$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: dv/RtIQwI2Yp5vRK2jyz7EQMGf24KCgpO7jvjZyVNUY= Subject key identifier: F0:F4:47:2E:8A:1F:6B:40:DD:0A:7E:DB:83:16:45:31:CE:3A:22:33 Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 3477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: 9F18 Signing time: Sat 10 May 2025 14:29:39 +0000 Manifest this update: Sat 10 May 2025 14:29:39 +0000 Manifest next update: Sat 17 May 2025 14:29:39 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: Q/YxNlhL+ctoIBdw+8JEw6qdzBOZSmV303KurRr869A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13431 (0x3477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: May 10 14:29:39 2025 GMT Not After : May 17 14:29:39 2025 GMT Subject: CN=681f62d3-046f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:f6:77:ac:c7:fa:c7:e2:a0:78:d1:16:18: a4:cd:a4:25:e0:42:8d:8c:23:48:8a:2e:2b:b0:b7: de:a0:cd:d1:3d:09:f9:45:00:6c:14:d2:4b:14:39: 0b:0b:1b:60:ca:bb:89:06:be:7b:72:cf:85:52:88: 87:8c:c8:06:c4:4c:80:17:d1:b6:a8:c7:bc:3a:b4: 8f:63:1c:a9:35:ca:d6:43:b6:2a:80:46:48:51:62: d5:4f:f3:a0:b6:76:0a:93:65:e5:39:e5:9a:e7:cd: 5e:1b:fa:61:92:81:08:46:10:2b:7e:9c:ae:1d:d2: 9b:7c:ed:d6:67:b1:ce:51:65:b2:de:18:cb:0e:c1: 02:34:91:8a:08:7e:89:71:24:76:ba:f9:c3:90:20: 74:14:3b:11:40:58:15:08:40:84:d0:03:be:fb:7b: 2d:44:8f:41:8b:5f:aa:33:cc:6d:ba:98:10:b9:45: f7:e3:8f:08:66:6e:38:5d:9d:87:5d:1b:7f:6a:9b: 35:78:ed:29:a6:f5:71:05:3a:69:6f:ea:1c:57:b3: d2:96:77:3f:2f:49:c4:08:43:67:96:8c:66:d2:b4: 52:fb:69:94:64:57:84:c9:40:5b:4f:75:8f:42:07: 82:8a:11:f2:89:8f:df:31:23:01:cb:10:b7:c3:b3: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F4:47:2E:8A:1F:6B:40:DD:0A:7E:DB:83:16:45:31:CE:3A:22:33 X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:76:e2:21:5d:7b:5b:ac:59:1b:4d:ca:e5:d3:9d:f9:48:27: 3b:fc:e5:66:e3:ee:2e:da:71:aa:7a:8b:1e:a8:78:18:95:cb: 0d:6d:e5:4c:f3:6a:ab:2b:63:89:58:7e:fc:d0:be:df:3c:66: 12:44:e1:ff:ee:e4:86:3c:a6:e0:cc:1e:17:48:15:38:7b:bc: 9f:df:80:ce:52:45:66:7d:ec:d2:ce:a8:74:33:ba:83:7d:a9: 24:78:24:e4:c8:f1:28:34:1f:e1:1f:d9:e2:9d:63:b0:7d:67: 34:ac:f1:97:c7:f1:b6:55:30:ec:e3:b0:ea:1b:47:56:51:38: fb:70:fa:5d:30:2c:32:f6:5e:15:19:25:7d:46:9f:96:75:81: f9:33:30:4b:c1:61:86:a1:2f:9e:b0:14:12:60:fc:d4:14:3d: 5b:8c:25:af:06:b0:6f:02:b9:81:0f:5e:a0:a6:d5:1a:3a:8c: 09:90:ff:89:2f:8a:04:14:16:8e:7c:ff:88:0c:7c:c0:27:4c: 16:1a:de:ff:05:15:2c:06:b8:e1:0b:46:de:d0:73:0d:50:dc: 4b:7c:9a:01:60:03:9f:29:e5:bb:77:68:91:db:76:34:51:17: 93:1f:8a:d5:5f:44:96:cf:94:eb:af:be:9f:aa:08:78:c6:b2: 3f:bd:e3:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUwNTEwMTQyOTM5WhcNMjUwNTE3MTQyOTM5WjAYMRYwFAYD VQQDEw02ODFmNjJkMy0wNDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQr2d6zH+sfioHjRFhikzaQl4EKNjCNIii4rsLfeoM3RPQn5RQBsFNJLFDkL CxtgyruJBr57cs+FUoiHjMgGxEyAF9G2qMe8OrSPYxypNcrWQ7YqgEZIUWLVT/Og tnYKk2XlOeWa581eG/phkoEIRhArfpyuHdKbfO3WZ7HOUWWy3hjLDsECNJGKCH6J cSR2uvnDkCB0FDsRQFgVCECE0AO++3stRI9Bi1+qM8xtupgQuUX3448IZm44XZ2H XRt/aps1eO0ppvVxBTppb+ocV7PSlnc/L0nECENnloxm0rRS+2mUZFeEyUBbT3WP QgeCihHyiY/fMSMByxC3w7NPWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPD0Ry6K H2tA3Qp+24MWRTHOOiIzMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZduIhXXtbrFkbTcrl0535SCc7/OVm4+4u2nGqeoseqHgYlcsNbeVM 82qrK2OJWH780L7fPGYSROH/7uSGPKbgzB4XSBU4e7yf34DOUkVmfezSzqh0M7qD fakkeCTkyPEoNB/hH9ninWOwfWc0rPGXx/G2VTDs47DqG0dWUTj7cPpdMCwy9l4V GSV9Rp+WdYH5MzBLwWGGoS+esBQSYPzUFD1bjCWvBrBvArmBD16gptUaOowJkP+J L4oEFBaOfP+IDHzAJ0wWGt7/BRUsBrjhC0be0HMNUNxLfJoBYAOfKeW7d2iR23Y0 UReTH4rVX0SWz5Trr76fqgh4xrI/veMC -----END CERTIFICATE-----Generated at Sun May 11 16:05:03 2025 by rpki-client