$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: 0iFQia5+CHvSg0YEowrmJ00cs6ZmoWrywwHhl9ezYRk= Subject key identifier: B1:6D:9D:EA:AF:B3:C9:E1:51:B2:2F:CF:7C:CD:3C:5C:ED:C6:FC:E0 Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 346F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: 9EF8 Signing time: Thu 24 Apr 2025 14:29:50 +0000 Manifest this update: Thu 24 Apr 2025 14:29:49 +0000 Manifest next update: Thu 01 May 2025 14:29:49 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: GyVc32RnjIgU1OhBvPncTRPEoi26KZTO8fjM80UQxL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13423 (0x346f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Apr 24 14:29:49 2025 GMT Not After : May 1 14:29:49 2025 GMT Subject: CN=680a4ade-617a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:7d:97:a1:d0:e9:ad:35:d8:fa:a2:cf:21: cd:b2:4a:69:8f:6a:42:35:7b:26:53:7a:29:40:64: 46:e9:7c:fb:5e:c3:3d:ac:b2:3d:71:9c:ba:01:a7: 98:d8:21:85:8e:a3:55:65:94:18:db:b5:7b:f6:d8: 0c:11:99:25:a6:4a:49:12:0a:b6:69:14:60:86:d2: 05:6b:e8:04:64:18:7f:f3:c8:05:4d:ab:07:89:5a: 00:42:a9:bf:bc:29:e5:34:1b:67:b8:91:ed:b0:54: 45:3f:4e:9a:c5:00:d3:42:3a:0d:ac:dc:ea:6b:4c: 61:d0:47:ce:1a:a7:1a:41:20:92:7a:c3:f0:ab:50: 7c:7a:b6:c0:9b:bf:dc:03:c3:e9:5f:f6:e2:31:31: 68:58:2e:c3:54:77:07:c8:75:34:10:41:7b:49:01: 2e:34:0c:53:34:60:ab:99:64:f6:d6:0d:72:5c:80: 6a:47:41:62:5f:25:6a:45:bd:ca:da:d6:a7:87:f4: e0:fb:04:b0:6d:3f:74:5a:3a:9f:2a:83:17:f7:70: 0e:8a:d4:0d:df:aa:0e:96:4b:8e:e8:03:b7:3c:a7: d0:27:cc:cd:cd:1a:7f:bb:86:18:fa:a0:43:8b:29: e4:6f:88:e9:69:06:0b:89:5d:a5:e5:3d:fe:58:81: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6D:9D:EA:AF:B3:C9:E1:51:B2:2F:CF:7C:CD:3C:5C:ED:C6:FC:E0 X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:08:d3:1e:c9:a9:d0:1d:b6:15:28:44:2f:17:50:0c:05:f9: ba:93:5b:1c:a2:5c:da:ab:ca:b9:70:50:02:ac:ca:5b:e1:17: 46:78:fe:c5:c4:db:f1:98:1c:5e:bf:04:f9:09:6c:45:d8:0b: 44:51:0d:29:3f:5b:df:ec:86:94:8b:b7:3d:cd:d0:2e:26:79: 4c:a1:a2:cb:b8:74:6b:78:86:49:84:91:47:1d:2d:69:73:d7: 51:0b:c7:6e:ee:bb:39:86:43:10:40:63:69:08:31:39:94:e2: 6f:1a:09:3c:8d:b8:d5:dd:94:ed:4a:ca:13:cf:99:b0:5b:df: 5d:e0:f6:80:29:83:82:d7:df:d5:83:35:db:d3:7c:d1:e7:02: 10:35:59:d0:2a:22:05:cb:bb:b4:e2:81:b9:ae:9c:03:87:17: 20:70:4e:c7:b3:b2:e0:84:8b:f1:5f:24:ac:02:4b:30:f9:9c: 15:f6:b2:98:b3:89:df:8f:8e:ff:59:3b:08:f4:a1:c9:02:f4: 4a:09:63:1a:a0:26:d0:0a:3b:bf:a6:43:07:95:2f:7b:6a:09: c9:41:ff:4b:6f:cf:75:85:85:e5:c0:b1:37:b8:9f:96:47:56: 32:c7:ec:e1:5b:a2:db:a6:4a:df:24:6a:87:18:53:b1:9d:cc: 5e:41:e2:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUwNDI0MTQyOTQ5WhcNMjUwNTAxMTQyOTQ5WjAYMRYwFAYD VQQDEw02ODBhNGFkZS02MTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnx9l6HQ6a012PqizyHNskppj2pCNXsmU3opQGRG6Xz7XsM9rLI9cZy6AaeY 2CGFjqNVZZQY27V79tgMEZklpkpJEgq2aRRghtIFa+gEZBh/88gFTasHiVoAQqm/ vCnlNBtnuJHtsFRFP06axQDTQjoNrNzqa0xh0EfOGqcaQSCSesPwq1B8erbAm7/c A8PpX/biMTFoWC7DVHcHyHU0EEF7SQEuNAxTNGCrmWT21g1yXIBqR0FiXyVqRb3K 2tanh/Tg+wSwbT90WjqfKoMX93AOitQN36oOlkuO6AO3PKfQJ8zNzRp/u4YY+qBD iynkb4jpaQYLiV2l5T3+WIFWWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFtneqv s8nhUbIvz3zNPFztxvzgMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1CNMeyanQHbYVKEQvF1AMBfm6k1scolzaq8q5cFACrMpb4RdGeP7F xNvxmBxevwT5CWxF2AtEUQ0pP1vf7IaUi7c9zdAuJnlMoaLLuHRreIZJhJFHHS1p c9dRC8du7rs5hkMQQGNpCDE5lOJvGgk8jbjV3ZTtSsoTz5mwW99d4PaAKYOC19/V gzXb03zR5wIQNVnQKiIFy7u04oG5rpwDhxcgcE7Hs7LghIvxXySsAksw+ZwV9rKY s4nfj47/WTsI9KHJAvRKCWMaoCbQCju/pkMHlS97agnJQf9Lb891hYXlwLE3uJ+W R1Yyx+zhW6LbpkrfJGqHGFOxncxeQeK0 -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:43 2025 by rpki-client