$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json) Hash identifier: sDeH7RX+EUjPCZAJdSeWph9dobLIeI8+ejpC7Rt8vAI= Subject key identifier: D2:53:FE:0E:15:38:7F:14:1C:25:9C:DF:8C:2A:C7:09:ED:E4:2F:3F Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft Manifest number: 01B8 Signing time: Mon 11 Aug 2025 03:11:58 +0000 Manifest this update: Mon 11 Aug 2025 03:11:57 +0000 Manifest next update: Mon 18 Aug 2025 03:11:57 +0000 Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: 66HkfTk6TC4zyTkRX6FkVeQ0JGncQEoIrd74WLuuhuQ=) 2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: 95TYzLOqwMphVUCVsji8mDMvFKrsCaokY8ysHX5ZUv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Validity Not Before: Aug 11 03:11:57 2025 GMT Not After : Aug 18 03:11:57 2025 GMT Subject: CN=68995f7e-2fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:52:40:6a:41:d3:09:92:ba:cc:25:d9:d0: f7:76:d6:77:27:49:57:0c:32:43:d0:3c:fe:3c:c5: 7a:52:26:d5:85:d3:74:09:09:9e:0a:46:9c:0c:a1: 33:cf:c5:01:ce:96:f2:d2:99:0a:10:66:6f:af:1c: 4d:45:f0:9b:bb:07:38:f3:4e:64:95:ea:1b:62:e3: 0d:63:72:ff:da:07:22:e6:38:d0:09:d4:3f:cb:6d: fc:01:e4:11:de:fd:9b:12:ff:cb:af:75:3e:ee:a2: d3:55:40:6a:7a:8b:6f:86:ca:93:aa:7f:13:96:03: e3:0f:f7:b8:96:fa:48:c6:bc:b9:3b:cf:8f:1c:e7: 27:c9:ef:72:e7:49:01:98:f9:5e:fe:71:fd:ce:39: 89:0a:30:65:17:d6:1b:ce:ef:43:4d:24:71:6e:14: 15:4b:cc:12:38:9d:4e:63:c0:38:5f:0f:61:8a:8a: 02:c5:0a:04:23:ac:b3:76:d4:1d:1c:f3:39:ce:10: 06:fa:5c:68:c3:3d:d5:8b:39:57:d6:8c:c9:22:06: b4:e2:95:19:5b:25:2c:18:83:50:ee:04:0e:f2:46: 42:b3:4e:d8:16:60:8f:2e:89:09:6a:64:14:7b:47: 87:e0:b9:4a:b9:65:d9:8d:94:24:43:b0:f9:10:fa: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:53:FE:0E:15:38:7F:14:1C:25:9C:DF:8C:2A:C7:09:ED:E4:2F:3F X509v3 Authority Key Identifier: keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:59:3a:9a:3e:18:20:7c:e1:33:6e:e8:fe:d2:57:15:9d:89: fc:1b:71:96:2f:68:5d:b4:2f:2c:7c:13:a2:b0:9c:1e:30:c2: b6:89:be:f5:a7:38:55:5c:da:9a:c7:fb:ca:44:21:99:fa:19: 9f:19:d2:9d:78:7b:5c:56:07:15:30:04:c1:3d:f7:c1:03:8f: a0:98:6f:aa:c8:c4:76:ee:45:6d:2d:29:ab:25:6f:62:00:f9: 02:fd:2a:c7:cc:17:74:5f:76:f1:fe:04:73:2e:2a:8d:06:d0: e7:b9:c9:ed:3e:f2:05:5f:21:3c:5e:bf:c5:54:d2:ac:e0:58: 5f:8d:4b:57:90:cc:d2:45:38:68:b6:29:c0:05:1d:07:cf:6d: 09:35:91:03:f4:1a:5f:d0:85:e3:0e:77:11:f5:ff:e1:1b:b5: 52:1a:b0:71:07:cc:ea:d3:e7:e2:7d:ee:fa:c4:00:9b:b1:71: b9:2d:7b:2b:bb:48:75:70:1f:3d:df:39:05:32:e9:e9:89:a0: c3:2f:7b:5b:90:8a:c2:b1:c4:58:dd:e3:4a:c7:e5:58:23:bd: 31:51:04:7a:1c:1a:e0:0c:55:4e:60:e5:58:7e:4e:1b:2f:a8: 6d:dd:02:51:32:80:46:1b:e9:d3:a1:65:58:76:f9:3d:05:45: ce:f2:da:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTgxMTAvBgNVBAUTKEQ2OTYxQURBOENENTc3Q0MzM0Q3MUE5QTJEQzgxQjBD MTkyNUFDOTgwHhcNMjUwODExMDMxMTU3WhcNMjUwODE4MDMxMTU3WjAYMRYwFAYD VQQDEw02ODk5NWY3ZS0yZmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcpSQGpB0wmSuswl2dD3dtZ3J0lXDDJD0Dz+PMV6UibVhdN0CQmeCkacDKEz z8UBzpby0pkKEGZvrxxNRfCbuwc4805kleobYuMNY3L/2gci5jjQCdQ/y238AeQR 3v2bEv/Lr3U+7qLTVUBqeotvhsqTqn8TlgPjD/e4lvpIxry5O8+PHOcnye9y50kB mPle/nH9zjmJCjBlF9Ybzu9DTSRxbhQVS8wSOJ1OY8A4Xw9hiooCxQoEI6yzdtQd HPM5zhAG+lxowz3VizlX1ozJIga04pUZWyUsGINQ7gQO8kZCs07YFmCPLokJamQU e0eH4LlKuWXZjZQkQ7D5EPrHKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJT/g4V OH8UHCWc34wqxwnt5C8/MB8GA1UdIwQYMBaAFNaWGtqM1XfMM9cami3IGwwZJayY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBOC8wNTY2MDkyNkQ0 NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4d3oxeHFhTGNnYkRCa2xy SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwWWEyb3pWZDh3ejF4cWFMY2diREJrbHJKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBOC8wNTY2MDkyNkQ0NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4 d3oxeHFhTGNnYkRCa2xySmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJWTqaPhggfOEzbuj+0lcVnYn8G3GWL2hdtC8sfBOisJweMMK2ib71 pzhVXNqax/vKRCGZ+hmfGdKdeHtcVgcVMATBPffBA4+gmG+qyMR27kVtLSmrJW9i APkC/SrHzBd0X3bx/gRzLiqNBtDnucntPvIFXyE8Xr/FVNKs4FhfjUtXkMzSRTho tinABR0Hz20JNZED9Bpf0IXjDncR9f/hG7VSGrBxB8zq0+fife76xACbsXG5LXsr u0h1cB893zkFMunpiaDDL3tbkIrCscRY3eNKx+VYI70xUQR6HBrgDFVOYOVYfk4b L6ht3QJRMoBGG+nToWVYdvk9BUXO8tqX -----END CERTIFICATE-----Generated at Tue Aug 12 18:55:32 2025 by rpki-client