$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json) Hash identifier: bpkdIq/aqoa8zULj8uSO7NksiOU+4yZpj115S8S0nHo= Subject key identifier: 3D:D6:8B:B2:AC:62:83:0B:44:B0:97:8D:14:E0:0E:61:F9:D8:C9:68 Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft Manifest number: 9B Signing time: Sat 31 May 2025 05:59:20 +0000 Manifest this update: Sat 31 May 2025 05:59:20 +0000 Manifest next update: Sat 07 Jun 2025 05:59:19 +0000 Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: GxEZQF5ii4dv8xAY+TvVTqfGI8vqo7xnfGkDWOhyNE4=) 2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=) 3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: May 31 05:59:20 2025 GMT Not After : Jun 7 05:59:19 2025 GMT Subject: CN=683a9ab8-4c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:e3:4f:f9:7d:f6:3b:c2:75:91:f9:af:e1: 91:ca:33:eb:ee:9f:dd:19:1e:46:0e:81:35:44:5c: d3:39:f5:3d:af:ff:02:5e:08:93:f9:d3:a6:ca:47: 8d:33:7c:8c:25:8c:a6:8d:a7:cb:04:15:ed:d7:e5: a1:5b:2d:15:3d:e3:ec:f3:8d:49:23:66:9d:06:2a: e9:19:52:4c:2f:b8:8c:24:9a:83:f5:6c:84:86:8a: b5:af:82:3b:1a:63:2b:e9:0a:a2:39:d7:db:f7:f9: 4a:85:6a:a6:c2:8b:bb:2b:c5:f0:c3:96:a6:5a:3e: fc:02:7b:df:ca:39:e0:e8:a7:f9:67:c0:9f:6b:e6: e6:f9:e8:5d:0d:8f:23:7e:4a:6e:d2:5a:81:cc:ea: bd:61:13:30:05:f0:49:25:fe:db:45:12:17:57:f5: bc:71:20:f6:b7:e7:27:b8:dd:40:46:a8:1a:52:2b: f8:7b:9e:1c:28:8f:7f:72:98:1f:1a:3b:e4:cb:71: d2:29:6d:37:e5:6a:96:fc:9b:ac:d7:d8:40:42:f4: 87:3a:8a:ab:5d:a9:5f:d8:b5:44:42:36:be:29:5f: 6f:03:4b:eb:e5:83:f1:6c:f2:90:e7:64:10:ba:c3: e4:f0:96:9c:33:58:4a:d2:b7:40:86:2a:ef:f9:ab: 09:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D6:8B:B2:AC:62:83:0B:44:B0:97:8D:14:E0:0E:61:F9:D8:C9:68 X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:2c:00:20:3a:74:05:68:2c:a1:d3:3c:ed:15:20:e4:c0:88: 93:46:9e:a2:6d:8d:42:de:4b:e4:70:6a:43:9a:68:78:4b:cf: d4:20:32:7a:ba:f5:dc:c4:ef:ff:77:4f:34:99:5e:f8:5b:fb: b7:84:06:61:71:e0:4c:9d:88:8f:cb:7a:c7:ff:18:ed:91:2c: f2:f1:4f:5c:21:e8:12:63:90:9d:12:4e:05:27:a9:8b:ea:51: 93:51:bc:96:9c:0a:08:75:2e:4c:81:3f:e7:15:b5:aa:9a:92: 89:de:fb:bd:c6:40:7a:86:df:f5:d5:22:7f:9d:40:a4:c4:dc: 98:6b:2d:2e:98:70:d4:4a:66:90:83:99:42:7a:6a:c0:2c:83: 99:94:36:ec:db:f0:b0:2c:26:6d:7f:2b:b1:e0:25:51:fd:69: 1f:31:5e:c5:89:b1:2b:dc:9d:15:18:22:50:37:b8:87:af:48: 7f:a9:54:28:ea:80:50:4e:0a:2b:d3:f2:79:b0:e3:95:bb:1f: f5:c0:08:22:9e:69:bf:a2:ba:82:6c:6f:e3:7a:fe:a0:70:be: 29:b7:a0:d5:ee:23:46:23:ca:fa:f5:df:4c:52:02:45:9b:f0: 3c:f1:e2:e8:0a:c5:94:43:7f:8e:de:f8:1a:6b:39:75:24:90: af:2e:e9:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw MzRDRUJGRTIwHhcNMjUwNTMxMDU1OTIwWhcNMjUwNjA3MDU1OTE5WjAYMRYwFAYD VQQDEw02ODNhOWFiOC00Yzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnLjT/l99jvCdZH5r+GRyjPr7p/dGR5GDoE1RFzTOfU9r/8CXgiT+dOmykeN M3yMJYymjafLBBXt1+WhWy0VPePs841JI2adBirpGVJML7iMJJqD9WyEhoq1r4I7 GmMr6QqiOdfb9/lKhWqmwou7K8Xww5amWj78Anvfyjng6Kf5Z8Cfa+bm+ehdDY8j fkpu0lqBzOq9YRMwBfBJJf7bRRIXV/W8cSD2t+cnuN1ARqgaUiv4e54cKI9/cpgf Gjvky3HSKW035WqW/Jus19hAQvSHOoqrXalf2LVEQja+KV9vA0vr5YPxbPKQ52QQ usPk8JacM1hK0rdAhirv+asJ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3Wi7Ks YoMLRLCXjRTgDmH52MloMB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAx MVhoTlkxZEFfU01EVE92LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrLAAgOnQFaCyh0zztFSDkwIiTRp6ibY1C3kvkcGpDmmh4S8/UIDJ6 uvXcxO//d080mV74W/u3hAZhceBMnYiPy3rH/xjtkSzy8U9cIegSY5CdEk4FJ6mL 6lGTUbyWnAoIdS5MgT/nFbWqmpKJ3vu9xkB6ht/11SJ/nUCkxNyYay0umHDUSmaQ g5lCemrALIOZlDbs2/CwLCZtfyux4CVR/WkfMV7FibEr3J0VGCJQN7iHr0h/qVQo 6oBQTgor0/J5sOOVux/1wAginmm/orqCbG/jev6gcL4pt6DV7iNGI8r69d9MUgJF m/A88eLoCsWUQ3+O3vgaazl1JJCvLumN -----END CERTIFICATE-----Generated at Sat May 31 16:36:48 2025 by rpki-client