$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: gb2qNY1K0gBeHgf2X79bGboW8gkjUfoa6Qj9yT8ficU= Subject key identifier: 96:85:AC:16:50:5F:94:E7:A7:EF:1B:68:F5:55:46:5E:63:91:BF:51 Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 02E0 Signing time: Tue 01 Jul 2025 01:57:38 +0000 Manifest this update: Tue 01 Jul 2025 01:57:37 +0000 Manifest next update: Tue 08 Jul 2025 01:57:37 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: jR7JqVS+nkRt2BqI3BgSNd5R/g4OiHuVmgmUp77Be9M=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Jul 1 01:57:37 2025 GMT Not After : Jul 8 01:57:37 2025 GMT Subject: CN=68634091-d7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:d5:ea:bc:f4:88:7c:1f:50:bf:03:0c:59: e4:c0:75:cd:f0:1c:a6:73:a3:b8:d8:02:e1:d9:e4: ec:3c:cb:a2:a5:92:3f:25:cb:19:88:fa:4b:39:ae: 69:5f:58:39:a6:97:a6:08:f6:93:6e:f3:2b:34:75: 9d:15:5f:e9:c1:bc:c3:61:f7:c4:1d:af:4e:ab:56: 18:2b:9b:f3:43:73:d1:7e:3e:fa:1b:50:cf:30:f3: e7:32:5f:20:25:79:ea:ac:72:09:d5:c2:44:fc:98: ab:11:1e:4f:11:c3:fd:dc:72:a3:91:a6:22:e7:ac: 7f:c9:63:c1:15:8a:d7:16:ed:6a:df:3e:4f:c6:1c: eb:82:6e:71:d2:80:a5:b6:db:7d:a7:78:9a:34:e6: b1:8f:1e:1c:7c:2b:8d:96:b9:1b:78:08:8a:88:40: 6b:aa:58:39:3f:03:1b:62:28:6f:db:16:77:46:27: d0:aa:a4:8e:21:23:08:d9:11:a8:ac:e6:42:ff:86: 95:f8:a2:5f:e7:a1:65:2f:a5:37:c1:88:63:da:a5: 37:99:0c:e0:5b:7c:38:c6:22:3b:9a:78:22:72:e3: 15:91:62:7d:49:e6:ec:e4:1b:1d:3d:a6:2b:cf:8d: b3:2f:bf:cf:f3:9c:f9:7f:5d:f7:b6:d2:8d:2a:a7: f0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:85:AC:16:50:5F:94:E7:A7:EF:1B:68:F5:55:46:5E:63:91:BF:51 X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:29:e0:c9:b4:e4:49:84:30:33:5c:04:6f:3e:4d:da:fc:6e: d1:da:bc:49:cc:8f:4e:13:dd:7d:97:60:31:b3:93:a8:a8:51: 00:5d:a0:2d:00:4a:89:84:b1:dd:b9:0a:06:71:d4:0d:b4:96: b5:90:74:3f:77:d6:23:f3:28:fc:36:0d:00:e4:9a:92:0a:86: d6:b6:91:e1:be:df:86:cb:93:a4:1f:4d:30:b4:43:8f:2a:67: d3:1d:a1:51:1a:c4:a5:7f:6b:19:45:eb:9e:ca:a7:6a:41:0c: c1:60:18:15:11:f1:97:26:2f:35:0a:e2:ac:06:1f:8c:3b:f5: 70:1b:61:35:f8:5d:f7:99:16:93:15:2e:96:4a:76:ff:19:dc: 55:6c:76:5f:97:e2:b2:6e:22:31:86:03:7f:d5:cd:84:e0:a0: f0:53:ec:b8:4b:9d:93:77:21:f1:10:55:1e:8b:34:89:da:d0: 7d:a1:d4:e2:de:72:9e:bd:54:8f:c0:af:ff:84:f8:e3:7a:2b: 3e:7a:2f:47:19:89:c0:d5:e2:0c:2b:71:c6:78:ce:93:c9:c4: 88:35:69:b1:c0:55:af:7f:00:6d:4f:da:d6:c8:bc:8e:67:aa: 64:91:5b:9a:7c:de:91:37:9b:05:e4:c2:a7:ae:f2:ef:67:fd: fd:3c:9d:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUwNzAxMDE1NzM3WhcNMjUwNzA4MDE1NzM3WjAYMRYwFAYD VQQDEw02ODYzNDA5MS1kN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kXV6rz0iHwfUL8DDFnkwHXN8Bymc6O42ALh2eTsPMuipZI/JcsZiPpLOa5p X1g5ppemCPaTbvMrNHWdFV/pwbzDYffEHa9Oq1YYK5vzQ3PRfj76G1DPMPPnMl8g JXnqrHIJ1cJE/JirER5PEcP93HKjkaYi56x/yWPBFYrXFu1q3z5Pxhzrgm5x0oCl ttt9p3iaNOaxjx4cfCuNlrkbeAiKiEBrqlg5PwMbYihv2xZ3RifQqqSOISMI2RGo rOZC/4aV+KJf56FlL6U3wYhj2qU3mQzgW3w4xiI7mngicuMVkWJ9Sebs5BsdPaYr z42zL7/P85z5f133ttKNKqfwYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaFrBZQ X5Tnp+8baPVVRl5jkb9RMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7KeDJtORJhDAzXARvPk3a/G7R2rxJzI9OE919l2Axs5OoqFEAXaAt AEqJhLHduQoGcdQNtJa1kHQ/d9Yj8yj8Ng0A5JqSCobWtpHhvt+Gy5OkH00wtEOP KmfTHaFRGsSlf2sZReueyqdqQQzBYBgVEfGXJi81CuKsBh+MO/VwG2E1+F33mRaT FS6WSnb/GdxVbHZfl+KybiIxhgN/1c2E4KDwU+y4S52TdyHxEFUeizSJ2tB9odTi 3nKevVSPwK//hPjjeis+ei9HGYnA1eIMK3HGeM6TycSINWmxwFWvfwBtT9rWyLyO Z6pkkVuafN6RN5sF5MKnrvLvZ/39PJ1a -----END CERTIFICATE-----Generated at Tue Jul 1 21:23:48 2025 by rpki-client