$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: Bo0ZvOq4FKyvw1F6Y1CNkE8zFx/QHl8pgEB8dqMt7Pg= Subject key identifier: A7:DB:18:1A:50:32:29:DD:8B:28:6D:92:8D:46:B2:5A:A7:CE:FB:0C Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: 5F Signing time: Mon 21 Jul 2025 07:19:24 +0000 Manifest this update: Mon 21 Jul 2025 07:19:23 +0000 Manifest next update: Mon 28 Jul 2025 07:19:23 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: 8/Jv8zZWRJbgKzWAZHW5XCAt0sr/tETQNBxGM9TtTUk=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: FjkNGrENcSIvFxBilAn18yNNIFNeTLoQBLQNAUhyMb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Jul 21 07:19:23 2025 GMT Not After : Jul 28 07:19:23 2025 GMT Subject: CN=687de9fb-d197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:46:65:3b:22:63:09:c7:13:20:ca:fd:1a: b0:00:02:b7:f9:0d:e8:3d:e2:0f:98:a6:54:c9:af: 56:e5:d1:0a:34:fd:87:32:3d:60:af:82:a9:91:5c: 94:a3:04:6d:60:9c:dd:83:17:5f:ad:a9:dc:ca:af: f4:b4:14:ac:49:26:79:b9:3d:7e:33:21:ca:64:ee: 68:ee:5b:42:f2:50:b7:e6:7b:cd:72:99:20:cd:85: 75:06:59:82:d7:b2:fa:53:25:c6:07:e6:35:13:7e: f1:8e:49:37:92:25:29:d1:f3:a7:16:87:5b:a1:52: 9d:fd:e5:79:67:13:8d:22:cb:43:b9:3f:26:cc:af: 3c:c8:6a:19:1b:a9:dd:94:9b:24:dc:a3:91:ba:11: 02:67:d5:f9:54:9f:56:f0:19:c2:18:68:44:0e:bf: 7a:99:35:2f:ec:96:36:34:34:0e:e8:b4:b8:7e:ae: 3e:ba:b1:72:1b:38:bd:bb:ff:bb:3d:3f:ff:82:6e: 48:2a:3a:66:01:af:e1:d1:63:36:cf:7a:be:db:ab: d6:d1:f4:71:b7:6d:68:2d:30:9e:a8:b4:12:7e:39: 3d:39:e6:c5:f8:07:94:b1:8f:7a:91:69:e9:1d:9e: 66:88:15:18:ba:e8:d5:a3:ba:be:9f:76:e2:85:21: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DB:18:1A:50:32:29:DD:8B:28:6D:92:8D:46:B2:5A:A7:CE:FB:0C X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:38:14:15:3b:65:31:37:fd:2b:77:f4:a1:d0:15:82:a4:3d: f6:66:8c:ac:c6:ae:b4:e7:de:19:bf:90:5d:02:9a:a9:ff:d4: d4:7e:69:8b:fe:fb:bb:17:f9:c5:a5:b8:01:98:9b:6d:b8:fd: 04:ef:e7:fd:97:e7:0b:fa:0d:50:1f:18:36:16:68:84:5d:79: 94:89:27:52:a9:75:b4:06:92:93:19:c1:54:09:58:34:84:1c: 6c:54:e4:80:cd:fb:24:3c:5b:8c:d1:61:d7:42:4d:55:69:fa: 94:84:bf:2b:c0:16:f8:3c:f0:61:f1:22:ff:82:35:24:ed:a7: cb:fd:38:00:01:52:1d:2a:0e:ea:1d:18:df:34:b2:79:d0:81: f7:ff:77:83:c2:88:da:e5:37:ee:59:61:b5:a0:48:3f:0d:a7: 7a:5a:22:85:24:64:c3:99:89:3b:7e:0c:1d:91:34:b9:ed:49: 28:63:e0:15:e1:3a:e1:52:be:50:81:ac:05:79:41:66:2c:04: f3:4c:44:8b:f7:c2:8b:79:b0:bc:66:30:2f:d6:b4:a8:15:7d: f6:ce:db:21:51:91:db:0c:f4:95:7e:38:98:2e:24:b4:af:2e: 52:30:0f:9d:37:f0:01:db:25:a7:b6:12:6e:81:14:a3:48:e2: 5b:92:30:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzE2MTExMC8GA1UEBRMoQjQ5QjJCMTFEMzg3NkRFQ0RFMTNGNUU4RjU5RTY0MUE3 RDA5M0ZCOTAeFw0yNTA3MjEwNzE5MjNaFw0yNTA3MjgwNzE5MjNaMBgxFjAUBgNV BAMTDTY4N2RlOWZiLWQxOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIWUZlOyJjCccTIMr9GrAAArf5Deg94g+YplTJr1bl0Qo0/YcyPWCvgqmRXJSj BG1gnN2DF1+tqdzKr/S0FKxJJnm5PX4zIcpk7mjuW0LyULfme81ymSDNhXUGWYLX svpTJcYH5jUTfvGOSTeSJSnR86cWh1uhUp395XlnE40iy0O5PybMrzzIahkbqd2U myTco5G6EQJn1flUn1bwGcIYaEQOv3qZNS/sljY0NA7otLh+rj66sXIbOL27/7s9 P/+CbkgqOmYBr+HRYzbPer7bq9bR9HG3bWgtMJ6otBJ+OT055sX4B5Sxj3qRaekd nmaIFRi66NWjur6fduKFIU7VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp9sYGlAy Kd2LKG2SjUayWqfO+wwwHwYDVR0jBBgwFoAUtJsrEdOHbezeE/Xo9Z5kGn0JP7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMTYxLzcxMzJFRjlBRDkw NzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEpzckVkT0hiZXplRV9YbzlaNWtHbjBKUDdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MTYxLzcxMzJFRjlBRDkwNzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6 ZUVfWG85WjVrR24wSlA3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE84FBU7ZTE3/St39KHQFYKkPfZmjKzGrrTn3hm/kF0Cmqn/1NR+aYv+ +7sX+cWluAGYm224/QTv5/2X5wv6DVAfGDYWaIRdeZSJJ1KpdbQGkpMZwVQJWDSE HGxU5IDN+yQ8W4zRYddCTVVp+pSEvyvAFvg88GHxIv+CNSTtp8v9OAABUh0qDuod GN80snnQgff/d4PCiNrlN+5ZYbWgSD8Np3paIoUkZMOZiTt+DB2RNLntSShj4BXh OuFSvlCBrAV5QWYsBPNMRIv3wot5sLxmMC/WtKgVffbO2yFRkdsM9JV+OJguJLSv LlIwD5038AHbJae2Em6BFKNI4luSMCk= -----END CERTIFICATE-----Generated at Tue Jul 22 05:07:56 2025 by rpki-client