$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: d0WJ5JSOtVBuBIfSEZmhgWceIbmxlTPfj0WQqUa3xKk= Subject key identifier: 4C:9E:F2:C0:F7:E3:87:1D:F0:B2:8C:89:B3:7E:8E:51:D5:D0:85:E0 Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 02FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 02FB Signing time: Sat 23 Aug 2025 01:28:58 +0000 Manifest this update: Sat 23 Aug 2025 01:28:58 +0000 Manifest next update: Sat 30 Aug 2025 01:28:58 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: wjPD2VOMpnHGRfULKM4kRukITV9McFoKrcGPsdQnIs4=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 767 (0x2ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Aug 23 01:28:58 2025 GMT Not After : Aug 30 01:28:58 2025 GMT Subject: CN=68a9195a-2e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b9:58:31:44:0d:48:16:80:a0:ac:43:ac:25: 21:5c:95:97:58:5d:e3:74:eb:3d:28:ff:d6:60:b7: bd:20:d2:47:7e:fa:c4:c3:91:bf:94:7f:80:9b:95: 48:fd:6b:3f:9b:d3:1c:0f:7d:1a:5c:53:c4:5d:a1: 36:84:72:2b:64:8b:a4:77:7c:bc:16:48:42:4d:56: b4:88:8d:2d:49:cb:10:d0:48:cb:12:ef:d1:0e:b0: 1e:82:7a:53:b8:e2:43:a9:fa:7e:cc:4d:6d:80:07: 22:e3:b9:c7:81:7f:8f:e3:61:de:0b:aa:3d:9d:98: 83:0f:59:e4:6f:b0:94:99:37:2d:3d:c6:e1:38:ea: 16:3f:f2:b2:45:89:6e:e4:7c:9d:73:04:6b:bb:7d: e2:00:36:61:be:99:9a:1f:c1:44:d0:97:a8:9e:03: 31:b3:b1:b4:37:be:c9:97:5c:9c:ef:0f:5a:22:d4: 9e:69:7b:3a:aa:3c:ac:da:38:07:65:51:2f:eb:f9: a2:ed:66:fe:7d:df:68:9c:90:a5:6d:a0:b5:4a:04: c3:78:dc:61:38:b7:fa:49:14:3c:d9:b7:78:a0:38: c9:85:d8:6e:c6:be:4a:3d:0e:19:21:a4:83:93:f3: f2:b9:44:bc:3d:ab:bd:d8:fd:fe:c6:dd:59:18:62: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9E:F2:C0:F7:E3:87:1D:F0:B2:8C:89:B3:7E:8E:51:D5:D0:85:E0 X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:9d:01:93:e5:53:13:7a:e2:d4:b0:9d:63:7c:07:5f:44:af: 97:92:65:ec:3c:24:4a:3d:5e:43:11:cc:40:4b:01:e6:ee:0b: 27:5f:56:06:39:bd:92:be:fa:1e:a2:d6:df:03:76:cf:04:f4: ce:22:23:18:b5:1b:40:da:83:58:aa:d4:d9:7f:2a:31:fd:49: 22:91:84:6a:12:e6:d2:07:e9:0d:26:50:f4:0c:38:33:27:78: 10:38:d5:74:af:f2:8e:ba:2c:13:16:9d:ca:b2:ad:fe:6a:95: c6:a1:01:1f:ea:a4:eb:f5:e2:de:64:d2:81:b1:93:13:81:24: 58:8f:b2:5a:ca:9f:a6:6b:5c:a0:75:0c:5b:0b:cd:67:6b:95: 15:51:6a:6c:2e:37:f8:3d:00:5a:ee:6a:d6:55:8a:22:51:a8: af:35:44:33:a6:e8:78:26:bd:8c:89:d8:6b:00:38:fc:2a:0d: 00:b4:84:d1:c7:4f:bf:63:81:08:85:5d:d0:1e:20:87:49:4a: f0:0d:e4:54:8d:6f:76:dc:4d:3d:51:27:1c:65:8d:dc:77:2d: ce:f2:f2:99:56:93:13:bb:b4:b4:99:99:48:76:82:0d:67:ef: 56:5c:bd:a0:d1:9b:f6:29:dd:e5:47:6d:c9:1d:4f:9d:2a:00: 65:1d:ce:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUwODIzMDEyODU4WhcNMjUwODMwMDEyODU4WjAYMRYwFAYD VQQDEw02OGE5MTk1YS0yZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7blYMUQNSBaAoKxDrCUhXJWXWF3jdOs9KP/WYLe9INJHfvrEw5G/lH+Am5VI /Ws/m9McD30aXFPEXaE2hHIrZIukd3y8FkhCTVa0iI0tScsQ0EjLEu/RDrAegnpT uOJDqfp+zE1tgAci47nHgX+P42HeC6o9nZiDD1nkb7CUmTctPcbhOOoWP/KyRYlu 5HydcwRru33iADZhvpmaH8FE0JeongMxs7G0N77Jl1yc7w9aItSeaXs6qjys2jgH ZVEv6/mi7Wb+fd9onJClbaC1SgTDeNxhOLf6SRQ82bd4oDjJhdhuxr5KPQ4ZIaSD k/PyuUS8Pau92P3+xt1ZGGIdJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEye8sD3 44cd8LKMibN+jlHV0IXgMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3nQGT5VMTeuLUsJ1jfAdfRK+XkmXsPCRKPV5DEcxASwHm7gsnX1YG Ob2SvvoeotbfA3bPBPTOIiMYtRtA2oNYqtTZfyox/UkikYRqEubSB+kNJlD0DDgz J3gQONV0r/KOuiwTFp3Ksq3+apXGoQEf6qTr9eLeZNKBsZMTgSRYj7Jayp+ma1yg dQxbC81na5UVUWpsLjf4PQBa7mrWVYoiUaivNUQzpuh4Jr2MidhrADj8Kg0AtITR x0+/Y4EIhV3QHiCHSUrwDeRUjW923E09USccZY3cdy3O8vKZVpMTu7S0mZlIdoIN Z+9WXL2g0Zv2Kd3lR23JHU+dKgBlHc79 -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:10 2025 by rpki-client