$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: nOX6g7tdBn+YL1quvp+bFxr4733uTjTV0XOlpWE9NxQ= Subject key identifier: 9C:B0:B5:A9:FB:FB:D3:A4:B3:3B:5D:8B:12:69:4D:84:EC:87:2F:D9 Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: 94 Signing time: Mon 03 Nov 2025 06:30:07 +0000 Manifest this update: Mon 03 Nov 2025 06:30:07 +0000 Manifest next update: Mon 10 Nov 2025 06:30:07 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: vGyE3CCCY3XW0/n5uUiyR4b3jW/BEuntXFMaojRxJdc=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: FjkNGrENcSIvFxBilAn18yNNIFNeTLoQBLQNAUhyMb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Nov 3 06:30:07 2025 GMT Not After : Nov 10 06:30:07 2025 GMT Subject: CN=69084bef-6074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:66:bb:19:11:a0:45:8d:fe:38:ba:df:04: 67:1b:ab:73:86:ee:a8:31:94:02:23:1e:71:19:42: 3e:72:b0:fc:75:20:f2:78:88:bf:8a:67:ca:0c:f7: 75:28:2c:0b:b2:5b:33:7a:92:34:07:2b:96:97:4f: f2:bc:fe:0c:33:8b:9a:5c:76:48:0b:f1:da:ae:e2: 2a:8a:30:c2:a0:93:f8:f8:3d:d7:5c:ff:f3:28:57: 7b:08:15:4c:75:36:70:50:37:74:73:27:0b:3b:56: 1a:d6:31:0d:69:6b:33:9c:eb:d0:f3:0d:0a:4a:02: 9e:68:cc:24:1f:10:ca:f8:d0:af:a2:79:ce:f6:b6: cf:00:f7:e8:fa:2f:a4:fc:b1:4c:b1:5c:da:26:82: a6:d3:ae:46:de:69:4b:35:97:65:dd:c2:75:06:09: ca:43:1b:ba:10:0e:13:d2:e8:c5:c7:3b:f8:71:33: 66:0a:1a:da:b6:e9:dd:f3:dd:e1:60:b1:ec:c7:22: a4:f6:fc:c9:0f:30:f2:1b:3f:1f:33:8b:6b:26:98: fc:ef:ac:9f:d3:7e:5e:a3:88:f4:df:50:10:58:4d: d7:49:c7:e7:1b:89:64:68:25:9c:97:a5:06:78:db: a7:e1:9c:2e:43:cc:6c:12:9a:6d:fb:2b:13:7b:91: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B0:B5:A9:FB:FB:D3:A4:B3:3B:5D:8B:12:69:4D:84:EC:87:2F:D9 X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:df:cf:fd:02:f2:3e:d7:a9:1d:ab:95:1a:bb:8f:c0:67:25: 11:0f:e0:3f:9a:2a:79:d9:43:d4:d6:1d:9c:bb:5a:37:d6:f7: ff:81:f2:21:b1:1f:ee:e5:10:d3:f7:4a:bf:bf:03:df:eb:7c: 7b:0a:46:41:71:3d:3d:0e:2e:ad:ab:84:3f:1f:d9:2c:16:c4: c8:23:1d:31:e6:56:b6:04:8e:f6:e1:64:bb:5e:b3:19:70:f6: 4c:4f:aa:cc:55:c3:07:3f:c2:6a:f5:54:74:eb:c6:de:8f:64: b6:b6:98:bc:1e:cf:fa:b1:71:cc:26:6e:dd:fc:23:76:b9:51: ac:52:2a:41:2b:65:9a:d6:23:62:a8:03:b4:c8:79:93:b9:23: a0:fd:f0:6e:08:ae:dd:3b:0c:89:9a:a5:b3:bf:f5:82:60:20: 97:ea:43:d8:f5:c7:e6:9b:1d:2f:40:d2:a0:37:dd:d5:90:3b: 21:b0:f3:1e:a8:11:29:3e:7e:26:5f:21:76:8a:91:3e:27:c4: 2c:80:f7:47:ce:17:02:71:8d:fd:ef:18:c7:d7:1c:64:53:4a: 71:7d:df:b2:ed:da:79:e9:ea:74:7e:95:8a:d7:89:53:30:14: b8:f8:c5:8c:83:c5:12:45:0e:20:e5:b4:33:3f:db:e1:7a:80: f3:07:58:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNjExMTAvBgNVBAUTKEI0OUIyQjExRDM4NzZERUNERTEzRjVFOEY1OUU2NDFB N0QwOTNGQjkwHhcNMjUxMTAzMDYzMDA3WhcNMjUxMTEwMDYzMDA3WjAYMRYwFAYD VQQDEw02OTA4NGJlZi02MDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsttmuxkRoEWN/ji63wRnG6tzhu6oMZQCIx5xGUI+crD8dSDyeIi/imfKDPd1 KCwLslszepI0ByuWl0/yvP4MM4uaXHZIC/HaruIqijDCoJP4+D3XXP/zKFd7CBVM dTZwUDd0cycLO1Ya1jENaWsznOvQ8w0KSgKeaMwkHxDK+NCvonnO9rbPAPfo+i+k /LFMsVzaJoKm065G3mlLNZdl3cJ1BgnKQxu6EA4T0ujFxzv4cTNmChratund893h YLHsxyKk9vzJDzDyGz8fM4trJpj876yf035eo4j031AQWE3XScfnG4lkaCWcl6UG eNun4ZwuQ8xsEppt+ysTe5H9lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJywtan7 +9OksztdixJpTYTshy/ZMB8GA1UdIwQYMBaAFLSbKxHTh23s3hP16PWeZBp9CT+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE2MS83MTMyRUY5QUQ5 MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJlemVFX1hvOVo1a0duMEpQ N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzE2MS83MTMyRUY5QUQ5MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJl emVFX1hvOVo1a0duMEpQN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt38/9AvI+16kdq5Uau4/AZyURD+A/mip52UPU1h2cu1o31vf/gfIh sR/u5RDT90q/vwPf63x7CkZBcT09Di6tq4Q/H9ksFsTIIx0x5la2BI724WS7XrMZ cPZMT6rMVcMHP8Jq9VR068bej2S2tpi8Hs/6sXHMJm7d/CN2uVGsUipBK2Wa1iNi qAO0yHmTuSOg/fBuCK7dOwyJmqWzv/WCYCCX6kPY9cfmmx0vQNKgN93VkDshsPMe qBEpPn4mXyF2ipE+J8QsgPdHzhcCcY397xjH1xxkU0pxfd+y7dp56ep0fpWK14lT MBS4+MWMg8USRQ4g5bQzP9vheoDzB1ie -----END CERTIFICATE-----Generated at Tue Nov 4 16:37:28 2025 by rpki-client