$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: sV4VeOe7q9LqtM+s+O0X5IzXKdvgkS1lD7s+0Pm49r4= Subject key identifier: D8:5E:ED:93:F5:C9:F8:28:04:27:BA:BA:B5:81:98:94:9B:39:39:CD Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 18D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 189D Signing time: Fri 30 May 2025 16:41:22 +0000 Manifest this update: Fri 30 May 2025 16:41:21 +0000 Manifest next update: Fri 06 Jun 2025 16:41:21 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: ZYOkuk0XUavLGwwtnBjHSbkjQihkJh8jUUMsSpso+T4=) 2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: UBVGTVi8DQjYIi/j+YuZMsK+pLOACWwJVo+1Y6lmEKk=) 3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: YlKt2kWUben+k2Bjb1MLu5JXetR40hUY8rn1r7Iw5U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6352 (0x18d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: May 30 16:41:21 2025 GMT Not After : Jun 6 16:41:21 2025 GMT Subject: CN=6839dfb2-41d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:b8:10:96:a5:26:d2:45:8a:ee:c0:24:cf: 97:3a:58:11:96:7c:82:cc:eb:e8:a0:60:ce:a4:68: a7:6c:48:1e:47:08:16:9f:2a:1b:fd:79:13:35:02: 48:4e:5e:7b:d0:bd:41:65:2d:e0:b1:60:e1:7a:81: 9c:1d:9c:8a:0f:79:59:46:b9:64:9e:e0:37:ae:83: 10:0e:da:39:d3:8d:42:71:dc:21:be:66:12:a9:30: 4b:4b:4d:2e:9c:e4:a9:67:08:07:24:01:67:31:50: 27:c6:39:4c:cb:72:b8:25:e8:31:56:e9:4e:65:80: f8:ab:70:ff:99:95:88:c3:03:a6:97:a2:43:38:38: bf:28:e0:12:88:3d:be:52:27:39:64:53:fc:f2:9c: c4:55:f9:4a:83:71:2e:e7:e2:02:fb:34:0d:ca:e3: 80:1a:cb:97:8c:b9:12:ad:25:30:17:80:a4:10:79: f1:e0:5f:68:80:af:e6:47:cf:bd:85:47:ae:d1:1c: e2:47:e9:ec:45:18:b4:93:44:2b:3e:34:54:ce:88: ed:a3:0d:a9:74:b4:12:a4:b2:7f:b5:0a:6f:96:d2: fb:f9:b4:96:31:75:74:9c:83:fb:04:71:9d:c3:19: 42:ad:1a:f8:f2:ae:e9:46:8b:75:a8:c7:89:33:db: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5E:ED:93:F5:C9:F8:28:04:27:BA:BA:B5:81:98:94:9B:39:39:CD X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:25:6c:af:b7:db:e5:43:54:8c:a6:bf:fb:fd:63:45:05:82: 9b:e9:0b:0b:06:e4:86:45:e5:e9:69:9d:63:65:1f:ff:36:6b: 93:ad:49:a6:b3:b8:98:5b:10:47:1d:28:c8:a2:49:c0:ec:3b: f3:46:53:20:a0:ce:7c:18:32:4d:d1:9c:f7:39:6c:36:a3:ad: 26:00:21:bf:f9:7f:5f:97:5d:12:be:af:5a:c8:69:a4:a4:c9: e3:5d:f2:08:0f:2a:84:77:f0:b1:45:e8:b5:59:47:92:6f:62: 51:7d:d6:93:7f:c5:77:c3:38:04:98:d7:c8:65:80:40:8a:f7: 41:12:92:66:6a:70:ef:77:1e:5a:ad:43:c4:26:c6:de:8e:e7: bf:4f:27:1a:07:08:19:6c:5b:66:96:60:9d:bb:a2:1d:bc:3b: fc:b3:91:3c:60:cf:44:05:b3:7d:21:9b:88:91:32:01:84:1c: b7:a9:9b:3f:63:93:f9:be:4e:57:45:54:0a:9d:60:d8:c1:c8: 50:2f:16:ee:40:d0:b7:9c:d2:82:ea:05:eb:e5:f7:61:2c:f3: 7d:a2:cb:21:e4:d6:90:9d:e4:88:be:e5:4b:98:46:80:db:89: db:8f:81:c3:f6:f6:72:37:2e:f1:d5:99:fe:34:35:01:d6:86: ee:a1:54:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjUwNTMwMTY0MTIxWhcNMjUwNjA2MTY0MTIxWjAYMRYwFAYD VQQDEw02ODM5ZGZiMi00MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7u4EJalJtJFiu7AJM+XOlgRlnyCzOvooGDOpGinbEgeRwgWnyob/XkTNQJI Tl570L1BZS3gsWDheoGcHZyKD3lZRrlknuA3roMQDto5041CcdwhvmYSqTBLS00u nOSpZwgHJAFnMVAnxjlMy3K4JegxVulOZYD4q3D/mZWIwwOml6JDODi/KOASiD2+ Uic5ZFP88pzEVflKg3Eu5+IC+zQNyuOAGsuXjLkSrSUwF4CkEHnx4F9ogK/mR8+9 hUeu0RziR+nsRRi0k0QrPjRUzojtow2pdLQSpLJ/tQpvltL7+bSWMXV0nIP7BHGd wxlCrRr48q7pRot1qMeJM9uM6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhe7ZP1 yfgoBCe6urWBmJSbOTnNMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwJWyvt9vlQ1SMpr/7/WNFBYKb6QsLBuSGReXpaZ1jZR//NmuTrUmm s7iYWxBHHSjIoknA7DvzRlMgoM58GDJN0Zz3OWw2o60mACG/+X9fl10Svq9ayGmk pMnjXfIIDyqEd/CxRei1WUeSb2JRfdaTf8V3wzgEmNfIZYBAivdBEpJmanDvdx5a rUPEJsbejue/TycaBwgZbFtmlmCdu6IdvDv8s5E8YM9EBbN9IZuIkTIBhBy3qZs/ Y5P5vk5XRVQKnWDYwchQLxbuQNC3nNKC6gXr5fdhLPN9ossh5NaQneSIvuVLmEaA 24nbj4HD9vZyNy7x1Zn+NDUB1obuoVTR -----END CERTIFICATE-----Generated at Sat May 31 17:53:10 2025 by rpki-client