$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: 7pBtEexRQ1pZ7WBM5u+uT/dEtqYnKv8YT32M0bYuGdY= Subject key identifier: 54:28:79:1E:72:FB:40:BD:E3:0D:17:6B:71:EF:F1:B6:E8:FB:F6:3E Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 081E Signing time: Fri 22 Aug 2025 20:58:37 +0000 Manifest this update: Fri 22 Aug 2025 20:58:36 +0000 Manifest next update: Fri 29 Aug 2025 20:58:36 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: YoaS4YpQVmt0yxI4UYfERNfjWCLW420l4oPfkff45WY=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: YgGSKjf+yqS6tfXBHbo08Az10kPo68dPDcKOBD0yFMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Validity Not Before: Aug 22 20:58:36 2025 GMT Not After : Aug 29 20:58:36 2025 GMT Subject: CN=68a8d9fc-f06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:27:a5:46:b9:cb:75:6b:e4:b7:75:00:53: d5:d0:5a:c6:c9:dd:dc:5a:c1:66:f3:d1:a1:c2:80: 54:36:a4:43:9c:91:38:64:1a:df:37:9d:fb:b2:0c: 77:13:eb:c8:9a:91:03:c3:7f:e7:86:3e:b5:01:b5: d4:10:57:d6:d0:0c:ef:7c:79:fb:f3:c4:13:37:5d: 8f:77:08:a3:fc:49:bf:ee:50:48:4a:83:6d:a2:52: f2:42:a9:cb:88:83:d5:e8:6d:7f:cd:7b:94:da:47: 6a:6d:e5:be:90:28:eb:80:65:31:67:da:c5:7b:45: 81:af:cd:c5:61:62:a4:7e:d8:a9:4a:33:0a:84:b5: cb:4c:e8:a8:c7:35:7e:0d:01:28:39:5e:72:c8:7c: 67:58:e6:3f:b8:1b:d0:33:27:08:7d:9c:20:6b:f7: 2b:2c:f3:7a:21:2d:fd:68:e5:c4:85:2b:e4:cb:74: 54:20:f8:48:92:4f:c7:d6:24:cc:72:c3:c9:b3:06: f9:4d:a9:ab:62:a5:d8:38:08:03:54:d6:a5:24:d4: 11:d6:15:7e:12:52:44:c1:f3:2b:c2:20:7b:a1:e7: d0:d8:94:32:57:ef:ed:f2:97:25:1e:27:cc:d9:ce: dc:df:0c:e2:c7:10:87:bb:12:1f:77:c1:5b:fe:98: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:28:79:1E:72:FB:40:BD:E3:0D:17:6B:71:EF:F1:B6:E8:FB:F6:3E X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:14:e8:bf:ee:ab:12:02:8d:09:63:25:3c:a0:65:58:3d:7d: f8:44:35:b6:f6:22:f0:17:fc:1b:1c:0c:81:9a:9b:21:1b:8e: 5d:d2:d1:e0:94:08:03:33:69:97:8c:32:c9:ad:46:9b:53:0d: 98:98:5a:c0:6d:29:05:c3:9c:1f:16:30:56:a6:5e:97:72:df: 94:77:19:e9:77:c3:e8:7c:5c:52:91:9a:62:b5:da:ba:2a:e7: a9:35:27:b3:f1:30:6c:b3:85:20:23:79:21:85:80:8a:4f:fe: cb:c9:e9:db:e2:6f:20:14:df:f3:0e:9f:00:3f:ff:81:a3:87: 36:34:fb:b5:2e:92:c6:c4:ef:69:49:03:38:29:08:bb:66:30: 57:3d:c6:17:af:87:a2:30:6e:7c:81:3d:99:d4:d2:43:56:fb: 82:8f:db:60:a8:6d:f6:b1:cf:e3:ea:ee:2c:a3:a7:ef:0b:88: b1:20:46:c7:ba:2a:14:cb:39:b1:47:36:47:25:34:15:97:c5: c6:9e:1c:ef:ee:98:8e:e1:0d:80:f8:46:59:d0:ef:5a:01:c7: 9f:4c:24:83:77:e8:e8:91:1d:15:10:bd:c4:31:62:d6:b1:cb: 0c:ee:b9:d0:1f:9a:44:50:f4:7f:53:b8:cb:86:c4:b3:62:0e: f4:2e:c1:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjUwODIyMjA1ODM2WhcNMjUwODI5MjA1ODM2WjAYMRYwFAYD VQQDEw02OGE4ZDlmYy1mMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYgnpUa5y3Vr5Ld1AFPV0FrGyd3cWsFm89GhwoBUNqRDnJE4ZBrfN537sgx3 E+vImpEDw3/nhj61AbXUEFfW0AzvfHn788QTN12Pdwij/Em/7lBISoNtolLyQqnL iIPV6G1/zXuU2kdqbeW+kCjrgGUxZ9rFe0WBr83FYWKkftipSjMKhLXLTOioxzV+ DQEoOV5yyHxnWOY/uBvQMycIfZwga/crLPN6IS39aOXEhSvky3RUIPhIkk/H1iTM csPJswb5TamrYqXYOAgDVNalJNQR1hV+ElJEwfMrwiB7oefQ2JQyV+/t8pclHifM 2c7c3wzixxCHuxIfd8Fb/pg9DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQoeR5y +0C94w0Xa3Hv8bbo+/Y+MB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhFOi/7qsSAo0JYyU8oGVYPX34RDW29iLwF/wbHAyBmpshG45d0tHg lAgDM2mXjDLJrUabUw2YmFrAbSkFw5wfFjBWpl6Xct+Udxnpd8PofFxSkZpitdq6 KuepNSez8TBss4UgI3khhYCKT/7Lyenb4m8gFN/zDp8AP/+Bo4c2NPu1LpLGxO9p SQM4KQi7ZjBXPcYXr4eiMG58gT2Z1NJDVvuCj9tgqG32sc/j6u4so6fvC4ixIEbH uioUyzmxRzZHJTQVl8XGnhzv7piO4Q2A+EZZ0O9aAcefTCSDd+jokR0VEL3EMWLW scsM7rnQH5pEUPR/U7jLhsSzYg70LsH+ -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:37 2025 by rpki-client