$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json) Hash identifier: oFbts5lYcJCl2jKVSq4eC+QjNnSRk90Mvu2j284ku0E= Subject key identifier: 53:B0:78:06:6D:1A:C2:9E:9B:EE:77:BB:65:8A:8C:E0:A1:CE:BB:39 Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft Manifest number: 01A4 Signing time: Thu 03 Jul 2025 03:23:29 +0000 Manifest this update: Thu 03 Jul 2025 03:23:28 +0000 Manifest next update: Thu 10 Jul 2025 03:23:28 +0000 Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: QAOFMeryWfSyxAhL4y9UlIj6C7H+OvCjd1HrrVap2q4=) 2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: 95TYzLOqwMphVUCVsji8mDMvFKrsCaokY8ysHX5ZUv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Validity Not Before: Jul 3 03:23:28 2025 GMT Not After : Jul 10 03:23:28 2025 GMT Subject: CN=6865f7b0-d95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:dd:f2:70:0c:79:29:d7:88:f9:80:1d:39: 34:c9:f9:47:96:3c:1f:ea:45:0c:22:78:fa:33:df: ab:06:5a:08:71:b8:cd:d4:6a:ae:78:4f:16:b6:5f: 66:e8:3d:96:70:aa:21:e6:6c:d3:77:02:7c:ee:ec: af:18:f5:47:dc:de:51:51:f4:24:39:af:b2:ac:76: b3:1f:87:98:d5:85:c7:2d:93:5f:07:ad:13:7b:81: 3b:78:8a:6d:83:e8:8b:fa:95:71:f8:7e:49:e2:cd: ce:32:8d:29:b7:58:81:ea:08:28:6d:e9:9a:8f:09: a0:d3:75:fa:b3:ce:7a:c0:04:6c:b6:ab:c5:ef:da: 8f:ae:20:cf:7b:27:7f:f9:4c:1f:ed:32:59:bb:91: 64:cb:dc:fa:a0:f2:89:d1:1a:56:ea:18:99:3c:f3: 80:a7:9f:f5:13:9b:4a:09:9f:0f:a4:15:f1:6f:13: 30:59:35:25:0f:00:8d:fc:59:90:5e:ff:ea:9c:57: fa:47:2d:17:83:2c:3c:73:78:b9:2b:ac:1c:7d:77: 58:1a:ad:30:a2:24:47:a7:25:c0:8a:08:25:66:a7: 02:40:89:fa:ff:1b:71:ab:b9:3f:f7:c9:d3:95:c1: f3:8d:d6:af:6f:7a:cf:0d:e0:85:aa:08:9f:95:50: 9c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B0:78:06:6D:1A:C2:9E:9B:EE:77:BB:65:8A:8C:E0:A1:CE:BB:39 X509v3 Authority Key Identifier: keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:b7:5f:7b:69:fe:b1:f3:52:bc:f8:40:9f:d0:43:69:25:c0: 42:14:ad:44:29:06:3a:fc:41:79:7a:c1:00:f4:cf:d5:f0:95: 65:3d:43:fb:81:36:58:8c:35:21:32:23:e6:6a:1d:4d:d0:1a: af:fa:2f:c9:2c:f5:9a:4e:e3:bd:47:4e:24:f4:4b:47:39:bf: 35:c7:63:3a:4c:a0:19:f0:29:d8:ce:75:15:b1:e9:8b:79:8b: 39:25:c9:c4:7e:67:83:13:56:fe:88:7e:fb:7b:d3:bc:91:dc: ac:01:d3:b7:54:77:6e:dd:9a:3d:7c:fe:b2:42:f0:e5:59:0f: 39:0a:39:32:d6:47:88:9c:12:60:6b:16:d3:8c:9a:1c:a4:d6: 81:91:0d:7b:e7:d3:f4:85:0b:2d:70:8f:81:62:94:e8:04:b6: cb:7e:01:15:da:c7:5b:eb:b0:d4:c1:92:61:6b:e8:0a:b5:bd: 0e:61:aa:b9:ba:cf:e3:c4:7c:a3:5b:1c:0a:ed:2a:45:9b:6f: 7a:31:02:a4:5e:b5:9b:6c:7a:fe:f5:59:a5:85:73:93:88:95: ad:7c:91:6a:a8:90:4f:78:79:41:f7:9f:b9:c2:e2:90:85:01: e5:10:66:b7:c8:ca:ef:a3:3b:9d:47:7b:42:ff:cf:67:e7:55: 00:b4:c6:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTgxMTAvBgNVBAUTKEQ2OTYxQURBOENENTc3Q0MzM0Q3MUE5QTJEQzgxQjBD MTkyNUFDOTgwHhcNMjUwNzAzMDMyMzI4WhcNMjUwNzEwMDMyMzI4WjAYMRYwFAYD VQQDEw02ODY1ZjdiMC1kOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw07d8nAMeSnXiPmAHTk0yflHljwf6kUMInj6M9+rBloIcbjN1GqueE8Wtl9m 6D2WcKoh5mzTdwJ87uyvGPVH3N5RUfQkOa+yrHazH4eY1YXHLZNfB60Te4E7eIpt g+iL+pVx+H5J4s3OMo0pt1iB6ggobemajwmg03X6s856wARstqvF79qPriDPeyd/ +Uwf7TJZu5Fky9z6oPKJ0RpW6hiZPPOAp5/1E5tKCZ8PpBXxbxMwWTUlDwCN/FmQ Xv/qnFf6Ry0Xgyw8c3i5K6wcfXdYGq0woiRHpyXAigglZqcCQIn6/xtxq7k/98nT lcHzjdavb3rPDeCFqgiflVCcCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOweAZt GsKem+53u2WKjOChzrs5MB8GA1UdIwQYMBaAFNaWGtqM1XfMM9cami3IGwwZJayY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBOC8wNTY2MDkyNkQ0 NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4d3oxeHFhTGNnYkRCa2xy SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwWWEyb3pWZDh3ejF4cWFMY2diREJrbHJKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBOC8wNTY2MDkyNkQ0NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4 d3oxeHFhTGNnYkRCa2xySmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFt197af6x81K8+ECf0ENpJcBCFK1EKQY6/EF5esEA9M/V8JVlPUP7 gTZYjDUhMiPmah1N0Bqv+i/JLPWaTuO9R04k9EtHOb81x2M6TKAZ8CnYznUVsemL eYs5JcnEfmeDE1b+iH77e9O8kdysAdO3VHdu3Zo9fP6yQvDlWQ85Cjky1keInBJg axbTjJocpNaBkQ1759P0hQstcI+BYpToBLbLfgEV2sdb67DUwZJha+gKtb0OYaq5 us/jxHyjWxwK7SpFm296MQKkXrWbbHr+9VmlhXOTiJWtfJFqqJBPeHlB95+5wuKQ hQHlEGa3yMrvozudR3tC/89n51UAtMZc -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:12 2025 by rpki-client