$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: 6gNEZKSeynNJoyjCl7KuoIH/bUrHkMJOetKoutJ8A64= Subject key identifier: 6A:01:78:90:44:ED:29:05:E3:0D:AA:86:0D:A0:9A:8A:DB:7F:9F:EE Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 018F Signing time: Thu 21 Aug 2025 03:50:34 +0000 Manifest this update: Thu 21 Aug 2025 03:50:34 +0000 Manifest next update: Thu 28 Aug 2025 03:50:34 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: VEjTzEKQv1/2mS5Qz/RayQWjo3qpiOKltGLtujKby5I=) 2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: ZjKANzm7zReBCIok2fJWs9C78AGhsAM7u7/O7bhMPec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Aug 21 03:50:34 2025 GMT Not After : Aug 28 03:50:34 2025 GMT Subject: CN=68a6978a-8ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:5a:6d:7b:1c:8b:63:dc:88:82:01:47:8b: bf:be:15:ea:9e:6e:4d:8e:d0:f0:4f:df:44:91:12: 4d:7a:b0:91:5a:26:40:d6:c5:1b:76:54:05:17:4c: a0:c0:3d:58:92:88:af:4e:36:ba:69:0c:7a:8a:86: 54:b9:e5:57:cc:35:fe:02:5e:6f:c2:0a:c1:4e:27: 17:be:44:e2:a7:90:f9:8d:7c:dd:aa:99:0f:83:08: 80:e2:5b:bd:bc:aa:05:f8:8d:43:c0:a3:30:3b:aa: 0f:84:f4:57:37:05:1d:35:15:77:04:df:88:d5:b2: ae:fa:77:b0:7b:11:3b:97:21:8f:8d:49:60:fa:fc: 50:dc:12:e2:26:1d:b6:11:91:0d:43:9b:01:3e:63: be:e8:9e:33:42:95:c4:e4:96:b4:85:fa:bc:24:b6: e2:74:c7:6c:4f:71:83:5e:50:50:f9:45:5a:7b:94: 24:a8:92:cf:2b:24:b9:48:b4:7e:ed:76:c9:0a:71: 38:ad:e1:f0:07:70:36:bd:52:22:09:ab:cb:2e:a1: 71:c0:5a:c9:15:c9:8d:e9:66:c4:5f:96:be:a0:d6: 37:6c:f7:e9:dc:c0:8f:72:a3:6f:3a:43:74:94:1e: 3c:6d:ac:a1:61:b5:fe:7a:32:bf:c0:8b:ab:39:08: 91:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:01:78:90:44:ED:29:05:E3:0D:AA:86:0D:A0:9A:8A:DB:7F:9F:EE X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ce:fc:af:d7:bf:79:e7:2f:54:61:f5:c4:55:2a:08:fc:70: c8:5d:20:30:a9:97:eb:dc:00:66:13:72:24:e1:83:a3:b6:df: 4a:e3:45:73:e4:0f:4e:37:99:eb:7e:a1:21:c3:10:8e:c2:b5: 61:a0:d0:c4:76:d5:6c:71:41:e4:c3:3d:9b:59:7c:62:43:19: 4b:5d:08:dc:17:9e:17:04:2b:56:f3:94:4e:e9:32:27:a2:4c: da:af:f5:9c:db:18:81:eb:f7:26:9d:4f:9d:78:4c:56:d0:61: 79:c9:c0:4a:5a:4a:24:fb:42:6c:f5:4c:98:0a:94:20:b1:30: 51:83:39:8e:33:b0:30:32:ff:e5:9a:93:48:ae:d7:cd:41:75: b1:39:50:c9:09:e4:8f:65:57:1c:6a:20:84:13:c5:b0:13:4c: 97:fa:df:d6:31:d8:57:b8:75:b6:37:e1:ad:11:d2:2f:32:de: 99:c9:ae:eb:4c:ea:62:6e:3f:36:aa:08:b4:89:81:fa:7d:71: 44:96:ab:14:97:8a:88:36:a7:da:c6:95:04:4b:27:41:5d:c4: f7:07:b4:7b:9d:46:86:64:6e:cb:80:cf:db:b6:ba:25:15:d7: d5:9f:da:ca:6e:b4:27:2f:86:b6:58:67:3f:4e:6c:84:82:b6: 7b:20:46:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUwODIxMDM1MDM0WhcNMjUwODI4MDM1MDM0WjAYMRYwFAYD VQQDEw02OGE2OTc4YS04ZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvR1abXsci2PciIIBR4u/vhXqnm5NjtDwT99EkRJNerCRWiZA1sUbdlQFF0yg wD1YkoivTja6aQx6ioZUueVXzDX+Al5vwgrBTicXvkTip5D5jXzdqpkPgwiA4lu9 vKoF+I1DwKMwO6oPhPRXNwUdNRV3BN+I1bKu+newexE7lyGPjUlg+vxQ3BLiJh22 EZENQ5sBPmO+6J4zQpXE5Ja0hfq8JLbidMdsT3GDXlBQ+UVae5QkqJLPKyS5SLR+ 7XbJCnE4reHwB3A2vVIiCavLLqFxwFrJFcmN6WbEX5a+oNY3bPfp3MCPcqNvOkN0 lB48bayhYbX+ejK/wIurOQiRrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoBeJBE 7SkF4w2qhg2gmorbf5/uMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByzvyv17955y9UYfXEVSoI/HDIXSAwqZfr3ABmE3Ik4YOjtt9K40Vz 5A9ON5nrfqEhwxCOwrVhoNDEdtVscUHkwz2bWXxiQxlLXQjcF54XBCtW85RO6TIn okzar/Wc2xiB6/cmnU+deExW0GF5ycBKWkok+0Js9UyYCpQgsTBRgzmOM7AwMv/l mpNIrtfNQXWxOVDJCeSPZVccaiCEE8WwE0yX+t/WMdhXuHW2N+GtEdIvMt6Zya7r TOpibj82qgi0iYH6fXFElqsUl4qINqfaxpUESydBXcT3B7R7nUaGZG7LgM/btrol FdfVn9rKbrQnL4a2WGc/TmyEgrZ7IEa6 -----END CERTIFICATE-----Generated at Thu Aug 21 16:35:03 2025 by rpki-client