$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: NO0l0XKq3JJq8n6lj1s8i7+sAechCS6jn7DpKv8MRwk= Subject key identifier: 4F:4C:32:58:F4:06:8B:F0:FA:B1:29:FC:26:25:7B:46:FF:3C:3D:A0 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 18FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 18CA Signing time: Fri 22 Aug 2025 16:35:32 +0000 Manifest this update: Fri 22 Aug 2025 16:35:31 +0000 Manifest next update: Fri 29 Aug 2025 16:35:31 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: oMs2c/9PAPvRVoJHHY1gcNkbjXG5TMZOP0vw0Zy5qpM=) 2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: Y73x6wR5jcOY6BkNKlI0WoDh01ODb0bGEnsYPJ8kMjk=) 3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: zs+47Dsw1gUVHnfCNkqFYR5V7IW/citmpclZUpon2fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6399 (0x18ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Aug 22 16:35:31 2025 GMT Not After : Aug 29 16:35:31 2025 GMT Subject: CN=68a89c53-595c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:77:bb:63:5a:eb:ef:de:0f:82:0d:44:23: a6:37:63:e8:18:1c:6b:31:29:8e:0b:87:36:e0:6b: 09:18:b3:f3:85:30:aa:76:72:00:cd:aa:fb:b7:9e: 2e:86:7d:57:5c:46:58:0d:74:5f:54:e5:02:e8:7e: 61:ce:f9:0e:8d:52:70:c9:1e:fe:f4:40:1d:7c:42: 21:b8:09:73:64:e6:50:63:21:e8:1f:9e:23:96:39: 9a:76:c5:e9:be:d1:9b:37:6a:09:1b:71:50:2a:a3: 7c:3c:3c:c4:ee:2c:64:2f:29:6c:9d:9b:f5:a9:37: e1:9f:c2:e7:0e:b7:9c:32:6b:f4:ae:ec:52:78:69: c4:55:90:81:44:d6:d8:4b:7e:91:1d:18:ba:56:06: aa:8b:b7:0a:45:22:95:f9:08:e2:32:ff:67:8e:47: 72:49:55:32:0a:83:cd:a3:7c:75:b9:41:bc:55:fe: 29:de:36:e1:56:d7:0f:c0:30:30:d5:20:0e:04:1f: 20:42:ab:4f:73:cd:59:db:0d:c0:10:7b:00:c1:b0: a3:6f:84:b9:8f:d7:ee:ca:ae:b7:9d:02:3d:56:22: f1:3a:71:94:17:43:5c:36:43:53:b3:52:49:0e:6d: df:a3:3a:bf:4d:94:19:88:f9:e1:c0:32:f4:3f:ed: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4C:32:58:F4:06:8B:F0:FA:B1:29:FC:26:25:7B:46:FF:3C:3D:A0 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:db:a5:b1:c4:cf:11:9b:c7:11:57:58:8e:0d:53:d8:12:d6: 8e:3a:51:d4:e9:70:58:2d:82:1b:ef:d3:84:95:30:b4:31:ce: a4:21:98:96:f7:60:46:f8:b8:31:73:68:e9:19:23:30:c3:8f: 2b:96:1d:bb:48:70:5b:80:18:02:c0:42:32:ff:a4:77:46:6c: 7a:9f:75:5b:f5:38:76:43:08:68:8d:8d:7f:38:40:9b:2e:4d: 69:f9:17:55:ff:72:f3:ed:72:da:35:72:8c:eb:76:c7:7a:9e: 44:8c:cb:2c:c5:42:42:db:0e:c2:99:51:a7:21:e5:1d:01:19: 21:9d:3c:47:a8:67:f1:42:9d:50:b6:e4:c6:19:79:66:16:a6: e8:1a:eb:5f:d7:d3:97:d8:e2:05:90:9c:99:7b:ed:06:e4:3f: a8:06:dd:e1:8b:76:2a:04:52:0e:3d:9e:3d:42:7f:38:38:4c: 30:93:e7:35:70:e9:64:75:f1:91:05:7b:a6:3d:c4:c8:c9:4d: 80:43:9a:f8:be:b4:d3:2e:f3:b0:74:31:38:88:e9:13:f6:e2: 87:3f:48:65:b8:69:68:26:60:e4:09:2e:3c:7e:27:cb:dc:75: d4:f1:39:8e:ad:58:24:f9:5d:b3:1f:ae:1c:01:7a:e9:25:2d: bf:e9:bd:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjUwODIyMTYzNTMxWhcNMjUwODI5MTYzNTMxWjAYMRYwFAYD VQQDEw02OGE4OWM1My01OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKF3u2Na6+/eD4INRCOmN2PoGBxrMSmOC4c24GsJGLPzhTCqdnIAzar7t54u hn1XXEZYDXRfVOUC6H5hzvkOjVJwyR7+9EAdfEIhuAlzZOZQYyHoH54jljmadsXp vtGbN2oJG3FQKqN8PDzE7ixkLylsnZv1qTfhn8LnDrecMmv0ruxSeGnEVZCBRNbY S36RHRi6Vgaqi7cKRSKV+QjiMv9njkdySVUyCoPNo3x1uUG8Vf4p3jbhVtcPwDAw 1SAOBB8gQqtPc81Z2w3AEHsAwbCjb4S5j9fuyq63nQI9ViLxOnGUF0NcNkNTs1JJ Dm3fozq/TZQZiPnhwDL0P+3BTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9MMlj0 Bovw+rEp/CYle0b/PD2gMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA426WxxM8Rm8cRV1iODVPYEtaOOlHU6XBYLYIb79OElTC0Mc6kIZiW 92BG+Lgxc2jpGSMww48rlh27SHBbgBgCwEIy/6R3Rmx6n3Vb9Th2QwhojY1/OECb Lk1p+RdV/3Lz7XLaNXKM63bHep5EjMssxUJC2w7CmVGnIeUdARkhnTxHqGfxQp1Q tuTGGXlmFqboGutf19OX2OIFkJyZe+0G5D+oBt3hi3YqBFIOPZ49Qn84OEwwk+c1 cOlkdfGRBXumPcTIyU2AQ5r4vrTTLvOwdDE4iOkT9uKHP0hluGloJmDkCS48fifL 3HXU8TmOrVgk+V2zH64cAXrpJS2/6b09 -----END CERTIFICATE-----Generated at Sat Aug 23 20:38:21 2025 by rpki-client