$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: r1h3pevocuXJxGu2R4OV/2AAc3LdwwyWzSVBuJd0zBc= Subject key identifier: BA:CD:F7:C1:B1:32:F1:5D:19:9C:25:78:79:A5:34:79:4F:FF:EC:77 Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 34D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: A07F Signing time: Sun 02 Nov 2025 14:29:32 +0000 Manifest this update: Sun 02 Nov 2025 14:29:31 +0000 Manifest next update: Sun 09 Nov 2025 14:29:31 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: KA33u0SVHFJU7CpW+AbXmmqsY+o+DZcoEr+Wt52srLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13520 (0x34d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Nov 2 14:29:31 2025 GMT Not After : Nov 9 14:29:31 2025 GMT Subject: CN=69076acc-bd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:b5:4a:e0:85:93:a1:08:0b:11:02:9a:e4: 88:a6:09:67:34:8a:15:e9:64:b5:18:63:8f:72:6b: dd:e2:18:85:ab:6e:89:1e:18:88:08:42:c0:b6:7f: 9e:02:43:f2:d0:09:38:6b:7c:2e:1a:5e:e9:9d:a9: 8e:1c:cc:f4:df:0c:8a:a5:72:31:82:53:19:28:13: 6f:5b:3f:48:17:84:cd:0d:87:e6:af:72:7d:83:fb: 13:e2:c6:26:b6:fb:bd:53:50:90:f3:f0:e3:98:b3: 17:b9:a0:82:2f:1d:3c:fc:34:34:3c:7c:57:cf:c2: 8c:7b:b9:6b:12:a5:7e:f4:02:2e:e6:60:ef:59:31: cf:b2:4d:32:e0:18:6e:2b:55:2e:cf:f7:13:81:c9: 11:90:5e:c3:9e:a8:1e:61:34:80:c2:27:13:d8:22: 06:32:86:4a:87:1a:38:08:bb:d3:00:74:0d:e4:b0: 19:1e:e5:81:23:89:8f:ce:93:fe:3e:21:72:07:df: c0:d6:6e:cb:40:61:3c:4a:22:ec:07:46:11:dc:32: 4d:3a:fd:cf:51:1e:2a:de:82:13:7d:27:9b:02:4d: 92:26:90:4a:3f:b3:3c:cd:1b:16:55:3a:cb:54:0c: 6a:30:49:4b:1d:d5:44:9b:85:00:dc:d8:8c:42:ca: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CD:F7:C1:B1:32:F1:5D:19:9C:25:78:79:A5:34:79:4F:FF:EC:77 X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:41:60:d5:cd:6c:87:50:be:e7:43:9d:15:1b:a3:eb:05:01: fd:c8:4e:2e:e6:8d:c2:83:78:0f:54:5a:3b:8f:1a:7b:5a:0e: 5a:7b:1a:94:97:d5:50:55:fa:dd:8c:6a:f6:35:9d:a5:1d:7b: fd:f0:c0:33:f7:bd:60:b7:36:de:04:fa:66:e4:3c:3c:70:b7: ed:50:73:90:b3:4b:2c:49:a6:12:3a:1f:a3:74:b3:57:54:4b: 79:8c:41:c9:37:41:a8:28:e5:09:19:d0:cf:73:cc:7c:8b:90: 05:3a:cf:75:62:21:33:70:d5:39:0f:ba:bd:35:2c:4e:28:c4: 2a:69:8e:f3:e2:86:45:e0:1a:63:1d:c5:a2:f3:5a:04:bb:d3: 9f:27:5f:b8:13:35:a3:8b:96:1c:18:29:3f:11:85:e5:64:9e: 11:2a:01:db:29:e9:ad:c8:19:44:22:15:e8:47:bf:39:ca:c3: 65:a7:94:84:67:10:bf:bc:bd:7f:f4:e2:74:3c:ab:5c:1f:6b: d0:92:90:32:fd:c8:9f:80:b5:c6:b6:73:d4:54:8a:60:58:5c: c0:d6:f1:9e:00:db:38:bd:92:5a:f6:ce:2e:2e:26:9a:fb:83: b4:cb:8e:ab:86:3f:0b:01:7a:4d:0b:9b:fa:5e:57:c0:4b:30: 0d:72:ab:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUxMTAyMTQyOTMxWhcNMjUxMTA5MTQyOTMxWjAYMRYwFAYD VQQDEw02OTA3NmFjYy1iZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj+1SuCFk6EICxECmuSIpglnNIoV6WS1GGOPcmvd4hiFq26JHhiICELAtn+e AkPy0Ak4a3wuGl7pnamOHMz03wyKpXIxglMZKBNvWz9IF4TNDYfmr3J9g/sT4sYm tvu9U1CQ8/DjmLMXuaCCLx08/DQ0PHxXz8KMe7lrEqV+9AIu5mDvWTHPsk0y4Bhu K1Uuz/cTgckRkF7DnqgeYTSAwicT2CIGMoZKhxo4CLvTAHQN5LAZHuWBI4mPzpP+ PiFyB9/A1m7LQGE8SiLsB0YR3DJNOv3PUR4q3oITfSebAk2SJpBKP7M8zRsWVTrL VAxqMElLHdVEm4UA3NiMQsrAiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrN98Gx MvFdGZwleHmlNHlP/+x3MB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWQWDVzWyHUL7nQ50VG6PrBQH9yE4u5o3Cg3gPVFo7jxp7Wg5aexqU l9VQVfrdjGr2NZ2lHXv98MAz971gtzbeBPpm5Dw8cLftUHOQs0ssSaYSOh+jdLNX VEt5jEHJN0GoKOUJGdDPc8x8i5AFOs91YiEzcNU5D7q9NSxOKMQqaY7z4oZF4Bpj HcWi81oEu9OfJ1+4EzWji5YcGCk/EYXlZJ4RKgHbKemtyBlEIhXoR785ysNlp5SE ZxC/vL1/9OJ0PKtcH2vQkpAy/cifgLXGtnPUVIpgWFzA1vGeANs4vZJa9s4uLiaa +4O0y46rhj8LAXpNC5v6XlfASzANcqvN -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:21 2025 by rpki-client