$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: SjWvG4338rl1LC/YQEi5U758SD1xTJEUG9DwyOoWYbQ= Subject key identifier: 8A:5E:6E:5B:F7:FB:7F:38:29:E1:15:01:83:EF:0C:C2:5E:5F:F5:01 Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 3488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: 9F5F Signing time: Sat 14 Jun 2025 14:29:54 +0000 Manifest this update: Sat 14 Jun 2025 14:29:53 +0000 Manifest next update: Sat 21 Jun 2025 14:29:53 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: TE3xXHgWlN0j5Z4icp1G7XX2bRbQsPhlpAZ2254JHjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13448 (0x3488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Jun 14 14:29:53 2025 GMT Not After : Jun 21 14:29:53 2025 GMT Subject: CN=684d8761-fe7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:34:31:cf:96:03:27:b4:a9:23:ae:7e:cb: 0d:9e:d4:39:91:bc:77:a3:e6:ea:be:b0:d8:90:96: 3f:5c:3f:41:89:8a:45:20:5e:05:c1:df:d0:1f:62: 0e:34:0a:1a:e2:d4:21:42:61:02:3b:77:0d:38:f4: 34:ca:23:31:48:f7:d1:7c:92:b7:0f:87:f8:e7:fd: 01:70:27:b6:40:db:e7:de:26:6b:e8:db:b2:a1:19: fd:14:e2:12:b6:bc:c5:81:a7:97:22:3b:4a:45:de: 0a:86:91:5f:de:d2:a0:93:72:37:09:18:a2:d3:3c: 29:77:fd:bc:bf:9c:83:f7:a6:06:2a:d7:7c:2a:89: 20:f0:d7:9c:dc:bc:c8:f0:44:30:0b:c3:17:d1:cd: d3:d4:ca:5c:08:3b:ce:a1:7c:1e:0e:97:30:e5:a4: da:8f:d1:64:2a:d3:ef:33:b8:15:c3:c5:fa:13:8e: a9:6f:ea:3b:61:02:ed:fd:e8:6a:e8:11:ed:a8:b7: 08:4c:bc:dd:57:56:57:0b:08:08:97:61:d4:16:fc: 83:68:56:99:9a:ac:68:ab:ef:e6:0a:22:e4:c9:9b: 3d:4c:aa:7e:35:0b:36:10:99:d9:d9:95:e4:60:6d: 8a:f1:66:ce:20:ec:cd:ff:aa:21:69:db:c6:dc:98: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5E:6E:5B:F7:FB:7F:38:29:E1:15:01:83:EF:0C:C2:5E:5F:F5:01 X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:16:ff:37:19:ae:9d:15:d2:25:2b:0a:7f:53:4c:c8:fe:24: 87:14:43:fd:fe:2c:fa:02:0b:3d:aa:02:b8:53:4f:10:54:bf: 34:38:be:2d:d7:57:30:84:31:32:4f:13:5e:1e:a8:5a:26:17: 2f:7d:db:dd:25:30:ae:b3:9d:e8:08:c7:7c:f4:10:97:09:88: 2d:5b:fe:34:d6:eb:64:21:00:76:a7:36:ea:47:6e:3a:a7:f2: f3:cc:07:a3:1b:de:bb:f3:3a:71:53:b5:fc:c4:ac:ca:3e:60: bf:0f:bf:51:d5:2f:74:f2:b2:73:13:11:43:e5:6b:93:6c:17: 8a:25:f1:39:7b:01:ef:e5:98:bd:e5:13:76:6d:79:c4:03:e6: 18:80:96:27:e7:61:af:fb:43:81:b9:89:49:ea:a1:2a:ef:de: c2:82:ab:52:41:cb:52:c7:b5:56:d0:e5:0a:be:3b:2f:25:66: c5:f5:97:e8:d0:98:1e:f3:2e:7e:19:6c:66:01:e7:d4:44:27: 1a:5b:4e:6a:4a:be:46:b1:94:f9:1b:93:4f:9e:82:17:80:a3: 71:7e:c9:c3:22:a6:ed:f3:5c:13:2f:3c:2c:05:9f:4a:3b:6e: b6:1b:a6:d2:9c:3b:20:5a:50:29:4a:0e:e4:07:3b:be:31:0e: ad:f2:66:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUwNjE0MTQyOTUzWhcNMjUwNjIxMTQyOTUzWjAYMRYwFAYD VQQDEw02ODRkODc2MS1mZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgg0Mc+WAye0qSOufssNntQ5kbx3o+bqvrDYkJY/XD9BiYpFIF4Fwd/QH2IO NAoa4tQhQmECO3cNOPQ0yiMxSPfRfJK3D4f45/0BcCe2QNvn3iZr6NuyoRn9FOIS trzFgaeXIjtKRd4KhpFf3tKgk3I3CRii0zwpd/28v5yD96YGKtd8Kokg8Nec3LzI 8EQwC8MX0c3T1MpcCDvOoXweDpcw5aTaj9FkKtPvM7gVw8X6E46pb+o7YQLt/ehq 6BHtqLcITLzdV1ZXCwgIl2HUFvyDaFaZmqxoq+/mCiLkyZs9TKp+NQs2EJnZ2ZXk YG2K8WbOIOzN/6ohadvG3JiZyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpeblv3 +384KeEVAYPvDMJeX/UBMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVFv83Ga6dFdIlKwp/U0zI/iSHFEP9/iz6Ags9qgK4U08QVL80OL4t 11cwhDEyTxNeHqhaJhcvfdvdJTCus53oCMd89BCXCYgtW/401utkIQB2pzbqR246 p/LzzAejG9678zpxU7X8xKzKPmC/D79R1S908rJzExFD5WuTbBeKJfE5ewHv5Zi9 5RN2bXnEA+YYgJYn52Gv+0OBuYlJ6qEq797CgqtSQctSx7VW0OUKvjsvJWbF9Zfo 0Jge8y5+GWxmAefURCcaW05qSr5GsZT5G5NPnoIXgKNxfsnDIqbt81wTLzwsBZ9K O262G6bSnDsgWlApSg7kBzu+MQ6t8mbe -----END CERTIFICATE-----Generated at Sat Jun 14 18:56:19 2025 by rpki-client