$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: ETii/5MP8OZwR+tiRifO+zRyqvDTLDgG7UvYOJz3604= Subject key identifier: F5:3D:99:72:0B:2C:E5:8E:56:F2:91:57:18:F4:E3:64:7E:18:9E:E1 Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 0FFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 0FF2 Signing time: Sun 20 Jul 2025 17:29:51 +0000 Manifest this update: Sun 20 Jul 2025 17:29:51 +0000 Manifest next update: Sun 27 Jul 2025 17:29:51 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: fNon3/X+MXnLo5utZQwWq90875WM8BTewk5eND6uR9E=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: ud9Bxa6I3Lg7uR5uUGw9rl68XdwSN3BQlbT+nAu1Wxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4094 (0xffe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: Jul 20 17:29:51 2025 GMT Not After : Jul 27 17:29:51 2025 GMT Subject: CN=687d278f-00da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d4:81:c6:2b:bd:6c:a8:0a:72:1b:ce:72:a4: 2b:7b:4c:c9:13:50:7d:60:8f:c3:18:e7:af:12:15: 74:a7:28:5b:91:f3:5c:f3:f4:08:1f:c8:75:0f:13: 93:30:b7:51:4f:63:7b:d8:09:22:95:0d:dd:96:52: b4:f4:12:4a:e5:5c:4c:a4:ed:20:93:89:d3:64:02: 83:23:98:51:74:a6:ab:1b:6c:16:48:01:9c:19:7e: 11:c4:81:72:14:68:e0:8c:ff:6f:38:7e:bf:27:18: a0:a4:c8:d4:e6:6b:32:e1:80:c2:3e:f4:37:d3:9c: e3:41:bf:93:ef:b4:6f:8c:50:1b:a9:1b:57:66:c3: e2:f6:cd:69:d9:11:da:da:f2:ed:34:f0:e2:9a:4b: f1:3f:b1:04:2f:46:07:60:63:0f:0d:b7:0d:df:37: df:38:f4:28:e4:19:91:88:37:a2:35:80:99:fd:1a: 72:33:78:1c:fd:af:4a:a1:0f:cc:d9:fa:ef:4d:99: 93:75:04:23:67:e0:a1:15:55:df:2c:b7:34:00:28: ab:2e:74:da:9b:83:7c:82:3a:23:ac:14:25:d7:48: 4f:d8:3d:69:96:3f:0c:fb:6d:ad:01:aa:b2:35:97: 4a:fb:e1:ed:90:fb:07:de:ae:e9:8d:0e:12:4c:ed: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3D:99:72:0B:2C:E5:8E:56:F2:91:57:18:F4:E3:64:7E:18:9E:E1 X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b4:3f:55:d5:c3:3d:99:b8:7c:06:80:e2:7b:ca:5c:45:f5: 94:b5:65:db:44:43:b2:2d:e1:db:85:60:fb:bc:2a:0d:3c:1a: 39:78:44:ef:a3:89:a7:da:49:9a:74:00:55:2a:df:2d:cf:08: c2:e7:cc:00:5d:35:1b:5b:03:f6:8a:a8:d5:4c:a9:8b:f5:bb: 6e:06:cd:f8:63:6f:f2:b7:1d:01:a5:0d:81:e7:8c:ef:c9:11: b4:5e:02:2a:71:f8:c7:d7:d4:c3:7d:1d:fd:fa:51:24:04:f4: 86:2f:19:35:fe:09:a1:c0:f7:64:b0:70:4c:c2:90:43:17:ba: b8:9c:42:79:3b:e0:89:79:b9:47:ef:d1:da:98:1f:56:f2:b5: e8:c5:7f:56:6e:bd:75:38:8e:53:86:89:45:fe:e5:85:d7:0b: b9:4e:64:9b:20:9a:42:0f:c2:a9:28:8f:88:4f:44:2e:2d:aa: bc:1d:a3:40:20:b7:20:16:5d:a5:e5:df:58:0b:bb:f6:ec:e3: 7c:3c:89:98:a2:2a:30:03:3d:f4:fb:6a:c2:e8:34:ad:df:c3: dc:31:07:be:69:57:f8:d9:bc:7a:92:e9:bf:d2:56:2b:df:6d: 81:91:91:44:7d:7e:ff:be:5f:ec:0f:e6:80:3b:c3:2c:e1:53: 12:c5:d5:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjUwNzIwMTcyOTUxWhcNMjUwNzI3MTcyOTUxWjAYMRYwFAYD VQQDEw02ODdkMjc4Zi0wMGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79SBxiu9bKgKchvOcqQre0zJE1B9YI/DGOevEhV0pyhbkfNc8/QIH8h1DxOT MLdRT2N72AkilQ3dllK09BJK5VxMpO0gk4nTZAKDI5hRdKarG2wWSAGcGX4RxIFy FGjgjP9vOH6/JxigpMjU5msy4YDCPvQ305zjQb+T77RvjFAbqRtXZsPi9s1p2RHa 2vLtNPDimkvxP7EEL0YHYGMPDbcN3zffOPQo5BmRiDeiNYCZ/RpyM3gc/a9KoQ/M 2frvTZmTdQQjZ+ChFVXfLLc0ACirLnTam4N8gjojrBQl10hP2D1plj8M+22tAaqy NZdK++HtkPsH3q7pjQ4STO2HLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPU9mXIL LOWOVvKRVxj042R+GJ7hMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOtD9V1cM9mbh8BoDie8pcRfWUtWXbREOyLeHbhWD7vCoNPBo5eETv o4mn2kmadABVKt8tzwjC58wAXTUbWwP2iqjVTKmL9btuBs34Y2/ytx0BpQ2B54zv yRG0XgIqcfjH19TDfR39+lEkBPSGLxk1/gmhwPdksHBMwpBDF7q4nEJ5O+CJeblH 79HamB9W8rXoxX9Wbr11OI5TholF/uWF1wu5TmSbIJpCD8KpKI+IT0QuLaq8HaNA ILcgFl2l5d9YC7v27ON8PImYoiowAz30+2rC6DSt38PcMQe+aVf42bx6kum/0lYr 322BkZFEfX7/vl/sD+aAO8Ms4VMSxdWc -----END CERTIFICATE-----Generated at Mon Jul 21 06:58:46 2025 by rpki-client