$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: 5zkGF40ASAnUy1EnxhBK9m1ArS2fTlWJFa3nDtpiJsU= Subject key identifier: 0C:2C:A9:57:46:A7:D4:08:0E:F9:EA:2B:D7:0B:69:E8:42:B9:4B:A8 Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 0190 Signing time: Sat 23 Aug 2025 03:49:49 +0000 Manifest this update: Sat 23 Aug 2025 03:49:48 +0000 Manifest next update: Sat 30 Aug 2025 03:49:48 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: Dfb8ZiM+Qnx9FnTZwEUJx/nCn/bioRmpsHckI8xXJg4=) 2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: ZjKANzm7zReBCIok2fJWs9C78AGhsAM7u7/O7bhMPec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Aug 23 03:49:48 2025 GMT Not After : Aug 30 03:49:48 2025 GMT Subject: CN=68a93a5d-c9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:97:76:63:4d:5e:d3:4b:12:0e:b1:77:4a: 15:75:f8:66:02:ca:f2:6a:a8:df:09:b9:b2:eb:84: 42:81:04:eb:04:77:70:db:ce:d6:24:5b:c1:57:63: 89:31:ca:0d:7a:94:b8:c1:47:6c:74:10:86:fa:29: eb:1f:31:7a:9d:ab:83:6d:5b:7b:dc:ae:1b:d3:1d: 1d:fb:02:8d:3f:d2:08:60:be:7d:b2:48:42:9a:8a: c3:94:2c:12:f0:93:4c:d6:38:1a:0a:62:e8:c5:4d: c8:0e:50:6e:bb:c7:e1:4d:7e:c5:08:7d:85:ba:82: ac:ca:97:85:8a:b9:b1:7e:25:9b:23:de:c1:d6:91: f6:db:92:93:42:ef:1e:b3:0d:e4:d0:9c:ef:3e:14: 54:fb:3e:24:97:51:7b:f1:3a:1d:56:ad:93:3c:69: 6d:a9:84:fc:b1:cd:22:c7:06:03:b9:05:62:ec:7e: a2:76:23:76:1d:16:5f:0c:ba:a7:19:f2:5c:71:5b: 38:90:b7:06:02:01:8f:47:15:65:4e:32:d0:49:e6: 75:06:6a:a8:b3:29:cf:b7:6d:19:1a:14:86:3a:08: c4:13:f9:b6:ba:e6:fd:43:51:0d:94:cc:e9:5b:5d: fa:44:79:51:cd:43:02:9f:04:b5:5e:4a:49:fb:f5: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2C:A9:57:46:A7:D4:08:0E:F9:EA:2B:D7:0B:69:E8:42:B9:4B:A8 X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:72:99:f8:4c:26:37:14:53:3a:2d:b8:8d:2f:91:bb:cc:19: be:6b:14:1f:7c:ab:28:25:6f:bc:00:be:18:29:a0:ac:35:44: c8:b4:e3:75:af:d1:70:0c:76:7a:ba:d6:6b:96:18:16:03:83: e6:32:60:5b:02:41:fd:63:88:08:a8:35:ff:f7:55:80:99:ed: 8d:c3:ca:a9:3e:d6:64:a7:a7:51:98:00:80:a5:24:46:d1:3e: b0:fb:a3:02:88:b9:5b:f6:0b:7a:13:b3:f0:fb:33:8d:5a:6b: c5:29:cb:4d:be:72:45:ad:ba:d2:b3:12:ce:32:52:92:c5:c2: 21:c9:f4:6f:77:80:9f:c5:c9:54:74:6d:dc:4f:97:ee:39:63: ac:43:69:14:53:35:18:6d:4a:52:72:59:cc:b1:00:8d:c1:6e: 12:2d:7f:47:ec:39:2e:0e:fa:dc:d6:d9:80:39:80:ec:40:b4: 22:ab:a9:da:2f:68:a9:eb:82:5d:12:77:86:26:fc:45:a7:44: 0f:f5:d2:39:a0:a2:7d:95:38:24:cc:34:02:27:ee:95:ef:8b: 02:fa:29:16:30:ba:ef:77:ec:9b:9c:1a:5e:d8:12:b3:69:fb: c1:03:29:24:4e:0a:55:10:b9:f9:84:b3:41:1f:20:73:6d:20: 60:6f:2d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUwODIzMDM0OTQ4WhcNMjUwODMwMDM0OTQ4WjAYMRYwFAYD VQQDEw02OGE5M2E1ZC1jOWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HyXdmNNXtNLEg6xd0oVdfhmAsryaqjfCbmy64RCgQTrBHdw287WJFvBV2OJ McoNepS4wUdsdBCG+inrHzF6nauDbVt73K4b0x0d+wKNP9IIYL59skhCmorDlCwS 8JNM1jgaCmLoxU3IDlBuu8fhTX7FCH2FuoKsypeFirmxfiWbI97B1pH225KTQu8e sw3k0JzvPhRU+z4kl1F78TodVq2TPGltqYT8sc0ixwYDuQVi7H6idiN2HRZfDLqn GfJccVs4kLcGAgGPRxVlTjLQSeZ1BmqosynPt20ZGhSGOgjEE/m2uub9Q1ENlMzp W136RHlRzUMCnwS1XkpJ+/X+qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwsqVdG p9QIDvnqK9cLaehCuUuoMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBocpn4TCY3FFM6LbiNL5G7zBm+axQffKsoJW+8AL4YKaCsNUTItON1 r9FwDHZ6utZrlhgWA4PmMmBbAkH9Y4gIqDX/91WAme2Nw8qpPtZkp6dRmACApSRG 0T6w+6MCiLlb9gt6E7Pw+zONWmvFKctNvnJFrbrSsxLOMlKSxcIhyfRvd4CfxclU dG3cT5fuOWOsQ2kUUzUYbUpSclnMsQCNwW4SLX9H7DkuDvrc1tmAOYDsQLQiq6na L2ip64JdEneGJvxFp0QP9dI5oKJ9lTgkzDQCJ+6V74sC+ikWMLrvd+ybnBpe2BKz afvBAykkTgpVELn5hLNBHyBzbSBgby2P -----END CERTIFICATE-----Generated at Sun Aug 24 03:37:10 2025 by rpki-client