$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: KL9EAuIRiRDfM2BO9DBDADDNFzDOpEzdZwD1Up/dzio= Subject key identifier: CC:5D:20:E5:03:86:C3:21:87:BD:00:8C:5B:7A:80:D4:39:4B:CB:27 Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 3471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: 9F00 Signing time: Mon 28 Apr 2025 14:32:27 +0000 Manifest this update: Mon 28 Apr 2025 14:32:27 +0000 Manifest next update: Mon 05 May 2025 14:32:27 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: d4aRBPVsybFPt/Hqbi8PRyNWVfOq7sxLSxGah7l8PPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13425 (0x3471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Apr 28 14:32:27 2025 GMT Not After : May 5 14:32:27 2025 GMT Subject: CN=680f917b-c1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:00:ee:a7:fc:2e:25:42:7e:97:6f:60:9e: 57:f9:05:ef:e2:69:ae:83:e3:e2:d4:26:ff:53:2e: 2b:3e:b8:41:c5:ff:ff:14:69:b9:2f:39:45:1a:99: bf:8f:2f:a7:70:ff:fc:26:4f:63:aa:82:48:0d:ba: 34:1a:a9:bf:e2:69:49:87:1d:1a:f9:cf:21:aa:5f: 8b:00:e0:9a:41:34:bb:fd:9d:b4:7e:0a:dc:6c:38: 8d:7a:62:36:13:2d:4e:ae:9a:bb:12:02:53:e9:a9: db:f2:23:d7:49:cf:82:ae:d4:23:3d:9d:d5:a0:aa: 9f:21:4b:7e:2b:4d:bf:a2:f8:3f:3f:fd:35:4f:13: 1b:ce:2f:86:72:e8:90:dc:cb:d0:59:7e:3b:ef:55: 1d:44:10:55:3d:c4:29:71:d9:cb:9d:1a:30:e9:e7: 7b:24:a8:ad:28:b8:88:ab:b6:ad:74:43:50:12:16: be:52:df:28:cd:9b:b8:57:af:55:b3:9c:f6:ff:ae: 18:97:be:be:ff:1e:34:2d:63:61:f9:50:43:43:14: 0b:46:d8:4d:d9:57:30:15:3a:c3:f5:6b:da:bf:19: 15:99:9f:6d:04:89:dd:21:01:80:79:28:51:c8:3b: 34:64:8c:bc:6e:af:3b:02:d3:9e:11:b7:93:99:64: 9a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5D:20:E5:03:86:C3:21:87:BD:00:8C:5B:7A:80:D4:39:4B:CB:27 X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:fb:71:8a:9e:6e:86:fd:dd:b0:be:bc:7f:2d:bd:c4:a8:33: 06:6d:0b:e3:df:92:22:77:0c:ab:3c:af:3a:50:51:fc:18:a9: 69:38:bb:7d:a7:5a:33:a2:3d:1f:fb:b5:59:ca:c5:ad:4e:3a: 98:2e:f9:09:61:6f:59:e8:32:05:27:92:cf:3a:f0:4e:2d:8b: ff:c0:cc:3d:85:11:99:61:45:b5:42:ef:33:d9:5d:fb:85:0a: cb:c0:f7:6d:bc:36:3f:50:c1:84:1a:7a:9a:13:6e:d8:d6:97: 6d:3e:0f:f0:de:d1:26:00:6f:0c:f9:18:fa:f6:9e:27:55:9c: e1:90:0d:ce:21:54:58:8f:64:9b:45:8c:34:7a:ea:8b:38:ce: 87:06:51:8f:a6:05:c6:10:6a:9c:e7:93:4b:ba:bd:7f:f7:11: b4:2e:d9:9f:10:54:13:6a:86:a8:aa:d3:ca:da:d6:16:4c:6e: 15:14:0f:ce:86:02:e7:ca:5c:06:11:e8:53:61:9d:3e:d2:32: 65:e3:52:75:dc:8f:a2:5e:ad:d5:b6:bb:8f:6b:71:b7:57:4e: 8b:c4:6e:7b:7f:72:25:dc:c7:94:8c:9f:98:43:5c:56:df:b5: 34:2e:be:7f:16:c3:9b:79:3d:99:25:93:f5:64:da:60:91:fd: 30:bb:6c:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjUwNDI4MTQzMjI3WhcNMjUwNTA1MTQzMjI3WjAYMRYwFAYD VQQDEw02ODBmOTE3Yi1jMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEoA7qf8LiVCfpdvYJ5X+QXv4mmug+Pi1Cb/Uy4rPrhBxf//FGm5LzlFGpm/ jy+ncP/8Jk9jqoJIDbo0Gqm/4mlJhx0a+c8hql+LAOCaQTS7/Z20fgrcbDiNemI2 Ey1Orpq7EgJT6anb8iPXSc+CrtQjPZ3VoKqfIUt+K02/ovg/P/01TxMbzi+GcuiQ 3MvQWX4771UdRBBVPcQpcdnLnRow6ed7JKitKLiIq7atdENQEha+Ut8ozZu4V69V s5z2/64Yl76+/x40LWNh+VBDQxQLRthN2VcwFTrD9WvavxkVmZ9tBIndIQGAeShR yDs0ZIy8bq87AtOeEbeTmWSaaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxdIOUD hsMhh70AjFt6gNQ5S8snMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC++3GKnm6G/d2wvrx/Lb3EqDMGbQvj35IidwyrPK86UFH8GKlpOLt9 p1ozoj0f+7VZysWtTjqYLvkJYW9Z6DIFJ5LPOvBOLYv/wMw9hRGZYUW1Qu8z2V37 hQrLwPdtvDY/UMGEGnqaE27Y1pdtPg/w3tEmAG8M+Rj69p4nVZzhkA3OIVRYj2Sb RYw0euqLOM6HBlGPpgXGEGqc55NLur1/9xG0LtmfEFQTaoaoqtPK2tYWTG4VFA/O hgLnylwGEehTYZ0+0jJl41J13I+iXq3VtruPa3G3V06LxG57f3Il3MeUjJ+YQ1xW 37U0Lr5/FsObeT2ZJZP1ZNpgkf0wu2zc -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:03 2025 by rpki-client on console.sobornost.net