$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: MVAnkd/CHTHOtI0o7PsIV9Xuze3gVYNrRscFU3tsea0= Subject key identifier: 51:F2:80:BC:B8:FA:89:AC:5E:87:A2:44:4A:70:37:A8:A5:1F:B1:B8 Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 018A Signing time: Mon 11 Aug 2025 03:53:34 +0000 Manifest this update: Mon 11 Aug 2025 03:53:34 +0000 Manifest next update: Mon 18 Aug 2025 03:53:33 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: HYMTbnJ8VkRqfQBaMIwIC1W9TO3J9fDP4qYOCfVaKdk=) 2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: ZjKANzm7zReBCIok2fJWs9C78AGhsAM7u7/O7bhMPec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Aug 11 03:53:34 2025 GMT Not After : Aug 18 03:53:33 2025 GMT Subject: CN=6899693e-ab38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c5:99:ab:87:1a:09:52:03:07:a4:ed:bf:ea: 08:7f:0a:70:7e:bc:72:56:ab:b8:29:3c:eb:28:81: 03:53:41:82:61:87:6e:b5:b0:ef:52:2e:db:a8:07: 61:24:c4:29:83:fd:79:75:b3:b4:1c:3a:7b:52:79: 06:99:d1:6f:6c:54:14:2c:01:c1:63:67:99:5a:5c: 99:f2:fb:80:06:73:46:e9:5e:ec:b1:30:94:0d:7e: 7a:c2:c6:f8:2c:cd:84:12:be:8e:58:56:26:10:ce: db:1e:dd:c8:65:31:42:b4:7f:b3:19:3f:ea:8f:79: aa:86:ac:68:b5:be:56:98:cd:02:c2:89:01:14:4e: 32:99:dc:ff:6d:8f:f6:ab:43:91:63:9d:5e:8c:cf: ea:24:27:7d:7b:7d:f5:de:2d:a6:b6:6e:1b:b7:8a: 44:17:3b:d5:bf:d6:b8:e9:eb:be:af:91:69:c7:a9: 22:ba:bd:7d:de:8d:b4:b2:a0:19:ff:24:26:d9:94: 2c:5d:e1:63:7d:16:dc:79:c3:be:bb:15:bf:99:59: 53:6a:ff:db:02:96:0a:14:b2:ff:08:21:f6:3d:a3: d5:9e:49:d4:fc:c7:4b:0b:3b:2e:d3:ad:d2:07:0f: 50:a2:b4:69:74:1e:2e:81:67:aa:f8:aa:bc:df:23: 11:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F2:80:BC:B8:FA:89:AC:5E:87:A2:44:4A:70:37:A8:A5:1F:B1:B8 X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:36:fe:b1:85:80:a8:e3:20:0e:c6:86:cd:1e:d8:9c:77:d8: 9d:3d:1d:bd:82:e5:2c:6a:36:23:2b:80:76:11:89:79:4b:4b: c4:74:58:11:3a:5d:5e:6b:04:09:6a:12:b5:b4:ca:da:9f:36: 56:34:49:30:a0:f4:69:b5:56:ac:ca:39:d8:88:e9:9c:76:dc: 78:4e:73:19:31:78:5b:ff:49:32:48:3f:83:28:86:3a:1d:69: 4d:07:cf:38:78:b1:87:8a:40:35:ac:c8:e9:41:dc:d2:35:45: 06:b2:6d:d2:cf:18:38:49:62:da:06:77:47:e4:01:46:7a:ad: 0d:08:43:5c:ec:6b:63:a1:ce:36:9b:b6:1b:42:4b:56:ed:a8: 55:9e:0a:3c:b6:89:ef:4f:31:d8:38:b6:87:9f:c7:c9:ec:ff: 35:68:aa:9d:68:ff:08:4c:d8:aa:a5:14:94:c1:4f:c7:9a:60: 36:69:86:93:b2:57:d4:ec:56:e2:12:c1:4b:ec:69:98:2d:1d: b5:db:0f:40:81:fc:a4:95:ef:83:c4:e3:cf:4f:79:84:85:1b: 02:5b:17:b5:d0:5e:c1:62:d5:24:5d:fe:a1:bd:92:70:98:59: 5e:1d:1c:76:f2:2b:79:4c:a6:de:82:64:b5:7c:ad:6b:26:a1: 1b:f1:04:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUwODExMDM1MzM0WhcNMjUwODE4MDM1MzMzWjAYMRYwFAYD VQQDEw02ODk5NjkzZS1hYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMWZq4caCVIDB6Ttv+oIfwpwfrxyVqu4KTzrKIEDU0GCYYdutbDvUi7bqAdh JMQpg/15dbO0HDp7UnkGmdFvbFQULAHBY2eZWlyZ8vuABnNG6V7ssTCUDX56wsb4 LM2EEr6OWFYmEM7bHt3IZTFCtH+zGT/qj3mqhqxotb5WmM0CwokBFE4ymdz/bY/2 q0ORY51ejM/qJCd9e3313i2mtm4bt4pEFzvVv9a46eu+r5Fpx6kiur193o20sqAZ /yQm2ZQsXeFjfRbcecO+uxW/mVlTav/bApYKFLL/CCH2PaPVnknU/MdLCzsu063S Bw9QorRpdB4ugWeq+Kq83yMRdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHygLy4 +omsXoeiREpwN6ilH7G4MB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrNv6xhYCo4yAOxobNHticd9idPR29guUsajYjK4B2EYl5S0vEdFgR Ol1eawQJahK1tMranzZWNEkwoPRptVasyjnYiOmcdtx4TnMZMXhb/0kySD+DKIY6 HWlNB884eLGHikA1rMjpQdzSNUUGsm3Szxg4SWLaBndH5AFGeq0NCENc7Gtjoc42 m7YbQktW7ahVngo8tonvTzHYOLaHn8fJ7P81aKqdaP8ITNiqpRSUwU/HmmA2aYaT slfU7FbiEsFL7GmYLR212w9Agfykle+DxOPPT3mEhRsCWxe10F7BYtUkXf6hvZJw mFleHRx28it5TKbegmS1fK1rJqEb8QT8 -----END CERTIFICATE-----Generated at Mon Aug 11 07:27:59 2025 by rpki-client