$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: ucFezaiybIaNgvtl4yFtZp6/0i9Oc56TVRCl5WwUP1g= Subject key identifier: 30:93:6A:02:81:8F:61:93:56:F7:C4:D0:7D:AC:79:D7:82:00:28:9B Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 34AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: 9FEF Signing time: Sun 24 Aug 2025 14:30:16 +0000 Manifest this update: Sun 24 Aug 2025 14:30:15 +0000 Manifest next update: Sun 31 Aug 2025 14:30:15 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: Mlxk/AZu5rycDTW+gySaJkg5xpQGaI0upP7EDt4bIKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Aug 24 14:30:15 2025 GMT Not After : Aug 31 14:30:15 2025 GMT Subject: CN=68ab21f7-950d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1b:77:82:08:a4:9c:4d:b1:e1:61:a7:bb:c7: 93:c7:55:ff:a4:e7:76:5a:2a:24:8b:f0:c5:96:42: 09:26:d0:7c:f9:bc:a0:75:c3:cf:79:9f:0b:c5:28: b7:de:77:3e:54:e0:02:d3:54:09:56:f7:bb:f6:b5: a1:a5:1e:ca:bb:9f:e1:34:73:52:70:92:db:4d:24: f2:d8:55:ae:e2:83:be:b9:fc:76:db:59:fb:0f:d6: ec:c1:81:95:bd:0e:4b:aa:c5:59:6f:f9:ba:f6:e5: b2:58:d3:1c:23:16:ec:4c:64:f8:78:34:20:c6:96: 4f:90:78:d7:57:6d:a2:13:bc:b0:0f:cf:b4:9a:85: 53:d4:25:32:65:00:70:38:ad:2f:10:14:09:0b:ff: 2d:72:6d:5c:e8:ea:c2:e4:be:48:f2:51:9f:b2:c6: be:d0:82:ec:33:99:dd:e1:01:24:85:e5:99:87:b9: 29:a9:ff:4e:f1:da:6d:f9:77:38:aa:e6:2f:0a:6b: 98:b6:dc:c7:7d:ce:0e:63:68:64:08:70:ea:3b:f6: 07:97:1b:15:b5:e1:50:d5:09:74:be:4a:56:c9:2f: b3:d0:ea:05:2d:74:b8:f6:59:83:a7:7f:59:25:ab: f4:32:2b:db:fd:47:ed:69:0e:03:89:ff:c9:2f:97: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:93:6A:02:81:8F:61:93:56:F7:C4:D0:7D:AC:79:D7:82:00:28:9B X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ba:60:c5:46:d5:da:fa:42:10:cb:77:ad:44:ad:40:a1:a4: 07:c4:50:f5:c9:82:e5:24:a6:f7:31:1e:c1:5e:d4:e4:ee:64: d5:20:54:7f:77:b3:38:8e:d3:a2:6e:2a:2e:c4:80:9f:1b:52: f5:fd:2b:4b:1d:64:73:07:b2:67:5a:50:54:eb:33:90:7a:2b: 22:5e:74:5b:c5:14:ba:b2:b2:e7:cd:68:f2:70:2e:9a:e3:a3: 04:fa:7f:ba:f1:46:0c:fe:6c:2a:96:23:3e:16:f8:21:8f:b1: 4e:85:57:39:95:66:96:d4:01:db:08:a4:31:2e:18:9e:e7:31: 69:84:b9:73:8c:d5:af:41:ea:56:5c:85:53:29:09:1e:17:d1: f9:ef:76:50:57:84:74:e1:6f:36:98:1d:80:b3:2a:27:6c:c1: 4a:47:b3:e9:92:9b:e6:15:ad:05:6f:7d:0c:2a:96:24:23:33: d0:52:3d:9e:75:6a:b3:e0:60:4e:31:e0:9f:02:19:58:8b:42: 5e:e5:d8:bc:81:dd:71:84:db:57:f7:66:96:b6:c7:4a:2b:9b: 63:06:45:e7:5e:3c:a6:c4:86:44:cf:06:1d:47:65:44:3f:be: de:3a:22:c6:79:68:b7:81:d8:45:bd:b0:c0:66:bb:22:c9:b3: 78:66:11:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUwODI0MTQzMDE1WhcNMjUwODMxMTQzMDE1WjAYMRYwFAYD VQQDEw02OGFiMjFmNy05NTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxt3ggiknE2x4WGnu8eTx1X/pOd2Wioki/DFlkIJJtB8+bygdcPPeZ8LxSi3 3nc+VOAC01QJVve79rWhpR7Ku5/hNHNScJLbTSTy2FWu4oO+ufx221n7D9bswYGV vQ5LqsVZb/m69uWyWNMcIxbsTGT4eDQgxpZPkHjXV22iE7ywD8+0moVT1CUyZQBw OK0vEBQJC/8tcm1c6OrC5L5I8lGfssa+0ILsM5nd4QEkheWZh7kpqf9O8dpt+Xc4 quYvCmuYttzHfc4OY2hkCHDqO/YHlxsVteFQ1Ql0vkpWyS+z0OoFLXS49lmDp39Z Jav0Mivb/UftaQ4Dif/JL5dW1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCTagKB j2GTVvfE0H2sedeCACibMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCumDFRtXa+kIQy3etRK1AoaQHxFD1yYLlJKb3MR7BXtTk7mTVIFR/ d7M4jtOibiouxICfG1L1/StLHWRzB7JnWlBU6zOQeisiXnRbxRS6srLnzWjycC6a 46ME+n+68UYM/mwqliM+Fvghj7FOhVc5lWaW1AHbCKQxLhie5zFphLlzjNWvQepW XIVTKQkeF9H573ZQV4R04W82mB2AsyonbMFKR7PpkpvmFa0Fb30MKpYkIzPQUj2e dWqz4GBOMeCfAhlYi0Je5di8gd1xhNtX92aWtsdKK5tjBkXnXjymxIZEzwYdR2VE P77eOiLGeWi3gdhFvbDAZrsiybN4ZhHJ -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:50 2025 by rpki-client