$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: c2vyhCac756xSHqW9OIxOEKJIBc2LrM7x2/pPGbdlxU= Subject key identifier: 1B:7E:C3:51:5D:0E:6A:0F:C7:68:F9:43:6F:AA:C6:81:E0:72:27:49 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 0665 Signing time: Fri 22 Aug 2025 22:54:41 +0000 Manifest this update: Fri 22 Aug 2025 22:54:41 +0000 Manifest next update: Fri 29 Aug 2025 22:54:41 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: okTrHROGYriZhFhfvtFCs4tLDgxMTOfqg1uIJujqNPk=) 2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: CvSPVq3Ao9wPfXBwbGY/XZu0M+365J1WHXP7HCUvGEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: Aug 22 22:54:41 2025 GMT Not After : Aug 29 22:54:41 2025 GMT Subject: CN=68a8f531-39e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:d5:b9:eb:40:82:4a:11:23:fc:96:fa:5c: a7:fe:ba:c4:b4:84:bb:cd:c6:f6:39:22:a2:2b:3f: dd:e5:20:f5:52:60:fc:8a:c6:24:b8:bb:e0:18:d6: 14:1a:88:b9:ad:9a:7d:94:97:ce:67:cd:cf:c7:20: 63:94:9a:22:6a:13:b6:81:15:9e:29:e3:20:41:d5: dd:3c:9a:96:da:7c:86:cf:ff:12:8c:33:62:89:c6: d5:1b:08:b9:20:45:43:2d:cf:5b:73:db:79:46:1a: 4b:93:90:81:9e:df:97:16:9a:8b:bb:01:3a:f4:94: f5:a7:23:34:3f:07:41:b0:bb:c3:f4:1e:e9:62:79: 61:7f:d8:ad:f9:3b:ad:f5:3b:f6:f1:a9:05:71:f9: 54:98:88:7e:58:89:f3:3b:70:09:a8:be:ad:5c:d7: ed:11:13:50:ae:b3:de:80:9a:6f:a4:91:04:c9:f6: 1c:3e:a6:a5:d0:e7:ec:7d:a7:eb:f3:34:d5:c2:17: 55:c9:8d:fc:2c:9c:47:d5:c3:46:c1:da:75:4b:b2: c6:72:bb:c4:73:8d:74:10:75:41:f8:53:e5:9d:a4: 03:73:6e:12:9b:4c:7a:00:3a:f8:43:ef:57:5d:2d: ea:73:64:fa:cf:ef:64:7c:7f:6f:60:4f:1d:03:34: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7E:C3:51:5D:0E:6A:0F:C7:68:F9:43:6F:AA:C6:81:E0:72:27:49 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:43:a0:ee:1b:a4:4c:c6:78:f3:39:46:02:27:de:77:f6:5f: a2:b4:4d:72:d6:f9:58:b6:48:17:8a:2f:ad:5b:fc:b0:26:11: 3b:75:0d:ba:b5:ad:86:bb:15:19:7b:66:27:57:5f:74:8e:a4: ca:2c:ba:77:a3:a9:5c:6f:90:d7:92:24:ef:09:c8:e0:5a:86: 25:0e:24:84:a2:b9:a4:71:4c:a6:05:fe:bc:9f:55:cd:9c:3e: b2:72:c4:1e:78:52:b2:81:fd:0c:a7:08:bd:a7:f8:41:ee:a2: 7d:89:63:11:80:5a:1a:54:a5:c6:c3:f8:fc:8f:0c:9d:40:5f: d0:63:b4:d8:2b:c8:59:9f:b5:bc:17:53:9d:fe:55:f1:aa:36: e9:dc:02:57:a1:5c:d7:fc:95:10:03:92:50:5b:b3:bf:ea:5b: e4:ad:de:11:f1:0b:8f:17:41:81:8f:5d:72:10:ad:cb:60:bb: 22:d2:55:82:ff:4a:ac:64:6f:2c:8c:04:04:85:87:8d:dc:f4: 89:56:6b:4a:e5:ce:cd:ee:c6:51:7d:8e:e6:74:79:ae:f3:49: cd:89:ac:2e:8e:b7:b5:3b:c1:1d:33:4f:c2:1b:b3:fe:1a:73: bc:db:3f:57:54:10:ae:f7:e9:a4:e5:9f:56:58:30:b3:bc:b9: e5:d0:76:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjUwODIyMjI1NDQxWhcNMjUwODI5MjI1NDQxWjAYMRYwFAYD VQQDEw02OGE4ZjUzMS0zOWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXTVuetAgkoRI/yW+lyn/rrEtIS7zcb2OSKiKz/d5SD1UmD8isYkuLvgGNYU Goi5rZp9lJfOZ83PxyBjlJoiahO2gRWeKeMgQdXdPJqW2nyGz/8SjDNiicbVGwi5 IEVDLc9bc9t5RhpLk5CBnt+XFpqLuwE69JT1pyM0PwdBsLvD9B7pYnlhf9it+Tut 9Tv28akFcflUmIh+WInzO3AJqL6tXNftERNQrrPegJpvpJEEyfYcPqal0Ofsfafr 8zTVwhdVyY38LJxH1cNGwdp1S7LGcrvEc410EHVB+FPlnaQDc24Sm0x6ADr4Q+9X XS3qc2T6z+9kfH9vYE8dAzTW0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBt+w1Fd DmoPx2j5Q2+qxoHgcidJMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoQ6DuG6RMxnjzOUYCJ9539l+itE1y1vlYtkgXii+tW/ywJhE7dQ26 ta2GuxUZe2YnV190jqTKLLp3o6lcb5DXkiTvCcjgWoYlDiSEormkcUymBf68n1XN nD6ycsQeeFKygf0Mpwi9p/hB7qJ9iWMRgFoaVKXGw/j8jwydQF/QY7TYK8hZn7W8 F1Od/lXxqjbp3AJXoVzX/JUQA5JQW7O/6lvkrd4R8QuPF0GBj11yEK3LYLsi0lWC /0qsZG8sjAQEhYeN3PSJVmtK5c7N7sZRfY7mdHmu80nNiawujre1O8EdM0/CG7P+ GnO82z9XVBCu9+mk5Z9WWDCzvLnl0HZs -----END CERTIFICATE-----Generated at Sat Aug 23 19:00:05 2025 by rpki-client