$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: bJEHcYuj9spQQDzdqpxOXDkAPMzmhDQX/nDpbW4V7ew= Subject key identifier: 30:4A:DE:91:65:62:35:39:18:2A:B0:91:3E:C3:5F:13:CE:BF:90:9D Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: 8D Signing time: Sun 19 Oct 2025 09:50:58 +0000 Manifest this update: Sun 19 Oct 2025 09:50:58 +0000 Manifest next update: Sun 26 Oct 2025 09:50:58 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: Iplh84ojOB2+ULNoFepRqn8NAwQU1+EMpbca2TsIlDo=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: FjkNGrENcSIvFxBilAn18yNNIFNeTLoQBLQNAUhyMb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Oct 19 09:50:58 2025 GMT Not After : Oct 26 09:50:58 2025 GMT Subject: CN=68f4b482-5097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:8e:22:24:bf:24:85:97:e4:2e:5a:9d:6b: 77:63:47:53:a8:7e:9a:83:af:90:c5:74:e6:3d:90: c7:bf:dc:5f:9a:ee:91:b3:73:eb:b1:bd:91:dc:bf: 1d:97:b5:4f:28:2d:2d:a6:44:9d:77:05:59:5f:c0: ba:a0:bc:28:38:2a:49:52:f7:57:bd:c4:4c:d0:13: 72:4b:97:7a:8c:c0:dc:ed:0a:a5:44:b3:ef:fc:b5: 2d:86:25:a1:18:5c:f2:4b:9d:d1:fa:77:36:61:40: 33:b0:f1:90:17:1f:14:52:7d:1d:b1:e1:4c:de:19: 65:3c:92:3c:3f:a4:84:f9:b8:85:6b:77:6c:10:14: 8d:d3:a2:77:dd:77:5f:80:7f:d4:b5:54:a3:18:ae: 9d:a4:6c:1a:af:88:51:2b:c1:f0:5c:16:7f:a8:1b: 78:90:c0:98:af:6d:f0:d7:2a:d7:0f:76:26:45:15: 44:1d:4a:c6:86:34:29:c3:55:f5:a3:97:34:cc:b3: 64:a2:61:e8:09:a7:33:bb:c2:82:1b:27:89:9e:57: 6e:db:df:82:27:40:16:ef:4d:7c:8b:e5:45:cc:94: 35:c8:c4:46:99:d4:3c:36:9e:59:38:5b:61:79:c3: ff:1e:6c:ec:f6:19:69:ca:e8:56:9d:4e:c8:2a:dc: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:DE:91:65:62:35:39:18:2A:B0:91:3E:C3:5F:13:CE:BF:90:9D X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b9:47:a3:a2:21:ba:4d:e4:94:e5:ff:45:cc:83:e2:b2:b3: fe:8c:06:01:54:b6:82:1c:c1:49:d0:a2:99:f0:2f:ee:2b:df: cf:d2:00:c8:ff:f0:af:93:85:7c:4a:af:4f:9f:4e:16:0b:f0: 53:ec:98:7f:8c:72:b2:26:4a:c5:2c:b1:cc:14:10:b4:04:dc: 18:39:e5:f6:bb:82:9d:04:18:e4:3f:52:cc:2a:e3:1f:2b:55: 96:aa:26:af:39:4e:0b:80:54:fd:32:ed:dc:5b:b4:31:11:36: ab:cb:3b:49:3f:f2:0a:d9:68:03:4d:5e:76:06:9d:99:af:69: c1:de:f5:90:ff:5d:a0:a6:85:0d:12:c7:7d:64:f0:f8:c0:c0: 53:d4:da:8e:93:6b:26:8f:e3:a3:04:f1:ba:10:d9:b8:f8:6b: 0b:cb:1c:3c:55:48:fe:fb:62:45:fd:7e:d8:3b:5f:9a:db:cd: 0b:da:77:13:39:bf:41:ad:ba:21:63:69:ec:c4:61:4b:d0:49: 57:70:5f:ea:e7:4d:28:f4:6f:d5:0f:17:51:d3:d3:1a:24:3c: f7:14:69:9b:9a:59:db:f8:f3:28:6b:91:90:49:14:97:08:c7: ff:bd:ef:81:77:d7:78:2c:12:7d:4c:b2:c6:b4:f1:d8:f5:03: 42:3d:cf:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNjExMTAvBgNVBAUTKEI0OUIyQjExRDM4NzZERUNERTEzRjVFOEY1OUU2NDFB N0QwOTNGQjkwHhcNMjUxMDE5MDk1MDU4WhcNMjUxMDI2MDk1MDU4WjAYMRYwFAYD VQQDEw02OGY0YjQ4Mi01MDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12uOIiS/JIWX5C5anWt3Y0dTqH6ag6+QxXTmPZDHv9xfmu6Rs3Prsb2R3L8d l7VPKC0tpkSddwVZX8C6oLwoOCpJUvdXvcRM0BNyS5d6jMDc7QqlRLPv/LUthiWh GFzyS53R+nc2YUAzsPGQFx8UUn0dseFM3hllPJI8P6SE+biFa3dsEBSN06J33Xdf gH/UtVSjGK6dpGwar4hRK8HwXBZ/qBt4kMCYr23w1yrXD3YmRRVEHUrGhjQpw1X1 o5c0zLNkomHoCaczu8KCGyeJnldu29+CJ0AW7018i+VFzJQ1yMRGmdQ8Np5ZOFth ecP/Hmzs9hlpyuhWnU7IKtyRWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBK3pFl YjU5GCqwkT7DXxPOv5CdMB8GA1UdIwQYMBaAFLSbKxHTh23s3hP16PWeZBp9CT+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE2MS83MTMyRUY5QUQ5 MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJlemVFX1hvOVo1a0duMEpQ N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzE2MS83MTMyRUY5QUQ5MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJl emVFX1hvOVo1a0duMEpQN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfuUejoiG6TeSU5f9FzIPisrP+jAYBVLaCHMFJ0KKZ8C/uK9/P0gDI //Cvk4V8Sq9Pn04WC/BT7Jh/jHKyJkrFLLHMFBC0BNwYOeX2u4KdBBjkP1LMKuMf K1WWqiavOU4LgFT9Mu3cW7QxETaryztJP/IK2WgDTV52Bp2Zr2nB3vWQ/12gpoUN Esd9ZPD4wMBT1NqOk2smj+OjBPG6ENm4+GsLyxw8VUj++2JF/X7YO1+a280L2ncT Ob9BrbohY2nsxGFL0ElXcF/q500o9G/VDxdR09MaJDz3FGmbmlnb+PMoa5GQSRSX CMf/ve+Bd9d4LBJ9TLLGtPHY9QNCPc+N -----END CERTIFICATE-----Generated at Mon Oct 20 17:28:37 2025 by rpki-client