NMObEtWSu1wzHogLtJ5CeDG UXvurhwNM31zpqAih8qsGI6ZFp6tF4W3wtIq7Um6eAqPXpjbPueNMIo07F2+8Zg2 1hZTdfVs9q3mikdkM4zUlCdif6MrBdO3I2b5yt93m6T4ziZC0oxSfCW/DMtgHDyM e5yEvraINBDx3g9dWPPl5fc6xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYVxPJV ijPVwLYPAbOJK6z+g44qMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSAa8l6jY0J+loWJAr9WbTlA7tdVt/93cEE/QzfmLQ7l71w/Jh6KZs 3j1hgnQQXLunbT8pr4yKH8KxniebAUrfei35FNhWs4jTQTlea1qa77TFAQJ0GX8M XlKvQOwqfEK5Eq/80MbknucDOHHKmbSbn4UpyEv6fiQVDP/VDIgT5leZd4hr+8Tt nD1+3ZzyjZKM/s4TKSvAKLiMdwc+pDTlFHnBzf3tIMTh7Fun9ISCzIqt2/JU3YMt v9YsgPpvRbSTDiCZNsC3T58ocVqqSXce/Isa+XPE19piCU7IeZKcceieW+aRPRgb R7VntGO0szmmR5Xb8sauxB5AfZvYlPWD -----END CERTIFICATE-----Generated at Sun May 11 22:43:58 2025 by rpki-client