$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: qSlazLY+IV3RIEZDjoZrvP8c76vkIc9YBDNPr2njujU= Subject key identifier: F3:31:E4:74:6A:0B:3C:0A:36:C2:41:2A:49:40:47:2D:EB:A3:DA:62 Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 02DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 02D8 Signing time: Sun 15 Jun 2025 01:02:58 +0000 Manifest this update: Sun 15 Jun 2025 01:02:57 +0000 Manifest next update: Sun 22 Jun 2025 01:02:57 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: xM87LUg1lbrr3xM+4i0HRYfwRjQaD0FAjlwVwi4quvg=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 732 (0x2dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Jun 15 01:02:57 2025 GMT Not After : Jun 22 01:02:57 2025 GMT Subject: CN=684e1bc2-e604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:6a:f1:1e:21:6c:54:9f:e9:d6:70:ee:f2: 9a:43:61:9e:ab:fa:61:1d:49:9a:a6:25:1f:36:b8: 1c:ee:85:ec:15:48:db:90:23:b2:fd:a0:80:9a:cd: 44:be:3a:59:0d:88:47:cc:a1:f3:3a:60:59:fc:9b: 1d:2d:28:8d:8c:03:cb:91:e1:e5:df:8b:f7:74:37: db:0f:9b:9a:bd:a4:29:c6:6a:d1:3e:66:91:5e:2e: 04:ff:09:2a:4d:cf:4f:76:79:5d:ed:cd:25:d6:9a: 15:16:29:57:0d:2f:6f:1a:1c:29:a6:84:ce:a6:3a: 5d:2a:ae:e2:af:79:9b:5a:e3:db:61:ab:ba:0a:27: 5f:27:a5:fb:f2:31:40:27:14:c3:c4:47:43:62:9c: 23:a4:b9:11:6b:23:76:ed:53:54:a4:d8:b5:66:03: c3:6c:2d:26:ab:f0:23:59:db:42:28:db:c3:01:10: 9c:21:cd:b7:78:c5:e3:1b:08:b5:34:6f:34:7b:8f: 9c:8c:49:d7:e4:42:c4:4e:22:f8:6d:71:5d:2c:0d: f9:1b:30:b2:47:20:1f:bd:c5:fe:51:3d:61:ae:32: d9:3f:51:fb:d1:b0:ba:03:6e:89:b6:20:3e:f4:d0: ea:ec:c7:52:a5:35:67:b1:e1:b5:27:6a:9b:de:d6: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:31:E4:74:6A:0B:3C:0A:36:C2:41:2A:49:40:47:2D:EB:A3:DA:62 X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:db:63:da:16:d7:ac:8c:f9:69:b8:9d:d5:b1:f0:d9:9e:92: d4:dc:f3:0f:5f:96:91:d6:93:9f:f6:e6:f8:30:97:45:8c:b0: 35:b4:d6:75:17:e4:03:24:d1:45:51:51:3e:a1:fd:ac:d5:fc: c5:2a:20:8b:9d:b8:2a:ea:1b:41:a6:4a:05:a3:94:6b:94:64: 05:b0:80:16:e5:e8:e5:bd:63:38:68:b6:fe:f2:59:0e:7c:9f: ea:8b:6e:f7:59:d2:23:2c:14:b8:bd:9d:d0:a7:56:7c:1a:fd: c2:5d:0a:a1:04:b3:ca:a8:84:69:59:5b:b0:18:9a:89:6b:b6: a1:7e:d9:03:86:6e:c7:35:e4:9d:17:7c:ab:f6:b3:e7:ca:bc: 9a:f3:06:e2:d9:f1:4c:f6:99:c3:8e:18:58:90:e7:7c:26:89: 06:69:c3:14:9a:e2:a1:e4:04:ae:a9:6d:c9:e2:b1:f8:8d:d4: fc:da:29:fe:f4:41:70:df:83:a3:93:57:05:23:b1:71:9b:79: 49:a2:b0:29:69:24:c7:9f:0d:b5:42:80:42:8b:1d:fa:65:e7: 6b:e1:a6:5a:43:dd:a3:9f:37:61:85:77:f7:fb:43:72:15:b0: 5e:8d:2b:f6:6a:79:b8:c4:2c:49:c2:6f:7c:68:0d:71:06:39: 08:6c:a5:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUwNjE1MDEwMjU3WhcNMjUwNjIyMDEwMjU3WjAYMRYwFAYD VQQDEw02ODRlMWJjMi1lNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZdq8R4hbFSf6dZw7vKaQ2Geq/phHUmapiUfNrgc7oXsFUjbkCOy/aCAms1E vjpZDYhHzKHzOmBZ/JsdLSiNjAPLkeHl34v3dDfbD5uavaQpxmrRPmaRXi4E/wkq Tc9Pdnld7c0l1poVFilXDS9vGhwppoTOpjpdKq7ir3mbWuPbYau6CidfJ6X78jFA JxTDxEdDYpwjpLkRayN27VNUpNi1ZgPDbC0mq/AjWdtCKNvDARCcIc23eMXjGwi1 NG80e4+cjEnX5ELETiL4bXFdLA35GzCyRyAfvcX+UT1hrjLZP1H70bC6A26JtiA+ 9NDq7MdSpTVnseG1J2qb3tYSswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMx5HRq CzwKNsJBKklARy3ro9piMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW22PaFtesjPlpuJ3VsfDZnpLU3PMPX5aR1pOf9ub4MJdFjLA1tNZ1 F+QDJNFFUVE+of2s1fzFKiCLnbgq6htBpkoFo5RrlGQFsIAW5ejlvWM4aLb+8lkO fJ/qi273WdIjLBS4vZ3Qp1Z8Gv3CXQqhBLPKqIRpWVuwGJqJa7ahftkDhm7HNeSd F3yr9rPnyrya8wbi2fFM9pnDjhhYkOd8JokGacMUmuKh5ASuqW3J4rH4jdT82in+ 9EFw34Ojk1cFI7Fxm3lJorApaSTHnw21QoBCix36Zedr4aZaQ92jnzdhhXf3+0Ny FbBejSv2anm4xCxJwm98aA1xBjkIbKXQ -----END CERTIFICATE-----Generated at Sun Jun 15 07:12:50 2025 by rpki-client