$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: 6dxE+BcHyiHqMwB8lBnEqDmN+wFcnFjuDWTYPAsrFmk= Subject key identifier: A3:AA:81:AA:C5:5B:4D:57:C8:F9:2A:E8:94:AA:47:03:3A:55:9A:BC Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 3490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: 9F7F Signing time: Mon 30 Jun 2025 14:34:05 +0000 Manifest this update: Mon 30 Jun 2025 14:34:05 +0000 Manifest next update: Mon 07 Jul 2025 14:34:05 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: nOy1uarVDedAByozidFubyV68IEZfEBHw9wL6kxiyK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13456 (0x3490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Jun 30 14:34:05 2025 GMT Not After : Jul 7 14:34:05 2025 GMT Subject: CN=6862a05d-afd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:af:f9:59:58:8c:eb:13:ff:37:27:de:ad: 1c:1f:fa:19:89:e3:f5:5a:61:fc:ca:24:16:66:fb: ab:2f:a9:2f:3c:ea:89:d1:a1:5f:d1:d9:3f:d2:8d: 90:5e:ee:98:7d:ba:91:59:10:70:7f:4d:1b:5f:bc: fe:a3:43:08:00:2d:49:c7:21:3a:a5:bd:4e:e2:2b: f8:6c:2c:2d:ca:7a:41:66:54:d6:f6:8a:93:59:39: 5a:62:ff:8c:d9:a4:b4:10:fb:bd:60:77:28:e2:a7: ae:9b:1e:28:46:76:d3:71:89:d6:65:af:33:74:0d: 50:96:94:7a:37:2f:34:50:e3:fd:a1:8c:bf:59:09: e5:4c:bd:43:80:8e:b7:8a:e6:d2:98:49:52:2b:07: 8b:df:71:de:f5:c9:56:32:f1:04:d4:ee:a1:cf:50: 87:d8:4b:4d:90:87:d7:a2:fd:07:b6:be:72:56:08: 60:6c:2c:68:3c:dc:4d:d6:59:21:80:91:29:26:f1: 9a:47:1b:8b:2b:9c:fd:0f:84:9f:d7:1c:77:ae:67: 55:b7:8c:42:0c:73:48:d4:4d:2a:de:70:de:3c:2d: a4:cd:2c:18:e5:f9:70:34:b4:d4:46:fa:f8:1d:49: 11:9e:b9:aa:c0:4c:3c:fe:34:fd:e8:f6:33:bc:38: c1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AA:81:AA:C5:5B:4D:57:C8:F9:2A:E8:94:AA:47:03:3A:55:9A:BC X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:11:9a:54:f7:ac:2b:c2:89:db:c7:8e:b2:01:be:21:ad:3d: 92:7d:5f:7c:69:da:1a:fd:70:ca:fa:4a:36:d1:68:e7:7e:4a: 7d:2d:1b:cf:fe:b0:cb:f6:db:28:9f:ad:8e:f9:9a:4e:60:4e: dd:5e:bc:cf:a2:8d:73:67:b1:af:ce:da:9e:1c:b1:4c:13:18: 87:2f:13:36:8e:08:c8:5c:bc:16:3f:af:e2:a7:fc:7b:4d:88: 0d:e4:a5:c8:7a:d8:63:14:a2:0e:c9:72:01:c2:53:96:74:0d: 40:10:2a:e4:5e:f7:b9:af:0a:ac:c5:49:ea:ad:c1:20:14:7f: 2e:3e:de:7c:ad:c0:10:cc:a4:4d:18:b0:da:ac:1a:11:89:41: 40:06:90:1e:d5:6c:d8:2d:55:39:7c:52:73:07:7a:10:8d:20: 1c:5a:90:19:4e:69:04:65:a8:6f:f0:a1:e7:95:2f:d1:6c:56: 1e:3d:53:4f:e4:24:65:c0:2e:9c:c3:74:21:47:ef:8c:12:cd: f9:c9:e2:f4:08:81:dd:65:46:6e:24:de:16:52:59:03:8f:24: 69:c3:4a:3f:79:bb:db:6f:9a:5e:12:48:6e:ac:17:07:38:b5: 74:cf:9f:b1:aa:55:88:08:d5:f0:8c:82:ea:de:c3:75:4c:8a: fd:25:f5:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUwNjMwMTQzNDA1WhcNMjUwNzA3MTQzNDA1WjAYMRYwFAYD VQQDEw02ODYyYTA1ZC1hZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowSv+VlYjOsT/zcn3q0cH/oZieP1WmH8yiQWZvurL6kvPOqJ0aFf0dk/0o2Q Xu6YfbqRWRBwf00bX7z+o0MIAC1JxyE6pb1O4iv4bCwtynpBZlTW9oqTWTlaYv+M 2aS0EPu9YHco4qeumx4oRnbTcYnWZa8zdA1QlpR6Ny80UOP9oYy/WQnlTL1DgI63 iubSmElSKweL33He9clWMvEE1O6hz1CH2EtNkIfXov0Htr5yVghgbCxoPNxN1lkh gJEpJvGaRxuLK5z9D4Sf1xx3rmdVt4xCDHNI1E0q3nDePC2kzSwY5flwNLTURvr4 HUkRnrmqwEw8/jT96PYzvDjBwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOqgarF W01XyPkq6JSqRwM6VZq8MB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLEZpU96wrwonbx46yAb4hrT2SfV98adoa/XDK+ko20Wjnfkp9LRvP /rDL9tson62O+ZpOYE7dXrzPoo1zZ7GvztqeHLFMExiHLxM2jgjIXLwWP6/ip/x7 TYgN5KXIethjFKIOyXIBwlOWdA1AECrkXve5rwqsxUnqrcEgFH8uPt58rcAQzKRN GLDarBoRiUFABpAe1WzYLVU5fFJzB3oQjSAcWpAZTmkEZahv8KHnlS/RbFYePVNP 5CRlwC6cw3QhR++MEs35yeL0CIHdZUZuJN4WUlkDjyRpw0o/ebvbb5peEkhurBcH OLV0z5+xqlWICNXwjILq3sN1TIr9JfWF -----END CERTIFICATE-----Generated at Tue Jul 1 21:07:04 2025 by rpki-client