$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: YKT5QkHDZcNZd96rp/zfGlY0DCwxJd92JjK8s6T/ipY= Subject key identifier: 71:60:7A:C0:99:03:1B:98:AA:3D:00:1B:6D:67:9F:A4:D4:B8:1E:C6 Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 0FD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 0FC9 Signing time: Fri 02 May 2025 17:41:37 +0000 Manifest this update: Fri 02 May 2025 17:41:37 +0000 Manifest next update: Fri 09 May 2025 17:41:37 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: zNcEi5nZ1OwM2gR2iNsGX0jbAH8Y8VfdYek+G5mbcRk=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: sgkWXRSJ1BUZupF4Dk2efL+RNcogul9NMOpS+wB5yj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 17:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4052 (0xfd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: May 2 17:41:37 2025 GMT Not After : May 9 17:41:37 2025 GMT Subject: CN=681503d1-0c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:70:0f:1c:fa:a1:f4:93:d0:17:0b:65:25: f4:25:94:2b:63:bb:3a:3d:27:66:dd:8e:38:b3:11: b3:1e:12:ea:55:89:ce:ed:f4:a0:b8:9b:72:f2:14: 29:6d:81:c1:07:2d:d0:2e:c3:84:30:84:64:4d:45: ee:c9:45:22:ff:d9:e6:9d:49:5a:da:77:a0:a7:f9: 83:9a:19:82:11:a2:72:a7:87:32:fd:e2:df:11:67: 10:4c:d4:24:8b:3c:73:6b:33:ca:be:45:11:1c:7e: 5b:43:94:21:85:32:7c:fc:3f:98:ef:c5:fa:eb:09: 8e:97:6a:09:9c:aa:55:27:c1:0c:4b:ca:0e:3c:8f: 5c:98:81:30:ff:bd:12:f2:22:eb:c0:df:a0:41:04: 8b:b4:31:97:24:cc:ca:6f:88:2b:58:60:1f:22:af: 71:e5:6e:54:53:29:ea:af:f0:34:3e:03:cd:7c:e2: 82:83:f8:84:92:22:b1:9c:be:10:5b:33:51:e0:7b: 5b:ff:ae:3c:e5:36:a2:29:0e:9c:8e:f0:67:2b:d4: c6:ef:f2:0c:56:cf:2e:61:37:05:ca:85:99:b2:ff: ec:d5:f5:4b:1a:ba:25:3c:58:70:a0:35:82:2b:b3: 90:90:50:5d:93:a7:79:8b:9e:47:20:4c:7d:14:87: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:60:7A:C0:99:03:1B:98:AA:3D:00:1B:6D:67:9F:A4:D4:B8:1E:C6 X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:da:a6:ec:d0:e6:b8:68:a1:83:ab:79:68:58:01:d5:10:ce: ea:84:fc:40:75:bd:df:4d:34:aa:7c:bb:88:4a:49:f5:44:b2: 30:5a:93:3c:a2:41:3e:54:f6:32:a0:89:68:ce:2f:bb:b6:a7: 13:8a:57:15:74:31:2a:26:cd:4c:76:3a:47:58:fe:4a:83:4f: 95:d0:06:c1:b1:9e:36:c4:9b:ed:db:20:a8:b9:3f:e1:74:c3: 5d:3e:29:23:00:7f:5e:69:3b:c0:25:8a:ee:0c:b4:d4:5e:ce: 98:8f:0e:07:27:89:d2:9b:b0:5c:1e:fd:88:fa:e1:83:f4:16: 97:48:f9:40:0b:d9:26:bd:76:1c:f6:91:cf:56:9e:ef:e1:c7: 8d:ec:63:12:22:d6:44:bf:aa:0a:f4:c5:4c:0b:dc:d6:f9:ee: e4:14:0c:a9:be:ae:f9:22:46:8b:10:1c:13:7b:4c:30:1c:cf: ee:5b:e5:8d:33:cb:0e:2a:88:e9:80:0d:1e:dc:61:0b:65:b2: af:93:7a:c9:ae:0a:09:a7:c4:ce:e2:7a:3e:f8:bb:31:05:f0: 26:74:f4:03:b7:31:e1:71:f2:35:85:bd:49:3c:c2:88:1f:81: da:0c:54:ab:ef:b1:94:44:82:f3:70:d7:4c:a3:e8:9e:89:23: 34:94:36:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjUwNTAyMTc0MTM3WhcNMjUwNTA5MTc0MTM3WjAYMRYwFAYD VQQDEw02ODE1MDNkMS0wYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqpwDxz6ofST0BcLZSX0JZQrY7s6PSdm3Y44sxGzHhLqVYnO7fSguJty8hQp bYHBBy3QLsOEMIRkTUXuyUUi/9nmnUla2negp/mDmhmCEaJyp4cy/eLfEWcQTNQk izxzazPKvkURHH5bQ5QhhTJ8/D+Y78X66wmOl2oJnKpVJ8EMS8oOPI9cmIEw/70S 8iLrwN+gQQSLtDGXJMzKb4grWGAfIq9x5W5UUynqr/A0PgPNfOKCg/iEkiKxnL4Q WzNR4Htb/6485TaiKQ6cjvBnK9TG7/IMVs8uYTcFyoWZsv/s1fVLGrolPFhwoDWC K7OQkFBdk6d5i55HIEx9FIcUIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFgesCZ AxuYqj0AG21nn6TUuB7GMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe2qbs0Oa4aKGDq3loWAHVEM7qhPxAdb3fTTSqfLuISkn1RLIwWpM8 okE+VPYyoIlozi+7tqcTilcVdDEqJs1MdjpHWP5Kg0+V0AbBsZ42xJvt2yCouT/h dMNdPikjAH9eaTvAJYruDLTUXs6Yjw4HJ4nSm7BcHv2I+uGD9BaXSPlAC9kmvXYc 9pHPVp7v4ceN7GMSItZEv6oK9MVMC9zW+e7kFAypvq75IkaLEBwTe0wwHM/uW+WN M8sOKojpgA0e3GELZbKvk3rJrgoJp8TO4no++LsxBfAmdPQDtzHhcfI1hb1JPMKI H4HaDFSr77GURILzcNdMo+ieiSM0lDal -----END CERTIFICATE-----Generated at Fri May 2 19:26:29 2025 by rpki-client