$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: L6DQe07dHWEs+Nvdxxs8APWMhbv2XvGCzRYFOR2Ngr0= Subject key identifier: CC:33:A4:2F:28:5A:B4:85:04:55:4D:F3:FB:10:BA:DF:1A:97:08:4D Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: 9FEB Signing time: Fri 22 Aug 2025 14:30:29 +0000 Manifest this update: Fri 22 Aug 2025 14:30:28 +0000 Manifest next update: Fri 29 Aug 2025 14:30:28 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: BX1VTI4i2MRvULv+6QEmBedRT1XlH/d+y/70zuj78qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Aug 22 14:30:28 2025 GMT Not After : Aug 29 14:30:28 2025 GMT Subject: CN=68a87f04-c4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:ed:57:fd:95:9a:37:b4:cf:da:06:74:0e: 5a:47:4b:9c:b5:8b:2f:7a:9b:98:62:36:aa:e4:29: b4:2f:33:9d:9f:70:ca:74:63:f2:f6:07:77:b6:59: fe:f5:a3:88:f7:1e:41:eb:ae:ca:7f:b3:72:58:70: 65:5f:58:45:41:bb:bf:c9:cb:48:94:15:35:fe:b1: 04:30:85:63:04:0c:45:47:ad:39:0d:fd:61:74:c8: 8d:ee:54:9a:04:6a:36:6a:6c:34:ae:53:8a:ee:f3: da:da:9e:75:7b:cd:6a:1e:e1:66:f6:58:94:4b:b3: cf:5f:9a:85:e1:b6:1d:b3:d3:5e:ca:81:a0:d2:d0: 79:9d:db:f5:c2:c7:6d:f5:44:af:3e:d2:ca:6a:e0: 42:87:e4:32:ab:c0:dc:bc:10:3a:7e:20:2c:38:ae: 83:e9:a3:69:15:33:ea:90:3f:5f:0b:09:85:ce:86: b3:bf:95:8c:e2:5d:46:9b:e7:0d:c9:fe:58:9b:35: 95:bd:7d:cc:99:f4:59:ac:a8:b1:2b:80:f2:a8:ef: 2c:11:78:3d:f4:e5:8f:2a:db:33:d9:77:b6:9a:92: df:01:08:a3:b4:be:69:cf:5f:60:f9:11:4f:aa:36: 5e:9b:52:e9:b9:8d:26:f0:cc:dc:70:28:bf:f5:79: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:33:A4:2F:28:5A:B4:85:04:55:4D:F3:FB:10:BA:DF:1A:97:08:4D X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6a:33:f3:1f:5d:ed:f6:1f:fb:b3:57:3f:c1:c4:8f:c0:51: 98:b7:b2:32:5e:9a:ab:5f:1e:61:4e:ba:dd:4a:6d:a7:1c:07: 4d:02:22:f8:af:ee:f3:15:5f:87:dc:53:22:e1:b7:fd:e1:08: fe:4c:48:81:d6:96:3e:32:ef:50:a1:52:f4:bb:61:f2:c6:52: a7:00:95:30:47:7f:af:2d:22:9f:63:99:ff:fa:f8:85:81:db: 63:c6:06:0d:aa:47:f7:f8:28:a0:ea:e3:50:56:2e:58:6e:13: 4d:e7:8f:22:f3:67:52:c3:18:1b:d8:e1:f7:c5:23:f4:f2:ab: f4:7a:66:1d:ff:36:a3:8c:67:b2:8d:a9:36:49:1f:c4:13:35: cb:6a:67:86:24:58:0c:53:f6:7b:0e:d7:dc:e4:b9:72:98:e8: 34:7f:70:c5:65:35:a7:4e:4a:b5:ca:71:9b:c6:1e:c7:f8:a0: b6:9b:76:6f:66:3f:61:25:7d:1b:7c:80:76:a1:69:56:c5:47: 5d:a7:0f:69:11:b0:a8:f5:ca:44:27:7f:b1:f5:78:34:ac:1e: 9b:d1:e8:54:3b:a8:78:87:ef:89:b3:15:4b:c7:01:43:e6:6f: 45:96:ad:d7:14:ea:c7:cb:2b:43:bb:4a:54:78:6d:83:b8:9a: ba:94:82:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUwODIyMTQzMDI4WhcNMjUwODI5MTQzMDI4WjAYMRYwFAYD VQQDEw02OGE4N2YwNC1jNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtk7tV/2Vmje0z9oGdA5aR0uctYsvepuYYjaq5Cm0LzOdn3DKdGPy9gd3tln+ 9aOI9x5B667Kf7NyWHBlX1hFQbu/yctIlBU1/rEEMIVjBAxFR605Df1hdMiN7lSa BGo2amw0rlOK7vPa2p51e81qHuFm9liUS7PPX5qF4bYds9NeyoGg0tB5ndv1wsdt 9USvPtLKauBCh+Qyq8DcvBA6fiAsOK6D6aNpFTPqkD9fCwmFzoazv5WM4l1Gm+cN yf5YmzWVvX3MmfRZrKixK4DyqO8sEXg99OWPKtsz2Xe2mpLfAQijtL5pz19g+RFP qjZem1LpuY0m8MzccCi/9XmiCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwzpC8o WrSFBFVN8/sQut8alwhNMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqajPzH13t9h/7s1c/wcSPwFGYt7IyXpqrXx5hTrrdSm2nHAdNAiL4 r+7zFV+H3FMi4bf94Qj+TEiB1pY+Mu9QoVL0u2HyxlKnAJUwR3+vLSKfY5n/+viF gdtjxgYNqkf3+Cig6uNQVi5YbhNN548i82dSwxgb2OH3xSP08qv0emYd/zajjGey jak2SR/EEzXLameGJFgMU/Z7Dtfc5LlymOg0f3DFZTWnTkq1ynGbxh7H+KC2m3Zv Zj9hJX0bfIB2oWlWxUddpw9pEbCo9cpEJ3+x9Xg0rB6b0ehUO6h4h++JsxVLxwFD 5m9Flq3XFOrHyytDu0pUeG2DuJq6lILV -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:50 2025 by rpki-client