$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: EXzS5EssOfVQzPNx138eS9MOh4Y1VgwAc7gBO3j6qLo= Subject key identifier: 4F:C3:52:63:1E:77:2A:C2:57:2D:9C:F3:32:79:D1:6C:09:A7:8E:39 Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 02C6 Signing time: Tue 13 May 2025 01:11:21 +0000 Manifest this update: Tue 13 May 2025 01:11:21 +0000 Manifest next update: Tue 20 May 2025 01:11:21 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: rhMsviQ2bpIn7Zu1yLsJJeIPUXcTSudqTl/VCnZieNg=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: PUc54q2WTiia3AT9HsSdWhbagSjmonMUemo/1oF5Qio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: May 13 01:11:21 2025 GMT Not After : May 20 01:11:21 2025 GMT Subject: CN=68229c39-7177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:f5:79:ee:71:1a:01:e5:3b:bf:4e:4d:aa: b4:2b:21:28:89:65:1a:c7:9d:93:78:06:ef:e9:8e: 04:be:fe:b7:42:eb:57:d9:cd:9f:71:12:d4:31:4c: d8:ce:ac:3f:6b:ac:82:6b:04:11:ee:46:49:4e:e2: 59:48:54:e1:f9:3d:3f:7f:c5:5d:2a:3b:d2:f9:cc: 57:2a:3a:4d:cc:b8:a3:de:3f:14:6b:01:a1:45:9b: 59:c9:d4:56:81:6c:08:80:cc:2f:be:0c:7f:b0:94: b5:b3:69:f3:e4:fd:96:fd:24:55:58:b5:f7:a1:33: dc:10:f5:36:36:1e:d7:0f:25:c8:36:7f:ca:75:b3: ec:b9:19:3f:82:46:3e:11:69:1b:40:aa:f8:5f:51: 79:11:52:cb:dd:cf:ea:0c:1c:d0:a4:16:2b:14:a8: e8:ab:b4:50:da:af:dc:df:0a:6f:53:e8:d7:24:3b: 70:1c:18:b9:79:b4:6d:5d:86:09:59:2f:03:3a:d8: df:c0:d0:d6:7c:5b:40:75:33:d3:74:36:d8:6a:64: 3e:93:a4:fe:ae:7b:04:c3:d7:cd:88:5c:b8:ff:b7: 34:a4:a5:e1:e3:68:3c:ff:d4:e1:c4:3e:de:4f:81: 92:98:2e:85:bf:3a:6c:67:fc:70:3e:bf:a5:17:14: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C3:52:63:1E:77:2A:C2:57:2D:9C:F3:32:79:D1:6C:09:A7:8E:39 X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:37:fc:09:ec:b9:f3:55:eb:6c:a0:9e:87:3f:32:df:67:96: b8:79:c5:3d:b7:ce:c3:3a:52:1b:a1:d1:b5:55:d9:3a:f1:ee: a2:f8:76:21:3c:31:60:42:c2:8f:34:06:67:6b:5a:13:83:c5: dc:d2:28:7a:02:42:fd:49:59:3a:77:93:0d:c4:b8:dc:d3:a7: 4c:cb:78:59:e3:07:d0:78:58:21:16:2b:e6:5a:a0:d0:63:46: 30:9c:19:00:93:a7:12:30:72:89:4b:55:e0:1f:68:d5:8a:52: 42:86:65:0a:e4:fa:1a:9a:0a:58:73:5c:83:ac:09:7f:19:cf: b9:c1:31:cd:b1:59:2e:91:6c:e9:f1:41:1d:64:7a:04:34:6f: 06:23:3e:47:1d:1f:5f:04:3e:49:14:6b:79:ac:86:3f:74:a9: 55:c4:80:bf:d2:f3:5a:48:89:80:98:e3:c8:b3:6d:87:41:e0: 4e:73:aa:57:b0:a2:94:40:5d:d7:7b:91:d3:30:90:1e:f2:dc: 8f:8c:04:d5:7e:61:77:d8:03:58:f8:00:ea:3c:67:d2:56:d3: 66:b3:37:94:36:13:70:42:be:bc:2c:3b:92:fc:a3:66:38:62: de:a2:2d:37:9b:0a:81:44:5a:fe:65:9b:7a:06:c0:96:f3:73: 35:42:53:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUwNTEzMDExMTIxWhcNMjUwNTIwMDExMTIxWjAYMRYwFAYD VQQDEw02ODIyOWMzOS03MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzT1ee5xGgHlO79OTaq0KyEoiWUax52TeAbv6Y4Evv63QutX2c2fcRLUMUzY zqw/a6yCawQR7kZJTuJZSFTh+T0/f8VdKjvS+cxXKjpNzLij3j8UawGhRZtZydRW gWwIgMwvvgx/sJS1s2nz5P2W/SRVWLX3oTPcEPU2Nh7XDyXINn/KdbPsuRk/gkY+ EWkbQKr4X1F5EVLL3c/qDBzQpBYrFKjoq7RQ2q/c3wpvU+jXJDtwHBi5ebRtXYYJ WS8DOtjfwNDWfFtAdTPTdDbYamQ+k6T+rnsEw9fNiFy4/7c0pKXh42g8/9ThxD7e T4GSmC6FvzpsZ/xwPr+lFxRumwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/DUmMe dyrCVy2c8zJ50WwJp445MB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANN/wJ7LnzVetsoJ6HPzLfZ5a4ecU9t87DOlIbodG1Vdk68e6i+HYh PDFgQsKPNAZna1oTg8Xc0ih6AkL9SVk6d5MNxLjc06dMy3hZ4wfQeFghFivmWqDQ Y0YwnBkAk6cSMHKJS1XgH2jVilJChmUK5PoamgpYc1yDrAl/Gc+5wTHNsVkukWzp 8UEdZHoENG8GIz5HHR9fBD5JFGt5rIY/dKlVxIC/0vNaSImAmOPIs22HQeBOc6pX sKKUQF3Xe5HTMJAe8tyPjATVfmF32ANY+ADqPGfSVtNmszeUNhNwQr68LDuS/KNm OGLeoi03mwqBRFr+ZZt6BsCW83M1QlN2 -----END CERTIFICATE-----Generated at Wed May 14 12:30:20 2025 by rpki-client