$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: xZR6PI4RLQX/OJpnzOL8T361KhGmJa4hMYGABBTe9KI= Subject key identifier: 5C:3E:F7:43:DA:FB:F1:1E:2A:9F:9E:79:3E:82:BC:1B:99:63:60:AB Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 0FD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 0FCE Signing time: Mon 12 May 2025 17:24:56 +0000 Manifest this update: Mon 12 May 2025 17:24:55 +0000 Manifest next update: Mon 19 May 2025 17:24:55 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: zBp2TAke5TomVexKBogaNI+iKNflfHHKkFUcZ5BN1Os=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: sgkWXRSJ1BUZupF4Dk2efL+RNcogul9NMOpS+wB5yj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4057 (0xfd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: May 12 17:24:55 2025 GMT Not After : May 19 17:24:55 2025 GMT Subject: CN=68222ee8-2110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d0:02:a0:25:33:58:69:3f:b2:5d:0e:68:06: 51:85:23:95:05:14:b0:cb:c6:b1:2a:8e:36:a3:69: 18:74:76:8d:51:0d:19:36:5f:fc:ac:86:e8:a5:28: 5a:f9:39:d4:19:6a:86:23:3e:cf:d9:fc:40:1e:35: a0:c3:8b:0e:2f:67:ce:a7:a2:04:ac:10:7b:e4:5d: 14:76:db:87:2e:03:3d:f2:62:1b:44:4d:38:61:d0: 0d:2c:01:b1:99:4b:a0:99:ad:30:4e:32:af:2a:ea: 14:8f:c6:1a:cd:64:d3:bc:a7:08:21:e3:57:42:ed: fb:4f:fc:d2:26:ef:45:26:64:10:56:dd:3c:33:1b: 34:0a:9d:43:d4:25:79:37:7f:be:03:30:b6:47:1c: 32:a5:68:41:24:c3:16:7f:44:51:d2:1a:73:9d:5b: 1b:ed:c0:12:49:56:fa:17:35:8b:85:ff:ce:76:0a: 5d:8c:e1:f3:0f:46:43:47:e5:9c:3d:9e:bb:d6:aa: 14:cc:8a:32:0c:13:fe:a4:da:57:63:39:0a:d3:d7: c2:95:e2:a5:08:b7:27:ac:83:fb:65:af:da:c0:c4: 26:3d:d2:f3:c9:7a:70:16:93:08:42:25:67:ff:ba: 4b:e4:a4:ca:11:70:7e:e3:4d:a3:8d:20:21:53:d2: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3E:F7:43:DA:FB:F1:1E:2A:9F:9E:79:3E:82:BC:1B:99:63:60:AB X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:0c:70:37:17:2a:3c:da:58:15:fd:31:5d:4c:93:5d:f8:45: ed:d5:3e:80:e3:d3:94:bb:9f:64:6e:04:82:e1:3c:6d:e4:c0: 30:99:69:fa:28:f4:9a:1b:9d:91:09:e7:47:71:08:1d:bf:e6: 86:b1:4b:88:e1:2c:7e:3a:7e:02:81:62:e5:33:00:61:0a:d4: 4d:4f:06:68:21:7d:ed:c8:40:19:be:c2:2d:a7:9d:06:1d:60: 37:2c:07:e0:ea:c8:03:1d:4a:ee:d8:e7:df:40:53:31:1c:14: 8d:b6:31:4b:41:26:d6:51:0d:ad:15:e7:6f:92:41:d6:71:03: 39:a2:ae:15:33:da:37:7a:0c:64:b3:38:7a:93:58:aa:f6:43: 20:c0:7d:94:af:3b:0c:a6:48:a3:2c:a5:8d:9b:20:11:15:f8: f7:e7:47:5f:7f:c7:a5:df:6b:ca:d2:42:e3:6b:91:d9:55:0a: 7f:0d:e7:57:41:3d:f6:95:53:1f:75:46:d5:53:a2:bd:7d:8c: 27:63:e2:12:e5:fb:81:a9:6d:e7:32:22:9b:5e:22:7c:51:09: 42:2e:d7:55:73:ff:4a:9c:8f:67:24:b9:2d:e4:ed:aa:1b:2e: 7d:a8:ef:04:55:c5:c6:f4:ad:6a:50:0a:5a:31:d9:12:7c:e0: 05:1d:ab:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjUwNTEyMTcyNDU1WhcNMjUwNTE5MTcyNDU1WjAYMRYwFAYD VQQDEw02ODIyMmVlOC0yMTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9ACoCUzWGk/sl0OaAZRhSOVBRSwy8axKo42o2kYdHaNUQ0ZNl/8rIbopSha +TnUGWqGIz7P2fxAHjWgw4sOL2fOp6IErBB75F0UdtuHLgM98mIbRE04YdANLAGx mUugma0wTjKvKuoUj8YazWTTvKcIIeNXQu37T/zSJu9FJmQQVt08Mxs0Cp1D1CV5 N3++AzC2RxwypWhBJMMWf0RR0hpznVsb7cASSVb6FzWLhf/OdgpdjOHzD0ZDR+Wc PZ671qoUzIoyDBP+pNpXYzkK09fCleKlCLcnrIP7Za/awMQmPdLzyXpwFpMIQiVn /7pL5KTKEXB+402jjSAhU9IAeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFw+90Pa +/EeKp+eeT6CvBuZY2CrMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWDHA3Fyo82lgV/TFdTJNd+EXt1T6A49OUu59kbgSC4Txt5MAwmWn6 KPSaG52RCedHcQgdv+aGsUuI4Sx+On4CgWLlMwBhCtRNTwZoIX3tyEAZvsItp50G HWA3LAfg6sgDHUru2OffQFMxHBSNtjFLQSbWUQ2tFedvkkHWcQM5oq4VM9o3egxk szh6k1iq9kMgwH2UrzsMpkijLKWNmyARFfj350dff8el32vK0kLja5HZVQp/DedX QT32lVMfdUbVU6K9fYwnY+IS5fuBqW3nMiKbXiJ8UQlCLtdVc/9KnI9nJLkt5O2q Gy59qO8EVcXG9K1qUApaMdkSfOAFHauW -----END CERTIFICATE-----Generated at Mon May 12 21:43:10 2025 by rpki-client