$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: o/6tjYKwJCV4NETDoD7PZ+cou4Y0MOlq0bdLJOnqDJU= Subject key identifier: A7:37:F8:2C:8A:F3:87:12:62:35:3E:20:FE:67:7A:0E:C9:E4:81:10 Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 0FCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 0FBF Signing time: Sat 12 Apr 2025 17:25:32 +0000 Manifest this update: Sat 12 Apr 2025 17:25:31 +0000 Manifest next update: Sat 19 Apr 2025 17:25:31 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: L1yiIvoNvJ2UFLuDYh1tMKF41vadC7yBCqdJz+2S/VQ=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: sgkWXRSJ1BUZupF4Dk2efL+RNcogul9NMOpS+wB5yj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4042 (0xfca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: Apr 12 17:25:31 2025 GMT Not After : Apr 19 17:25:31 2025 GMT Subject: CN=67faa20c-9ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:89:cc:f4:c5:03:e0:a9:12:03:bc:d1:e6: f4:a2:b9:0d:31:0a:cf:bc:c6:11:01:a8:d8:c9:9e: 1a:01:2e:cc:0c:0c:85:b5:a3:8e:d6:8e:f1:41:94: 95:d8:a9:87:f7:58:4a:ba:8c:2d:7a:7e:c6:67:8c: 35:65:9b:aa:f5:3c:09:9f:10:0f:33:2b:c7:a3:fc: 4e:2d:f1:1a:91:d6:4f:ac:ef:af:84:c1:ad:a1:24: 83:25:85:ae:39:57:99:6e:da:88:2f:ac:3f:41:7f: 3d:11:78:8f:d5:0e:4f:f4:9b:53:d9:8e:04:27:5e: 03:5b:3d:8b:94:35:de:68:43:aa:f2:90:3e:77:b6: 91:2c:6d:dc:b2:3f:bf:ef:2e:a0:04:38:6a:86:a9: f7:0d:18:84:a7:3c:b2:ba:06:63:11:cd:09:34:56: ea:d4:87:35:66:2d:a7:19:d2:a3:6a:aa:8c:56:8f: ee:53:35:7f:d0:a2:77:41:7c:11:26:47:27:9f:41: 53:41:75:90:6a:87:cb:45:1c:8e:be:01:ca:9e:3f: b6:25:80:c0:31:17:4a:a4:6c:5d:42:85:7a:93:c9: 70:8c:c7:89:13:4d:b9:9a:bf:9a:82:f8:c7:01:f6: e4:3f:51:58:94:03:e8:9d:24:8e:0f:76:93:20:75: dd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:37:F8:2C:8A:F3:87:12:62:35:3E:20:FE:67:7A:0E:C9:E4:81:10 X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f9:a3:9f:c9:7d:42:8e:54:80:94:46:46:9c:d4:96:84:21: 64:57:3c:5e:56:56:83:7a:50:ae:23:af:a3:1f:22:d0:43:8b: 75:1c:d7:57:01:0f:b7:4e:c3:e2:8e:d9:2a:3e:d3:47:c3:48: 5c:e7:20:65:9b:2a:d8:b1:f9:6b:e2:c8:34:83:cc:77:45:bb: d0:45:8b:e9:3c:9c:bc:fd:79:04:ff:75:a0:e7:df:40:a4:e9: 46:25:4d:ea:12:fc:57:16:95:90:ee:0e:ee:9c:59:2c:d8:88: f3:72:5f:db:09:b8:bf:31:2b:87:90:ab:8a:7f:85:f0:73:35: 61:07:80:2f:c9:a0:20:a0:e4:e3:c0:df:d3:58:ea:39:8f:55: 23:98:9d:69:a0:75:50:8f:dd:6d:ca:74:03:52:61:c7:13:47: 3a:5d:0e:63:a1:bc:2d:59:75:4d:d3:c8:d8:6e:4b:8f:d0:16: fa:67:36:03:82:a0:b3:a1:30:20:3f:07:60:64:de:98:eb:f5: 40:62:cf:87:c8:d3:9e:ad:8a:97:f3:41:6a:5e:7b:88:b3:b2: 5a:39:33:fe:17:88:87:64:7e:87:ce:9f:97:90:6a:5d:b5:bd: 04:38:7f:6e:63:c3:ab:68:7a:b6:21:1a:99:20:7e:04:f7:c4: 3a:4d:e5:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjUwNDEyMTcyNTMxWhcNMjUwNDE5MTcyNTMxWjAYMRYwFAYD VQQDEw02N2ZhYTIwYy05YWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBmJzPTFA+CpEgO80eb0orkNMQrPvMYRAajYyZ4aAS7MDAyFtaOO1o7xQZSV 2KmH91hKuowten7GZ4w1ZZuq9TwJnxAPMyvHo/xOLfEakdZPrO+vhMGtoSSDJYWu OVeZbtqIL6w/QX89EXiP1Q5P9JtT2Y4EJ14DWz2LlDXeaEOq8pA+d7aRLG3csj+/ 7y6gBDhqhqn3DRiEpzyyugZjEc0JNFbq1Ic1Zi2nGdKjaqqMVo/uUzV/0KJ3QXwR Jkcnn0FTQXWQaofLRRyOvgHKnj+2JYDAMRdKpGxdQoV6k8lwjMeJE025mr+agvjH AfbkP1FYlAPonSSOD3aTIHXdawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKc3+CyK 84cSYjU+IP5neg7J5IEQMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi+aOfyX1CjlSAlEZGnNSWhCFkVzxeVlaDelCuI6+jHyLQQ4t1HNdX AQ+3TsPijtkqPtNHw0hc5yBlmyrYsflr4sg0g8x3RbvQRYvpPJy8/XkE/3Wg599A pOlGJU3qEvxXFpWQ7g7unFks2Ijzcl/bCbi/MSuHkKuKf4XwczVhB4AvyaAgoOTj wN/TWOo5j1UjmJ1poHVQj91tynQDUmHHE0c6XQ5jobwtWXVN08jYbkuP0Bb6ZzYD gqCzoTAgPwdgZN6Y6/VAYs+HyNOerYqX80FqXnuIs7JaOTP+F4iHZH6Hzp+XkGpd tb0EOH9uY8OraHq2IRqZIH4E98Q6TeXU -----END CERTIFICATE-----Generated at Sat Apr 12 23:50:25 2025 by rpki-client