$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: dPrdoVwOEOOdBw6FkB8Uq2huyYbx05NFagh1n58QQq4= Subject key identifier: 04:84:13:06:16:BC:45:72:EB:05:80:6C:EB:28:D9:35:C7:3E:C1:6D Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: 77 Signing time: Fri 05 Sep 2025 07:19:31 +0000 Manifest this update: Fri 05 Sep 2025 07:19:31 +0000 Manifest next update: Fri 12 Sep 2025 07:19:31 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: pLp64iZH6ZfEMse72rYjelrhTymPenvcQBr+Am+S9S8=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: FjkNGrENcSIvFxBilAn18yNNIFNeTLoQBLQNAUhyMb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Sep 5 07:19:31 2025 GMT Not After : Sep 12 07:19:31 2025 GMT Subject: CN=68ba8f03-7079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:b5:3e:ea:3f:48:c3:b3:b7:ed:2f:61:1b: 1c:ab:7d:c1:ec:49:c9:16:c7:f7:a0:d3:7d:89:9c: 9e:6d:77:57:3d:6e:d7:e7:71:ff:8e:b1:c6:f1:f7: 93:9a:16:22:3f:dd:40:b4:33:db:52:65:05:95:35: 33:4b:75:83:c3:14:3f:ea:14:4f:e4:9a:20:0e:3c: 18:14:ea:34:cb:b6:ab:b5:7b:f0:95:22:eb:80:de: 15:6c:e5:e0:45:49:91:3c:3b:bc:84:3f:2a:88:24: e0:72:ea:e3:21:59:0b:06:44:10:e5:b1:59:e7:ec: 9b:45:a5:fb:08:3e:4d:a5:f1:74:05:62:ac:3a:ba: 9b:15:22:16:89:77:bd:c7:50:74:09:90:83:68:8a: 4b:9f:d9:3a:52:0c:92:f6:6e:4b:e0:65:e0:68:ca: 41:31:df:c0:7b:44:53:1f:94:a6:04:e5:bb:88:52: d4:94:bb:6f:19:56:16:a4:8a:6b:97:df:f2:70:90: e1:3e:2c:79:6c:ee:69:a5:cb:bc:d0:2b:66:71:e3: 49:43:2b:91:e3:24:d6:ad:29:b6:0e:c2:dc:e9:ec: 71:56:89:b2:98:e9:b7:2c:40:58:a8:ed:e5:47:0e: c6:47:18:e4:e0:0c:a9:24:51:74:fa:2b:ef:4e:85: bd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:84:13:06:16:BC:45:72:EB:05:80:6C:EB:28:D9:35:C7:3E:C1:6D X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1e:9a:e8:f0:f2:0b:4e:7c:4b:96:92:c4:a2:f2:c5:a4:79: c9:ec:dd:bb:e4:93:30:50:24:c8:96:fa:33:7d:fd:28:5a:28: 82:a9:4e:62:2b:e1:8e:e7:88:63:69:54:77:10:2f:b9:ca:15: 1d:2a:4a:16:94:61:96:d9:6c:15:d8:cd:7a:63:80:34:d2:b0: b2:69:ff:4c:e1:82:8e:e8:59:eb:10:22:c1:09:75:34:e0:95: 0f:5f:89:fd:30:08:5e:c8:e5:3a:0f:76:c8:9f:e2:3a:45:a0: 3c:c2:e0:90:ef:1d:66:1f:d8:22:e4:18:c2:4f:19:80:8e:76: a7:ac:49:dc:d2:63:3b:81:a7:b2:3b:fb:dc:ac:2e:f8:e4:1b: d9:36:c6:5a:d8:47:74:bd:d0:6f:b9:73:1e:bd:ee:38:78:b0: ae:31:12:30:ee:30:86:44:44:21:d4:34:43:dd:a4:24:8b:b7: 10:a6:f4:4d:bd:a3:4b:bc:39:bb:bd:a4:b1:36:84:58:e3:e6: 28:04:7c:db:56:75:60:83:1f:60:60:d4:1c:bf:96:33:97:8a: cc:1d:e0:9d:44:cd:22:03:4e:a7:83:ca:67:51:82:d0:e4:51: ba:ec:39:24:8f:3c:51:fc:24:b2:56:a4:85:f1:39:53:8e:b9: 4b:64:1f:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzE2MTExMC8GA1UEBRMoQjQ5QjJCMTFEMzg3NkRFQ0RFMTNGNUU4RjU5RTY0MUE3 RDA5M0ZCOTAeFw0yNTA5MDUwNzE5MzFaFw0yNTA5MTIwNzE5MzFaMBgxFjAUBgNV BAMTDTY4YmE4ZjAzLTcwNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChcLU+6j9Iw7O37S9hGxyrfcHsSckWx/eg032JnJ5td1c9btfncf+Oscbx95Oa FiI/3UC0M9tSZQWVNTNLdYPDFD/qFE/kmiAOPBgU6jTLtqu1e/CVIuuA3hVs5eBF SZE8O7yEPyqIJOBy6uMhWQsGRBDlsVnn7JtFpfsIPk2l8XQFYqw6upsVIhaJd73H UHQJkINoikuf2TpSDJL2bkvgZeBoykEx38B7RFMflKYE5buIUtSUu28ZVhakimuX 3/JwkOE+LHls7mmly7zQK2Zx40lDK5HjJNatKbYOwtzp7HFWibKY6bcsQFio7eVH DsZHGOTgDKkkUXT6K+9Ohb2vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBIQTBha8 RXLrBYBs6yjZNcc+wW0wHwYDVR0jBBgwFoAUtJsrEdOHbezeE/Xo9Z5kGn0JP7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMTYxLzcxMzJFRjlBRDkw NzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEpzckVkT0hiZXplRV9YbzlaNWtHbjBKUDdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MTYxLzcxMzJFRjlBRDkwNzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6 ZUVfWG85WjVrR24wSlA3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4emujw8gtOfEuWksSi8sWkecns3bvkkzBQJMiW+jN9/ShaKIKpTmIr 4Y7niGNpVHcQL7nKFR0qShaUYZbZbBXYzXpjgDTSsLJp/0zhgo7oWesQIsEJdTTg lQ9fif0wCF7I5ToPdsif4jpFoDzC4JDvHWYf2CLkGMJPGYCOdqesSdzSYzuBp7I7 +9ysLvjkG9k2xlrYR3S90G+5cx697jh4sK4xEjDuMIZERCHUNEPdpCSLtxCm9E29 o0u8Obu9pLE2hFjj5igEfNtWdWCDH2Bg1By/ljOXiswd4J1EzSIDTqeDymdRgtDk UbrsOSSPPFH8JLJWpIXxOVOOuUtkHxs= -----END CERTIFICATE-----Generated at Sat Sep 6 15:24:07 2025 by rpki-client