$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft File: ssb_p2w86pWbar20kn5QEjIHLWI.mft (raw, json) Hash identifier: HP6SK9cJRlg8q1GF1tmXkdUjtm/EO3p+8DCvJjUvitc= Subject key identifier: 2C:17:D9:EF:B3:A9:90:76:A4:2D:B0:89:76:9F:7C:C1:F4:D4:A1:72 Authority key identifier: B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 Certificate issuer: /CN=A911BD0C/serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft Manifest number: 31 Signing time: Thu 07 Aug 2025 08:18:20 +0000 Manifest this update: Thu 07 Aug 2025 08:18:19 +0000 Manifest next update: Thu 14 Aug 2025 08:18:19 +0000 Files and hashes: 1: ssb_p2w86pWbar20kn5QEjIHLWI.crl (hash: 1Rij0J+J7ED8rV4ZlTFZAOB+9Mtj3MLxaZFu9R4Zx3E=) 2: B977F0322B3411F08FD74443C4F9AE02.roa (hash: v+cdW5qRRy42rcVfsQ7WNZFoarz0/H2Wz0ZGcvG0ojI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD0C, serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Validity Not Before: Aug 7 08:18:19 2025 GMT Not After : Aug 14 08:18:19 2025 GMT Subject: CN=6894614c-62b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c9:9c:bf:6f:1b:51:82:cb:7b:37:99:22:aa: aa:72:99:4a:fa:b7:af:ef:db:53:8d:eb:df:1c:d8: 44:ba:d4:c2:39:08:e5:85:79:d7:72:e6:2c:75:0d: 96:d3:20:9c:9a:f9:1b:a8:b5:b3:c0:c8:b6:a7:47: d2:8a:3f:ce:7b:6f:d1:72:fe:d9:69:a2:66:36:74: db:c7:9a:ff:0a:07:cc:07:69:6a:9e:d1:67:60:97: 0f:7f:34:79:d0:6e:15:92:fd:21:40:6f:6c:e7:92: 7c:40:04:63:ef:9e:7a:ad:5c:84:29:2b:28:c7:e7: e8:86:47:df:ea:bf:5e:80:f0:34:be:6e:30:4a:ad: cf:e1:50:24:d0:73:35:60:b5:27:05:6a:7d:e0:18: 64:31:df:87:2f:8d:1c:e6:27:33:24:00:0d:08:44: 4a:55:0b:04:03:89:d9:df:01:5a:b3:ab:b5:5b:dd: cd:e1:9f:1c:3b:1c:a1:7d:35:89:e3:ef:98:0c:17: 65:c8:28:3d:4f:47:af:cc:51:fe:e0:5f:90:91:e7: c4:5c:7e:6d:d9:97:09:de:e5:c8:c0:a6:e9:46:48: b2:10:09:8c:53:b2:4d:e8:f7:4f:f8:3f:ab:d0:2e: eb:83:6a:a3:b5:a3:50:2a:fc:3c:29:d6:01:65:bb: 80:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:17:D9:EF:B3:A9:90:76:A4:2D:B0:89:76:9F:7C:C1:F4:D4:A1:72 X509v3 Authority Key Identifier: keyid:B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:f8:ee:6a:04:81:4d:4b:23:49:0b:ac:1a:54:f2:1d:9e:91: e9:f6:85:51:a8:fc:53:db:27:77:81:f9:2a:50:ef:ba:05:2f: e8:a4:76:a2:76:22:c8:a3:a7:ed:9e:3b:8c:b0:e4:e7:e9:97: d8:06:92:3d:0d:8e:00:b0:67:c7:46:ce:ac:99:e4:2d:93:5c: 60:69:95:f4:ce:fc:c2:c6:e7:7c:5e:0d:3b:cc:b7:6c:57:0e: f1:e0:c9:7f:27:5b:a8:a4:55:90:89:f4:ac:07:08:95:fd:17: 89:cc:fd:ad:7f:f6:b9:2a:62:36:f3:fe:13:8b:21:8d:22:94: a9:53:75:76:51:ae:61:7d:ee:9e:02:41:da:3a:ea:00:9a:a2: 03:bc:5d:6c:86:eb:df:d2:09:7b:9b:cc:bf:bd:af:07:4a:ac: 7b:42:b1:b3:65:0d:8c:af:63:67:3f:92:ec:55:da:c5:cd:1a: 19:53:49:31:20:10:45:da:87:72:ca:8c:54:42:84:40:49:a0: 70:bf:fe:14:b2:97:bc:2e:9b:a4:6e:dd:f6:35:69:8a:1a:bc: d6:c8:85:e0:7e:e6:c9:dc:64:28:4c:27:46:da:39:48:f4:f9: a4:dd:91:fb:f1:a0:34:b8:5c:7f:6b:2b:de:19:7b:fa:a4:9f: f9:e0:44:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQwQzExMC8GA1UEBRMoQjJDNkZGQTc2QzNDRUE5NTlCNkFCREI0OTI3RTUwMTIz MjA3MkQ2MjAeFw0yNTA4MDcwODE4MTlaFw0yNTA4MTQwODE4MTlaMBgxFjAUBgNV BAMTDTY4OTQ2MTRjLTYyYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVyZy/bxtRgst7N5kiqqpymUr6t6/v21ON698c2ES61MI5COWFeddy5ix1DZbT IJya+RuotbPAyLanR9KKP857b9Fy/tlpomY2dNvHmv8KB8wHaWqe0Wdglw9/NHnQ bhWS/SFAb2znknxABGPvnnqtXIQpKyjH5+iGR9/qv16A8DS+bjBKrc/hUCTQczVg tScFan3gGGQx34cvjRzmJzMkAA0IREpVCwQDidnfAVqzq7Vb3c3hnxw7HKF9NYnj 75gMF2XIKD1PR6/MUf7gX5CR58Rcfm3Zlwne5cjApulGSLIQCYxTsk3o90/4P6vQ LuuDaqO1o1Aq/Dwp1gFlu4DdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULBfZ77Op kHakLbCJdp98wfTUoXIwHwYDVR0jBBgwFoAUssb/p2w86pWbar20kn5QEjIHLWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDBDL0JDMjE0MTVFMkIz MzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBXYmFyMjBrbjVRRWpJSExX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3NiX3Aydzg2cFdiYXIyMGtuNVFFaklITFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDBDL0JDMjE0MTVFMkIzMzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBX YmFyMjBrbjVRRWpJSExXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHL47moEgU1LI0kLrBpU8h2eken2hVGo/FPbJ3eB+SpQ77oFL+ikdqJ2 Isijp+2eO4yw5Ofpl9gGkj0NjgCwZ8dGzqyZ5C2TXGBplfTO/MLG53xeDTvMt2xX DvHgyX8nW6ikVZCJ9KwHCJX9F4nM/a1/9rkqYjbz/hOLIY0ilKlTdXZRrmF97p4C Qdo66gCaogO8XWyG69/SCXubzL+9rwdKrHtCsbNlDYyvY2c/kuxV2sXNGhlTSTEg EEXah3LKjFRChEBJoHC//hSyl7wum6Ru3fY1aYoavNbIheB+5sncZChMJ0baOUj0 +aTdkfvxoDS4XH9rK94Ze/qkn/ngRBs= -----END CERTIFICATE-----Generated at Sat Aug 9 01:21:12 2025 by rpki-client