$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: RbOq+rW+R15tQPo34YiWyw3sChuY96bedRzaX/EL85c= Subject key identifier: 18:E2:94:97:60:9A:A9:E9:BE:29:8B:DC:3E:B9:54:C0:FC:0A:92:9F Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 18E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 18B0 Signing time: Wed 02 Jul 2025 16:37:24 +0000 Manifest this update: Wed 02 Jul 2025 16:37:23 +0000 Manifest next update: Wed 09 Jul 2025 16:37:23 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: dFkGCO5G7d3MxqUNPWrc/jG35wt9vSy4xw7MmiK6H/c=) 2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: Y73x6wR5jcOY6BkNKlI0WoDh01ODb0bGEnsYPJ8kMjk=) 3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: zs+47Dsw1gUVHnfCNkqFYR5V7IW/citmpclZUpon2fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6373 (0x18e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Jul 2 16:37:23 2025 GMT Not After : Jul 9 16:37:23 2025 GMT Subject: CN=68656043-e99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:d0:43:9a:71:f2:7b:da:0d:d0:96:3e:3a: 74:90:64:82:53:b4:38:19:32:bd:2e:01:da:e7:0a: d2:68:d5:64:84:0f:73:cf:46:39:51:09:81:82:1c: ea:31:60:b0:4b:50:2b:c7:e1:ad:da:ab:90:3e:c5: e5:7f:36:88:c0:e2:75:81:ee:d2:a4:bb:19:d9:e9: f4:e9:ab:57:b6:1c:7a:b2:1b:de:15:14:73:cf:29: 57:1e:26:fe:4a:5f:57:70:0c:33:c0:8c:3b:7f:8f: f1:e5:d8:e9:ba:3a:b6:7c:c1:99:b4:1e:ae:c5:57: 12:6a:73:51:44:16:ce:4c:b1:79:38:af:44:d7:81: f6:20:08:34:89:e5:49:d6:3b:c3:82:b5:95:d1:28: ae:cd:dc:ff:d1:a7:50:ab:5a:a1:a8:ee:d5:af:cc: d7:f9:ff:99:bd:cf:e4:ac:f5:f2:7c:a6:e2:8a:76: 94:11:7d:c5:6e:97:95:78:a4:7c:ef:fe:af:5c:2e: 60:0c:c8:e7:27:dd:0e:02:2e:03:14:68:9f:05:7d: a8:36:e6:67:a2:06:b5:32:3b:8d:a2:b3:98:20:f7: da:50:7e:9c:f8:87:59:a9:33:c5:05:ed:01:bd:51: 9d:78:89:4f:c1:ef:a0:3b:9d:83:8e:99:3f:44:e0: d8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E2:94:97:60:9A:A9:E9:BE:29:8B:DC:3E:B9:54:C0:FC:0A:92:9F X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:48:8f:e9:6d:da:5c:a9:ed:d1:1b:ae:c6:e1:b1:c5:1e:37: 57:1f:e9:76:f5:cc:a1:77:b2:c5:f1:99:c5:dd:f8:c6:1c:c0: f9:03:70:82:3e:1f:64:d2:a3:7e:35:b4:d2:d0:00:5a:74:c4: 46:fb:5b:06:58:c0:ef:71:d6:9d:b7:a1:1d:0c:15:fa:fa:62: 1a:f5:e2:42:9c:99:ab:5f:01:0b:9b:c2:b5:a4:7e:56:fd:2c: 4e:07:1f:e5:91:69:ba:d0:75:63:ae:b0:7a:73:56:dc:9e:08: df:fc:53:09:f1:5d:d0:9a:fd:59:5a:fc:0e:c6:68:d0:90:cf: 3f:87:f8:01:e4:72:2d:43:ea:98:64:5b:c9:0c:9a:cd:60:a7: 80:52:8c:02:ea:98:1d:1a:38:dd:4a:f0:44:8d:59:8c:31:5e: 72:37:3f:52:98:6e:e0:f8:43:64:ca:7b:54:43:5a:74:4e:26: 3a:a7:ab:7b:ee:d3:96:8f:df:e0:92:ae:80:f8:a9:db:d7:ff: 52:20:ea:4b:42:95:1c:b5:3c:b4:05:9b:49:b6:6d:09:ff:b2: 1d:a7:27:bb:3c:22:ea:20:3d:19:18:e1:a0:05:0e:a8:89:f6: fb:cd:bd:30:6b:47:d5:31:78:b7:63:21:12:1e:38:b5:e5:3a: e5:fb:5c:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjUwNzAyMTYzNzIzWhcNMjUwNzA5MTYzNzIzWjAYMRYwFAYD VQQDEw02ODY1NjA0My1lOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueXQQ5px8nvaDdCWPjp0kGSCU7Q4GTK9LgHa5wrSaNVkhA9zz0Y5UQmBghzq MWCwS1Arx+Gt2quQPsXlfzaIwOJ1ge7SpLsZ2en06atXthx6shveFRRzzylXHib+ Sl9XcAwzwIw7f4/x5djpujq2fMGZtB6uxVcSanNRRBbOTLF5OK9E14H2IAg0ieVJ 1jvDgrWV0Siuzdz/0adQq1qhqO7Vr8zX+f+Zvc/krPXyfKbiinaUEX3FbpeVeKR8 7/6vXC5gDMjnJ90OAi4DFGifBX2oNuZnoga1MjuNorOYIPfaUH6c+IdZqTPFBe0B vVGdeIlPwe+gO52Djpk/RODYMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjilJdg mqnpvimL3D65VMD8CpKfMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWSI/pbdpcqe3RG67G4bHFHjdXH+l29cyhd7LF8ZnF3fjGHMD5A3CC Ph9k0qN+NbTS0ABadMRG+1sGWMDvcdadt6EdDBX6+mIa9eJCnJmrXwELm8K1pH5W /SxOBx/lkWm60HVjrrB6c1bcngjf/FMJ8V3Qmv1ZWvwOxmjQkM8/h/gB5HItQ+qY ZFvJDJrNYKeAUowC6pgdGjjdSvBEjVmMMV5yNz9SmG7g+ENkyntUQ1p0TiY6p6t7 7tOWj9/gkq6A+Knb1/9SIOpLQpUctTy0BZtJtm0J/7Idpye7PCLqID0ZGOGgBQ6o ifb7zb0wa0fVMXi3YyESHji15Trl+1xk -----END CERTIFICATE-----Generated at Thu Jul 3 18:09:44 2025 by rpki-client