$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: SczKbzUmEHZxgLArag2aQmRlsnnI80H7lDo7y9KBiD4= Subject key identifier: 9B:13:B3:C4:C1:ED:68:6E:5C:06:0B:24:6C:22:BC:C7:1F:AF:DD:CA Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 0167 Signing time: Fri 13 Jun 2025 03:04:47 +0000 Manifest this update: Fri 13 Jun 2025 03:04:46 +0000 Manifest next update: Fri 20 Jun 2025 03:04:46 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: 3UIwIoYC+NnHU57iIKUKpIbmBgNUH402o9xzPz1bFxw=) 2: C606792CD3C811EFA4C15D2FC4F9AE02.roa (hash: RhIG4rVv0sC6eQgj2JPpIA3cTSID02u0FgU4lPWL4Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Jun 13 03:04:46 2025 GMT Not After : Jun 20 03:04:46 2025 GMT Subject: CN=684b954e-970c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:76:b5:b5:8f:0c:68:42:19:80:06:ef:37:9d: 2c:d8:e6:5b:ec:31:11:6d:6c:15:46:da:e9:46:37: d6:3e:01:37:f1:5a:5f:b6:62:05:33:2a:9e:62:51: 27:2a:e7:91:a3:40:25:b8:9b:16:56:2a:1b:c3:97: 4d:81:00:1e:cb:14:b0:65:c7:34:47:06:be:94:d4: ba:d3:88:82:6f:d3:3d:8e:e8:5e:de:e6:69:fe:19: 96:c9:ea:3b:b6:d7:1d:3c:dc:4d:b7:ea:ae:6a:ef: 9f:ca:fa:b0:3d:9e:33:68:bb:75:c2:f2:0f:29:c5: 31:82:a9:75:56:a9:a6:e4:ad:bd:23:3c:bb:0f:84: 65:39:0c:45:70:21:99:2a:9b:7b:0c:76:15:e6:81: 02:3b:66:b8:6a:02:f9:39:6e:9f:10:d9:ba:e5:da: 07:23:f5:b2:88:ea:d7:85:f8:04:90:2b:03:31:1e: a5:e4:49:63:72:ac:4f:d4:36:60:d5:d9:08:6d:76: ac:04:1d:60:46:3b:47:5c:99:da:63:fc:45:9c:ac: 8f:9f:6d:97:a3:d0:b0:1c:62:68:3a:47:11:0d:9b: 73:02:d1:c8:08:61:f3:cd:b9:ca:71:61:78:46:bd: 0e:54:7e:7b:d3:55:ea:bd:6a:7f:35:3a:b1:87:3f: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:13:B3:C4:C1:ED:68:6E:5C:06:0B:24:6C:22:BC:C7:1F:AF:DD:CA X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:7c:68:e7:7e:30:80:2e:d4:ca:a4:d6:b4:b3:50:02:a5:1e: c5:e4:7b:f0:0f:81:0d:98:34:36:8c:c1:06:f2:bf:aa:08:c1: a1:b3:71:7f:53:e6:c7:a5:ed:98:ed:15:c5:e9:6a:09:a2:2c: 39:05:0b:28:27:01:22:20:d1:7f:cc:22:9d:9c:22:8a:0c:21: 5e:40:fc:7f:af:a8:10:d4:29:2d:bc:11:a3:2d:17:ef:cb:be: bc:59:c5:5d:3c:9b:27:36:7c:86:eb:90:3e:64:43:f7:58:6b: 0a:1a:fb:6a:81:46:0b:03:6a:57:83:ea:87:88:29:2b:06:06: a0:34:26:31:cd:c6:cc:f7:f0:01:bf:45:0e:c4:c3:16:7b:b8: e2:ac:38:da:c3:12:4c:0f:b3:f8:22:89:12:18:5b:b0:1a:43: c6:22:9d:5e:11:07:e5:ea:36:c7:3c:8f:e9:ad:05:4e:99:07: 78:62:fd:27:9a:0d:42:9d:d4:8a:6a:10:1c:31:de:b3:f1:43: 8a:bd:77:d0:8c:3c:0a:73:1f:99:b7:7a:c3:06:20:f0:d1:92: 3d:97:d0:a2:64:24:da:59:95:1f:12:32:c5:57:eb:cd:04:cb: c0:6b:f0:44:94:d5:ae:5d:52:51:c5:81:6b:07:c3:4e:ca:25: 57:17:7c:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUwNjEzMDMwNDQ2WhcNMjUwNjIwMDMwNDQ2WjAYMRYwFAYD VQQDEw02ODRiOTU0ZS05NzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Xa1tY8MaEIZgAbvN50s2OZb7DERbWwVRtrpRjfWPgE38VpftmIFMyqeYlEn KueRo0AluJsWViobw5dNgQAeyxSwZcc0Rwa+lNS604iCb9M9juhe3uZp/hmWyeo7 ttcdPNxNt+quau+fyvqwPZ4zaLt1wvIPKcUxgql1Vqmm5K29Izy7D4RlOQxFcCGZ Kpt7DHYV5oECO2a4agL5OW6fENm65doHI/WyiOrXhfgEkCsDMR6l5EljcqxP1DZg 1dkIbXasBB1gRjtHXJnaY/xFnKyPn22Xo9CwHGJoOkcRDZtzAtHICGHzzbnKcWF4 Rr0OVH5701XqvWp/NTqxhz8ZgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsTs8TB 7WhuXAYLJGwivMcfr93KMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgfGjnfjCALtTKpNa0s1ACpR7F5HvwD4ENmDQ2jMEG8r+qCMGhs3F/ U+bHpe2Y7RXF6WoJoiw5BQsoJwEiINF/zCKdnCKKDCFeQPx/r6gQ1CktvBGjLRfv y768WcVdPJsnNnyG65A+ZEP3WGsKGvtqgUYLA2pXg+qHiCkrBgagNCYxzcbM9/AB v0UOxMMWe7jirDjawxJMD7P4IokSGFuwGkPGIp1eEQfl6jbHPI/prQVOmQd4Yv0n mg1CndSKahAcMd6z8UOKvXfQjDwKcx+Zt3rDBiDw0ZI9l9CiZCTaWZUfEjLFV+vN BMvAa/BElNWuXVJRxYFrB8NOyiVXF3xx -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:48 2025 by rpki-client