$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: 6P6tT4g4TGQzvWASLZFUT56zmCSQ1Qqdn5xq/43rPCA= Subject key identifier: 94:BF:A1:06:3C:D6:12:40:EC:34:19:E8:AE:08:06:23:D7:15:30:BC Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 0FE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 0FD8 Signing time: Fri 30 May 2025 17:41:15 +0000 Manifest this update: Fri 30 May 2025 17:41:15 +0000 Manifest next update: Fri 06 Jun 2025 17:41:15 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: VVcZBQINCuNqA1lSoUySjLwv/td7UmvfdCE9PpQWTsI=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: ud9Bxa6I3Lg7uR5uUGw9rl68XdwSN3BQlbT+nAu1Wxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4068 (0xfe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: May 30 17:41:15 2025 GMT Not After : Jun 6 17:41:15 2025 GMT Subject: CN=6839edbb-1fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:42:77:91:37:10:aa:67:36:b1:a9:ae:d5: ca:ff:d8:24:fc:c1:5d:34:ff:5a:3a:7e:f4:38:88: f8:b5:79:64:6c:df:4d:f9:16:cf:da:25:5d:6e:4a: c4:83:ad:35:d9:d5:e1:05:c7:46:82:13:61:73:84: fb:13:b0:35:08:90:ee:2e:14:57:43:1d:d8:b7:bb: 36:9c:ab:7d:3a:14:15:c9:2c:3f:46:f4:72:96:c6: 10:83:08:98:51:20:76:a9:81:24:f4:a3:f2:26:72: 00:14:1a:49:02:95:88:4f:15:b2:82:46:71:fd:ef: 38:a1:3f:e2:2b:c6:d7:45:7d:d7:c0:31:b9:c1:61: 32:df:8c:cf:c3:67:eb:9b:29:dd:b9:6d:19:15:d0: cd:5e:4f:cf:54:26:0d:89:86:df:fc:63:6f:96:11: 8a:24:8b:bb:73:24:72:21:24:f9:5f:dc:83:c3:e7: a6:3e:4d:11:b6:fa:88:7e:da:fe:36:36:2b:0e:cc: f3:f0:39:f7:2f:7b:62:93:97:11:ba:1f:c0:70:71: 46:8d:4f:e2:ea:a3:0a:a0:05:77:ed:8a:4e:fd:76: 14:87:27:5d:af:81:5e:e2:ae:1b:9d:8d:1e:c2:fb: ed:0d:bf:5e:21:fa:6d:c9:b5:73:f7:cf:d8:8c:21: 49:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BF:A1:06:3C:D6:12:40:EC:34:19:E8:AE:08:06:23:D7:15:30:BC X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:0d:cd:a5:88:56:e7:e1:f1:6a:90:19:8a:66:81:d1:a0:1b: 25:a8:ef:95:d6:7e:e7:45:83:71:2c:b8:fc:6e:47:d7:c6:02: 46:02:50:e1:a7:ad:d8:ba:23:47:8e:0f:41:d7:59:7a:65:6d: 53:89:1e:0f:7a:03:dc:8b:81:24:84:be:2e:c4:06:74:ac:a9: c6:77:49:54:78:e3:d1:ba:69:2d:ac:7a:6f:5f:31:0b:99:62: aa:d8:86:c1:e3:92:c2:4a:66:0c:7d:43:c3:57:4b:b6:81:d2: 62:3a:36:7f:ec:c2:0c:d0:63:3e:65:36:f9:ae:f6:21:3a:8f: a0:3e:4f:fb:d2:01:40:08:43:32:48:42:19:b5:03:e7:fe:17: 90:cb:f6:20:27:d1:23:43:58:34:61:df:fe:82:46:c9:f6:e6: ef:aa:5e:e5:a9:74:51:68:a0:9d:aa:6d:46:48:2c:40:bd:ba: 69:de:17:21:85:eb:d8:fe:68:35:74:23:e1:20:de:74:5e:c9: 29:83:dd:73:f7:25:b2:89:34:ef:3f:88:63:2f:c2:11:74:2e: 3e:c3:64:9c:69:a5:b4:b3:d9:ec:d0:2f:57:ab:0d:9c:30:9b: 40:3d:cb:42:e2:2b:6a:22:e9:f1:d1:59:b8:12:c8:19:fd:2e: a1:12:c7:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjUwNTMwMTc0MTE1WhcNMjUwNjA2MTc0MTE1WjAYMRYwFAYD VQQDEw02ODM5ZWRiYi0xZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJhCd5E3EKpnNrGprtXK/9gk/MFdNP9aOn70OIj4tXlkbN9N+RbP2iVdbkrE g6012dXhBcdGghNhc4T7E7A1CJDuLhRXQx3Yt7s2nKt9OhQVySw/RvRylsYQgwiY USB2qYEk9KPyJnIAFBpJApWITxWygkZx/e84oT/iK8bXRX3XwDG5wWEy34zPw2fr mynduW0ZFdDNXk/PVCYNiYbf/GNvlhGKJIu7cyRyIST5X9yDw+emPk0RtvqIftr+ NjYrDszz8Dn3L3tik5cRuh/AcHFGjU/i6qMKoAV37YpO/XYUhyddr4Fe4q4bnY0e wvvtDb9eIfptybVz98/YjCFJlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS/oQY8 1hJA7DQZ6K4IBiPXFTC8MB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYDc2liFbn4fFqkBmKZoHRoBslqO+V1n7nRYNxLLj8bkfXxgJGAlDh p63YuiNHjg9B11l6ZW1TiR4PegPci4EkhL4uxAZ0rKnGd0lUeOPRumktrHpvXzEL mWKq2IbB45LCSmYMfUPDV0u2gdJiOjZ/7MIM0GM+ZTb5rvYhOo+gPk/70gFACEMy SEIZtQPn/heQy/YgJ9EjQ1g0Yd/+gkbJ9ubvql7lqXRRaKCdqm1GSCxAvbpp3hch hevY/mg1dCPhIN50Xskpg91z9yWyiTTvP4hjL8IRdC4+w2ScaaW0s9ns0C9Xqw2c MJtAPctC4itqIunx0Vm4EsgZ/S6hEsfu -----END CERTIFICATE-----Generated at Sat May 31 16:53:43 2025 by rpki-client