$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: OO5TSaGN1impk2+BSo54JPthuO/XpIk5XG+WtG+4QwQ= Subject key identifier: F1:55:EB:DB:CC:3A:CA:A2:85:C5:2A:52:01:FE:C4:C7:8F:6A:5B:62 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 0638 Signing time: Mon 16 Jun 2025 22:30:36 +0000 Manifest this update: Mon 16 Jun 2025 22:30:35 +0000 Manifest next update: Mon 23 Jun 2025 22:30:35 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: 8bvm6UgROPpIX6efFTkenippWWZADDmR61bKs8/PEF0=) 2: 4E76D152B51411ECB8632A19C4F9AE02.roa (hash: Iq1q/5U8Q7NJj1JuDsY8yHtDH6GQIcf5u5P+dqJrsNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: Jun 16 22:30:35 2025 GMT Not After : Jun 23 22:30:35 2025 GMT Subject: CN=68509b0c-3a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:e9:92:ae:25:a2:2f:8f:8e:04:00:4c:52: ca:0d:94:d0:99:a3:e4:47:7d:fb:e0:13:b1:15:a6: 0c:be:dc:6b:16:e9:1b:4f:45:32:c5:c8:71:f3:e4: 56:00:97:cf:48:df:44:2f:f2:47:73:de:38:90:d7: 45:a0:8a:9b:7e:86:4f:cb:97:49:81:51:b8:57:0f: 83:c8:f4:ab:21:1b:da:78:ec:0c:eb:fe:a7:8b:a7: e5:a8:5c:d5:1e:35:2d:0d:2b:bb:c3:27:85:f6:74: 31:98:50:5a:0c:98:a8:43:ea:a3:69:e9:f0:19:16: 78:75:50:7e:7f:71:67:ee:dc:b1:e1:ac:0f:fa:62: 62:7f:6c:db:9a:3f:e6:2a:03:e5:6b:8e:49:73:c6: d4:51:a9:d1:f1:c9:f9:7d:3a:4b:92:9e:00:ab:3b: 4b:3e:44:85:79:3c:1d:79:45:13:f0:1b:6c:2e:8e: c5:9a:73:bd:e2:10:0f:e2:50:84:b7:8e:50:c8:b1: ad:bb:31:91:94:1b:1a:3d:2d:f3:28:5d:5f:ec:57: 51:37:b6:3e:c3:84:09:01:a3:ff:65:6f:66:78:8a: 9a:57:1f:1e:88:6b:8a:ea:82:e1:4d:00:87:81:30: 41:e4:aa:3a:f1:12:fa:ae:0d:00:41:28:f1:80:63: 1d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:55:EB:DB:CC:3A:CA:A2:85:C5:2A:52:01:FE:C4:C7:8F:6A:5B:62 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:23:24:3a:a8:80:24:22:b6:29:23:95:ab:6f:86:f6:1f:cc: 6c:18:ec:0a:ec:5f:25:87:30:24:c9:68:d8:9a:26:90:48:bb: a1:4f:9a:75:9c:b6:96:19:27:04:4a:7b:09:50:f8:e1:60:6d: c4:8e:a7:ca:b9:5f:89:af:46:7b:5d:1a:d6:40:70:18:a0:d1: 65:77:a1:7e:e4:3a:58:64:be:f8:ca:61:0a:0f:63:0c:b9:b0: 87:bd:03:8e:bf:68:dc:3f:8f:73:98:e3:5a:04:74:26:26:ba: a7:32:06:a4:42:53:35:bb:27:db:8f:1a:d7:59:94:9a:dc:14: 6a:ea:96:9a:7d:e9:84:4b:58:c8:74:63:e0:f5:74:c3:ae:46: 6c:9c:71:d1:38:8f:c5:21:35:c4:f7:14:e0:5e:8d:f3:b3:82: 8d:b6:5a:5d:25:cd:b0:45:1e:76:00:6c:af:27:d8:77:3c:b8: d3:3a:3d:35:ec:85:19:86:e1:c9:1b:98:f2:7f:4f:87:b8:8d: 0a:56:62:68:e8:6b:ac:8f:93:d8:3d:21:30:f9:13:6c:0b:d2: c3:be:17:25:82:b7:d4:1e:43:ae:2d:c7:69:2a:9a:b2:85:b0: 0e:d3:90:32:f5:39:25:da:17:5f:1f:d0:20:02:6f:06:5f:54: 20:9e:53:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjUwNjE2MjIzMDM1WhcNMjUwNjIzMjIzMDM1WjAYMRYwFAYD VQQDEw02ODUwOWIwYy0zYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdPpkq4loi+PjgQATFLKDZTQmaPkR3374BOxFaYMvtxrFukbT0Uyxchx8+RW AJfPSN9EL/JHc944kNdFoIqbfoZPy5dJgVG4Vw+DyPSrIRvaeOwM6/6ni6flqFzV HjUtDSu7wyeF9nQxmFBaDJioQ+qjaenwGRZ4dVB+f3Fn7tyx4awP+mJif2zbmj/m KgPla45Jc8bUUanR8cn5fTpLkp4AqztLPkSFeTwdeUUT8BtsLo7FmnO94hAP4lCE t45QyLGtuzGRlBsaPS3zKF1f7FdRN7Y+w4QJAaP/ZW9meIqaVx8eiGuK6oLhTQCH gTBB5Ko68RL6rg0AQSjxgGMdZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFV69vM OsqihcUqUgH+xMePaltiMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCIyQ6qIAkIrYpI5Wrb4b2H8xsGOwK7F8lhzAkyWjYmiaQSLuhT5p1 nLaWGScESnsJUPjhYG3EjqfKuV+Jr0Z7XRrWQHAYoNFld6F+5DpYZL74ymEKD2MM ubCHvQOOv2jcP49zmONaBHQmJrqnMgakQlM1uyfbjxrXWZSa3BRq6paafemES1jI dGPg9XTDrkZsnHHROI/FITXE9xTgXo3zs4KNtlpdJc2wRR52AGyvJ9h3PLjTOj01 7IUZhuHJG5jyf0+HuI0KVmJo6Gusj5PYPSEw+RNsC9LDvhclgrfUHkOuLcdpKpqy hbAO05Ay9Tkl2hdfH9AgAm8GX1QgnlN6 -----END CERTIFICATE-----Generated at Tue Jun 17 11:47:22 2025 by rpki-client