$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: 3XNM1nTtXj5xYqKoO9WrMfcecOrgcPLkwc3HmkMgxgs= Subject key identifier: 32:D9:03:8D:50:F0:50:B4:8C:8D:9D:B2:D7:C8:D2:3A:93:E1:4D:77 Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: 70 Signing time: Sat 23 Aug 2025 07:09:54 +0000 Manifest this update: Sat 23 Aug 2025 07:09:54 +0000 Manifest next update: Sat 30 Aug 2025 07:09:54 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: c+ocrlfWU7f6MRio+i/75FACPe1huQkjgXNimh02O3A=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: FjkNGrENcSIvFxBilAn18yNNIFNeTLoQBLQNAUhyMb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Aug 23 07:09:54 2025 GMT Not After : Aug 30 07:09:54 2025 GMT Subject: CN=68a96942-0706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:59:55:c3:48:60:58:c7:17:4c:5f:4e:c7: 3e:4b:e4:dc:ca:9c:0e:2b:e9:23:8b:96:95:6f:42: 53:7b:44:2a:28:76:08:64:e3:b8:8a:a3:27:a9:92: 9c:da:14:4c:c9:e1:e3:14:a2:bc:f3:23:7c:e8:89: 46:fc:7e:bb:a1:bf:9d:0d:8b:b0:ee:af:0e:46:a0: 5b:50:90:62:c7:d5:4d:8b:7b:5b:57:94:16:a9:ad: 06:68:56:aa:b7:06:06:56:35:15:62:a6:04:5f:df: 8f:b5:0e:04:95:de:b2:2d:f1:28:f6:0d:f0:7b:33: 1f:1a:49:44:3a:75:d4:a6:80:87:8d:80:68:aa:20: af:de:96:7c:11:b0:73:67:3d:86:6e:87:8e:f8:c9: 10:ea:68:90:ec:21:fd:84:10:83:76:26:2d:0b:ea: 8e:96:58:7e:3e:4e:e4:f2:e2:79:12:74:f7:35:78: 56:ad:48:ba:e7:af:86:c4:b1:dd:1e:4f:f8:28:0d: f1:25:ad:8e:88:8d:19:fd:f4:be:1b:19:3a:52:c8: 73:79:67:c9:e6:41:d9:ba:ba:78:e4:bb:cc:b2:c0: e3:f4:61:aa:31:eb:6d:77:0e:21:7f:61:29:f6:bf: 96:d2:f5:fb:63:81:3f:ab:d7:07:b1:8e:88:49:e9: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D9:03:8D:50:F0:50:B4:8C:8D:9D:B2:D7:C8:D2:3A:93:E1:4D:77 X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ae:ed:0d:2b:8d:3a:0f:88:9a:cb:95:ed:01:d6:ec:0b:57: e9:a0:a6:7c:90:a6:28:bb:5b:f9:44:d0:9b:33:fa:d2:5e:fd: 4b:5c:37:19:01:10:f8:7f:75:6a:2d:95:6d:c9:ff:1a:d5:cf: 74:bf:0d:b0:aa:dd:31:6b:d2:5b:0c:bc:06:10:58:74:aa:ea: 92:f7:61:83:a1:a3:f7:1d:c9:b4:37:36:fa:ee:d1:85:1a:75: 77:ba:cc:28:76:5a:c0:f4:e5:48:bb:f2:3a:19:cc:1f:ce:64: 59:2e:2a:60:14:87:3e:14:e3:74:e8:c5:9c:07:4a:5a:2f:76: b8:2f:a7:c7:dc:a6:5b:f5:e1:e9:b9:5d:bc:45:9b:53:0d:89: ba:12:d8:a2:bf:9a:9e:8c:29:93:d1:4b:47:aa:b4:1b:d0:1b: e7:79:bb:b7:3d:eb:36:60:59:ec:a9:3c:85:f5:04:7e:af:b5: bd:a8:02:6b:a5:a9:30:55:f6:e3:7a:07:1d:d3:5c:1f:c8:28: 4d:9f:24:25:ea:7f:bc:38:45:10:2e:86:08:cd:7b:44:32:da: 1d:a4:9e:40:98:0b:f6:96:d9:5e:60:0f:95:93:a1:6f:d9:18: 6a:0b:ac:28:24:c8:78:11:17:1f:fc:b5:35:5f:2f:e5:da:8b: 7c:60:68:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzE2MTExMC8GA1UEBRMoQjQ5QjJCMTFEMzg3NkRFQ0RFMTNGNUU4RjU5RTY0MUE3 RDA5M0ZCOTAeFw0yNTA4MjMwNzA5NTRaFw0yNTA4MzAwNzA5NTRaMBgxFjAUBgNV BAMTDTY4YTk2OTQyLTA3MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQP1lVw0hgWMcXTF9Oxz5L5NzKnA4r6SOLlpVvQlN7RCoodghk47iKoyepkpza FEzJ4eMUorzzI3zoiUb8fruhv50Ni7Durw5GoFtQkGLH1U2Le1tXlBaprQZoVqq3 BgZWNRVipgRf34+1DgSV3rIt8Sj2DfB7Mx8aSUQ6ddSmgIeNgGiqIK/elnwRsHNn PYZuh474yRDqaJDsIf2EEIN2Ji0L6o6WWH4+TuTy4nkSdPc1eFatSLrnr4bEsd0e T/goDfElrY6IjRn99L4bGTpSyHN5Z8nmQdm6unjku8yywOP0Yaox6213DiF/YSn2 v5bS9ftjgT+r1wexjohJ6V1fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMtkDjVDw ULSMjZ2y18jSOpPhTXcwHwYDVR0jBBgwFoAUtJsrEdOHbezeE/Xo9Z5kGn0JP7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMTYxLzcxMzJFRjlBRDkw NzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEpzckVkT0hiZXplRV9YbzlaNWtHbjBKUDdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MTYxLzcxMzJFRjlBRDkwNzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6 ZUVfWG85WjVrR24wSlA3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEGu7Q0rjToPiJrLle0B1uwLV+mgpnyQpii7W/lE0Jsz+tJe/UtcNxkB EPh/dWotlW3J/xrVz3S/DbCq3TFr0lsMvAYQWHSq6pL3YYOho/cdybQ3Nvru0YUa dXe6zCh2WsD05Ui78joZzB/OZFkuKmAUhz4U43ToxZwHSlovdrgvp8fcplv14em5 XbxFm1MNiboS2KK/mp6MKZPRS0eqtBvQG+d5u7c96zZgWeypPIX1BH6vtb2oAmul qTBV9uN6Bx3TXB/IKE2fJCXqf7w4RRAuhgjNe0Qy2h2knkCYC/aW2V5gD5WToW/Z GGoLrCgkyHgRFx/8tTVfL+Xai3xgaGI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:46:19 2025 by rpki-client