$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: Uiglmns/FK91lvEd6tjjYGETbfVazndjyxraPPGRu2M= Subject key identifier: 9B:D6:91:F8:4E:6C:80:0B:66:40:9D:98:20:CE:28:82:FC:AA:38:F7 Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 02BD Signing time: Fri 25 Apr 2025 01:10:48 +0000 Manifest this update: Fri 25 Apr 2025 01:10:48 +0000 Manifest next update: Fri 02 May 2025 01:10:48 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: ORxPRnmhuLFxFVErXPIAFGGDeNU5bGjHhucf2J9Y2hM=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: PUc54q2WTiia3AT9HsSdWhbagSjmonMUemo/1oF5Qio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Apr 25 01:10:48 2025 GMT Not After : May 2 01:10:48 2025 GMT Subject: CN=680ae118-5719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:b1:80:35:f0:53:25:f1:14:c5:69:44:39: 19:fd:84:b0:df:f5:56:dd:3c:b9:f0:7f:a2:f8:48: 4a:e5:ca:7f:44:fb:dd:02:18:e9:86:75:67:bd:ba: ff:85:a7:57:d9:78:3b:67:9f:2e:d3:aa:ea:61:94: 60:a8:3c:16:ec:b2:b7:a6:2e:24:a5:5a:6f:5e:fb: 87:ad:15:f7:70:89:5e:66:55:d7:80:a7:83:43:10: cb:c1:f1:d9:d5:dc:5c:e4:e8:6b:30:7d:64:70:56: 55:78:f7:da:40:a7:17:db:4e:e8:52:5a:ea:ae:eb: 68:aa:c4:97:14:5d:9d:47:c1:e1:b4:0f:f4:f2:67: 47:e2:42:8e:78:b7:0e:54:f2:9d:0f:74:20:18:4e: 44:60:f0:f6:a4:f8:f8:d9:8d:8f:4d:1f:83:00:aa: bf:8d:d3:97:30:15:10:7b:8d:5c:92:8c:8f:d8:49: 84:6f:22:3d:7a:9d:60:c9:ab:2a:a3:42:2a:78:b3: 01:98:49:8a:17:64:37:11:ee:cd:c5:74:e7:35:f3: cf:52:38:6f:67:4d:5d:96:98:97:77:71:5f:6b:7b: 40:7f:b7:76:da:1c:98:95:bf:d5:b2:88:77:83:9d: 36:0e:9e:13:c4:2f:61:82:da:96:d0:47:a8:03:3c: e6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D6:91:F8:4E:6C:80:0B:66:40:9D:98:20:CE:28:82:FC:AA:38:F7 X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:cf:28:cd:2d:1d:29:a9:7e:eb:74:ad:31:f2:45:1e:98:d3: c0:70:e9:ff:39:93:44:cd:fb:d4:d6:1b:21:48:fd:0b:cd:52: 64:c2:97:9f:cc:4b:a0:66:8c:9a:4b:29:2d:82:c0:10:d0:bb: 10:0d:dc:58:06:4f:70:11:b4:bb:19:17:7b:3a:24:63:c2:31: 86:79:8d:9e:16:d1:b9:39:d6:78:32:06:87:48:78:d5:c8:11: 46:d0:22:ea:00:16:60:b6:76:9a:e8:1a:e2:28:a2:2f:01:d4: db:3c:1a:1d:0d:15:03:93:8a:db:ce:52:58:3d:21:b3:40:31: 82:5e:49:cd:45:4e:37:23:16:71:45:1d:01:7e:8f:9b:e0:5e: ed:bd:7e:62:d8:ae:f4:3c:c1:42:90:fd:c6:b7:7d:e5:03:7d: 46:e3:00:17:cc:b9:8c:48:de:68:2d:bd:82:39:94:53:af:4b: 6d:19:ea:48:6a:91:24:25:30:94:fe:0c:87:7a:a0:51:09:c7: b5:4f:51:17:ff:db:db:a4:85:ed:f5:d6:ab:c2:6b:07:39:f3: 0a:af:12:e9:1f:e7:5f:a3:13:cd:fa:5a:44:e1:4b:ba:32:37: f0:a6:17:08:0f:6d:e1:1d:23:fc:d5:54:25:fd:f8:ae:e6:13: 20:eb:48:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUwNDI1MDExMDQ4WhcNMjUwNTAyMDExMDQ4WjAYMRYwFAYD VQQDEw02ODBhZTExOC01NzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+mxgDXwUyXxFMVpRDkZ/YSw3/VW3Ty58H+i+EhK5cp/RPvdAhjphnVnvbr/ hadX2Xg7Z58u06rqYZRgqDwW7LK3pi4kpVpvXvuHrRX3cIleZlXXgKeDQxDLwfHZ 1dxc5OhrMH1kcFZVePfaQKcX207oUlrqrutoqsSXFF2dR8HhtA/08mdH4kKOeLcO VPKdD3QgGE5EYPD2pPj42Y2PTR+DAKq/jdOXMBUQe41ckoyP2EmEbyI9ep1gyasq o0IqeLMBmEmKF2Q3Ee7NxXTnNfPPUjhvZ01dlpiXd3Ffa3tAf7d22hyYlb/Vsoh3 g502Dp4TxC9hgtqW0EeoAzzmnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvWkfhO bIALZkCdmCDOKIL8qjj3MB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBizyjNLR0pqX7rdK0x8kUemNPAcOn/OZNEzfvU1hshSP0LzVJkwpef zEugZoyaSyktgsAQ0LsQDdxYBk9wEbS7GRd7OiRjwjGGeY2eFtG5OdZ4MgaHSHjV yBFG0CLqABZgtnaa6BriKKIvAdTbPBodDRUDk4rbzlJYPSGzQDGCXknNRU43IxZx RR0Bfo+b4F7tvX5i2K70PMFCkP3Gt33lA31G4wAXzLmMSN5oLb2COZRTr0ttGepI apEkJTCU/gyHeqBRCce1T1EX/9vbpIXt9darwmsHOfMKrxLpH+dfoxPN+lpE4Uu6 MjfwphcID23hHSP81VQl/fiu5hMg60jl -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:55 2025 by rpki-client