$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: CpYGRiiUB9RwFBTZGnBxx8L6DXnHmROlPr3WI0Cu/wk= Subject key identifier: B6:05:12:3A:CA:E6:D0:66:75:CC:7A:27:DC:27:8B:05:8D:4C:D3:91 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 18BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 188B Signing time: Thu 24 Apr 2025 16:32:15 +0000 Manifest this update: Thu 24 Apr 2025 16:32:15 +0000 Manifest next update: Thu 01 May 2025 16:32:15 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: DzUyVzQxGAQMVNcVRq9cgnE3UF5769WlYE2aWUMnIhw=) 2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: UBVGTVi8DQjYIi/j+YuZMsK+pLOACWwJVo+1Y6lmEKk=) 3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: YlKt2kWUben+k2Bjb1MLu5JXetR40hUY8rn1r7Iw5U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6334 (0x18be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Apr 24 16:32:15 2025 GMT Not After : May 1 16:32:15 2025 GMT Subject: CN=680a678f-a405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:2f:08:06:f2:b0:6b:64:32:71:87:8e:80: ee:eb:50:3a:91:8e:6a:e3:db:50:cf:ed:32:3f:c0: d2:bf:2a:0a:39:10:72:da:bd:5c:cf:41:39:c4:e3: 6d:ee:b3:8f:e5:14:29:50:ed:a1:17:21:8d:ad:13: 99:c1:29:65:8b:52:0b:bf:13:7a:4a:b2:d1:90:c8: f8:2c:90:52:fc:56:20:20:45:92:16:0e:db:ff:52: 32:4a:50:02:f0:e6:23:37:ab:d6:83:c5:ef:5e:b3: b9:85:a4:bc:26:c5:3a:a5:30:a8:cb:cd:82:a4:39: bd:3b:27:6f:9b:0b:cf:a0:0a:c6:ab:27:2a:8d:07: 9f:8d:a2:24:f3:e5:d4:fa:e5:85:6c:43:7a:14:fb: 26:c0:7c:28:9f:62:e8:f7:4e:50:2f:3c:2d:6d:fc: 5f:2d:47:5e:92:4d:9e:5a:98:86:9f:c5:43:74:fa: 8d:22:26:14:3f:14:e9:38:ca:48:32:5a:f6:b6:75: 01:80:a0:f4:57:e5:99:e3:f8:40:3b:fe:f9:bf:b2: 3b:b0:c1:4e:1a:f4:b2:ba:db:41:85:2c:83:02:c7: 61:a9:2e:4c:05:5c:a6:7f:4b:bb:51:58:97:d8:3e: fc:0d:66:63:1b:bc:e0:93:94:a2:5d:3a:08:b9:9a: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:05:12:3A:CA:E6:D0:66:75:CC:7A:27:DC:27:8B:05:8D:4C:D3:91 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:b4:a4:ec:fa:5f:85:97:00:8a:31:4b:0c:3b:ad:c6:48:8b: 67:de:b0:48:ea:de:1c:ed:ae:92:f2:73:14:10:ed:af:14:dc: ff:34:76:c6:f5:16:20:f7:8f:e3:19:03:d5:83:08:18:a8:02: 79:6c:93:bb:75:7d:5a:ad:5a:c4:de:5d:e2:3b:b3:63:76:fe: e2:d9:54:dd:d6:77:43:1f:47:cc:ed:35:e8:d5:95:ac:6f:d2: a8:38:87:e3:2c:08:a5:56:fa:7e:ae:16:26:15:dd:d4:94:e3: 32:64:91:8e:80:40:65:77:d7:8e:d9:5b:73:cf:51:f2:6e:04: 45:49:fd:5e:63:88:54:ae:e4:37:ad:79:82:fb:ff:e2:eb:d3: 2b:7e:06:d4:f5:ea:d4:5e:15:b6:ee:9c:89:e0:6f:0d:59:22: 56:c6:29:ee:84:a3:0f:a9:ab:1d:fd:62:a2:76:42:f3:dc:aa: 4d:30:e3:db:c0:18:6b:09:d6:47:00:18:7a:87:c9:c9:11:e1: 54:ce:91:46:bd:a7:a5:51:2c:ab:1b:a6:82:4e:a9:b4:66:ca: a5:73:78:34:bf:d2:a2:95:9c:42:dc:db:99:ed:99:33:be:6b: 3f:6c:6d:7f:33:a3:19:2a:07:10:ce:6c:0f:0e:db:14:d8:26: 11:f0:20:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjUwNDI0MTYzMjE1WhcNMjUwNTAxMTYzMjE1WjAYMRYwFAYD VQQDEw02ODBhNjc4Zi1hNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0z0vCAbysGtkMnGHjoDu61A6kY5q49tQz+0yP8DSvyoKORBy2r1cz0E5xONt 7rOP5RQpUO2hFyGNrROZwSlli1ILvxN6SrLRkMj4LJBS/FYgIEWSFg7b/1IySlAC 8OYjN6vWg8XvXrO5haS8JsU6pTCoy82CpDm9OydvmwvPoArGqycqjQefjaIk8+XU +uWFbEN6FPsmwHwon2Lo905QLzwtbfxfLUdekk2eWpiGn8VDdPqNIiYUPxTpOMpI Mlr2tnUBgKD0V+WZ4/hAO/75v7I7sMFOGvSyuttBhSyDAsdhqS5MBVymf0u7UViX 2D78DWZjG7zgk5SiXToIuZpijwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYFEjrK 5tBmdcx6J9wniwWNTNORMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCztKTs+l+FlwCKMUsMO63GSItn3rBI6t4c7a6S8nMUEO2vFNz/NHbG 9RYg94/jGQPVgwgYqAJ5bJO7dX1arVrE3l3iO7Njdv7i2VTd1ndDH0fM7TXo1ZWs b9KoOIfjLAilVvp+rhYmFd3UlOMyZJGOgEBld9eO2Vtzz1HybgRFSf1eY4hUruQ3 rXmC+//i69MrfgbU9erUXhW27pyJ4G8NWSJWxinuhKMPqasd/WKidkLz3KpNMOPb wBhrCdZHABh6h8nJEeFUzpFGvaelUSyrG6aCTqm0Zsqlc3g0v9KilZxC3NuZ7Zkz vms/bG1/M6MZKgcQzmwPDtsU2CYR8CCP -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:34 2025 by rpki-client