$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: SnJYKg8JzL9Xfa4xXCmu6M46uh0thwdUpBpB6hvWopo= Subject key identifier: 19:31:20:82:12:84:CE:D3:9C:F2:F8:00:B3:A9:28:62:69:B5:BF:6F Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 01B5 Signing time: Mon 03 Nov 2025 03:19:10 +0000 Manifest this update: Mon 03 Nov 2025 03:19:09 +0000 Manifest next update: Mon 10 Nov 2025 03:19:09 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: wHZCuWlGMx26Pl4/j4jUNMS1XJECU+Ci9rk8UpB0+ug=) 2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: ZjKANzm7zReBCIok2fJWs9C78AGhsAM7u7/O7bhMPec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Nov 3 03:19:09 2025 GMT Not After : Nov 10 03:19:09 2025 GMT Subject: CN=69081f2d-79d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:91:49:c8:14:29:e3:1c:87:c1:20:44:9c:bd: 08:34:70:34:fc:b8:9b:fc:7b:85:43:e4:b7:fd:23: be:53:56:7b:7a:4e:4c:9a:ac:7e:c5:cc:08:5b:8a: 47:a8:c0:79:e8:57:af:0d:a2:fd:81:dc:34:ee:18: f4:ce:f8:2b:ce:18:5e:40:e6:8d:79:8b:9f:20:45: 71:d2:7c:1a:b4:a9:e4:29:db:66:31:7c:79:94:1a: 4e:9d:5a:3f:2e:b1:46:04:39:9e:75:37:d7:fe:5e: 2d:ef:97:28:fc:03:c4:65:41:d8:7a:d7:a4:64:88: 54:84:88:8d:f4:03:87:20:59:66:e5:bb:5a:af:82: 6d:eb:0a:ce:ae:4c:d0:0d:8b:1f:ee:75:0b:68:e3: a5:da:3e:45:53:62:74:a2:25:b3:f7:d3:b8:ed:54: 31:0a:6e:0c:8f:34:32:5b:b9:8f:c1:27:21:16:da: ec:40:c4:57:a3:fd:2c:d2:c0:ef:76:5b:bd:7c:91: 67:20:10:e6:fd:b2:75:3d:6e:c5:df:d1:05:e6:cb: 28:97:30:98:db:75:b6:30:77:1a:2a:10:07:c1:05: 62:e2:ad:c0:ab:99:dc:e1:ad:ba:46:f2:57:aa:c1: 5e:be:47:20:bb:7f:29:4a:fb:1d:86:ee:6a:29:df: d5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:31:20:82:12:84:CE:D3:9C:F2:F8:00:B3:A9:28:62:69:B5:BF:6F X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:56:38:08:f7:93:ef:8b:ac:35:a0:11:15:0b:b5:e6:dc:f9: 37:ab:b1:35:e1:a7:60:bb:12:90:ae:84:32:a9:29:0e:c9:36: 4f:32:0a:6e:ef:37:64:f5:fc:b6:a6:ca:20:12:c2:63:2e:c7: d9:60:1f:dc:5b:41:eb:b2:97:64:6f:2c:aa:68:6c:2a:5e:bd: 07:82:06:e6:2b:5f:bd:ee:03:f2:2a:ca:37:d3:30:74:06:1f: 90:ed:ea:e3:09:b0:9c:5b:8e:ec:21:c5:81:1e:eb:a2:25:25: f3:1f:da:92:42:d5:c9:49:b3:c3:77:7c:6a:3f:ec:c0:82:e3: 38:d5:4a:3c:f8:e0:b4:21:00:18:07:0c:55:76:6b:f0:22:6e: 03:d4:05:b2:41:2a:7a:1d:48:c0:06:74:22:3e:02:ad:5c:72: f9:df:0b:cd:0b:f2:c1:c3:d7:e1:81:5a:f8:77:f2:1c:a8:91: 24:9c:b1:0f:6e:18:9a:04:76:ec:63:eb:5e:e1:47:d8:c2:db: 52:30:2f:73:fc:1d:35:da:65:39:4e:1c:8f:fa:1e:4b:67:82: 1c:1f:17:47:70:3f:40:14:86:59:2e:f6:f8:c9:35:2c:45:1f: 51:b6:01:8a:62:f8:3b:b5:91:23:0a:b7:f2:88:78:b4:d5:18: eb:a4:47:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUxMTAzMDMxOTA5WhcNMjUxMTEwMDMxOTA5WjAYMRYwFAYD VQQDEw02OTA4MWYyZC03OWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZFJyBQp4xyHwSBEnL0INHA0/Lib/HuFQ+S3/SO+U1Z7ek5Mmqx+xcwIW4pH qMB56FevDaL9gdw07hj0zvgrzhheQOaNeYufIEVx0nwatKnkKdtmMXx5lBpOnVo/ LrFGBDmedTfX/l4t75co/APEZUHYetekZIhUhIiN9AOHIFlm5btar4Jt6wrOrkzQ DYsf7nULaOOl2j5FU2J0oiWz99O47VQxCm4MjzQyW7mPwSchFtrsQMRXo/0s0sDv dlu9fJFnIBDm/bJ1PW7F39EF5ssolzCY23W2MHcaKhAHwQVi4q3Aq5nc4a26RvJX qsFevkcgu38pSvsdhu5qKd/ViQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkxIIIS hM7TnPL4ALOpKGJptb9vMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXVjgI95Pvi6w1oBEVC7Xm3Pk3q7E14adguxKQroQyqSkOyTZPMgpu 7zdk9fy2psogEsJjLsfZYB/cW0HrspdkbyyqaGwqXr0HggbmK1+97gPyKso30zB0 Bh+Q7erjCbCcW47sIcWBHuuiJSXzH9qSQtXJSbPDd3xqP+zAguM41Uo8+OC0IQAY BwxVdmvwIm4D1AWyQSp6HUjABnQiPgKtXHL53wvNC/LBw9fhgVr4d/IcqJEknLEP bhiaBHbsY+te4UfYwttSMC9z/B012mU5ThyP+h5LZ4IcHxdHcD9AFIZZLvb4yTUs RR9RtgGKYvg7tZEjCrfyiHi01RjrpEfb -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:18 2025 by rpki-client