$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: wo/1f+MCgTNSGC9SbjQF1gtJruJWYSylCRcrnHXjvkk= Subject key identifier: 10:B4:48:A0:4F:B8:F6:6D:3F:2B:AC:AB:89:4A:8B:22:1F:19:CC:52 Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: 56 Signing time: Thu 03 Jul 2025 07:28:56 +0000 Manifest this update: Thu 03 Jul 2025 07:28:56 +0000 Manifest next update: Thu 10 Jul 2025 07:28:56 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: MtR/bpDplkN+HZ5LKDsr7cno+npPgabYSwrkpYPPxRU=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: FjkNGrENcSIvFxBilAn18yNNIFNeTLoQBLQNAUhyMb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Jul 3 07:28:56 2025 GMT Not After : Jul 10 07:28:56 2025 GMT Subject: CN=68663138-ddeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:9e:55:7a:fd:f0:db:21:11:46:cb:91:91: 3a:b8:7b:2f:64:1c:78:e1:38:2b:dc:fd:12:e7:17: fa:12:61:e6:3b:e9:d6:28:52:75:90:5d:da:36:2a: 11:95:ad:62:27:23:c9:59:ce:b2:f8:4d:20:f4:25: 1c:44:8a:d8:90:13:bc:66:42:3c:3a:3c:28:9d:cf: d2:3e:73:81:a6:28:c0:f3:5c:b0:7a:55:24:d5:f5: 01:68:eb:2f:73:f2:38:ba:38:36:a9:03:e2:c8:cf: 54:36:b7:b2:cc:8f:98:61:22:58:e9:68:0f:92:56: 0c:11:b2:8a:38:15:e2:0f:ff:b3:32:cd:59:9a:b1: f5:fc:a8:d8:07:df:21:38:b5:68:e7:93:75:10:83: 8b:87:05:38:ab:d3:71:7d:6d:31:2f:85:82:70:11: dd:98:0e:4b:28:76:3d:9e:b4:45:97:4c:6f:42:2a: 38:8b:1b:25:44:3b:00:58:c1:26:57:f2:66:95:53: a7:ad:5f:42:4c:a1:3f:79:77:4c:92:74:7f:8b:58: 7c:6c:40:54:00:a3:8f:6d:28:a3:f8:c8:cd:f7:6e: b4:38:86:07:3b:74:e2:d4:88:08:56:9f:41:c3:a3: 2e:86:d6:72:86:67:2f:46:60:48:d5:87:26:54:fb: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B4:48:A0:4F:B8:F6:6D:3F:2B:AC:AB:89:4A:8B:22:1F:19:CC:52 X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b8:5e:78:c0:18:b1:76:5e:85:c8:19:e0:17:60:e3:1b:9f: 59:28:c9:9a:e5:42:d9:18:fb:16:50:e6:59:f9:6b:5f:cb:4f: e1:4c:cc:3d:ac:2e:da:7a:6f:e8:cf:c1:d1:af:7b:1e:ee:dd: fe:8b:ca:ae:09:ed:44:7f:c5:c1:46:e3:e2:1c:49:ca:50:83: d4:94:77:85:a9:99:86:f9:f9:e3:ab:51:7c:f3:6a:97:93:de: 15:bd:1b:5d:2b:9c:40:c3:36:7f:61:be:a4:6b:ac:6f:cc:07: f1:6c:8a:d0:b2:fa:fd:ce:66:ba:86:4b:41:94:35:59:6d:09: 00:87:3d:03:b0:f9:fc:a3:06:50:29:b9:25:c9:5a:67:f2:cb: 25:b6:27:15:ca:2e:43:81:cf:8c:49:72:47:80:4f:4b:b7:eb: f4:23:c9:68:fc:70:e7:96:ea:46:ad:8f:db:c5:10:48:1f:7c: 90:1f:55:b2:62:46:db:25:9d:99:a4:eb:83:1d:36:99:22:64: 10:84:1e:f9:39:92:a2:fb:18:1c:df:21:d5:27:63:aa:1c:80: db:b2:e1:26:69:1f:b0:05:50:ee:e3:24:6a:18:3b:85:6a:63: 3f:01:0d:65:ad:b4:b3:10:94:9c:37:04:a0:09:25:e6:e4:28: a5:49:59:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzE2MTExMC8GA1UEBRMoQjQ5QjJCMTFEMzg3NkRFQ0RFMTNGNUU4RjU5RTY0MUE3 RDA5M0ZCOTAeFw0yNTA3MDMwNzI4NTZaFw0yNTA3MTAwNzI4NTZaMBgxFjAUBgNV BAMTDTY4NjYzMTM4LWRkZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDUJ5Vev3w2yERRsuRkTq4ey9kHHjhOCvc/RLnF/oSYeY76dYoUnWQXdo2KhGV rWInI8lZzrL4TSD0JRxEitiQE7xmQjw6PCidz9I+c4GmKMDzXLB6VSTV9QFo6y9z 8ji6ODapA+LIz1Q2t7LMj5hhIljpaA+SVgwRsoo4FeIP/7MyzVmasfX8qNgH3yE4 tWjnk3UQg4uHBTir03F9bTEvhYJwEd2YDksodj2etEWXTG9CKjiLGyVEOwBYwSZX 8maVU6etX0JMoT95d0ySdH+LWHxsQFQAo49tKKP4yM33brQ4hgc7dOLUiAhWn0HD oy6G1nKGZy9GYEjVhyZU+3uDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUELRIoE+4 9m0/K6yriUqLIh8ZzFIwHwYDVR0jBBgwFoAUtJsrEdOHbezeE/Xo9Z5kGn0JP7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMTYxLzcxMzJFRjlBRDkw NzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEpzckVkT0hiZXplRV9YbzlaNWtHbjBKUDdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MTYxLzcxMzJFRjlBRDkwNzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6 ZUVfWG85WjVrR24wSlA3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACu4XnjAGLF2XoXIGeAXYOMbn1koyZrlQtkY+xZQ5ln5a1/LT+FMzD2s Ltp6b+jPwdGvex7u3f6Lyq4J7UR/xcFG4+IcScpQg9SUd4WpmYb5+eOrUXzzapeT 3hW9G10rnEDDNn9hvqRrrG/MB/FsitCy+v3OZrqGS0GUNVltCQCHPQOw+fyjBlAp uSXJWmfyyyW2JxXKLkOBz4xJckeAT0u36/QjyWj8cOeW6katj9vFEEgffJAfVbJi RtslnZmk64MdNpkiZBCEHvk5kqL7GBzfIdUnY6ocgNuy4SZpH7AFUO7jJGoYO4Vq Yz8BDWWttLMQlJw3BKAJJebkKKVJWbU= -----END CERTIFICATE-----Generated at Thu Jul 3 21:21:22 2025 by rpki-client