$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: oDYWBswk3ttRiPo7/SW0OtC+6GsDZkqgfSPM0Ir8/K4= Subject key identifier: A0:7B:7D:79:59:59:7C:F5:88:60:E1:3B:CD:9A:2C:47:C5:10:72:77 Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 0159 Signing time: Thu 15 May 2025 03:39:25 +0000 Manifest this update: Thu 15 May 2025 03:39:24 +0000 Manifest next update: Thu 22 May 2025 03:39:24 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: rldUfsygeN7Az+5Bw03s2geD5W6yrUchdSc2PxXugCA=) 2: C606792CD3C811EFA4C15D2FC4F9AE02.roa (hash: RhIG4rVv0sC6eQgj2JPpIA3cTSID02u0FgU4lPWL4Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: May 15 03:39:24 2025 GMT Not After : May 22 03:39:24 2025 GMT Subject: CN=682561ec-bc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:e1:b4:44:57:39:94:32:00:04:af:c0:a2: 0c:bf:de:22:eb:52:8a:3e:cb:60:37:7e:1a:a5:5b: ed:14:b7:c3:ac:af:21:86:ea:8a:c8:25:cd:bd:76: ff:6a:7f:97:f0:3e:bb:1d:2f:33:76:33:64:7a:e5: 96:8e:7a:8c:92:29:39:e0:65:9a:b8:aa:5e:51:e9: 12:74:3b:15:d4:a5:72:cd:2c:07:34:19:91:a5:e6: 9d:45:f0:07:65:ef:74:23:51:c3:3c:4c:c3:33:88: 40:64:bf:2e:35:b9:00:24:13:3d:e1:8c:7f:8a:c8: 4f:f0:5f:28:c3:b1:bf:4e:5e:4d:d1:df:e3:b4:ae: 86:21:87:2e:09:e6:eb:6b:7b:89:1b:79:2f:19:f5: 08:43:d4:62:32:c0:0a:37:08:93:71:87:06:39:5b: ef:31:c4:33:ba:25:d2:89:0d:a9:40:30:c0:d3:49: e8:22:2f:0e:07:c0:d5:5c:9a:08:c8:22:ce:32:d0: d5:64:47:ff:ff:02:56:3d:63:a2:20:a2:ae:33:73: 1e:fd:8f:49:30:43:49:53:65:34:f8:54:f0:4f:9d: 6e:39:6c:6c:ab:1d:f7:c2:81:fc:93:67:c2:dd:e9: 91:4e:12:8c:7b:56:b0:1a:6e:b3:f7:39:c6:d6:84: 81:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7B:7D:79:59:59:7C:F5:88:60:E1:3B:CD:9A:2C:47:C5:10:72:77 X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:8f:e7:2e:84:97:87:32:97:2e:19:40:97:51:68:42:56:41: c4:b8:49:78:8e:3a:f1:fa:a1:2f:ee:7c:fe:d0:3b:8d:a0:ca: 55:8f:6b:03:ef:2a:ae:a3:af:c5:a1:a4:54:37:94:96:1e:60: 7f:06:d8:78:e2:d7:ec:1e:57:1d:95:28:68:04:fd:92:b8:a4: ae:b2:40:a3:39:b5:49:f4:63:95:13:ea:63:b9:45:3b:31:fd: c5:4f:04:12:a0:f7:ce:6f:3a:9b:ce:c3:cf:4b:4e:73:b3:fe: 24:ad:7f:e2:39:86:99:42:b2:71:28:0f:4b:79:87:b0:f5:a1: 04:88:93:0a:f6:06:d9:f6:78:37:8d:1b:4d:37:98:26:23:05: c4:d1:60:a5:90:60:c3:a1:21:2a:5c:57:14:d2:11:23:c8:a8: 1b:af:3c:c1:52:4f:dd:a7:e5:ac:e1:cf:60:c1:e3:04:59:12: be:c3:c2:e1:84:c9:b3:ea:3f:a5:1d:2a:e6:89:55:4f:a5:05: 29:4c:25:91:15:14:a4:e1:67:60:61:8d:e2:24:1a:20:22:2a: 6e:9d:45:c9:94:c9:5a:c4:7f:23:52:10:28:9b:6f:85:23:78: b8:01:4f:51:e2:62:a7:68:08:4f:b8:fd:15:16:73:67:be:c0: c7:24:7c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUwNTE1MDMzOTI0WhcNMjUwNTIyMDMzOTI0WjAYMRYwFAYD VQQDEw02ODI1NjFlYy1iYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZvhtERXOZQyAASvwKIMv94i61KKPstgN34apVvtFLfDrK8hhuqKyCXNvXb/ an+X8D67HS8zdjNkeuWWjnqMkik54GWauKpeUekSdDsV1KVyzSwHNBmRpeadRfAH Ze90I1HDPEzDM4hAZL8uNbkAJBM94Yx/ishP8F8ow7G/Tl5N0d/jtK6GIYcuCebr a3uJG3kvGfUIQ9RiMsAKNwiTcYcGOVvvMcQzuiXSiQ2pQDDA00noIi8OB8DVXJoI yCLOMtDVZEf//wJWPWOiIKKuM3Me/Y9JMENJU2U0+FTwT51uOWxsqx33woH8k2fC 3emRThKMe1awGm6z9znG1oSB3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKB7fXlZ WXz1iGDhO82aLEfFEHJ3MB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAj+cuhJeHMpcuGUCXUWhCVkHEuEl4jjrx+qEv7nz+0DuNoMpVj2sD 7yquo6/FoaRUN5SWHmB/Bth44tfsHlcdlShoBP2SuKSuskCjObVJ9GOVE+pjuUU7 Mf3FTwQSoPfObzqbzsPPS05zs/4krX/iOYaZQrJxKA9LeYew9aEEiJMK9gbZ9ng3 jRtNN5gmIwXE0WClkGDDoSEqXFcU0hEjyKgbrzzBUk/dp+Ws4c9gweMEWRK+w8Lh hMmz6j+lHSrmiVVPpQUpTCWRFRSk4WdgYY3iJBogIipunUXJlMlaxH8jUhAom2+F I3i4AU9R4mKnaAhPuP0VFnNnvsDHJHwQ -----END CERTIFICATE-----Generated at Fri May 16 11:07:58 2025 by rpki-client