$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: XCEbMpPUTGYzsSPDfd+ksDpMjjFhqme6Ji0XYC16b4s= Subject key identifier: 3A:2C:67:AB:A4:74:33:DD:E4:D2:0E:D5:0F:70:11:2A:D3:8D:09:44 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 18C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 1896 Signing time: Fri 16 May 2025 16:43:28 +0000 Manifest this update: Fri 16 May 2025 16:43:27 +0000 Manifest next update: Fri 23 May 2025 16:43:27 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: /VcuLpZ5WiRg0hwizOyKoqbHEZ/VOpNOdHg5UeIXyhU=) 2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: UBVGTVi8DQjYIi/j+YuZMsK+pLOACWwJVo+1Y6lmEKk=) 3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: YlKt2kWUben+k2Bjb1MLu5JXetR40hUY8rn1r7Iw5U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6345 (0x18c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: May 16 16:43:27 2025 GMT Not After : May 23 16:43:27 2025 GMT Subject: CN=68276b30-9955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f0:a2:39:28:f2:3f:f1:0a:4e:31:21:b9:c3: 0b:13:a0:9d:4d:69:8f:ee:14:21:1a:e1:48:ef:23: 70:d9:82:7f:cf:ed:57:bf:5e:7c:77:d8:90:6f:f2: 33:3c:a4:53:b4:74:90:32:32:6e:aa:b0:d0:2a:2d: d3:c6:87:c3:50:89:31:15:50:e9:0b:a9:c8:ab:df: d7:9b:c4:11:7d:20:f1:f5:c7:bf:b6:42:1a:0d:01: b8:13:0c:a1:ce:e5:5d:4b:4a:32:bd:b8:21:32:53: 2f:9d:7c:c9:2d:eb:f9:59:a6:17:8f:38:e1:cd:89: e9:d5:0f:6f:25:d8:46:5a:23:6e:81:71:9b:a0:ec: a2:c0:3f:2f:c6:64:25:13:5a:80:67:e3:f6:3d:36: ad:dc:0b:2c:d6:cc:1d:86:91:03:db:6f:17:72:c9: 81:b2:74:5e:58:7b:28:69:3f:33:14:94:05:c8:45: ff:e4:94:6e:2a:e9:47:bc:bf:ea:7d:8f:00:38:62: 90:a3:a7:ba:2a:e1:12:43:df:9a:3b:78:d1:11:98: ec:bb:1c:68:07:2b:6c:e0:3c:70:c0:eb:03:21:c5: f6:59:45:45:42:63:b8:1e:f2:1e:73:0b:6e:a1:60: e8:e8:75:8e:59:40:fd:37:cd:37:60:f3:69:7c:36: 31:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2C:67:AB:A4:74:33:DD:E4:D2:0E:D5:0F:70:11:2A:D3:8D:09:44 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:fb:9d:7e:1d:96:4e:0d:e6:80:0b:0d:6a:7b:6b:43:96:0f: ea:6e:d5:57:cc:13:fc:56:fe:76:af:8c:5f:34:ff:25:34:1e: 14:08:42:de:3d:50:2d:32:e2:ea:1e:99:f9:e3:11:42:41:6c: 07:26:db:7b:fa:3e:c1:3b:55:8b:c7:35:f5:60:6f:87:7f:f1: fb:92:22:e2:f1:d8:67:02:be:7a:9b:37:a4:9a:69:f3:fd:7e: d4:67:79:37:22:09:60:15:ec:b6:55:1a:28:45:57:c8:17:82: 2a:e6:8d:c9:dd:08:23:96:ee:9d:b9:f7:42:ec:5e:03:56:f7: 1f:a7:bd:24:49:71:ee:65:21:ed:c2:6e:3e:d0:04:3f:bb:8d: 69:64:2e:5f:ed:22:7d:9a:40:ff:ff:42:86:b1:56:99:0a:6d: ba:39:32:55:7a:43:09:a0:67:7e:83:b9:c8:2a:6c:a5:00:11: f7:1c:3f:cd:56:cf:c8:24:35:70:3e:9b:45:bc:28:3f:a4:eb: fa:60:9c:be:6a:e1:07:a8:97:dd:64:e0:1a:bc:00:14:e1:ef: a1:44:84:a9:35:a0:03:3c:bd:7d:97:ef:56:42:e0:dd:56:36: 30:6e:f8:79:e2:b8:5b:56:90:0c:04:1c:24:6c:8b:f1:d3:3e: 3f:5b:35:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjUwNTE2MTY0MzI3WhcNMjUwNTIzMTY0MzI3WjAYMRYwFAYD VQQDEw02ODI3NmIzMC05OTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/CiOSjyP/EKTjEhucMLE6CdTWmP7hQhGuFI7yNw2YJ/z+1Xv158d9iQb/Iz PKRTtHSQMjJuqrDQKi3TxofDUIkxFVDpC6nIq9/Xm8QRfSDx9ce/tkIaDQG4Ewyh zuVdS0oyvbghMlMvnXzJLev5WaYXjzjhzYnp1Q9vJdhGWiNugXGboOyiwD8vxmQl E1qAZ+P2PTat3Ass1swdhpED228XcsmBsnReWHsoaT8zFJQFyEX/5JRuKulHvL/q fY8AOGKQo6e6KuESQ9+aO3jREZjsuxxoByts4DxwwOsDIcX2WUVFQmO4HvIecwtu oWDo6HWOWUD9N803YPNpfDYxHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDosZ6uk dDPd5NIO1Q9wESrTjQlEMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDa+51+HZZODeaACw1qe2tDlg/qbtVXzBP8Vv52r4xfNP8lNB4UCELe PVAtMuLqHpn54xFCQWwHJtt7+j7BO1WLxzX1YG+Hf/H7kiLi8dhnAr56mzekmmnz /X7UZ3k3IglgFey2VRooRVfIF4Iq5o3J3Qgjlu6dufdC7F4DVvcfp70kSXHuZSHt wm4+0AQ/u41pZC5f7SJ9mkD//0KGsVaZCm26OTJVekMJoGd+g7nIKmylABH3HD/N Vs/IJDVwPptFvCg/pOv6YJy+auEHqJfdZOAavAAU4e+hRISpNaADPL19l+9WQuDd VjYwbvh54rhbVpAMBBwkbIvx0z4/WzVk -----END CERTIFICATE-----Generated at Sat May 17 01:24:11 2025 by rpki-client