$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: i97fueRu2SdYfLaKGU0yytlTsX7yJiqVfzVu0nydP6U= Subject key identifier: D1:34:F6:70:F8:C2:2B:F4:F4:F6:8B:3C:92:A9:6C:44:B9:F1:D0:4F Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 346B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: 9EE8 Signing time: Wed 16 Apr 2025 14:30:06 +0000 Manifest this update: Wed 16 Apr 2025 14:30:05 +0000 Manifest next update: Wed 23 Apr 2025 14:30:05 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: XPHD5IAo+a+Tj2xJE9cZ9hjMG3TAY7E1Y6IaqKWNaUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 14:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13419 (0x346b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Apr 16 14:30:05 2025 GMT Not After : Apr 23 14:30:05 2025 GMT Subject: CN=67ffbeee-044e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:45:25:95:e9:ad:b1:fa:3b:e5:74:b0:f0: 69:8e:7c:35:6a:1e:aa:0b:66:b7:84:d1:14:18:ae: c8:43:19:fb:b1:0e:2c:cf:37:15:52:e0:f9:c5:44: 40:2a:d3:d2:b1:19:1b:79:7d:42:bc:39:3f:21:a8: 07:ba:45:70:f5:e5:7c:7f:8c:d5:b0:a1:f8:29:0f: 8c:5e:4d:0f:5b:c7:c7:c2:58:eb:2f:33:f4:0d:ab: c2:a0:98:3e:0b:9b:ed:82:ec:5b:f8:6d:f1:d3:58: 80:16:48:b0:19:38:29:75:e1:5f:50:41:3e:ac:11: fd:64:7a:cf:a1:8f:a5:e8:23:fd:96:97:ba:44:d5: 38:3d:56:10:a4:11:10:fc:43:f6:d6:2d:56:e0:24: b8:9e:4c:83:d4:50:40:55:0b:82:a3:b3:5c:36:dd: 10:06:26:d5:33:2b:c8:e6:b9:48:b3:68:98:4f:2f: 99:40:41:d8:ab:17:93:d3:6f:30:7e:77:2d:57:db: b9:91:cc:25:dd:99:c8:2f:2e:ec:01:9a:34:35:26: 0f:6c:e4:30:ba:97:d8:aa:86:f4:e2:d4:bc:92:49: 51:4d:72:b1:05:a8:15:7e:af:ec:f2:20:a3:7f:ff: 65:8f:f5:5c:69:4d:35:46:d5:db:36:23:d1:d7:e1: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:34:F6:70:F8:C2:2B:F4:F4:F6:8B:3C:92:A9:6C:44:B9:F1:D0:4F X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:71:9f:90:16:bf:ba:88:75:51:ee:50:81:fa:1c:89:bd:c3: d4:ad:e1:91:43:ef:3a:71:81:c2:26:a9:68:46:58:95:99:e1: 02:31:1d:26:91:79:8e:74:18:f5:47:34:7b:0f:5b:55:90:e5: 8a:61:75:e1:b0:94:28:d5:d1:69:4b:e5:6c:5b:56:11:eb:36: 7f:1f:55:00:e0:e2:83:3e:e1:7f:c3:58:25:7f:ae:9a:66:71: cf:51:e0:7b:66:91:5b:1d:a5:2b:46:14:a2:a2:a7:67:bc:56: be:7b:ee:52:7c:b8:8e:c3:e8:27:e8:01:07:b2:2c:42:cb:eb: 09:a9:20:a3:c9:ae:41:9a:f8:3a:14:b3:2e:3b:21:d2:eb:b9: 0a:0b:f0:be:cd:35:1e:c5:99:88:44:7c:47:6f:8f:80:50:2d: b4:9a:6c:71:1b:b7:f5:b3:cb:ec:f4:11:ce:ed:4e:00:6f:38: 15:e4:ab:a9:da:14:21:38:3e:13:a4:3e:bf:96:12:2a:1e:94: 64:5c:82:5a:7e:00:2f:67:30:28:79:f1:fb:19:9a:78:cd:e4: 45:1d:99:fb:2b:9f:6e:bb:12:01:50:50:40:19:30:03:6d:d8: b5:9f:c2:c9:3c:d2:37:12:b6:83:c8:1d:e8:9b:4d:60:7d:e9: 51:ed:d1:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUwNDE2MTQzMDA1WhcNMjUwNDIzMTQzMDA1WjAYMRYwFAYD VQQDEw02N2ZmYmVlZS0wNDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGlFJZXprbH6O+V0sPBpjnw1ah6qC2a3hNEUGK7IQxn7sQ4szzcVUuD5xURA KtPSsRkbeX1CvDk/IagHukVw9eV8f4zVsKH4KQ+MXk0PW8fHwljrLzP0DavCoJg+ C5vtguxb+G3x01iAFkiwGTgpdeFfUEE+rBH9ZHrPoY+l6CP9lpe6RNU4PVYQpBEQ /EP21i1W4CS4nkyD1FBAVQuCo7NcNt0QBibVMyvI5rlIs2iYTy+ZQEHYqxeT028w fnctV9u5kcwl3ZnILy7sAZo0NSYPbOQwupfYqob04tS8kklRTXKxBagVfq/s8iCj f/9lj/VcaU01RtXbNiPR1+Fs2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNE09nD4 wiv09PaLPJKpbES58dBPMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfcZ+QFr+6iHVR7lCB+hyJvcPUreGRQ+86cYHCJqloRliVmeECMR0m kXmOdBj1RzR7D1tVkOWKYXXhsJQo1dFpS+VsW1YR6zZ/H1UA4OKDPuF/w1glf66a ZnHPUeB7ZpFbHaUrRhSioqdnvFa+e+5SfLiOw+gn6AEHsixCy+sJqSCjya5Bmvg6 FLMuOyHS67kKC/C+zTUexZmIRHxHb4+AUC20mmxxG7f1s8vs9BHO7U4AbzgV5Kup 2hQhOD4TpD6/lhIqHpRkXIJafgAvZzAoefH7GZp4zeRFHZn7K59uuxIBUFBAGTAD bdi1n8LJPNI3EraDyB3om01gfelR7dFH -----END CERTIFICATE-----Generated at Wed Apr 16 17:13:16 2025 by rpki-client