$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: sDnwRyyBmyEECBENkYet20IlZUjwzB36/U/YiqX1biQ= Subject key identifier: D2:7E:CD:55:6A:CB:6B:F5:68:58:F0:03:51:2C:15:9B:0F:DD:3D:AE Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 0624 Signing time: Sat 10 May 2025 22:30:15 +0000 Manifest this update: Sat 10 May 2025 22:30:14 +0000 Manifest next update: Sat 17 May 2025 22:30:14 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: 6vHqDVFVIGPTUztq3bpPLktnWN5iWH9t+f4h2A3+g3Y=) 2: 4E76D152B51411ECB8632A19C4F9AE02.roa (hash: YPDLp+PM+yv2layG45gYKpsX7TXBxQVHcONStmzQZuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: May 10 22:30:14 2025 GMT Not After : May 17 22:30:14 2025 GMT Subject: CN=681fd377-a148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:fd:13:b6:8b:6d:a5:81:c8:34:0c:1c:87: a1:9c:84:00:8d:3b:67:5f:99:93:b9:f1:16:45:23: e7:3c:9c:6c:9e:93:50:1e:ff:fb:b5:1a:04:a3:1d: 29:75:ce:c9:b0:8a:4c:36:a4:8c:70:e2:5f:d5:63: 50:67:22:cd:b9:16:89:72:f1:c6:10:af:bc:03:42: 8f:bb:6c:51:f5:a3:76:da:cf:ea:5e:ed:65:2e:d3: d1:a2:08:4f:10:02:c0:83:ea:40:c5:e0:b9:03:2c: a3:8f:b2:e4:bc:89:bc:7b:af:a6:5d:11:e2:f0:d3: 2a:58:b3:6f:cb:1f:c2:1d:83:ec:8c:75:0c:08:68: 9e:e4:f7:ec:fc:96:12:54:24:8c:59:e9:6c:e7:15: 2d:0b:b7:99:05:96:60:8a:08:6c:c0:69:df:69:56: 3e:8e:7a:4b:7c:3d:21:03:9e:e8:ac:f8:ac:e3:4a: 98:6d:b5:ba:89:3b:39:4c:53:db:6d:5e:88:5e:03: 96:a4:f2:94:76:c4:5e:04:3e:e1:55:e5:97:03:4a: 76:c9:f3:a5:63:2e:28:1e:03:ca:f2:de:c8:c7:1c: b3:cd:19:97:3f:75:5e:df:62:c1:d0:87:7b:ba:43: 1b:85:02:78:78:9d:49:51:75:67:df:76:ae:8e:65: 58:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7E:CD:55:6A:CB:6B:F5:68:58:F0:03:51:2C:15:9B:0F:DD:3D:AE X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:8d:77:28:d7:a2:72:9a:08:39:0e:9d:f6:66:48:48:88:97: 5d:08:24:d1:5d:5c:d7:0a:95:27:d4:35:47:65:87:83:e7:a5: fd:c3:38:38:7d:a5:b7:d7:84:b1:12:cb:53:10:90:61:0d:36: a4:a5:6a:4e:4a:09:75:d8:b1:3d:0d:7f:7c:9b:98:a9:04:2e: eb:3d:50:95:45:70:73:26:28:5e:6f:e2:d5:d2:40:95:00:01: 0d:bf:a1:61:a4:27:cd:75:7e:87:36:6e:67:2b:72:19:95:83: b1:cb:5d:c4:8e:e3:ab:33:22:91:4c:e1:4f:88:24:9f:7d:8a: 9b:6d:44:3b:13:4f:91:a9:87:c1:62:ab:7c:1a:24:15:38:ea: b4:0d:d3:74:fd:d9:28:70:29:93:a4:95:a3:86:c9:55:48:f5: 03:a0:11:8b:02:9d:72:1c:3c:ee:9c:e2:8e:0b:93:3b:bc:72: 9b:1f:61:8c:17:6c:dd:2b:56:19:c3:a6:fe:62:f5:a4:91:4c: 8b:e3:94:29:4d:48:b1:3e:db:9e:5e:dd:50:3c:df:37:80:cf: a7:cd:a6:8b:59:d5:55:9b:c0:05:14:e8:71:24:e8:59:ed:7c: d4:3a:8d:97:21:38:7a:d2:73:aa:28:03:54:2b:8e:2d:6f:57: ca:24:ea:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjUwNTEwMjIzMDE0WhcNMjUwNTE3MjIzMDE0WjAYMRYwFAYD VQQDEw02ODFmZDM3Ny1hMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6X9E7aLbaWByDQMHIehnIQAjTtnX5mTufEWRSPnPJxsnpNQHv/7tRoEox0p dc7JsIpMNqSMcOJf1WNQZyLNuRaJcvHGEK+8A0KPu2xR9aN22s/qXu1lLtPRoghP EALAg+pAxeC5Ayyjj7LkvIm8e6+mXRHi8NMqWLNvyx/CHYPsjHUMCGie5Pfs/JYS VCSMWels5xUtC7eZBZZgighswGnfaVY+jnpLfD0hA57orPis40qYbbW6iTs5TFPb bV6IXgOWpPKUdsReBD7hVeWXA0p2yfOlYy4oHgPK8t7IxxyzzRmXP3Ve32LB0Id7 ukMbhQJ4eJ1JUXVn33aujmVY/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJ+zVVq y2v1aFjwA1EsFZsP3T2uMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCjXco16Jymgg5Dp32ZkhIiJddCCTRXVzXCpUn1DVHZYeD56X9wzg4 faW314SxEstTEJBhDTakpWpOSgl12LE9DX98m5ipBC7rPVCVRXBzJiheb+LV0kCV AAENv6FhpCfNdX6HNm5nK3IZlYOxy13EjuOrMyKRTOFPiCSffYqbbUQ7E0+RqYfB Yqt8GiQVOOq0DdN0/dkocCmTpJWjhslVSPUDoBGLAp1yHDzunOKOC5M7vHKbH2GM F2zdK1YZw6b+YvWkkUyL45QpTUixPtueXt1QPN83gM+nzaaLWdVVm8AFFOhxJOhZ 7XzUOo2XITh60nOqKANUK44tb1fKJOp8 -----END CERTIFICATE-----Generated at Sun May 11 16:52:42 2025 by rpki-client