$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: LsMBaCEN+Exbwx7ZFe4rX2T8MuHQSNTRqfOSD61BXwU= Subject key identifier: A5:B6:86:FE:89:89:9F:CD:EE:C8:3B:4E:84:20:E5:C1:06:62:58:ED Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 0318 Signing time: Sun 19 Oct 2025 03:11:45 +0000 Manifest this update: Sun 19 Oct 2025 03:11:44 +0000 Manifest next update: Sun 26 Oct 2025 03:11:44 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: lbOjFcIPG8mRrqMXPkp+b1s3TrY+j+XaZePdxmkVrxc=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Oct 19 03:11:44 2025 GMT Not After : Oct 26 03:11:44 2025 GMT Subject: CN=68f456f1-56ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:21:3a:71:64:2c:88:30:b3:57:f4:95:db: 54:42:67:ac:35:5a:38:ea:ce:c3:cf:ff:82:9c:ad: db:67:fc:2c:7b:39:90:e9:43:23:e2:3f:2c:a3:33: d1:45:b1:09:b5:31:17:fc:e0:83:17:3f:4e:40:5d: 28:89:1c:6c:7a:7e:59:90:eb:32:0d:80:24:ab:d2: 1a:7f:19:42:5c:9e:fd:17:4d:40:aa:7e:8e:d2:c9: de:63:df:ae:1a:fe:3a:f2:8f:88:03:cc:6e:c1:fb: e0:7d:3e:a6:4f:c8:a4:4c:d7:d7:a9:5c:43:9b:db: 72:0c:37:f5:2d:e5:4b:22:c0:3f:82:b6:7f:12:09: 2c:00:4a:ee:df:f4:94:6c:74:22:91:e3:6c:fa:ec: ef:6c:f3:8f:12:8c:14:ee:c7:da:16:21:27:cb:18: 2d:85:d3:c9:62:e2:7c:6c:50:15:67:eb:02:a5:e9: a3:33:1d:ac:81:c1:c1:0a:b3:d2:8f:f9:09:2c:5d: d7:c7:ba:d3:2e:3f:a4:83:06:05:81:ca:cc:ac:a4: 52:47:bc:37:8a:f1:08:78:e9:4b:88:01:c5:d5:6e: 32:44:89:d3:5e:a4:39:7a:da:ed:1e:5d:b7:3a:61: ef:09:5a:f7:1b:5f:49:ca:83:d4:67:d9:f5:e2:ac: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B6:86:FE:89:89:9F:CD:EE:C8:3B:4E:84:20:E5:C1:06:62:58:ED X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4d:16:9a:90:94:43:bc:66:17:48:e6:c0:b4:83:58:cf:5f: 37:e3:8c:98:0f:6f:53:13:45:ae:ab:fe:62:88:6f:02:3e:23: cb:ee:99:fe:a0:8e:cc:64:78:d1:47:c8:8a:4e:32:8a:f5:b2: 42:76:6b:b4:d3:5c:40:8b:13:cb:b4:29:28:6d:97:2d:eb:d2: 0e:cc:bb:d7:bd:88:3a:2b:fe:58:ae:3a:2b:d3:6a:93:44:d9: cf:b4:fd:6c:cb:51:49:94:d1:0f:a3:68:44:f6:20:1a:54:38: c6:d2:64:d6:f6:ce:6d:45:38:e8:89:5f:49:cd:a6:8c:5d:ee: 59:e0:cd:48:1a:68:78:4e:67:27:12:c9:fa:9f:a1:23:0f:6d: a1:82:57:20:57:37:cb:cb:97:a9:a7:42:99:f5:4d:0b:00:84: 60:30:cd:62:ae:1b:ce:29:0f:b5:1c:cb:25:c6:4d:84:7c:29: e9:9d:4f:86:29:32:a9:84:26:74:b5:85:94:2e:71:51:5a:f1: f4:1f:8d:ef:79:a1:6a:f2:0f:48:9d:1a:dc:6f:ec:9d:bb:b3: 49:ab:57:04:29:b6:e9:20:b6:3f:d5:21:31:2b:45:7a:ab:32: 0e:21:72:06:23:71:bb:22:2d:22:e0:09:3a:d3:87:fd:8b:a6: 95:11:ad:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUxMDE5MDMxMTQ0WhcNMjUxMDI2MDMxMTQ0WjAYMRYwFAYD VQQDEw02OGY0NTZmMS01NmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKIhOnFkLIgws1f0ldtUQmesNVo46s7Dz/+CnK3bZ/wsezmQ6UMj4j8sozPR RbEJtTEX/OCDFz9OQF0oiRxsen5ZkOsyDYAkq9IafxlCXJ79F01Aqn6O0sneY9+u Gv468o+IA8xuwfvgfT6mT8ikTNfXqVxDm9tyDDf1LeVLIsA/grZ/EgksAEru3/SU bHQikeNs+uzvbPOPEowU7sfaFiEnyxgthdPJYuJ8bFAVZ+sCpemjMx2sgcHBCrPS j/kJLF3Xx7rTLj+kgwYFgcrMrKRSR7w3ivEIeOlLiAHF1W4yRInTXqQ5etrtHl23 OmHvCVr3G19JyoPUZ9n14qweHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKW2hv6J iZ/N7sg7ToQg5cEGYljtMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHTRaakJRDvGYXSObAtINYz18344yYD29TE0Wuq/5iiG8CPiPL7pn+ oI7MZHjRR8iKTjKK9bJCdmu001xAixPLtCkobZct69IOzLvXvYg6K/5Yrjor02qT RNnPtP1sy1FJlNEPo2hE9iAaVDjG0mTW9s5tRTjoiV9JzaaMXe5Z4M1IGmh4Tmcn Esn6n6EjD22hglcgVzfLy5epp0KZ9U0LAIRgMM1irhvOKQ+1HMslxk2EfCnpnU+G KTKphCZ0tYWULnFRWvH0H43veaFq8g9InRrcb+ydu7NJq1cEKbbpILY/1SExK0V6 qzIOIXIGI3G7Ii0i4Ak604f9i6aVEa07 -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:32 2025 by rpki-client