$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json) Hash identifier: z2b0hTSLtbNgWZaqWQXVc5GiazpChYeaDv21REwj1Co= Subject key identifier: F9:2C:60:C0:B5:21:B1:BD:EF:FA:5A:3D:D0:C3:75:5D:1B:A5:88:AE Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft Manifest number: BE Signing time: Thu 07 Aug 2025 06:34:12 +0000 Manifest this update: Thu 07 Aug 2025 06:34:11 +0000 Manifest next update: Thu 14 Aug 2025 06:34:11 +0000 Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: 5IYSZRQmnyETOjko3OGrRD/zVyfRP53oYQUwRrkiFa4=) 2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=) 3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Aug 7 06:34:11 2025 GMT Not After : Aug 14 06:34:11 2025 GMT Subject: CN=689448e4-1a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4d:c8:f4:ac:cd:71:7d:ac:89:96:6b:61:33: 1c:21:61:e0:ae:7e:58:e5:75:88:1d:e1:6a:c4:dc: ca:68:84:29:92:18:25:11:ff:37:06:08:e7:f6:54: 0d:95:4e:7d:c3:51:45:0b:8f:95:47:f0:f1:25:b9: 26:82:9f:c5:7b:e9:01:a8:b1:99:eb:c2:43:1d:25: 8c:d4:82:4d:f1:56:6f:70:c1:ca:dc:d4:fe:cd:f4: bf:b0:69:b3:9c:e5:59:47:e3:88:35:df:76:2d:dc: db:d7:dc:26:b1:5c:39:fb:37:1e:a2:4f:78:0c:36: 4a:d0:16:30:3e:8c:a7:aa:fc:9c:2d:aa:26:b8:f2: 44:a1:e1:3d:04:7b:99:cd:d9:86:50:bc:cc:cf:fd: 21:c7:22:17:7f:da:08:e3:a9:ef:60:61:3f:9a:79: f9:54:9a:a1:93:45:8d:f4:cf:00:6a:9f:f6:6a:ab: 04:27:1f:52:95:d0:cf:a1:e3:1c:45:38:b0:c8:cc: 5e:f7:34:5a:24:5e:19:bf:17:c2:51:1b:5b:9a:91: 45:4f:aa:68:53:e0:65:58:92:10:be:c1:e0:2e:c0: 5f:ed:db:81:9a:17:fd:e1:a0:b1:6d:df:66:20:71: bc:3f:d2:ea:81:21:04:8a:76:13:8f:71:a6:c9:fb: bd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2C:60:C0:B5:21:B1:BD:EF:FA:5A:3D:D0:C3:75:5D:1B:A5:88:AE X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:55:1f:3b:8e:f2:bb:00:52:19:d5:e2:7c:e6:a7:91:b5:0e: 41:12:fc:00:e1:49:99:64:c4:9d:5f:61:73:86:43:2a:a8:64: fa:20:13:59:8e:1e:36:f7:45:74:f6:13:b4:ed:ab:8a:0a:6a: e6:4e:0d:9f:2d:03:d6:9b:13:be:4d:d8:8d:03:f0:1e:ad:5a: ce:7a:0b:3c:44:4e:80:ca:c2:35:6a:ba:4a:91:4b:2b:57:11: 15:77:b0:e9:1b:00:fc:f4:61:4a:f6:99:b7:19:03:f6:f1:db: f0:da:54:aa:cb:d8:8d:86:e8:6d:d8:5d:f6:80:1f:f6:16:a5: b3:13:35:30:a5:39:1d:80:d9:10:b9:57:39:3d:f0:78:52:6d: fc:e2:6a:ff:0f:8d:b1:cb:c3:43:df:2c:26:ae:02:c5:7c:43: 08:cf:b6:6b:f0:64:09:83:e0:d9:8e:2f:f4:fd:28:43:97:0d: 2d:3b:de:4d:8b:e2:65:78:56:7a:81:d5:20:56:c9:62:a7:98: 08:c9:b1:43:40:1a:b5:1a:44:89:b5:ba:12:f0:84:46:02:cf: 6f:be:fb:78:ea:32:f8:77:9d:8c:66:e6:eb:36:64:76:c8:a5: b1:cf:2a:fa:88:f3:15:61:de:b4:e1:ba:32:2f:0a:33:fb:77: 92:05:2e:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw MzRDRUJGRTIwHhcNMjUwODA3MDYzNDExWhcNMjUwODE0MDYzNDExWjAYMRYwFAYD VQQDEw02ODk0NDhlNC0xYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkU3I9KzNcX2siZZrYTMcIWHgrn5Y5XWIHeFqxNzKaIQpkhglEf83Bgjn9lQN lU59w1FFC4+VR/DxJbkmgp/Fe+kBqLGZ68JDHSWM1IJN8VZvcMHK3NT+zfS/sGmz nOVZR+OINd92Ldzb19wmsVw5+zceok94DDZK0BYwPoynqvycLaomuPJEoeE9BHuZ zdmGULzMz/0hxyIXf9oI46nvYGE/mnn5VJqhk0WN9M8Aap/2aqsEJx9SldDPoeMc RTiwyMxe9zRaJF4ZvxfCURtbmpFFT6poU+BlWJIQvsHgLsBf7duBmhf94aCxbd9m IHG8P9LqgSEEinYTj3Gmyfu9eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPksYMC1 IbG97/paPdDDdV0bpYiuMB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAx MVhoTlkxZEFfU01EVE92LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiVR87jvK7AFIZ1eJ85qeRtQ5BEvwA4UmZZMSdX2FzhkMqqGT6IBNZ jh4290V09hO07auKCmrmTg2fLQPWmxO+TdiNA/AerVrOegs8RE6AysI1arpKkUsr VxEVd7DpGwD89GFK9pm3GQP28dvw2lSqy9iNhuht2F32gB/2FqWzEzUwpTkdgNkQ uVc5PfB4Um384mr/D42xy8ND3ywmrgLFfEMIz7Zr8GQJg+DZji/0/ShDlw0tO95N i+JleFZ6gdUgVslip5gIybFDQBq1GkSJtboS8IRGAs9vvvt46jL4d52MZubrNmR2 yKWxzyr6iPMVYd604boyLwoz+3eSBS5q -----END CERTIFICATE-----Generated at Fri Aug 8 00:35:56 2025 by rpki-client