$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: tnvIH6LuYI3PooJWGjkOC8s9VlDtH83SEaIL7gy9cMQ= Subject key identifier: 7A:E6:5E:59:43:5A:18:90:34:48:85:E0:C8:2C:C5:73:BE:31:C6:CD Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 1932 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 18F8 Signing time: Tue 04 Nov 2025 16:34:13 +0000 Manifest this update: Tue 04 Nov 2025 16:34:12 +0000 Manifest next update: Tue 11 Nov 2025 16:34:12 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: QFoaVNqHULdo1x54QAPQvvPxzg78jC0FlL46+6+MMns=) 2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: sJTUAzwirYIZpl1wnA3/i/mf1sEf8bCtv90HcGqZGeI=) 3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: pe46e+HZ1NfGBG2vvFXSNdvGZLyB5RzpC40D1ExEG+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6450 (0x1932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Nov 4 16:34:12 2025 GMT Not After : Nov 11 16:34:12 2025 GMT Subject: CN=690a2b04-5c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:51:ec:59:07:7a:94:27:d6:18:bf:64:8c:d4: 74:4f:a5:25:a1:9a:6f:68:47:26:c9:ad:b7:13:02: d7:65:86:85:d5:ca:be:08:11:ed:30:10:aa:86:9c: 80:59:c8:85:37:7e:59:c2:a9:ae:1e:85:b8:25:cb: 2b:d0:8c:10:f4:27:5d:8c:b3:2e:ee:46:78:e6:0c: 55:56:ce:6d:7a:06:0e:41:f2:17:c6:e1:b7:9f:05: 7e:05:6c:e7:97:8f:e1:d3:3d:5d:2b:32:d3:39:53: 2d:c9:fb:9d:c4:ae:ca:97:4e:2a:8a:91:8b:8e:4c: 10:4d:67:e3:a5:fa:98:98:02:2d:50:d6:aa:b1:49: 77:dc:62:34:6e:08:cb:55:76:32:42:a1:85:e1:b0: 1f:cc:f0:2f:d6:99:6e:24:21:ab:1c:da:7e:a1:65: 31:92:71:b1:29:75:57:c1:23:5d:7e:31:70:0a:55: 14:98:9b:e8:1b:7c:ca:07:c8:af:ca:89:7c:d9:01: ec:0a:ec:c7:53:71:a3:85:be:0d:db:ff:33:2e:ae: 59:65:63:e3:52:8f:7e:77:89:f4:c6:3d:23:7b:78: ee:91:96:9c:ec:e8:68:5a:24:5b:50:20:b9:a5:55: 1e:50:58:57:1a:75:34:45:2c:98:84:ad:ac:5f:4b: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E6:5E:59:43:5A:18:90:34:48:85:E0:C8:2C:C5:73:BE:31:C6:CD X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:fd:d4:ad:8f:29:b2:da:35:dd:8f:c7:98:7d:fe:1b:1a:22: 09:21:54:5d:7d:45:b8:76:5a:90:2d:5c:cb:96:c5:33:ff:4c: 02:cd:49:41:b5:2b:a8:33:99:d1:84:02:5f:0e:e4:78:47:71: 7d:32:74:4d:65:ae:b7:9d:5b:a6:3b:2a:6b:7f:45:66:b2:c3: 09:77:bd:f3:52:da:a6:88:0a:ca:6a:be:c7:66:23:b8:c4:89: f1:68:94:ee:b8:3d:07:80:9b:ab:aa:71:a7:2c:39:6a:18:64: 47:e1:54:0a:83:a8:f7:9a:be:2e:45:f0:36:0c:ff:bc:f5:f2: 37:2f:44:b3:73:55:1f:db:8e:81:a3:fc:f0:79:09:69:c3:86: bb:43:cc:37:ff:25:89:af:75:19:67:83:13:d2:15:3e:a7:54: 95:e7:4b:d8:5a:8d:24:4f:07:4b:a0:51:d0:a6:db:31:58:cf: 3f:16:bc:b2:f1:71:21:f7:d3:b9:9e:dd:40:31:5a:07:c6:ab: 9a:a3:fd:d2:90:e6:90:84:9b:40:ac:bb:5a:0d:ac:1f:22:86: 08:e0:bb:fa:3e:6c:08:1d:a5:72:18:3a:01:f7:48:fa:cc:7e: 6b:c0:ad:7b:d7:0e:42:6b:a8:5f:08:1d:01:13:1d:55:ba:ae: 05:4b:04:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjUxMTA0MTYzNDEyWhcNMjUxMTExMTYzNDEyWjAYMRYwFAYD VQQDEw02OTBhMmIwNC01YzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VHsWQd6lCfWGL9kjNR0T6UloZpvaEcmya23EwLXZYaF1cq+CBHtMBCqhpyA WciFN35ZwqmuHoW4Jcsr0IwQ9CddjLMu7kZ45gxVVs5tegYOQfIXxuG3nwV+BWzn l4/h0z1dKzLTOVMtyfudxK7Kl04qipGLjkwQTWfjpfqYmAItUNaqsUl33GI0bgjL VXYyQqGF4bAfzPAv1pluJCGrHNp+oWUxknGxKXVXwSNdfjFwClUUmJvoG3zKB8iv yol82QHsCuzHU3Gjhb4N2/8zLq5ZZWPjUo9+d4n0xj0je3jukZac7OhoWiRbUCC5 pVUeUFhXGnU0RSyYhK2sX0sFtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrmXllD WhiQNEiF4MgsxXO+McbNMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8/dStjymy2jXdj8eYff4bGiIJIVRdfUW4dlqQLVzLlsUz/0wCzUlB tSuoM5nRhAJfDuR4R3F9MnRNZa63nVumOyprf0VmssMJd73zUtqmiArKar7HZiO4 xInxaJTuuD0HgJurqnGnLDlqGGRH4VQKg6j3mr4uRfA2DP+89fI3L0Szc1Uf246B o/zweQlpw4a7Q8w3/yWJr3UZZ4MT0hU+p1SV50vYWo0kTwdLoFHQptsxWM8/Fryy 8XEh99O5nt1AMVoHxquao/3SkOaQhJtArLtaDawfIoYI4Lv6PmwIHaVyGDoB90j6 zH5rwK171w5Ca6hfCB0BEx1Vuq4FSwQl -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:40 2025 by rpki-client