$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft File: ssb_p2w86pWbar20kn5QEjIHLWI.mft (raw, json) Hash identifier: jDmRCWIN914UxHYPPgEUq3fyIsSZo5RagwCeBVCG9t0= Subject key identifier: D3:71:66:F9:2F:CF:2A:FE:74:B9:9D:AE:B9:BF:B0:B7:D1:A9:49:36 Authority key identifier: B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 Certificate issuer: /CN=A911BD0C/serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft Manifest number: 1F Signing time: Thu 03 Jul 2025 08:09:05 +0000 Manifest this update: Thu 03 Jul 2025 08:09:05 +0000 Manifest next update: Thu 10 Jul 2025 08:09:05 +0000 Files and hashes: 1: ssb_p2w86pWbar20kn5QEjIHLWI.crl (hash: zheo3KA7YitpEhchGa2QSzqEYWaJjmTq3VKBk6VTCw0=) 2: B977F0322B3411F08FD74443C4F9AE02.roa (hash: v+cdW5qRRy42rcVfsQ7WNZFoarz0/H2Wz0ZGcvG0ojI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD0C, serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Validity Not Before: Jul 3 08:09:05 2025 GMT Not After : Jul 10 08:09:05 2025 GMT Subject: CN=68663aa1-b750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:55:ba:69:76:f9:5f:21:28:6e:19:6f:d8: 12:5d:83:b8:1a:66:de:fa:4b:85:a4:c4:f1:46:cf: 6c:e3:40:d4:ce:ac:dc:90:da:77:10:58:94:3c:f9: 02:c4:c2:80:14:6f:1a:ce:7f:9b:aa:4d:dc:9b:88: 1e:5f:02:b9:ae:c7:4c:d6:03:37:1d:6b:bd:a7:c2: c1:38:ed:63:58:fc:1a:92:b0:0e:81:5a:81:61:9b: fa:30:c7:cf:aa:11:7b:e0:92:7e:7c:43:f6:5b:5d: dd:0f:cb:c9:66:18:72:55:76:78:be:32:3b:5b:ac: 25:7c:25:93:6a:8a:de:cd:74:1a:f3:24:54:67:8f: cb:ba:d3:4f:05:75:0f:28:3c:ce:6c:04:0f:11:c3: af:bb:3a:5e:55:73:bd:51:30:23:97:06:ce:48:a0: 64:7e:9d:a5:e6:f9:ae:09:da:01:5a:e7:fa:f4:03: 90:8e:dc:1c:3f:c3:c9:fa:b3:3e:a4:68:68:b9:43: bf:8f:81:d6:9f:4a:04:a4:7f:cb:0f:16:52:aa:97: 1f:a9:93:c9:89:3a:95:5e:83:7f:b6:46:14:d9:a3: 29:7a:49:f7:a1:b5:50:c7:bd:5a:db:f8:a8:21:6c: 54:ca:ce:35:40:6d:37:df:b7:4b:d1:13:aa:24:d6: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:71:66:F9:2F:CF:2A:FE:74:B9:9D:AE:B9:BF:B0:B7:D1:A9:49:36 X509v3 Authority Key Identifier: keyid:B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:70:d3:54:10:1c:91:aa:4a:ec:76:ea:40:f1:71:07:8f:4f: e7:2f:11:52:5c:74:2e:59:bd:25:3b:ad:8f:43:f0:1d:16:b9: e8:72:41:1d:97:98:af:bc:0c:57:86:cd:87:58:d2:c6:f1:99: da:ac:dc:d9:34:3c:69:d5:07:99:88:a9:9b:ec:ee:00:aa:ec: 62:22:77:1a:63:e5:a7:29:cb:38:bd:04:85:b3:86:02:6b:57: 48:d6:2e:da:35:64:95:0a:b9:cc:a7:77:02:76:5b:c7:43:0a: c0:27:65:a3:dc:d2:84:9e:c9:77:4f:a1:99:a0:46:5f:1c:9f: e5:38:53:e5:8e:e8:bc:ae:80:6d:4f:60:32:28:41:65:b3:48: fa:54:80:45:10:45:aa:67:f1:4a:ba:d4:10:21:f9:aa:7e:19: ae:64:82:b0:34:78:84:35:24:0e:b7:12:98:43:e9:54:c2:86: f8:ed:dd:c8:bb:89:ef:7f:fa:5f:cd:9e:29:ae:c1:3d:d7:00: 77:76:f7:3c:37:73:dc:7a:2f:5e:cd:4c:8c:65:de:41:34:57: 3f:a8:ec:b0:c2:f3:d5:61:7f:cf:cb:dc:03:c9:3e:b8:06:0c: 2a:16:7b:c4:17:43:3e:28:ea:a2:51:90:0a:64:8e:ef:b3:c6: 3f:cc:86:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQwQzExMC8GA1UEBRMoQjJDNkZGQTc2QzNDRUE5NTlCNkFCREI0OTI3RTUwMTIz MjA3MkQ2MjAeFw0yNTA3MDMwODA5MDVaFw0yNTA3MTAwODA5MDVaMBgxFjAUBgNV BAMTDTY4NjYzYWExLWI3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDKVW6aXb5XyEobhlv2BJdg7gaZt76S4WkxPFGz2zjQNTOrNyQ2ncQWJQ8+QLE woAUbxrOf5uqTdybiB5fArmux0zWAzcda72nwsE47WNY/BqSsA6BWoFhm/owx8+q EXvgkn58Q/ZbXd0Py8lmGHJVdni+MjtbrCV8JZNqit7NdBrzJFRnj8u6008FdQ8o PM5sBA8Rw6+7Ol5Vc71RMCOXBs5IoGR+naXm+a4J2gFa5/r0A5CO3Bw/w8n6sz6k aGi5Q7+PgdafSgSkf8sPFlKqlx+pk8mJOpVeg3+2RhTZoyl6SfehtVDHvVrb+Kgh bFTKzjVAbTfft0vRE6ok1pjtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU03Fm+S/P Kv50uZ2uub+wt9GpSTYwHwYDVR0jBBgwFoAUssb/p2w86pWbar20kn5QEjIHLWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDBDL0JDMjE0MTVFMkIz MzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBXYmFyMjBrbjVRRWpJSExX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3NiX3Aydzg2cFdiYXIyMGtuNVFFaklITFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDBDL0JDMjE0MTVFMkIzMzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBX YmFyMjBrbjVRRWpJSExXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMhw01QQHJGqSux26kDxcQePT+cvEVJcdC5ZvSU7rY9D8B0WuehyQR2X mK+8DFeGzYdY0sbxmdqs3Nk0PGnVB5mIqZvs7gCq7GIidxpj5acpyzi9BIWzhgJr V0jWLto1ZJUKucyndwJ2W8dDCsAnZaPc0oSeyXdPoZmgRl8cn+U4U+WO6LyugG1P YDIoQWWzSPpUgEUQRapn8Uq61BAh+ap+Ga5kgrA0eIQ1JA63EphD6VTChvjt3ci7 ie9/+l/NnimuwT3XAHd29zw3c9x6L17NTIxl3kE0Vz+o7LDC89Vhf8/L3APJPrgG DCoWe8QXQz4o6qJRkApkju+zxj/Mhrw= -----END CERTIFICATE-----Generated at Thu Jul 3 23:17:50 2025 by rpki-client