$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json) Hash identifier: SQZtZ2zVOs2kM3g1zKPCbNNVpgv7yRjp3MVAdiUTjNU= Subject key identifier: 06:B4:8D:38:BE:E8:20:6A:A2:5F:B2:3F:5D:FE:20:00:0D:10:D4:AF Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft Manifest number: CD Signing time: Fri 05 Sep 2025 06:13:55 +0000 Manifest this update: Fri 05 Sep 2025 06:13:55 +0000 Manifest next update: Fri 12 Sep 2025 06:13:55 +0000 Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: oyr17WDgDdj0/FObvbSRhn5kinp8OMgbpD3uHwrF5Mw=) 2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=) 3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Sep 5 06:13:55 2025 GMT Not After : Sep 12 06:13:55 2025 GMT Subject: CN=68ba7fa3-344b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:fe:ba:71:f0:2f:f7:ea:cc:ac:a1:12:1f: 22:3c:29:61:92:e1:61:ef:d7:87:82:43:f5:29:25: fc:6e:54:52:6b:9b:b1:45:97:d1:99:e9:55:9d:e7: 53:63:6b:d8:b7:81:5d:d0:4f:4b:2a:81:bc:bd:1e: 96:93:99:3f:2c:cd:96:b1:7d:04:c2:38:fd:a4:be: 0e:5d:91:56:01:7b:a0:68:6a:fd:9e:1c:b7:11:19: 81:32:c3:e7:e4:9c:20:a9:7d:fd:ac:51:e9:36:13: 91:72:72:01:0b:e2:bf:58:03:30:5a:16:4a:d3:f1: e2:7d:8f:1f:d9:3c:fb:c0:25:df:91:79:d8:e6:f1: 57:39:31:f1:47:b4:ab:ec:a9:01:9d:29:cc:89:04: 90:ed:9a:65:40:86:2e:2a:ee:02:b8:f9:f1:5f:54: 4f:93:4e:2b:81:23:db:14:68:1a:5c:58:c8:1a:0e: 70:37:75:a3:78:38:1b:08:07:aa:75:fe:27:e3:82: 1f:13:72:54:d3:1b:fc:66:e0:fb:0d:5b:46:b4:63: f7:4c:b3:7a:ae:95:e9:40:fe:43:74:c4:49:20:f7: 6c:88:f8:24:f6:eb:6f:c3:df:07:e0:8a:9b:68:83: d6:a7:20:e7:30:52:e6:f1:81:92:3f:8a:59:81:6a: b9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B4:8D:38:BE:E8:20:6A:A2:5F:B2:3F:5D:FE:20:00:0D:10:D4:AF X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:21:93:2a:a1:61:30:ff:8e:38:e1:c7:29:58:f6:36:5e:82: e4:67:d9:28:e1:01:16:7e:f9:d2:53:4b:a0:cb:db:2d:d3:2f: c4:8a:85:56:75:a1:25:ba:46:a9:22:91:d9:b1:dc:e7:55:c9: 68:0d:c8:e3:99:42:54:5e:e9:ec:46:14:a4:ad:d1:4c:43:c7: a4:97:7c:17:b6:08:ec:31:dc:4d:46:f1:bf:ee:4f:fa:96:2c: a8:d2:b2:8e:b9:0c:da:b6:95:ba:4b:2b:77:79:43:4e:4c:ed: ab:0b:f9:88:7f:15:b6:cc:a1:d5:a1:9a:18:68:84:cb:af:5c: 48:4b:53:53:54:86:35:86:e2:fb:f0:a5:1f:61:5a:d6:68:f4: a1:58:75:15:bd:a3:14:e1:97:11:ea:f1:d7:d2:f9:da:9c:0c: 72:33:ac:ce:f1:f6:81:8c:45:aa:90:cf:30:38:fb:c1:ab:75: af:63:3e:09:e8:68:18:d0:bc:58:68:6b:7b:90:b2:74:90:3f: 65:b2:31:99:7c:c8:f2:7d:84:73:8c:76:c9:b1:a3:55:53:da: ce:b7:a7:04:7e:4d:ec:a6:93:d9:4c:75:14:22:ce:61:23:98: 50:66:76:3e:65:e2:d7:0f:ee:73:bb:9e:98:1d:55:0b:5c:30: a6:91:07:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw MzRDRUJGRTIwHhcNMjUwOTA1MDYxMzU1WhcNMjUwOTEyMDYxMzU1WjAYMRYwFAYD VQQDEw02OGJhN2ZhMy0zNDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJn+unHwL/fqzKyhEh8iPClhkuFh79eHgkP1KSX8blRSa5uxRZfRmelVnedT Y2vYt4Fd0E9LKoG8vR6Wk5k/LM2WsX0Ewjj9pL4OXZFWAXugaGr9nhy3ERmBMsPn 5JwgqX39rFHpNhORcnIBC+K/WAMwWhZK0/HifY8f2Tz7wCXfkXnY5vFXOTHxR7Sr 7KkBnSnMiQSQ7ZplQIYuKu4CuPnxX1RPk04rgSPbFGgaXFjIGg5wN3WjeDgbCAeq df4n44IfE3JU0xv8ZuD7DVtGtGP3TLN6rpXpQP5DdMRJIPdsiPgk9utvw98H4Iqb aIPWpyDnMFLm8YGSP4pZgWq55QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa0jTi+ 6CBqol+yP13+IAANENSvMB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAx MVhoTlkxZEFfU01EVE92LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHIZMqoWEw/4444ccpWPY2XoLkZ9ko4QEWfvnSU0ugy9st0y/EioVW daElukapIpHZsdznVcloDcjjmUJUXunsRhSkrdFMQ8ekl3wXtgjsMdxNRvG/7k/6 liyo0rKOuQzatpW6Syt3eUNOTO2rC/mIfxW2zKHVoZoYaITLr1xIS1NTVIY1huL7 8KUfYVrWaPShWHUVvaMU4ZcR6vHX0vnanAxyM6zO8faBjEWqkM8wOPvBq3WvYz4J 6GgY0LxYaGt7kLJ0kD9lsjGZfMjyfYRzjHbJsaNVU9rOt6cEfk3sppPZTHUUIs5h I5hQZnY+ZeLXD+5zu56YHVULXDCmkQcW -----END CERTIFICATE-----Generated at Sat Sep 6 16:54:28 2025 by rpki-client