$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: fXYSg8u3/kPixa+3Z6URbs87zzpAzCecNbYeeAqN/mM= Subject key identifier: 7C:BE:F0:F0:A4:74:F3:61:E5:87:B6:53:1C:58:70:EA:7C:A3:79:88 Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 34D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: A083 Signing time: Tue 04 Nov 2025 14:32:44 +0000 Manifest this update: Tue 04 Nov 2025 14:32:43 +0000 Manifest next update: Tue 11 Nov 2025 14:32:43 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: yWNeCuTQxcHQhOSu3AuERQDFcHZonXzwoISGufrVOkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13521 (0x34d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Nov 4 14:32:43 2025 GMT Not After : Nov 11 14:32:43 2025 GMT Subject: CN=690a0e8c-b4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:ac:6c:d5:6b:e8:ea:5c:ee:e0:29:11:fe: 6c:57:47:bb:fe:2c:18:2e:ef:d4:63:ce:3f:10:b0: d2:3a:b9:78:56:79:68:85:55:72:b8:bb:1e:00:2c: bd:23:45:f3:86:34:2e:3c:b9:47:68:a9:ab:17:6c: 68:1b:f1:18:b5:b6:95:22:34:1e:72:1d:85:79:cd: b6:dd:70:fd:36:30:ca:5d:9a:2a:89:0d:6e:9b:26: 1c:3f:16:42:6c:46:ac:9e:8a:98:11:1e:5d:81:3a: 21:6c:eb:d2:3d:06:fc:72:2a:ea:24:ec:d4:99:9e: 72:ce:d6:52:eb:ef:27:9e:da:d7:dd:62:dd:70:0e: 7e:cd:08:d4:e0:15:17:01:ed:d8:65:2b:bb:05:eb: 4c:53:f3:05:99:c0:8b:1d:8a:bc:20:1e:d8:80:d7: d1:6d:7b:9d:15:1f:4e:4c:c6:79:97:2b:d6:00:c0: fd:eb:61:4b:0d:1e:20:04:be:a6:97:76:46:e8:a5: 5c:89:1d:38:65:10:05:33:ae:8f:43:03:27:a0:23: 23:1b:e6:b5:08:49:9e:8b:e6:12:5a:38:9e:23:c1: 28:c1:85:05:5c:f0:90:3a:7f:6b:7f:93:4b:85:ca: f0:bd:f8:c3:67:11:51:30:bd:0d:03:a2:3f:58:85: 22:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BE:F0:F0:A4:74:F3:61:E5:87:B6:53:1C:58:70:EA:7C:A3:79:88 X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:fd:38:29:49:ef:3d:e0:2c:7d:3a:af:27:d0:07:7a:2f:c2: 9d:f7:fb:a3:fc:d8:39:17:f8:af:84:96:79:60:3a:94:13:17: 43:d1:7a:58:25:5d:e8:e2:97:69:ff:00:e7:04:1b:6a:2b:67: fb:75:56:b6:53:10:47:77:75:65:1d:98:4c:17:b8:1a:46:c3: d8:69:23:26:98:d0:d0:c9:3c:5c:63:1a:18:3c:3c:8f:6c:b2: b5:02:d7:a6:02:03:eb:ea:eb:0c:49:a0:38:e4:24:06:e2:fa: d7:a9:38:da:da:b6:9f:34:5a:1a:83:1f:99:31:b2:37:22:a9: d2:15:eb:f2:bc:9d:a1:70:a4:81:e2:82:b1:4d:d7:c4:73:e6: 0a:fa:8c:28:90:a7:32:c0:e5:b7:e3:d8:d4:0b:33:86:e9:ea: 95:c1:8c:a4:de:0e:76:d4:e2:fe:40:62:fd:7b:af:60:33:35: 67:cc:60:73:ad:29:f7:37:22:a8:32:79:ba:0f:7a:89:b9:91: 89:15:1c:7d:88:e1:c8:66:61:55:67:0b:08:a1:26:f8:43:97: 21:a2:08:03:b7:77:3f:34:89:87:9e:d9:16:3b:14:84:82:c4: 63:4a:c4:72:68:39:2a:fb:73:15:e4:90:88:e4:96:4a:9d:4d: 4f:15:a0:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUxMTA0MTQzMjQzWhcNMjUxMTExMTQzMjQzWjAYMRYwFAYD VQQDEw02OTBhMGU4Yy1iNGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskKsbNVr6Opc7uApEf5sV0e7/iwYLu/UY84/ELDSOrl4VnlohVVyuLseACy9 I0XzhjQuPLlHaKmrF2xoG/EYtbaVIjQech2Fec223XD9NjDKXZoqiQ1umyYcPxZC bEasnoqYER5dgTohbOvSPQb8cirqJOzUmZ5yztZS6+8nntrX3WLdcA5+zQjU4BUX Ae3YZSu7BetMU/MFmcCLHYq8IB7YgNfRbXudFR9OTMZ5lyvWAMD962FLDR4gBL6m l3ZG6KVciR04ZRAFM66PQwMnoCMjG+a1CEmei+YSWjieI8EowYUFXPCQOn9rf5NL hcrwvfjDZxFRML0NA6I/WIUiXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHy+8PCk dPNh5Ye2UxxYcOp8o3mIMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE/TgpSe894Cx9Oq8n0Ad6L8Kd9/uj/Ng5F/ivhJZ5YDqUExdD0XpY JV3o4pdp/wDnBBtqK2f7dVa2UxBHd3VlHZhMF7gaRsPYaSMmmNDQyTxcYxoYPDyP bLK1AtemAgPr6usMSaA45CQG4vrXqTja2rafNFoagx+ZMbI3IqnSFevyvJ2hcKSB 4oKxTdfEc+YK+owokKcywOW349jUCzOG6eqVwYyk3g521OL+QGL9e69gMzVnzGBz rSn3NyKoMnm6D3qJuZGJFRx9iOHIZmFVZwsIoSb4Q5choggDt3c/NImHntkWOxSE gsRjSsRyaDkq+3MV5JCI5JZKnU1PFaDi -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:29 2025 by rpki-client