$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft File: ssb_p2w86pWbar20kn5QEjIHLWI.mft (raw, json) Hash identifier: N4p6RB4SAnA9Lg61h4IYOoHsrrjZQy3Eq3pZFlpsFC8= Subject key identifier: 12:64:4D:D7:A2:E7:9B:D4:22:A0:01:27:45:D2:8F:A9:3E:A7:E5:38 Authority key identifier: B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 Certificate issuer: /CN=A911BD0C/serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft Manifest number: 15 Signing time: Fri 13 Jun 2025 06:53:29 +0000 Manifest this update: Fri 13 Jun 2025 06:53:28 +0000 Manifest next update: Fri 20 Jun 2025 06:53:28 +0000 Files and hashes: 1: ssb_p2w86pWbar20kn5QEjIHLWI.crl (hash: 7hRLQyi1MSQbjlim+fW1+5iKY8LZaI7htV1Y7mjA3ew=) 2: B977F0322B3411F08FD74443C4F9AE02.roa (hash: v+cdW5qRRy42rcVfsQ7WNZFoarz0/H2Wz0ZGcvG0ojI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD0C, serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Validity Not Before: Jun 13 06:53:28 2025 GMT Not After : Jun 20 06:53:28 2025 GMT Subject: CN=684bcae9-21d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:fe:fc:3d:2e:ca:68:92:6c:63:59:65:9d: a8:2e:06:19:06:ab:15:6b:16:39:d9:2a:62:90:ec: cf:43:aa:c1:b9:30:df:02:b9:78:06:75:92:bb:65: 3a:7b:07:05:5d:da:1a:0b:83:ef:e6:72:89:fd:01: 58:e6:80:2f:c7:79:67:70:ae:ba:95:12:ec:3c:61: 8c:93:36:18:9f:4b:aa:2c:f8:16:70:26:db:9d:97: 17:33:7e:16:98:ae:a9:5e:f4:9f:59:22:c6:85:48: 17:f4:7b:d1:59:dc:72:55:55:19:56:51:d4:62:f1: b3:23:36:63:31:d4:7a:50:59:26:81:6c:d1:16:48: 5e:51:44:3c:62:18:e3:c3:62:8b:81:7a:d9:a5:86: 2e:ab:f7:b4:1f:bc:24:2b:94:2f:7b:88:4b:59:c6: f6:12:29:64:a7:f0:f9:97:69:8e:f9:fe:7b:d3:0c: 60:6a:fb:fc:df:26:52:83:27:67:10:7e:98:89:93: 46:de:01:30:51:c3:30:41:e7:90:9f:dd:84:16:59: 50:79:80:1b:46:2a:ae:14:80:89:f2:c6:3e:40:1d: cb:fb:a9:e7:97:b4:f0:a0:3a:e8:18:60:09:0e:07: 1b:f9:fd:67:be:33:ef:20:f9:59:23:bf:3b:08:b4: f9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:64:4D:D7:A2:E7:9B:D4:22:A0:01:27:45:D2:8F:A9:3E:A7:E5:38 X509v3 Authority Key Identifier: keyid:B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3e:82:a7:88:ae:e9:bb:f5:f5:08:a2:b8:18:26:d6:22:df: ff:27:52:49:df:31:4f:83:ee:d7:e5:af:21:0c:08:df:81:4a: cc:a5:71:a2:ba:1b:cc:62:ce:ad:4b:b0:e9:11:9d:fb:a2:9f: 66:2e:5d:49:67:61:b2:d7:82:74:de:07:be:54:2b:86:c9:db: 78:48:f7:9b:45:25:a0:a5:9d:9e:5f:99:39:46:c3:61:90:38: 23:f7:91:a9:4d:96:51:e4:1e:c4:36:a6:a0:99:05:03:48:91: d2:76:34:8b:55:94:bb:6a:3c:fe:a5:40:2b:af:33:af:eb:b1: 26:b5:36:00:89:e9:99:7f:aa:a7:cf:ef:66:50:10:c2:24:11: b2:f9:63:47:d5:d0:23:88:51:96:82:3a:e8:61:d7:4a:74:af: ea:82:15:0f:af:76:c9:20:66:e2:15:68:e4:6c:6a:16:2a:f2: 0c:8e:ea:b0:66:64:56:b1:60:a6:d2:6c:a3:aa:7a:ff:45:34: a0:21:08:67:04:ad:64:72:22:17:a7:4e:f5:ff:c2:29:95:1a: 34:b7:86:cf:82:95:a7:ae:1b:f1:86:23:c4:14:28:7c:a8:44: ee:ba:68:1f:75:37:62:d6:82:b9:ec:c9:e3:85:86:9c:e3:c3: 91:79:f4:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQwQzExMC8GA1UEBRMoQjJDNkZGQTc2QzNDRUE5NTlCNkFCREI0OTI3RTUwMTIz MjA3MkQ2MjAeFw0yNTA2MTMwNjUzMjhaFw0yNTA2MjAwNjUzMjhaMBgxFjAUBgNV BAMTDTY4NGJjYWU5LTIxZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuLf78PS7KaJJsY1llnaguBhkGqxVrFjnZKmKQ7M9DqsG5MN8CuXgGdZK7ZTp7 BwVd2hoLg+/mcon9AVjmgC/HeWdwrrqVEuw8YYyTNhifS6os+BZwJtudlxczfhaY rqle9J9ZIsaFSBf0e9FZ3HJVVRlWUdRi8bMjNmMx1HpQWSaBbNEWSF5RRDxiGOPD YouBetmlhi6r97QfvCQrlC97iEtZxvYSKWSn8PmXaY75/nvTDGBq+/zfJlKDJ2cQ fpiJk0beATBRwzBB55Cf3YQWWVB5gBtGKq4UgInyxj5AHcv7qeeXtPCgOugYYAkO Bxv5/We+M+8g+VkjvzsItPmBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEmRN16Ln m9QioAEnRdKPqT6n5TgwHwYDVR0jBBgwFoAUssb/p2w86pWbar20kn5QEjIHLWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDBDL0JDMjE0MTVFMkIz MzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBXYmFyMjBrbjVRRWpJSExX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3NiX3Aydzg2cFdiYXIyMGtuNVFFaklITFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDBDL0JDMjE0MTVFMkIzMzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBX YmFyMjBrbjVRRWpJSExXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH0+gqeIrum79fUIorgYJtYi3/8nUknfMU+D7tflryEMCN+BSsylcaK6 G8xizq1LsOkRnfuin2YuXUlnYbLXgnTeB75UK4bJ23hI95tFJaClnZ5fmTlGw2GQ OCP3kalNllHkHsQ2pqCZBQNIkdJ2NItVlLtqPP6lQCuvM6/rsSa1NgCJ6Zl/qqfP 72ZQEMIkEbL5Y0fV0COIUZaCOuhh10p0r+qCFQ+vdskgZuIVaORsahYq8gyO6rBm ZFaxYKbSbKOqev9FNKAhCGcErWRyIhenTvX/wimVGjS3hs+ClaeuG/GGI8QUKHyo RO66aB91N2LWgrnsyeOFhpzjw5F59KE= -----END CERTIFICATE-----Generated at Sun Jun 15 07:57:10 2025 by rpki-client