$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json) Hash identifier: akfKu8ThxX2/WtfoPWzWVFTpf5LF4XzPsYklICysCic= Subject key identifier: 0D:E9:AB:F5:3A:47:5F:BD:4D:EF:93:B5:C9:7C:3E:74:C5:D3:D9:9F Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft Manifest number: B6 Signing time: Wed 23 Jul 2025 06:24:49 +0000 Manifest this update: Wed 23 Jul 2025 06:24:48 +0000 Manifest next update: Wed 30 Jul 2025 06:24:48 +0000 Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: wqcbH+3o4j7xVj78F7+FW3456+D+WDmRAm0hepPZdRw=) 2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=) 3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Jul 23 06:24:48 2025 GMT Not After : Jul 30 06:24:48 2025 GMT Subject: CN=68808030-3ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:40:90:fb:a3:62:ef:fd:6a:10:f6:06:fd: ad:64:8b:3b:14:8c:b6:76:3d:d7:20:c6:36:dc:07: 58:63:eb:9b:54:54:aa:99:db:57:e4:f7:66:78:3c: 85:e6:14:32:21:f4:f4:87:bf:e8:1d:fe:71:cb:0d: 47:fb:bf:16:85:c2:9b:5f:5b:67:80:fa:1a:90:31: 4b:92:ff:bd:7e:33:76:49:ae:73:31:9a:c4:12:74: 66:3c:a1:35:90:89:28:84:6e:12:e2:5a:87:10:ba: cb:12:3a:60:04:48:f2:f7:68:6f:38:b3:fa:17:97: 2d:c9:a8:4e:a9:f8:6b:81:5e:b0:46:68:85:ea:29: 4e:81:0f:12:bc:a2:ca:8d:42:e8:16:7c:08:e3:4c: 7c:82:f8:d4:4b:9c:42:40:b1:36:f6:3a:5c:d0:33: 60:45:d7:df:c4:01:8c:fc:d2:b5:fa:7b:79:83:fa: c2:a1:81:9d:d3:c0:4e:0e:97:2b:00:89:f9:7b:c1: 01:bc:87:48:64:a5:e5:3a:8d:3b:63:52:6b:96:3c: 3e:99:cf:8c:8e:a3:8a:be:b0:55:d6:20:e3:30:13: 9b:97:b2:c8:80:72:56:f0:69:bd:ef:07:a5:f7:7b: 0e:37:27:1c:b5:82:a7:ce:d7:e9:c6:e7:b7:20:1d: db:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E9:AB:F5:3A:47:5F:BD:4D:EF:93:B5:C9:7C:3E:74:C5:D3:D9:9F X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:ea:e8:3c:17:1d:83:d1:b0:4e:7e:34:7c:07:7b:8f:7c:bb: 85:0a:66:f1:55:70:e4:37:dc:d3:94:b5:1d:78:18:a1:1a:f1: 3f:88:3c:3e:b9:27:07:a3:6f:57:8c:ba:1b:03:b5:5a:5c:93: 87:f4:54:61:8e:70:69:ef:34:74:47:03:2e:be:aa:94:89:14: 09:ad:d2:f7:79:19:b9:42:1f:8b:0d:b2:ca:2b:dd:13:8f:c6: 36:1b:41:3f:ed:f1:7d:13:28:30:8f:c1:d2:1c:9d:16:64:c0: b6:42:cc:24:b5:14:5b:92:d0:4a:fd:33:50:67:be:a1:6e:d4: 77:1d:d3:48:57:06:81:87:b0:e7:ed:2b:ab:71:66:96:41:f3: 94:49:b9:c2:b6:87:9f:f3:90:c0:d8:f9:6d:48:95:b6:4a:72: a5:70:10:e3:a7:54:e0:b8:07:e7:ca:92:9b:c0:56:9a:0f:09: b2:d3:e0:91:82:b3:e9:78:81:48:9b:5e:3f:a0:3a:7a:aa:9b: 3f:2e:9f:c5:94:b3:d3:c9:6f:21:4f:ab:53:fb:42:7e:3c:79: 8a:f3:68:f3:42:0d:3d:08:14:9c:20:4e:29:fd:2c:0b:06:90: 11:0f:8c:f2:08:23:5b:46:84:8c:35:a4:6e:b6:20:54:5e:55: e9:8d:50:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw MzRDRUJGRTIwHhcNMjUwNzIzMDYyNDQ4WhcNMjUwNzMwMDYyNDQ4WjAYMRYwFAYD VQQDEw02ODgwODAzMC0zZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PFAkPujYu/9ahD2Bv2tZIs7FIy2dj3XIMY23AdYY+ubVFSqmdtX5PdmeDyF 5hQyIfT0h7/oHf5xyw1H+78WhcKbX1tngPoakDFLkv+9fjN2Sa5zMZrEEnRmPKE1 kIkohG4S4lqHELrLEjpgBEjy92hvOLP6F5ctyahOqfhrgV6wRmiF6ilOgQ8SvKLK jULoFnwI40x8gvjUS5xCQLE29jpc0DNgRdffxAGM/NK1+nt5g/rCoYGd08BODpcr AIn5e8EBvIdIZKXlOo07Y1Jrljw+mc+MjqOKvrBV1iDjMBObl7LIgHJW8Gm97wel 93sONycctYKnztfpxue3IB3bywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3pq/U6 R1+9Te+Ttcl8PnTF09mfMB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAx MVhoTlkxZEFfU01EVE92LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC26ug8Fx2D0bBOfjR8B3uPfLuFCmbxVXDkN9zTlLUdeBihGvE/iDw+ uScHo29XjLobA7VaXJOH9FRhjnBp7zR0RwMuvqqUiRQJrdL3eRm5Qh+LDbLKK90T j8Y2G0E/7fF9Eygwj8HSHJ0WZMC2QswktRRbktBK/TNQZ76hbtR3HdNIVwaBh7Dn 7SurcWaWQfOUSbnCtoef85DA2PltSJW2SnKlcBDjp1TguAfnypKbwFaaDwmy0+CR grPpeIFIm14/oDp6qps/Lp/FlLPTyW8hT6tT+0J+PHmK82jzQg09CBScIE4p/SwL BpARD4zyCCNbRoSMNaRutiBUXlXpjVCY -----END CERTIFICATE-----Generated at Wed Jul 23 12:47:13 2025 by rpki-client