$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft File: ssb_p2w86pWbar20kn5QEjIHLWI.mft (raw, json) Hash identifier: dKgjKtjvJ3C6Pc/FesGtDEKK21kEtLpxK4fpTtRbKCU= Subject key identifier: B1:81:01:0D:97:4A:55:9F:5F:80:B9:45:68:FB:7A:BA:3F:76:1D:F8 Authority key identifier: B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 Certificate issuer: /CN=A911BD0C/serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft Manifest number: 39 Signing time: Sat 23 Aug 2025 07:47:57 +0000 Manifest this update: Sat 23 Aug 2025 07:47:56 +0000 Manifest next update: Sat 30 Aug 2025 07:47:56 +0000 Files and hashes: 1: ssb_p2w86pWbar20kn5QEjIHLWI.crl (hash: 7kkyAkKhoBjcINRNmrtwIyWumkP5TL49JXHZiW0CnO8=) 2: B977F0322B3411F08FD74443C4F9AE02.roa (hash: v+cdW5qRRy42rcVfsQ7WNZFoarz0/H2Wz0ZGcvG0ojI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD0C, serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Validity Not Before: Aug 23 07:47:56 2025 GMT Not After : Aug 30 07:47:56 2025 GMT Subject: CN=68a9722c-80df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:6c:9f:24:1e:77:a6:44:78:d5:bd:43:9b: d4:7e:f5:f9:ec:05:69:9b:38:da:5d:bc:32:10:06: eb:30:23:07:a4:e6:22:44:c4:c3:15:36:7e:22:0c: ff:75:58:25:54:88:21:ae:cc:a9:2b:46:db:bb:c6: 64:14:43:47:20:f6:62:51:5c:5d:18:83:4f:a9:d1: 9f:a2:79:4e:20:20:0b:fe:be:17:6e:04:6f:8f:6e: f3:96:ee:8a:ca:9a:84:46:3a:de:79:f2:fb:7f:10: 99:1e:3e:a5:5a:ec:ff:8d:ba:70:56:d3:86:41:50: d0:ba:21:fb:fa:cb:39:b2:7c:cf:1c:bb:2b:5f:45: 99:dc:8e:73:f9:cc:bb:77:c9:0d:ea:59:a2:17:0e: 06:6c:76:11:48:19:a1:ae:c4:f8:85:22:d8:cd:9d: 22:b2:6f:e7:e5:0d:05:52:eb:9a:da:fd:ed:d9:b2: 1b:9f:e7:c7:2a:a8:aa:3b:49:ff:97:41:61:80:e6: b0:5c:02:bb:c5:7b:f5:35:b2:d3:14:dc:5b:7b:79: d6:73:32:ca:3e:f7:5b:7c:f0:e3:f0:cd:f8:dc:76: 94:dd:fb:0e:95:01:0b:a2:a8:05:8a:4b:b6:e5:a5: 4c:b4:cd:ea:5c:dd:82:c1:53:42:54:b6:63:4d:a0: 76:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:81:01:0D:97:4A:55:9F:5F:80:B9:45:68:FB:7A:BA:3F:76:1D:F8 X509v3 Authority Key Identifier: keyid:B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:35:45:c0:6c:9e:c5:2b:f7:c8:5a:f0:43:8c:5d:40:e5:53: 5d:8c:8a:c5:ed:fc:f4:a6:55:c1:71:71:01:19:a9:67:da:ea: 3f:9a:54:fd:e2:08:70:be:0b:bd:92:ca:47:7e:7f:b7:7c:24: ef:6c:f2:84:be:e4:99:9a:c2:c4:f9:ae:7b:59:ec:e3:4f:bf: 41:70:c4:a3:57:e5:ff:41:79:c3:2b:ea:37:f8:e4:43:03:cd: 38:76:0c:d9:6a:bf:fa:2c:96:4b:22:3b:17:d3:bb:bc:ba:6b: 49:7e:57:8a:72:69:9d:86:3e:02:57:d1:c9:8b:ac:d4:c5:da: ac:69:4e:c4:d5:f2:68:93:c7:3f:c7:28:df:2a:8a:0d:3f:b5: 3c:cd:a2:29:14:df:47:9f:8c:dc:68:b5:fe:21:6f:bc:e4:14: ac:df:ab:78:97:af:3f:14:5c:93:53:03:52:2d:dc:dd:73:c8: 89:0f:98:67:76:28:3e:3c:53:5b:2a:75:6e:5c:2d:4d:87:67: 7e:86:63:63:47:e1:9b:89:f2:3c:53:77:79:de:d2:05:4d:88: 64:c8:cf:86:23:15:eb:eb:42:5e:4c:07:25:76:1f:a4:6a:25: b4:4f:d7:47:7e:c0:88:7c:d6:6a:3f:91:8c:e0:46:72:ff:bf: ef:f0:bc:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQwQzExMC8GA1UEBRMoQjJDNkZGQTc2QzNDRUE5NTlCNkFCREI0OTI3RTUwMTIz MjA3MkQ2MjAeFw0yNTA4MjMwNzQ3NTZaFw0yNTA4MzAwNzQ3NTZaMBgxFjAUBgNV BAMTDTY4YTk3MjJjLTgwZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGEWyfJB53pkR41b1Dm9R+9fnsBWmbONpdvDIQBuswIwek5iJExMMVNn4iDP91 WCVUiCGuzKkrRtu7xmQUQ0cg9mJRXF0Yg0+p0Z+ieU4gIAv+vhduBG+PbvOW7orK moRGOt558vt/EJkePqVa7P+NunBW04ZBUNC6Ifv6yzmyfM8cuytfRZncjnP5zLt3 yQ3qWaIXDgZsdhFIGaGuxPiFItjNnSKyb+flDQVS65ra/e3Zshuf58cqqKo7Sf+X QWGA5rBcArvFe/U1stMU3Ft7edZzMso+91t88OPwzfjcdpTd+w6VAQuiqAWKS7bl pUy0zepc3YLBU0JUtmNNoHa7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsYEBDZdK VZ9fgLlFaPt6uj92HfgwHwYDVR0jBBgwFoAUssb/p2w86pWbar20kn5QEjIHLWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDBDL0JDMjE0MTVFMkIz MzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBXYmFyMjBrbjVRRWpJSExX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3NiX3Aydzg2cFdiYXIyMGtuNVFFaklITFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDBDL0JDMjE0MTVFMkIzMzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBX YmFyMjBrbjVRRWpJSExXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKI1RcBsnsUr98ha8EOMXUDlU12MisXt/PSmVcFxcQEZqWfa6j+aVP3i CHC+C72Sykd+f7d8JO9s8oS+5JmawsT5rntZ7ONPv0FwxKNX5f9BecMr6jf45EMD zTh2DNlqv/oslksiOxfTu7y6a0l+V4pyaZ2GPgJX0cmLrNTF2qxpTsTV8miTxz/H KN8qig0/tTzNoikU30efjNxotf4hb7zkFKzfq3iXrz8UXJNTA1It3N1zyIkPmGd2 KD48U1sqdW5cLU2HZ36GY2NH4ZuJ8jxTd3ne0gVNiGTIz4YjFevrQl5MByV2H6Rq JbRP10d+wIh81mo/kYzgRnL/v+/wvBc= -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:38 2025 by rpki-client