$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: A1ST7cX8PB9r7bBodV3mDVDzHBQccKF2NcOzT5ZUoNY= Subject key identifier: FB:69:8F:D9:E1:78:CA:E8:64:7B:54:C4:3C:95:6B:63:06:12:10:CA Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 0FF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 0FE8 Signing time: Mon 30 Jun 2025 17:41:54 +0000 Manifest this update: Mon 30 Jun 2025 17:41:53 +0000 Manifest next update: Mon 07 Jul 2025 17:41:53 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: 6Viwx9PHgqK6Nvm52tEU3G4EylpaOlnGtAnrnalEJ5k=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: ud9Bxa6I3Lg7uR5uUGw9rl68XdwSN3BQlbT+nAu1Wxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4084 (0xff4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: Jun 30 17:41:53 2025 GMT Not After : Jul 7 17:41:53 2025 GMT Subject: CN=6862cc62-1da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:31:1e:73:31:90:9e:dd:f3:c9:e4:6c:1e: 59:18:38:70:73:2b:4b:ac:ff:db:40:fd:18:74:06: b2:7a:ba:51:e2:3b:59:0e:0e:54:4c:7b:c2:6e:98: dd:9a:ac:f4:d6:54:ea:de:8e:65:1c:00:c2:7b:06: 91:42:f0:fe:bf:75:9b:d6:94:0b:b4:4e:2b:de:e7: 87:4e:80:ae:8b:1c:1e:f0:d9:e9:08:dc:19:0d:19: f0:e9:07:af:17:e3:3b:5a:90:a0:3c:1c:a8:9e:23: 07:ea:f2:42:2f:55:04:09:ca:51:d8:12:62:db:2d: 0c:47:63:b3:98:98:4b:e8:5e:84:9f:d6:13:11:05: 1f:28:de:ee:3a:d9:8e:ab:f9:a7:f8:60:c0:e0:1e: 33:da:3a:c9:37:24:eb:e6:75:f3:c8:2d:7d:f5:fc: 92:ee:76:f1:1d:a1:ea:ff:ba:f6:77:ed:da:cc:de: ad:dc:17:05:e3:d2:7c:67:27:6d:f4:00:66:7e:5d: 90:50:46:23:f4:3b:24:1f:eb:6c:16:74:43:dd:c9: 69:30:dd:ad:f5:21:e6:34:11:45:d2:36:36:6f:53: 10:95:0e:d6:9b:99:04:4a:cb:3b:f9:a2:5b:93:93: ce:a6:5b:8b:16:86:41:cd:56:67:fa:1b:af:f6:6c: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:69:8F:D9:E1:78:CA:E8:64:7B:54:C4:3C:95:6B:63:06:12:10:CA X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:3a:19:9e:4e:ea:52:bc:87:4e:bf:fa:31:04:10:ea:51:c8: df:f5:a0:7c:56:c2:cd:49:4a:88:7f:e3:5e:94:61:2b:cd:c4: 5f:19:d7:19:ce:7b:33:5b:f6:c1:6d:9c:65:e4:d3:8b:6f:f1: a7:32:44:33:a5:da:d0:a7:6d:a2:df:4b:89:bf:bf:31:c5:87: 9c:78:ed:94:99:7f:ba:b5:59:93:c7:f4:5c:d8:de:c2:aa:0b: e0:aa:fe:93:d6:3c:81:83:dd:53:0a:95:59:d5:69:52:d4:51: 63:5d:f5:e0:67:93:fa:fe:62:1d:f7:97:b9:93:31:af:e3:e9: a3:09:34:42:14:12:dc:78:c9:6a:fc:f5:be:a6:5d:2a:d1:7b: 05:73:86:1d:82:67:8a:7b:c2:3e:e2:81:01:5b:66:ea:a9:ef: 4e:0d:8c:94:b0:85:ad:a2:0f:58:1a:6a:5a:6c:76:5c:f4:11: 74:45:4a:3d:a8:99:2e:93:85:a8:f3:3e:99:52:34:cb:ca:fd: d5:52:8c:d9:4e:00:e3:1d:0d:73:dc:6c:72:b8:9b:a8:a8:c4: b5:a0:17:42:0d:69:72:0b:aa:d9:80:f1:98:28:78:39:78:eb: c3:05:76:aa:04:94:37:43:46:6c:8b:6a:aa:dc:6a:40:11:7a: ea:61:7c:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjUwNjMwMTc0MTUzWhcNMjUwNzA3MTc0MTUzWjAYMRYwFAYD VQQDEw02ODYyY2M2Mi0xZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJkxHnMxkJ7d88nkbB5ZGDhwcytLrP/bQP0YdAayerpR4jtZDg5UTHvCbpjd mqz01lTq3o5lHADCewaRQvD+v3Wb1pQLtE4r3ueHToCuixwe8NnpCNwZDRnw6Qev F+M7WpCgPByoniMH6vJCL1UECcpR2BJi2y0MR2OzmJhL6F6En9YTEQUfKN7uOtmO q/mn+GDA4B4z2jrJNyTr5nXzyC199fyS7nbxHaHq/7r2d+3azN6t3BcF49J8Zydt 9ABmfl2QUEYj9DskH+tsFnRD3clpMN2t9SHmNBFF0jY2b1MQlQ7Wm5kESss7+aJb k5POpluLFoZBzVZn+huv9mzouwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtpj9nh eMroZHtUxDyVa2MGEhDKMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJOhmeTupSvIdOv/oxBBDqUcjf9aB8VsLNSUqIf+NelGErzcRfGdcZ znszW/bBbZxl5NOLb/GnMkQzpdrQp22i30uJv78xxYeceO2UmX+6tVmTx/Rc2N7C qgvgqv6T1jyBg91TCpVZ1WlS1FFjXfXgZ5P6/mId95e5kzGv4+mjCTRCFBLceMlq /PW+pl0q0XsFc4YdgmeKe8I+4oEBW2bqqe9ODYyUsIWtog9YGmpabHZc9BF0RUo9 qJkuk4Wo8z6ZUjTLyv3VUozZTgDjHQ1z3GxyuJuoqMS1oBdCDWlyC6rZgPGYKHg5 eOvDBXaqBJQ3Q0Zsi2qq3GpAEXrqYXxC -----END CERTIFICATE-----Generated at Wed Jul 2 16:05:24 2025 by rpki-client