$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json) Hash identifier: 3oQtcBJgb4NCE9MA9OnzhGdgfoYkCO8p4ZPMP8mJ9Ds= Subject key identifier: 39:F3:87:E7:ED:F3:5C:7F:A9:1A:0D:8E:8F:35:27:1E:D0:34:A1:9A Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft Manifest number: 019E Signing time: Sat 21 Jun 2025 02:37:05 +0000 Manifest this update: Sat 21 Jun 2025 02:37:05 +0000 Manifest next update: Sat 28 Jun 2025 02:37:05 +0000 Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: hDJblq1nsaydasLBkjOaIw6xqOhFFiE5YnF0kT467Xc=) 2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: 95TYzLOqwMphVUCVsji8mDMvFKrsCaokY8ysHX5ZUv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Validity Not Before: Jun 21 02:37:05 2025 GMT Not After : Jun 28 02:37:05 2025 GMT Subject: CN=68561ad1-c705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fc:15:4b:4d:bb:77:d9:98:16:f0:45:d8:02: 82:f8:29:9a:d9:c3:8b:bb:c7:fe:d0:37:e6:9f:26: 6b:dc:cb:f7:23:1a:f4:6f:b2:71:00:90:b7:34:bf: 61:a4:18:75:bb:34:e0:b5:5d:68:78:b0:38:01:4f: 7e:96:3a:9d:7d:59:09:e2:97:0e:9f:54:58:10:6a: 2a:e3:dc:6c:22:d6:10:10:f6:19:68:20:6d:cb:25: 40:a6:a2:c3:fb:cb:f7:2d:d7:bf:56:85:24:4a:2d: 59:d0:6a:0f:41:9d:ae:81:7d:d1:d2:93:39:24:c4: 43:1a:d0:46:90:50:84:d6:1d:ac:17:85:6a:4c:d8: f1:f9:b4:23:06:a2:0b:fc:5a:96:b4:90:28:1f:aa: b5:9a:4a:4c:1d:9b:e1:a9:5b:2f:b3:19:8c:ad:81: 6b:fa:4a:73:e2:4a:f3:f9:3c:b6:1f:fc:5a:3d:8b: ff:3a:29:e3:bc:27:d5:f3:f9:c7:e5:99:e7:cb:75: 7d:8e:72:70:b8:a1:0c:95:4b:74:63:21:05:52:6e: e5:6a:1c:8c:1e:89:93:5d:3a:16:d8:59:b6:82:36: 32:4e:8f:2f:27:13:34:65:42:2d:8c:83:09:b7:cc: e4:21:8c:8e:7a:67:f9:7e:97:25:ab:1d:35:0d:ba: 94:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F3:87:E7:ED:F3:5C:7F:A9:1A:0D:8E:8F:35:27:1E:D0:34:A1:9A X509v3 Authority Key Identifier: keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f4:98:62:c5:09:47:ca:f4:f9:83:fe:a1:2a:99:c9:0f:0a: 5d:f6:3f:e9:4b:31:3c:b8:22:7e:b5:6b:be:d9:a8:c2:60:ba: 61:5b:0c:0c:df:39:31:a8:c8:87:2e:09:a1:2a:2a:99:67:86: 42:5a:be:75:ea:df:6e:e3:71:13:ce:17:b9:00:06:8e:1a:42: 32:82:9c:2f:93:96:a0:6b:78:e7:10:b2:ba:0d:13:b1:23:a9: 66:73:b4:8e:56:4a:a9:fa:7f:ad:17:ba:49:78:a1:7f:db:3a: 0d:be:1a:56:a0:85:7d:4c:d9:7d:f4:f2:90:de:e1:34:22:34: 65:6a:9f:84:5a:a6:31:4b:b5:12:46:07:75:70:55:22:0b:7d: bf:1f:75:68:de:09:7b:fa:e9:57:58:1a:71:f3:37:e5:b1:f3: 28:73:02:36:56:b8:83:f1:5d:5b:30:00:fd:0f:08:7b:c0:a6: 31:d6:5b:d3:84:e1:32:98:b1:2f:4f:85:12:54:34:f9:49:a3: 92:76:df:05:c9:7c:28:09:8e:af:ce:6b:13:01:7d:d6:0c:6f: 53:3e:5e:1d:45:c2:d6:83:1c:ec:66:78:17:74:24:86:20:1f: d6:7f:c4:ac:52:09:64:7d:3a:8d:9f:4f:a2:04:86:ed:41:93: d8:79:bf:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTgxMTAvBgNVBAUTKEQ2OTYxQURBOENENTc3Q0MzM0Q3MUE5QTJEQzgxQjBD MTkyNUFDOTgwHhcNMjUwNjIxMDIzNzA1WhcNMjUwNjI4MDIzNzA1WjAYMRYwFAYD VQQDEw02ODU2MWFkMS1jNzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PwVS027d9mYFvBF2AKC+Cma2cOLu8f+0DfmnyZr3Mv3Ixr0b7JxAJC3NL9h pBh1uzTgtV1oeLA4AU9+ljqdfVkJ4pcOn1RYEGoq49xsItYQEPYZaCBtyyVApqLD +8v3Lde/VoUkSi1Z0GoPQZ2ugX3R0pM5JMRDGtBGkFCE1h2sF4VqTNjx+bQjBqIL /FqWtJAoH6q1mkpMHZvhqVsvsxmMrYFr+kpz4krz+Ty2H/xaPYv/OinjvCfV8/nH 5Znny3V9jnJwuKEMlUt0YyEFUm7lahyMHomTXToW2Fm2gjYyTo8vJxM0ZUItjIMJ t8zkIYyOemf5fpclqx01DbqUKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnzh+ft 81x/qRoNjo81Jx7QNKGaMB8GA1UdIwQYMBaAFNaWGtqM1XfMM9cami3IGwwZJayY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBOC8wNTY2MDkyNkQ0 NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4d3oxeHFhTGNnYkRCa2xy SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwWWEyb3pWZDh3ejF4cWFMY2diREJrbHJKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBOC8wNTY2MDkyNkQ0NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4 d3oxeHFhTGNnYkRCa2xySmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA49JhixQlHyvT5g/6hKpnJDwpd9j/pSzE8uCJ+tWu+2ajCYLphWwwM 3zkxqMiHLgmhKiqZZ4ZCWr516t9u43ETzhe5AAaOGkIygpwvk5aga3jnELK6DROx I6lmc7SOVkqp+n+tF7pJeKF/2zoNvhpWoIV9TNl99PKQ3uE0IjRlap+EWqYxS7US Rgd1cFUiC32/H3Vo3gl7+ulXWBpx8zflsfMocwI2VriD8V1bMAD9Dwh7wKYx1lvT hOEymLEvT4USVDT5SaOSdt8FyXwoCY6vzmsTAX3WDG9TPl4dRcLWgxzsZngXdCSG IB/Wf8SsUglkfTqNn0+iBIbtQZPYeb9x -----END CERTIFICATE-----Generated at Sat Jun 21 04:40:46 2025 by rpki-client