$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: kTkKm7MkJNnhPR2JcZwgW1HNoiFFtA9C49hhiUXIHIw= Subject key identifier: 2B:92:D4:E5:0C:2C:48:D8:1D:F8:32:8D:A7:8C:4C:43:9C:AC:B8:72 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 064A Signing time: Mon 30 Jun 2025 23:10:24 +0000 Manifest this update: Mon 30 Jun 2025 23:10:23 +0000 Manifest next update: Mon 07 Jul 2025 23:10:23 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: 6QnOP44bCwi7iI1ZlQxj0Zzowz+gBeaHwZqr/51V1dE=) 2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: CvSPVq3Ao9wPfXBwbGY/XZu0M+365J1WHXP7HCUvGEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: Jun 30 23:10:23 2025 GMT Not After : Jul 7 23:10:23 2025 GMT Subject: CN=6863195f-fe33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:12:36:8f:ed:64:ed:5a:6c:9d:23:a8:53:f5: 8b:2a:d1:65:8f:f3:c6:88:fb:5b:4a:7d:9f:e4:0d: 72:0c:01:a7:91:f2:eb:3c:2d:aa:e1:4a:45:f0:b5: 39:df:36:ad:aa:40:03:7f:99:c2:1c:0d:47:83:c4: b2:ea:bb:47:e8:8d:d0:a4:d5:8f:44:62:26:a7:17: 90:a6:f6:19:7c:bb:4f:59:80:51:dd:a1:6f:61:97: ed:9c:00:2a:8b:f1:50:33:62:36:5c:7d:f8:10:45: 33:f2:80:ca:a5:c8:5f:b9:ee:ec:de:f7:d9:16:93: cf:a7:5e:b3:ee:48:e1:f1:ed:14:dc:3d:3d:e1:d7: 8e:08:21:70:91:6d:c4:94:9b:9a:51:ec:46:9f:46: a4:8f:e9:c6:07:d3:71:d0:f5:0b:02:7a:58:e0:79: c0:b0:2b:21:38:da:65:b0:17:8d:65:9d:8c:45:18: 1b:4f:77:38:08:f1:3f:5d:d6:e2:2a:72:e3:e6:b4: 19:94:76:13:df:d7:86:fd:ba:58:b1:d9:de:64:ca: 17:ba:66:79:16:f8:da:48:36:a2:eb:08:9e:17:dc: 29:f0:48:8d:7a:ab:68:ef:20:98:65:07:5f:52:9c: 71:8f:9b:15:43:99:a1:68:73:97:99:26:6c:c6:da: 92:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:92:D4:E5:0C:2C:48:D8:1D:F8:32:8D:A7:8C:4C:43:9C:AC:B8:72 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:68:c3:d9:f2:be:ea:a1:aa:6f:ab:18:7a:a5:73:7c:6e:9f: a7:d1:b5:90:77:64:c1:ed:42:d8:83:8c:1b:85:08:38:66:32: 33:0f:3f:ab:5c:98:be:7e:a9:d8:cb:85:84:2f:1f:9d:d3:be: b9:1b:0c:75:52:2c:6c:6e:10:06:c3:08:58:0f:33:30:52:7d: a8:5e:9d:26:aa:d2:62:fe:d7:4b:34:3f:04:3e:c8:8b:da:e9: a7:a9:88:94:01:6c:69:88:a0:5a:ba:75:a2:4b:79:d9:9d:a6: 59:1e:61:0f:94:59:b6:4d:ae:a6:88:2a:95:43:2d:81:cf:8d: 2e:45:d7:de:f4:a6:43:7f:73:ed:8f:ce:b2:4f:d0:47:1a:35: 64:a3:c3:91:ea:1f:90:e6:1b:1b:4b:da:02:3a:dc:38:61:5e: 1a:98:80:d8:0d:e6:6f:0e:8c:39:33:0f:2e:07:ca:99:40:43: ab:66:95:b6:d5:1d:7d:eb:5f:80:a0:ae:ae:a0:6c:d0:97:f1: c9:56:a3:47:3c:44:7b:80:7e:22:ec:fb:54:65:91:45:75:b2: 1c:b9:ad:aa:82:96:85:ed:ca:bb:5d:e4:46:77:65:be:29:2f: 77:0d:76:12:f0:bd:3f:97:3a:29:17:51:cd:e6:73:f5:53:63: c9:85:ae:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjUwNjMwMjMxMDIzWhcNMjUwNzA3MjMxMDIzWjAYMRYwFAYD VQQDEw02ODYzMTk1Zi1mZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBI2j+1k7VpsnSOoU/WLKtFlj/PGiPtbSn2f5A1yDAGnkfLrPC2q4UpF8LU5 3zatqkADf5nCHA1Hg8Sy6rtH6I3QpNWPRGImpxeQpvYZfLtPWYBR3aFvYZftnAAq i/FQM2I2XH34EEUz8oDKpchfue7s3vfZFpPPp16z7kjh8e0U3D094deOCCFwkW3E lJuaUexGn0akj+nGB9Nx0PULAnpY4HnAsCshONplsBeNZZ2MRRgbT3c4CPE/Xdbi KnLj5rQZlHYT39eG/bpYsdneZMoXumZ5FvjaSDai6wieF9wp8EiNeqto7yCYZQdf Upxxj5sVQ5mhaHOXmSZsxtqSMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuS1OUM LEjYHfgyjaeMTEOcrLhyMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEaMPZ8r7qoapvqxh6pXN8bp+n0bWQd2TB7ULYg4wbhQg4ZjIzDz+r XJi+fqnYy4WELx+d0765Gwx1UixsbhAGwwhYDzMwUn2oXp0mqtJi/tdLND8EPsiL 2umnqYiUAWxpiKBaunWiS3nZnaZZHmEPlFm2Ta6miCqVQy2Bz40uRdfe9KZDf3Pt j86yT9BHGjVko8OR6h+Q5hsbS9oCOtw4YV4amIDYDeZvDow5Mw8uB8qZQEOrZpW2 1R1961+AoK6uoGzQl/HJVqNHPER7gH4i7PtUZZFFdbIcua2qgpaF7cq7XeRGd2W+ KS93DXYS8L0/lzopF1HN5nP1U2PJha5k -----END CERTIFICATE-----Generated at Wed Jul 2 01:39:16 2025 by rpki-client