$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft File: ssb_p2w86pWbar20kn5QEjIHLWI.mft (raw, json) Hash identifier: pJ+S+p4rQ0U4Ux2IMXBFenfiW5Zq0eCo8CYXGfx5IMo= Subject key identifier: 9E:1A:F7:4C:21:36:A2:5F:DC:AA:EB:B7:58:A8:F5:AE:A8:A0:08:EF Authority key identifier: B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 Certificate issuer: /CN=A911BD0C/serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft Manifest number: 06 Signing time: Sun 11 May 2025 06:54:44 +0000 Manifest this update: Sun 11 May 2025 06:54:44 +0000 Manifest next update: Sun 18 May 2025 06:54:44 +0000 Files and hashes: 1: ssb_p2w86pWbar20kn5QEjIHLWI.crl (hash: qgEYwHA+r36KAny3hCytA79S6/gfjvOC39zgjTFsXDM=) 2: B977F0322B3411F08FD74443C4F9AE02.roa (hash: v+cdW5qRRy42rcVfsQ7WNZFoarz0/H2Wz0ZGcvG0ojI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD0C, serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Validity Not Before: May 11 06:54:44 2025 GMT Not After : May 18 06:54:44 2025 GMT Subject: CN=682049b4-fdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:28:8b:3e:a0:31:58:fc:60:48:52:67:34:66: f3:7a:b5:15:01:f2:eb:e3:c6:2d:53:2d:66:d9:7d: de:6c:d3:34:62:4f:ca:e3:b6:e9:d2:0f:90:87:b5: c7:60:d0:86:7b:4f:1a:8d:b1:25:e1:88:cc:b3:c6: c8:71:1d:70:5e:f4:aa:05:d0:70:81:21:67:7c:58: 0b:3e:6c:e3:a1:f2:9b:74:aa:dc:fb:44:dc:ed:8e: bb:2e:3d:76:e8:d4:4d:d9:74:41:be:82:ff:15:1a: d0:7c:e9:95:57:1c:16:8e:a0:6a:7a:7e:90:59:7f: a8:b9:33:f4:01:98:34:38:64:c0:65:44:76:14:82: 3a:30:04:4b:23:25:2f:76:45:0a:ac:5b:f5:2c:0f: 21:8c:3a:37:e3:54:71:77:bb:c2:f5:6f:56:a1:32: b8:3c:e8:22:18:e8:2f:b0:4a:e5:f0:80:27:c2:24: d1:56:dd:9d:83:50:48:83:e8:23:b5:5a:25:2e:7d: 2e:c0:90:17:09:1b:bc:b0:ed:35:15:50:ad:d5:ef: 0c:a7:42:d4:c3:d7:16:52:46:db:2e:a8:fe:77:b7: c5:7e:57:d1:3b:97:8b:10:de:b0:98:83:37:e7:ae: 88:79:0d:9f:64:ec:ed:59:d5:87:5f:97:94:3b:ad: b6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1A:F7:4C:21:36:A2:5F:DC:AA:EB:B7:58:A8:F5:AE:A8:A0:08:EF X509v3 Authority Key Identifier: keyid:B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:55:7e:4e:2f:75:3a:77:3e:2a:56:f4:aa:11:6a:78:19:be: be:c3:ea:5b:d8:1e:15:d7:83:70:8d:37:b2:a5:1b:5b:5b:fa: 13:c3:b8:31:ba:59:dd:c9:94:29:11:7b:98:ca:68:03:9a:87: 07:0d:88:cf:28:0b:f9:d3:04:49:5e:73:0e:96:e5:cb:a3:ec: 22:06:94:fe:2e:36:70:0d:66:9a:24:8f:de:6a:a8:e0:64:d7: a5:8b:00:60:6c:cf:17:9d:e4:01:cf:26:a0:00:48:70:dd:26: c3:37:2e:5a:f7:28:11:9d:94:40:a1:04:95:55:45:1b:92:1d: 4e:71:b7:79:a1:a3:8a:9c:a3:1b:dc:3e:12:64:ff:6d:ee:88: 17:76:e0:9c:eb:cc:8d:f0:53:1b:8b:e4:b3:58:7d:43:ff:55: 13:2c:f2:32:c4:e6:c6:34:10:74:e3:8f:d9:c1:bd:6c:01:fe: 16:c0:f5:26:4d:ce:96:05:16:3e:71:b9:2b:59:72:f5:73:1f: 7b:9f:85:10:8d:ff:1b:92:26:23:64:9e:c5:87:1c:05:5a:5c: 41:45:9d:11:8a:bd:dd:e6:c6:aa:e8:42:60:e6:00:77:a8:95: 5b:4b:ff:22:b4:8f:ae:66:e6:69:9f:2c:18:ba:e2:0e:0a:8c: bd:1d:d0:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQwQzExMC8GA1UEBRMoQjJDNkZGQTc2QzNDRUE5NTlCNkFCREI0OTI3RTUwMTIz MjA3MkQ2MjAeFw0yNTA1MTEwNjU0NDRaFw0yNTA1MTgwNjU0NDRaMBgxFjAUBgNV BAMTDTY4MjA0OWI0LWZkZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNKIs+oDFY/GBIUmc0ZvN6tRUB8uvjxi1TLWbZfd5s0zRiT8rjtunSD5CHtcdg 0IZ7TxqNsSXhiMyzxshxHXBe9KoF0HCBIWd8WAs+bOOh8pt0qtz7RNztjrsuPXbo 1E3ZdEG+gv8VGtB86ZVXHBaOoGp6fpBZf6i5M/QBmDQ4ZMBlRHYUgjowBEsjJS92 RQqsW/UsDyGMOjfjVHF3u8L1b1ahMrg86CIY6C+wSuXwgCfCJNFW3Z2DUEiD6CO1 WiUufS7AkBcJG7yw7TUVUK3V7wynQtTD1xZSRtsuqP53t8V+V9E7l4sQ3rCYgzfn roh5DZ9k7O1Z1Ydfl5Q7rba9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnhr3TCE2 ol/cquu3WKj1rqigCO8wHwYDVR0jBBgwFoAUssb/p2w86pWbar20kn5QEjIHLWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDBDL0JDMjE0MTVFMkIz MzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBXYmFyMjBrbjVRRWpJSExX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3NiX3Aydzg2cFdiYXIyMGtuNVFFaklITFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDBDL0JDMjE0MTVFMkIzMzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBX YmFyMjBrbjVRRWpJSExXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHpVfk4vdTp3PipW9KoRangZvr7D6lvYHhXXg3CNN7KlG1tb+hPDuDG6 Wd3JlCkRe5jKaAOahwcNiM8oC/nTBElecw6W5cuj7CIGlP4uNnANZpokj95qqOBk 16WLAGBszxed5AHPJqAASHDdJsM3Llr3KBGdlEChBJVVRRuSHU5xt3mho4qcoxvc PhJk/23uiBd24JzrzI3wUxuL5LNYfUP/VRMs8jLE5sY0EHTjj9nBvWwB/hbA9SZN zpYFFj5xuStZcvVzH3ufhRCN/xuSJiNknsWHHAVaXEFFnRGKvd3mxqroQmDmAHeo lVtL/yK0j65m5mmfLBi64g4KjL0d0EQ= -----END CERTIFICATE-----Generated at Sun May 11 22:53:38 2025 by rpki-client