$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: 6FLuYUQGzKnz4SPtdaWE3RSeGMubrgDYJ+n6tSkdCpc= Subject key identifier: 73:A1:AA:FF:24:26:E4:91:7C:C0:3A:B4:3A:9B:34:DB:DB:3E:AD:7D Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 02F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 02F3 Signing time: Thu 07 Aug 2025 01:51:23 +0000 Manifest this update: Thu 07 Aug 2025 01:51:22 +0000 Manifest next update: Thu 14 Aug 2025 01:51:22 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: zNnsLKpdmQx5rMHYl1nbt0ngSs9sQVO/XCG5wKyCepo=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 759 (0x2f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Aug 7 01:51:22 2025 GMT Not After : Aug 14 01:51:22 2025 GMT Subject: CN=6894069b-eb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:5f:4c:13:cf:60:79:ab:d7:07:c5:e2:68: 38:8f:b6:7d:50:96:98:e2:41:e2:e4:7f:50:35:50: 00:f0:d7:fe:e6:17:4d:f3:be:ab:46:90:5a:38:54: 3b:72:5c:81:f7:9e:d9:56:91:a4:2d:5c:4e:35:e8: d1:9b:f7:6f:13:3f:c3:98:83:31:3d:95:b5:66:ae: 5d:4b:85:85:49:70:7c:d1:4e:b9:8a:e4:e8:41:d7: 37:9c:33:b6:0b:90:51:db:2f:e2:75:61:74:9b:e9: cd:8c:11:d2:3b:38:dc:e9:eb:b0:5f:55:f7:eb:7d: 4c:64:38:1e:be:bd:d4:53:fa:13:b4:44:b4:85:52: a5:37:4b:8f:6d:d2:bc:b4:50:d9:fd:5e:eb:b7:d7: bf:23:7f:5b:9b:38:ea:b7:cb:63:e9:60:24:6c:3c: 8f:03:f0:9f:10:33:9d:bb:dc:d5:9f:11:5a:11:61: 3b:4b:0e:85:a5:92:6c:a7:bf:0b:38:1c:52:52:3e: 4d:b8:e8:77:b2:56:46:4c:1d:1e:68:72:b5:39:98: 87:ad:ea:4c:24:24:7f:e1:88:58:de:41:76:1e:17: 19:21:f6:c4:13:8a:87:fb:14:26:21:d5:5d:80:79: 8f:86:b7:6a:de:87:9f:0e:39:8a:dd:61:14:b8:1c: 63:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A1:AA:FF:24:26:E4:91:7C:C0:3A:B4:3A:9B:34:DB:DB:3E:AD:7D X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:2d:1b:4b:cd:5d:f9:d3:b4:3c:c1:ea:81:60:d9:9f:b4:76: 3e:77:9c:92:31:dd:52:41:a9:6e:50:54:69:f3:af:43:c7:1e: 81:c9:95:88:f5:03:9a:d6:9e:31:6b:81:d2:45:83:0c:d4:34: f5:b0:92:0f:69:95:88:c8:6a:d9:4c:1b:e1:69:c5:b3:9b:43: de:14:bf:a9:e0:c8:56:84:82:29:6f:a3:39:6a:1f:a8:d6:53: 0e:47:0e:86:4f:40:90:9c:ba:56:78:7c:c2:af:7e:a0:a5:5f: 77:7a:3a:de:59:f1:6b:76:0e:33:73:47:df:52:e3:bb:a7:26: 3e:63:cc:09:55:af:58:cb:53:78:c9:fd:aa:6a:11:6a:e8:1a: 79:19:e3:4e:2b:24:0f:f9:a9:9e:72:4f:ac:5c:e4:41:51:d7: 26:ef:30:a8:6e:cf:26:8c:2b:05:33:39:26:72:35:dd:5c:70: 32:43:c3:bb:90:00:8a:20:94:06:5e:42:b7:a3:c4:84:0b:b9: 4b:16:fb:43:8f:44:73:0a:0d:96:b8:b0:84:95:c3:8d:f5:85: 34:de:ac:68:fa:ac:2f:08:11:80:eb:c5:f7:15:e6:73:08:c2: 1d:66:21:d8:84:77:f5:4c:75:ce:56:c2:98:81:99:16:5b:05: 7d:0d:5d:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUwODA3MDE1MTIyWhcNMjUwODE0MDE1MTIyWjAYMRYwFAYD VQQDEw02ODk0MDY5Yi1lYjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNlfTBPPYHmr1wfF4mg4j7Z9UJaY4kHi5H9QNVAA8Nf+5hdN876rRpBaOFQ7 clyB957ZVpGkLVxONejRm/dvEz/DmIMxPZW1Zq5dS4WFSXB80U65iuToQdc3nDO2 C5BR2y/idWF0m+nNjBHSOzjc6euwX1X3631MZDgevr3UU/oTtES0hVKlN0uPbdK8 tFDZ/V7rt9e/I39bmzjqt8tj6WAkbDyPA/CfEDOdu9zVnxFaEWE7Sw6FpZJsp78L OBxSUj5NuOh3slZGTB0eaHK1OZiHrepMJCR/4YhY3kF2HhcZIfbEE4qH+xQmIdVd gHmPhrdq3oefDjmK3WEUuBxjswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOhqv8k JuSRfMA6tDqbNNvbPq19MB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiLRtLzV3507Q8weqBYNmftHY+d5ySMd1SQaluUFRp869Dxx6ByZWI 9QOa1p4xa4HSRYMM1DT1sJIPaZWIyGrZTBvhacWzm0PeFL+p4MhWhIIpb6M5ah+o 1lMORw6GT0CQnLpWeHzCr36gpV93ejreWfFrdg4zc0ffUuO7pyY+Y8wJVa9Yy1N4 yf2qahFq6Bp5GeNOKyQP+ameck+sXORBUdcm7zCobs8mjCsFMzkmcjXdXHAyQ8O7 kACKIJQGXkK3o8SEC7lLFvtDj0RzCg2WuLCElcON9YU03qxo+qwvCBGA68X3FeZz CMIdZiHYhHf1THXOVsKYgZkWWwV9DV2A -----END CERTIFICATE-----Generated at Sat Aug 9 01:06:08 2025 by rpki-client