$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: spyPjgwOE3Uz8yJQ2U0WPxsfOxqT+fZxMbSCPwCSFfM= Subject key identifier: 8C:00:25:48:79:CD:C2:80:6A:ED:F7:84:84:A7:5E:F3:43:DF:B0:9F Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 18DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 18AA Signing time: Fri 20 Jun 2025 16:31:42 +0000 Manifest this update: Fri 20 Jun 2025 16:31:41 +0000 Manifest next update: Fri 27 Jun 2025 16:31:41 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: KODz71Hsi1bNLGyMRQZtuzwM5U0DBD1huNS861ciAWo=) 2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: Y73x6wR5jcOY6BkNKlI0WoDh01ODb0bGEnsYPJ8kMjk=) 3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: zs+47Dsw1gUVHnfCNkqFYR5V7IW/citmpclZUpon2fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 16:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6367 (0x18df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Jun 20 16:31:41 2025 GMT Not After : Jun 27 16:31:41 2025 GMT Subject: CN=68558cee-f19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:45:42:6a:09:00:48:aa:c7:9a:d8:1d:37: 83:db:34:f9:0c:54:57:44:47:b2:11:88:6b:34:d6: 1c:92:14:83:51:c0:c7:b7:da:4d:5b:7c:f6:63:54: 66:44:49:c3:91:1b:00:89:e3:8a:8d:c2:b5:90:73: fe:60:f7:58:c9:47:ee:55:8b:e5:8a:e8:39:77:fb: f9:9c:4f:e0:0c:9f:6f:4f:ab:2a:0c:21:5a:44:19: 7c:d2:bf:f9:35:12:30:58:7c:bc:b0:71:a9:91:af: f6:32:1d:60:d5:89:de:9f:39:72:c9:b8:2d:b5:07: 8b:17:d0:5d:06:3b:55:60:a1:20:e1:5c:3c:87:4b: d9:25:b5:9e:27:e1:7f:29:c1:b8:09:ff:14:65:69: e2:e5:6e:e5:b0:41:dc:8d:13:ab:ce:4e:25:98:cf: b8:11:3c:ae:11:5c:12:0b:d5:8f:a3:2c:8e:a6:65: 64:3c:ea:80:96:70:4a:ea:4f:2a:3e:5f:b9:ef:a2: 76:5f:af:b5:36:84:5d:4e:3e:c0:27:ca:ec:b4:5b: 8b:87:15:c0:64:30:b9:2f:6d:00:0b:89:68:0e:4a: 05:b4:63:b0:d7:6b:4d:e3:66:a7:ca:9b:22:82:63: a1:f4:3f:a1:25:a1:19:05:36:f3:82:57:23:be:18: f9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:00:25:48:79:CD:C2:80:6A:ED:F7:84:84:A7:5E:F3:43:DF:B0:9F X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f7:a0:ba:2f:ff:d4:7f:c1:5b:6a:5c:3b:4b:8c:98:57:13: ea:09:15:7f:cd:19:8d:ef:ca:a2:4b:fb:98:fd:45:48:c5:9f: 45:44:5e:96:e3:4a:03:9c:8b:4b:1e:df:8c:a0:55:3a:c2:a7: bf:19:a7:e8:54:d0:de:62:1d:f1:83:19:af:55:90:50:05:2d: 5d:11:c7:8e:4a:05:39:e4:97:6c:dc:97:39:57:b3:f3:62:47: 9a:0e:04:54:91:a2:56:06:07:e3:51:29:dc:b2:81:92:df:e0: 38:05:7f:0c:29:50:bd:67:90:e2:ea:98:f9:f3:66:78:5b:19: 0f:fc:41:40:aa:a1:14:73:9b:d2:c3:fd:3e:97:73:32:4e:65: 10:35:4f:fb:a6:4e:bf:95:a8:da:37:28:94:66:ab:a6:40:21: 8a:fa:bd:71:59:2b:c7:8a:bb:af:b1:53:32:e2:da:ba:1a:a5: 2c:b6:0f:e3:e3:94:5f:37:7a:3e:5e:cb:e0:b0:28:74:3e:f1: 21:8c:30:4d:a7:89:6e:b3:c1:e5:c6:e3:64:c1:b5:ca:4c:6f: 6d:85:76:47:48:1a:28:40:dd:0f:44:b9:de:c6:aa:00:97:51: 9b:29:cb:af:d2:71:be:3c:3d:a7:43:8f:38:e7:7c:cf:cf:85: f3:36:64:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjUwNjIwMTYzMTQxWhcNMjUwNjI3MTYzMTQxWjAYMRYwFAYD VQQDEw02ODU1OGNlZS1mMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLJFQmoJAEiqx5rYHTeD2zT5DFRXREeyEYhrNNYckhSDUcDHt9pNW3z2Y1Rm REnDkRsAieOKjcK1kHP+YPdYyUfuVYvliug5d/v5nE/gDJ9vT6sqDCFaRBl80r/5 NRIwWHy8sHGpka/2Mh1g1YnenzlyybgttQeLF9BdBjtVYKEg4Vw8h0vZJbWeJ+F/ KcG4Cf8UZWni5W7lsEHcjROrzk4lmM+4ETyuEVwSC9WPoyyOpmVkPOqAlnBK6k8q Pl+576J2X6+1NoRdTj7AJ8rstFuLhxXAZDC5L20AC4loDkoFtGOw12tN42anypsi gmOh9D+hJaEZBTbzglcjvhj58QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwAJUh5 zcKAau33hISnXvND37CfMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh96C6L//Uf8Fbalw7S4yYVxPqCRV/zRmN78qiS/uY/UVIxZ9FRF6W 40oDnItLHt+MoFU6wqe/GafoVNDeYh3xgxmvVZBQBS1dEceOSgU55Jds3Jc5V7Pz YkeaDgRUkaJWBgfjUSncsoGS3+A4BX8MKVC9Z5Di6pj582Z4WxkP/EFAqqEUc5vS w/0+l3MyTmUQNU/7pk6/lajaNyiUZqumQCGK+r1xWSvHiruvsVMy4tq6GqUstg/j 45RfN3o+XsvgsCh0PvEhjDBNp4lus8HlxuNkwbXKTG9thXZHSBooQN0PRLnexqoA l1GbKcuv0nG+PD2nQ48453zPz4XzNmQN -----END CERTIFICATE-----Generated at Sat Jun 21 03:25:09 2025 by rpki-client