$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: l8uzehU/NPQopp2sqhsVq0/hiD4087n2UXmB5unQKkM= Subject key identifier: 1E:62:7B:D3:63:5A:7D:C0:94:0B:04:69:6A:90:85:6D:73:E5:22:C6 Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: 4F Signing time: Thu 19 Jun 2025 06:42:27 +0000 Manifest this update: Thu 19 Jun 2025 06:42:27 +0000 Manifest next update: Thu 26 Jun 2025 06:42:27 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: niIkb5g3OBecrydPbwe9W73uepZc03+7TY0p9JX3qbo=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: FjkNGrENcSIvFxBilAn18yNNIFNeTLoQBLQNAUhyMb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Jun 19 06:42:27 2025 GMT Not After : Jun 26 06:42:27 2025 GMT Subject: CN=6853b153-381a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:49:d3:18:d5:39:31:a8:83:37:e9:e2:09: d1:d2:8f:af:33:86:e5:7e:6b:83:63:4c:3a:b3:8f: 50:ab:00:a1:f9:e6:93:a1:5b:d6:2b:26:7d:42:15: f9:fe:f8:c4:49:42:e5:53:8d:09:3b:23:73:e6:4b: be:bf:ea:86:2f:16:85:4d:44:6d:4b:de:97:79:fa: c0:ea:8d:b0:b8:15:5f:d6:bc:aa:f1:40:05:15:48: 5f:86:db:66:13:3c:d3:a8:a5:44:9c:a8:e1:1b:cd: dd:1a:c7:2d:42:77:04:e3:8d:51:83:3e:ac:b3:a1: af:44:67:63:63:24:d1:4e:6c:61:30:36:0f:67:ac: cc:db:d5:1f:aa:7d:50:e6:2d:a5:17:ec:d2:90:1a: 75:fb:9f:bc:92:a4:24:93:85:ea:b2:93:b0:09:a6: 99:58:23:33:e7:b0:70:8a:84:62:38:d9:1f:8f:58: f5:e9:23:a5:14:85:d9:f3:12:3d:10:e5:ad:54:c3: a4:1a:4f:9d:a1:b4:27:cd:66:7f:09:a8:04:0f:88: 9a:d3:07:05:92:28:c5:8b:e4:3b:76:ad:88:4e:88: 88:38:bb:58:88:81:bb:81:6f:30:88:37:08:9f:e1: cd:34:78:a7:92:54:22:73:3c:9e:4f:5c:26:63:54: fe:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:62:7B:D3:63:5A:7D:C0:94:0B:04:69:6A:90:85:6D:73:E5:22:C6 X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:fa:c7:ee:37:a6:3c:02:2b:b4:70:b2:2a:bb:8a:d0:47:4f: 29:97:94:eb:8c:93:0d:68:8e:bd:dd:14:2d:2c:79:94:56:9e: 5b:d0:2f:19:af:48:46:01:e2:74:30:2c:15:d7:57:f1:70:c2: 8e:d4:4e:36:d2:c3:96:2f:67:ca:f4:be:18:83:93:c3:fc:68: d0:34:1b:9b:35:6a:a0:66:b5:94:c9:ec:09:a6:6a:df:59:35: e4:48:da:72:ce:73:e5:14:7b:88:48:8e:25:24:8a:51:7c:17: 1f:ed:1f:49:74:10:c4:90:9b:f5:4b:cc:8b:51:30:4d:65:bc: 2b:75:35:ca:45:82:23:31:64:0b:97:4f:38:a8:41:c1:c1:00: 14:07:a4:e2:a3:96:71:fa:40:fd:1f:e3:c6:88:80:dc:1c:22: 73:10:16:8c:4a:b4:5d:49:35:3c:9a:a5:06:45:77:f9:57:72: 2e:37:16:7d:54:07:c3:2b:03:97:9a:88:1e:ad:dd:38:04:2e: e1:73:8c:4a:c5:e8:f7:c8:75:e7:74:61:54:25:eb:cc:44:ac: 8b:bb:a8:75:ee:a9:d3:89:ab:8f:74:ea:ac:92:9e:0f:e5:18: 9c:0e:be:01:39:75:28:31:a2:73:e3:1d:6d:6d:59:21:23:f4: 17:a6:93:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzE2MTExMC8GA1UEBRMoQjQ5QjJCMTFEMzg3NkRFQ0RFMTNGNUU4RjU5RTY0MUE3 RDA5M0ZCOTAeFw0yNTA2MTkwNjQyMjdaFw0yNTA2MjYwNjQyMjdaMBgxFjAUBgNV BAMTDTY4NTNiMTUzLTM4MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeHEnTGNU5MaiDN+niCdHSj68zhuV+a4NjTDqzj1CrAKH55pOhW9YrJn1CFfn+ +MRJQuVTjQk7I3PmS76/6oYvFoVNRG1L3pd5+sDqjbC4FV/WvKrxQAUVSF+G22YT PNOopUScqOEbzd0axy1CdwTjjVGDPqyzoa9EZ2NjJNFObGEwNg9nrMzb1R+qfVDm LaUX7NKQGnX7n7ySpCSTheqyk7AJpplYIzPnsHCKhGI42R+PWPXpI6UUhdnzEj0Q 5a1Uw6QaT52htCfNZn8JqAQPiJrTBwWSKMWL5Dt2rYhOiIg4u1iIgbuBbzCINwif 4c00eKeSVCJzPJ5PXCZjVP41AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHmJ702Na fcCUCwRpapCFbXPlIsYwHwYDVR0jBBgwFoAUtJsrEdOHbezeE/Xo9Z5kGn0JP7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMTYxLzcxMzJFRjlBRDkw NzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEpzckVkT0hiZXplRV9YbzlaNWtHbjBKUDdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MTYxLzcxMzJFRjlBRDkwNzExRUZCMjdGNzg1N0M0RjlBRTAyL3RKc3JFZE9IYmV6 ZUVfWG85WjVrR24wSlA3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHX6x+43pjwCK7Rwsiq7itBHTymXlOuMkw1ojr3dFC0seZRWnlvQLxmv SEYB4nQwLBXXV/Fwwo7UTjbSw5YvZ8r0vhiDk8P8aNA0G5s1aqBmtZTJ7Ammat9Z NeRI2nLOc+UUe4hIjiUkilF8Fx/tH0l0EMSQm/VLzItRME1lvCt1NcpFgiMxZAuX TzioQcHBABQHpOKjlnH6QP0f48aIgNwcInMQFoxKtF1JNTyapQZFd/lXci43Fn1U B8MrA5eaiB6t3TgELuFzjErF6PfIded0YVQl68xErIu7qHXuqdOJq4906qySng/l GJwOvgE5dSgxonPjHW1tWSEj9Bemk3M= -----END CERTIFICATE-----Generated at Fri Jun 20 19:11:05 2025 by rpki-client