$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: EjoJQevs15VM1kwNEBuYovN4JJcNlWnhMfWgNiTwb/E= Subject key identifier: A5:E1:CE:DD:62:4A:F7:56:57:14:11:92:48:4C:D4:AE:95:72:8B:2E Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 0176 Signing time: Thu 03 Jul 2025 04:05:23 +0000 Manifest this update: Thu 03 Jul 2025 04:05:22 +0000 Manifest next update: Thu 10 Jul 2025 04:05:22 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: RTtIfUl88jQG1Qbwzal7EvrjX89uhUAFINcy8Mp4F+g=) 2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: ZjKANzm7zReBCIok2fJWs9C78AGhsAM7u7/O7bhMPec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Jul 3 04:05:22 2025 GMT Not After : Jul 10 04:05:22 2025 GMT Subject: CN=68660183-79b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:12:72:9c:9e:e1:4d:0f:b4:60:2d:b9:46: c1:1f:80:b8:2c:ed:a4:9b:79:be:20:a0:02:04:a1: dd:b5:f5:03:ac:bd:31:59:87:87:b5:0e:a8:eb:57: b5:e3:58:23:f6:46:6c:cc:22:a4:9a:f6:a8:6d:93: a8:c9:b6:a8:e0:37:5c:6e:d3:c2:db:7e:66:03:ac: e2:27:9f:6f:5a:4e:aa:09:e9:2e:c3:38:a3:f8:93: b2:60:a2:c1:bc:3c:71:c5:fb:40:47:bd:9e:07:da: df:a1:1c:50:49:6d:2f:a3:26:09:f3:de:0a:7e:d2: 71:17:a6:1d:20:13:50:65:44:81:1c:85:33:7c:ad: ea:3e:ee:51:39:53:77:58:11:7e:d6:41:c6:1f:77: f0:87:c9:0b:57:08:35:a4:da:24:62:6a:1a:fa:cc: 7c:31:9a:ee:50:68:1b:c0:bc:cd:b5:cd:5f:fb:4b: 5d:d6:71:eb:d7:70:fb:b3:2f:ce:21:09:ff:1e:95: 35:29:b5:32:b6:eb:73:fe:4d:66:24:b8:60:03:dd: 60:b6:84:54:61:4e:53:64:d5:73:2c:66:3b:00:be: 46:3b:18:20:5b:1d:a6:0e:c3:86:6d:3c:f0:e7:e3: 3a:34:4a:24:6f:3b:e4:6c:06:5c:39:fd:48:54:21: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E1:CE:DD:62:4A:F7:56:57:14:11:92:48:4C:D4:AE:95:72:8B:2E X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:36:9a:ff:89:d6:bb:8c:31:80:c6:b8:30:19:42:49:84:6d: 75:dd:2f:62:da:2e:23:af:d1:73:c7:5e:26:75:5e:55:cf:56: a4:f5:7a:bb:b7:9f:8d:21:c5:f7:8a:05:d7:d9:b6:86:0e:ad: 13:3e:2e:e7:41:1f:b5:c2:b5:8e:80:b1:b8:fc:1e:1b:5a:3e: dc:6c:4a:d9:ec:c2:0c:c5:d0:ca:a2:8e:92:b7:5c:75:c3:f9: 8e:c3:45:16:2b:03:62:bc:e8:fc:09:29:e9:49:9e:6b:72:b6: 24:41:24:97:8f:d3:9c:17:a8:b1:c6:dc:6b:24:02:01:dd:27: 28:56:69:5e:96:45:4c:01:68:a3:72:ce:1a:06:eb:e0:46:dd: 5d:f3:ca:34:11:d1:c8:7c:2a:fd:53:19:88:ca:f0:f7:45:71: f3:30:21:05:1b:12:ba:4a:3a:a5:c1:0f:b6:5f:29:fb:94:9f: 0a:9c:ff:41:de:de:ca:46:22:65:26:29:b9:09:cb:b3:ca:94: a4:00:05:37:72:bc:92:e6:36:7b:1d:73:d5:95:eb:a8:ca:c2: 71:cf:9e:d3:5c:37:bd:69:07:d0:9d:6c:43:41:44:a3:ba:fd: f2:c3:bd:d9:14:05:b4:fe:ac:bb:4e:9f:f7:99:24:31:52:0a: 17:9f:82:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUwNzAzMDQwNTIyWhcNMjUwNzEwMDQwNTIyWjAYMRYwFAYD VQQDEw02ODY2MDE4My03OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFMScpye4U0PtGAtuUbBH4C4LO2km3m+IKACBKHdtfUDrL0xWYeHtQ6o61e1 41gj9kZszCKkmvaobZOoybao4DdcbtPC235mA6ziJ59vWk6qCekuwzij+JOyYKLB vDxxxftAR72eB9rfoRxQSW0voyYJ894KftJxF6YdIBNQZUSBHIUzfK3qPu5ROVN3 WBF+1kHGH3fwh8kLVwg1pNokYmoa+sx8MZruUGgbwLzNtc1f+0td1nHr13D7sy/O IQn/HpU1KbUytutz/k1mJLhgA91gtoRUYU5TZNVzLGY7AL5GOxggWx2mDsOGbTzw 5+M6NEokbzvkbAZcOf1IVCEHcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXhzt1i SvdWVxQRkkhM1K6VcosuMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwNpr/ida7jDGAxrgwGUJJhG113S9i2i4jr9Fzx14mdV5Vz1ak9Xq7 t5+NIcX3igXX2baGDq0TPi7nQR+1wrWOgLG4/B4bWj7cbErZ7MIMxdDKoo6St1x1 w/mOw0UWKwNivOj8CSnpSZ5rcrYkQSSXj9OcF6ixxtxrJAIB3ScoVmlelkVMAWij cs4aBuvgRt1d88o0EdHIfCr9UxmIyvD3RXHzMCEFGxK6SjqlwQ+2Xyn7lJ8KnP9B 3t7KRiJlJim5CcuzypSkAAU3cryS5jZ7HXPVleuoysJxz57TXDe9aQfQnWxDQUSj uv3yw73ZFAW0/qy7Tp/3mSQxUgoXn4IG -----END CERTIFICATE-----Generated at Thu Jul 3 09:10:09 2025 by rpki-client