$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json) Hash identifier: EOo2gGNdY7M9GR4NjgDCpMVunkB0AD/34L0FLWO9cI0= Subject key identifier: 47:C7:7E:2A:EF:4A:BF:D8:8B:85:F4:0B:F7:E3:92:9D:A0:6A:89:BF Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft Manifest number: 8A Signing time: Fri 25 Apr 2025 05:37:48 +0000 Manifest this update: Fri 25 Apr 2025 05:37:47 +0000 Manifest next update: Fri 02 May 2025 05:37:47 +0000 Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: kvSW4/ycEN6jafujPH4Zx8hKXecNN9JSW943yI+IMuc=) 2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=) 3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Apr 25 05:37:47 2025 GMT Not After : May 2 05:37:47 2025 GMT Subject: CN=680b1fab-4cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:a0:74:62:79:28:00:e9:8c:4d:a9:54:2b: a0:7d:1d:58:c0:55:61:c2:82:69:3a:3e:9a:2d:0b: 0e:e4:87:3d:55:ec:5b:73:55:9c:40:82:46:db:f1: 87:5b:f9:f3:96:c9:1c:f0:ad:43:d3:bd:a2:4d:c9: 4b:29:58:68:0b:c6:4c:49:f8:b5:c7:d9:f4:e2:4b: 36:e9:13:a7:ff:f3:1d:7c:c6:8f:84:f9:cf:4a:66: 75:d5:fc:52:d8:11:58:d7:9d:2f:c4:e4:7c:fc:0a: 67:3a:e6:7a:db:48:cf:da:2c:cc:99:ee:a2:58:46: e8:b5:20:fb:f1:80:71:87:87:5e:da:08:1c:09:43: 95:da:33:d9:54:b7:85:32:9f:8c:63:1a:91:88:28: ee:e1:c8:ca:f7:18:ca:2b:c3:45:8e:b6:0b:7a:1a: f7:03:dc:02:76:c6:60:45:f7:3e:55:b6:e5:c1:84: e4:d7:6b:65:63:b1:e0:23:d4:22:b4:d6:d8:e8:50: 3c:bc:fa:da:a3:8e:70:cd:e0:af:3d:89:f4:d5:81: 9c:8f:2a:0c:16:32:49:5f:ad:9f:2a:0f:3b:2d:d8: 69:a3:1f:17:47:f5:ee:8f:d9:a1:b8:da:73:a5:39: d3:7c:0d:9a:62:10:f4:91:bc:62:4c:b3:ce:be:d5: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C7:7E:2A:EF:4A:BF:D8:8B:85:F4:0B:F7:E3:92:9D:A0:6A:89:BF X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:f5:86:b7:64:bd:c7:3e:13:cc:67:e4:0a:c8:49:5e:19:13: 1e:0f:27:c6:58:4f:8e:4d:d9:9b:55:8c:d2:16:3c:2d:39:d0: 7a:0b:f8:ab:02:2a:fa:43:73:cf:55:57:97:b9:57:af:98:46: 3e:d7:88:6b:e5:dd:2a:0c:50:ae:7a:d3:25:6e:f6:96:22:ac: f1:9c:f8:bd:cb:ac:c9:36:6b:5f:71:b3:6b:24:09:6c:40:cf: e4:25:70:86:51:0b:62:10:c4:96:7a:ae:1e:c3:69:10:45:f0: e5:b6:b5:30:47:b6:7b:fa:59:70:9d:38:99:73:16:3e:49:a7: 7f:f9:d5:4d:12:3d:90:88:6b:fe:42:50:f4:f1:27:97:54:71: d4:87:ee:01:fd:49:2b:32:c1:b5:a6:af:a6:31:76:81:a7:a8: b9:d3:e1:91:80:2f:2d:78:d0:76:3e:a0:f1:e2:b8:00:9d:ad: b7:af:25:09:f9:b6:3b:7f:e5:48:db:5b:05:12:e8:79:6e:20: 0c:9c:2d:35:51:db:0b:79:a0:b7:b2:ef:45:1f:12:90:fb:3e: be:9c:01:1e:77:b4:78:79:0a:02:d4:54:f7:1d:03:99:88:3e: a5:0a:5f:11:a5:25:34:37:81:5d:53:36:2a:7b:b9:f8:2c:1d: aa:dd:a7:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw MzRDRUJGRTIwHhcNMjUwNDI1MDUzNzQ3WhcNMjUwNTAyMDUzNzQ3WjAYMRYwFAYD VQQDEw02ODBiMWZhYi00Y2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYegdGJ5KADpjE2pVCugfR1YwFVhwoJpOj6aLQsO5Ic9Vexbc1WcQIJG2/GH W/nzlskc8K1D072iTclLKVhoC8ZMSfi1x9n04ks26ROn//MdfMaPhPnPSmZ11fxS 2BFY150vxOR8/ApnOuZ620jP2izMme6iWEbotSD78YBxh4de2ggcCUOV2jPZVLeF Mp+MYxqRiCju4cjK9xjKK8NFjrYLehr3A9wCdsZgRfc+VbblwYTk12tlY7HgI9Qi tNbY6FA8vPrao45wzeCvPYn01YGcjyoMFjJJX62fKg87Ldhpox8XR/Xuj9mhuNpz pTnTfA2aYhD0kbxiTLPOvtUSkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfHfirv Sr/Yi4X0C/fjkp2gaom/MB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAx MVhoTlkxZEFfU01EVE92LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY9Ya3ZL3HPhPMZ+QKyEleGRMeDyfGWE+OTdmbVYzSFjwtOdB6C/ir Air6Q3PPVVeXuVevmEY+14hr5d0qDFCuetMlbvaWIqzxnPi9y6zJNmtfcbNrJAls QM/kJXCGUQtiEMSWeq4ew2kQRfDltrUwR7Z7+llwnTiZcxY+Sad/+dVNEj2QiGv+ QlD08SeXVHHUh+4B/UkrMsG1pq+mMXaBp6i50+GRgC8teNB2PqDx4rgAna23ryUJ +bY7f+VI21sFEuh5biAMnC01UdsLeaC3su9FHxKQ+z6+nAEed7R4eQoC1FT3HQOZ iD6lCl8RpSU0N4FdUzYqe7n4LB2q3aeg -----END CERTIFICATE-----Generated at Sat Apr 26 05:01:35 2025 by rpki-client