$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json) Hash identifier: hSwI7HdVsXIqWNCfr6Mm+rrtlYEBvTD+/XibREZ6CCE= Subject key identifier: B7:E9:3A:FA:AB:D0:5B:CD:65:8F:C9:9E:C0:19:10:CC:FD:51:7F:AC Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft Manifest number: A3 Signing time: Sun 15 Jun 2025 05:25:51 +0000 Manifest this update: Sun 15 Jun 2025 05:25:51 +0000 Manifest next update: Sun 22 Jun 2025 05:25:51 +0000 Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: a0Q1jixn0OxpC5b4IjzL7QIgeMs8tFOBF1KiTTSfkiY=) 2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=) 3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Jun 15 05:25:51 2025 GMT Not After : Jun 22 05:25:51 2025 GMT Subject: CN=684e595f-7a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:9b:5d:6d:54:b3:47:c4:16:47:d8:ea:ae: a4:55:a5:14:72:66:98:fb:f3:1d:4e:40:a4:e7:f1: 00:87:8a:04:02:89:b5:83:06:ab:99:1c:6e:8a:70: d7:2b:a5:1b:37:77:3c:fd:4e:04:e7:23:e2:00:c1: 0b:2d:ba:c1:fd:92:7b:5b:a3:5b:47:bf:e7:f2:5a: fe:0e:12:cb:5e:bc:e3:7d:a1:7d:c5:12:97:fa:d0: c8:26:47:83:e4:d5:e6:17:2b:d9:4e:ec:91:b2:6f: 29:74:6b:ff:4f:8b:69:e0:3f:13:dd:f3:11:9e:98: dd:20:a0:cd:d2:f1:7a:3c:c1:29:b8:87:ce:82:da: 7c:ed:31:b3:29:5b:08:a4:62:7a:81:3e:b1:69:b3: 45:06:ae:29:93:86:0a:9e:44:5b:2c:5b:18:54:e6: 4d:93:a1:b3:4b:ed:a8:40:65:b5:8a:48:f7:78:41: 63:60:5d:ae:97:3a:e0:32:59:94:66:53:8b:34:cd: 95:a7:35:9f:80:dd:1c:85:5d:b6:cb:c5:8f:f7:17: 20:f4:ab:79:7a:a6:e0:d2:c7:69:67:ef:24:b2:c2: c1:19:97:1a:48:5c:17:84:ca:3e:2c:16:ab:e7:db: 16:d3:b5:fb:26:3e:7a:96:f9:85:66:03:15:77:ab: b4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E9:3A:FA:AB:D0:5B:CD:65:8F:C9:9E:C0:19:10:CC:FD:51:7F:AC X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:d3:31:2b:d2:9d:6c:f6:e1:97:66:d8:85:10:a4:32:d0:ff: fb:dd:38:73:a4:dc:0f:96:94:bd:c0:41:be:63:88:4f:1e:f6: 38:44:c4:48:58:ee:c8:33:5e:c0:4d:44:c0:a1:aa:ff:58:a5: de:a5:c5:86:87:fb:94:20:56:c1:30:31:95:95:20:79:32:b3: a5:3b:4f:bd:77:79:d8:2c:31:47:fa:e1:c8:c3:10:89:a9:35: d5:13:46:aa:62:2d:d4:db:dd:45:88:fd:dc:62:df:e7:82:fd: ef:48:1c:e2:10:84:6b:bb:3a:79:5c:5b:88:c0:3e:10:9d:67: c8:f3:f3:3a:46:84:a6:5b:6f:9d:b9:f1:56:65:e9:04:d6:5e: 9e:7b:db:32:eb:5e:4d:64:c7:7b:83:77:cc:c3:df:86:63:84: bf:29:9e:41:ac:5f:08:f3:21:08:3d:e5:dc:f2:0f:8e:07:5a: 6d:d6:eb:b8:f7:e1:5b:30:78:14:c3:ed:bb:6a:4f:39:af:2e: f7:e9:79:c6:3d:79:25:6c:07:ff:d3:c1:aa:16:d3:1c:07:94: 20:a5:cc:d1:36:90:c9:6c:7b:12:40:7c:d7:4b:22:6c:05:9c: 98:63:a2:56:68:be:ee:46:bf:42:c4:80:31:d5:6e:a5:5d:da: e7:fe:e1:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw MzRDRUJGRTIwHhcNMjUwNjE1MDUyNTUxWhcNMjUwNjIyMDUyNTUxWjAYMRYwFAYD VQQDEw02ODRlNTk1Zi03YTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F6bXW1Us0fEFkfY6q6kVaUUcmaY+/MdTkCk5/EAh4oEAom1gwarmRxuinDX K6UbN3c8/U4E5yPiAMELLbrB/ZJ7W6NbR7/n8lr+DhLLXrzjfaF9xRKX+tDIJkeD 5NXmFyvZTuyRsm8pdGv/T4tp4D8T3fMRnpjdIKDN0vF6PMEpuIfOgtp87TGzKVsI pGJ6gT6xabNFBq4pk4YKnkRbLFsYVOZNk6GzS+2oQGW1ikj3eEFjYF2ulzrgMlmU ZlOLNM2VpzWfgN0chV22y8WP9xcg9Kt5eqbg0sdpZ+8kssLBGZcaSFwXhMo+LBar 59sW07X7Jj56lvmFZgMVd6u0wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfpOvqr 0FvNZY/JnsAZEMz9UX+sMB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAx MVhoTlkxZEFfU01EVE92LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT0zEr0p1s9uGXZtiFEKQy0P/73ThzpNwPlpS9wEG+Y4hPHvY4RMRI WO7IM17ATUTAoar/WKXepcWGh/uUIFbBMDGVlSB5MrOlO0+9d3nYLDFH+uHIwxCJ qTXVE0aqYi3U291FiP3cYt/ngv3vSBziEIRruzp5XFuIwD4QnWfI8/M6RoSmW2+d ufFWZekE1l6ee9sy615NZMd7g3fMw9+GY4S/KZ5BrF8I8yEIPeXc8g+OB1pt1uu4 9+FbMHgUw+27ak85ry736XnGPXklbAf/08GqFtMcB5QgpczRNpDJbHsSQHzXSyJs BZyYY6JWaL7uRr9CxIAx1W6lXdrn/uE2 -----END CERTIFICATE-----Generated at Mon Jun 16 21:57:19 2025 by rpki-client