$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: 7ihd3yFP/jW1qRokFuc5CYh7TXqs6HWxr+uDuV2hkZk= Subject key identifier: 22:13:AC:DB:31:5E:8D:CD:17:D1:8A:A2:D8:67:C9:A0:6C:73:23:C0 Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 01AD Signing time: Sun 19 Oct 2025 05:58:05 +0000 Manifest this update: Sun 19 Oct 2025 05:58:04 +0000 Manifest next update: Sun 26 Oct 2025 05:58:04 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: lkFfxBuCWFeFMqYwrqTaQpOX5T945pfCKeJqrEOkIvM=) 2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: ZjKANzm7zReBCIok2fJWs9C78AGhsAM7u7/O7bhMPec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Oct 19 05:58:04 2025 GMT Not After : Oct 26 05:58:04 2025 GMT Subject: CN=68f47dec-8dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c7:01:bb:7a:58:b0:73:35:89:a1:c7:97:1d: 8f:1a:b9:a1:df:cf:c4:93:1b:44:0d:30:b2:47:d8: 1e:63:b1:b0:00:05:33:de:ce:06:f9:0f:8c:2f:e0: f3:8d:e6:17:f8:4b:b9:ec:bb:c8:0e:39:04:d3:eb: 7c:15:62:f3:59:a8:a8:73:09:f0:91:e6:3e:75:dd: d5:18:46:52:c4:df:e2:54:74:ed:b1:c7:d2:1f:a0: f4:28:39:db:2a:63:20:2d:4a:74:c1:00:eb:66:2e: 90:ac:c5:31:21:7d:ee:02:67:75:ff:13:01:a3:99: e7:93:4d:b8:4e:6e:f6:c6:b2:4d:00:f4:c8:e2:b8: 55:eb:c6:5b:a9:17:72:f0:6b:93:a6:6a:8c:0b:2e: 47:ae:3e:a2:a2:a4:c6:1e:fd:1b:3e:35:ac:7d:14: 18:33:5b:aa:cf:67:95:75:9a:13:76:68:78:06:e4: aa:0c:da:5d:ea:b3:b3:7e:f9:15:43:1c:61:2f:98: 1c:70:84:05:91:a2:3a:eb:ac:22:99:99:b3:f6:71: 92:74:19:60:9f:bb:de:1e:9f:b1:ca:16:1e:7a:2d: 85:9f:0c:27:b9:bd:8e:f3:71:54:1c:7b:b5:56:3c: 71:e6:bf:4c:0a:c8:d1:a1:a5:11:06:bb:d0:fe:c3: 24:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:13:AC:DB:31:5E:8D:CD:17:D1:8A:A2:D8:67:C9:A0:6C:73:23:C0 X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:6c:ce:4e:04:6c:d2:86:6d:28:1a:ff:d4:c8:b7:15:57:e6: 51:14:e6:0a:f7:af:0d:33:24:02:65:0a:c6:eb:d3:e3:2b:5f: 16:1b:4e:92:18:42:aa:b3:7f:f0:e7:ea:7e:a8:65:40:fc:a9: 02:38:9c:b1:54:96:9b:4c:c4:10:a9:c8:0d:1c:37:bd:f0:9f: 84:5d:07:37:b1:e0:bf:18:f5:83:8c:8c:46:85:37:06:a0:df: 3b:df:a3:e4:ee:ce:34:b2:78:16:4e:ed:fa:6b:7e:43:0b:10: bf:db:c8:10:d5:9e:53:58:a6:97:c4:61:b0:a5:dc:3e:b0:e5: 81:2b:0c:44:84:cf:21:ca:50:54:56:a2:42:ed:6a:94:37:c6: 99:0f:79:83:7f:c1:c7:0c:17:e8:f9:f0:d8:e5:31:0f:b7:e4: d6:63:48:7f:2c:0e:b6:59:53:2b:30:5c:80:62:a8:40:1e:5f: 3b:b4:3a:7c:7d:82:c3:4b:7e:08:ac:9c:9c:fb:22:f7:19:0c: ac:8c:db:84:24:b0:de:36:44:87:af:1c:b6:08:70:b9:86:db: 01:08:df:82:e7:05:a6:4b:0d:37:23:85:14:ff:23:1d:4f:8a: f4:a6:1c:04:c3:2a:1d:15:db:12:b2:e8:53:bc:57:7c:e5:b1: 88:5e:c0:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUxMDE5MDU1ODA0WhcNMjUxMDI2MDU1ODA0WjAYMRYwFAYD VQQDEw02OGY0N2RlYy04ZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ccBu3pYsHM1iaHHlx2PGrmh38/EkxtEDTCyR9geY7GwAAUz3s4G+Q+ML+Dz jeYX+Eu57LvIDjkE0+t8FWLzWaiocwnwkeY+dd3VGEZSxN/iVHTtscfSH6D0KDnb KmMgLUp0wQDrZi6QrMUxIX3uAmd1/xMBo5nnk024Tm72xrJNAPTI4rhV68ZbqRdy 8GuTpmqMCy5Hrj6ioqTGHv0bPjWsfRQYM1uqz2eVdZoTdmh4BuSqDNpd6rOzfvkV QxxhL5gccIQFkaI666wimZmz9nGSdBlgn7veHp+xyhYeei2Fnwwnub2O83FUHHu1 Vjxx5r9MCsjRoaURBrvQ/sMklwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCITrNsx Xo3NF9GKothnyaBscyPAMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnbM5OBGzShm0oGv/UyLcVV+ZRFOYK968NMyQCZQrG69PjK18WG06S GEKqs3/w5+p+qGVA/KkCOJyxVJabTMQQqcgNHDe98J+EXQc3seC/GPWDjIxGhTcG oN8736Pk7s40sngWTu36a35DCxC/28gQ1Z5TWKaXxGGwpdw+sOWBKwxEhM8hylBU VqJC7WqUN8aZD3mDf8HHDBfo+fDY5TEPt+TWY0h/LA62WVMrMFyAYqhAHl87tDp8 fYLDS34IrJyc+yL3GQysjNuEJLDeNkSHrxy2CHC5htsBCN+C5wWmSw03I4UU/yMd T4r0phwEwyodFdsSsuhTvFd85bGIXsB9 -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:25 2025 by rpki-client