$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: 4PFLNuH5A693QwF7h0Fs3c9hUnDYsdAOFQPhuHTKxDs= Subject key identifier: 7C:FA:D1:E0:EC:4E:22:46:37:91:88:2B:18:C0:64:EF:8A:AC:62:43 Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 031F Signing time: Mon 03 Nov 2025 01:02:57 +0000 Manifest this update: Mon 03 Nov 2025 01:02:56 +0000 Manifest next update: Mon 10 Nov 2025 01:02:56 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: mXT69rg81t7ymW5ohhvqDTiqrJxV3XvsXq1q/6swfT0=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Nov 3 01:02:56 2025 GMT Not After : Nov 10 01:02:56 2025 GMT Subject: CN=6907ff40-8ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:d9:19:b7:06:3c:7c:bb:0a:28:11:99:be: 2d:47:79:ec:6d:7c:2b:68:93:bb:a0:cb:18:31:97: ef:9a:61:1d:58:99:54:77:f9:ff:1f:f1:39:08:f2: f1:83:fb:08:a3:42:da:f4:e6:9e:18:e8:e6:4d:22: 7f:6f:d2:33:08:60:16:00:54:92:ed:2a:3b:67:66: de:16:ff:ac:30:dc:59:00:4a:8f:06:72:30:56:b6: 1b:ce:23:07:60:12:00:71:00:ad:4c:6a:e4:ae:8f: 6f:94:f3:df:ce:f5:1a:e0:8a:74:77:e8:d0:d6:e8: 4a:1b:3b:44:40:4d:7c:b3:0b:3a:9d:a7:65:64:40: 10:63:c3:05:5e:06:da:bb:26:9d:a1:70:9b:31:1d: c8:f5:4d:2c:dd:e3:d3:bd:ba:8b:ca:e7:34:ce:a3: 20:df:1f:e5:8c:7c:4f:2b:de:82:91:e7:fa:3e:81: 4b:34:c8:30:ba:3c:bf:54:8a:e1:e6:f6:6c:14:d1: 32:46:ee:17:bc:92:45:7c:49:ca:ea:84:5b:05:8a: cb:76:7c:ef:9e:f0:2c:d1:f5:a5:88:13:b4:78:d6: 74:54:3a:f0:05:85:44:9f:0e:8a:c9:a3:d1:65:b1: 36:17:0e:ab:5d:d8:e8:20:8e:69:06:a9:e1:60:ba: 4b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FA:D1:E0:EC:4E:22:46:37:91:88:2B:18:C0:64:EF:8A:AC:62:43 X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:b6:a5:f9:27:42:6d:b7:39:3c:ad:ae:c6:eb:1f:cb:54:4c: 30:f8:6d:56:fe:3c:34:25:d3:70:2b:fb:bd:68:d3:a0:04:8b: 78:20:2e:60:88:4b:d2:70:74:8c:c0:59:f8:73:32:07:28:37: 63:03:47:f1:8a:00:d9:b7:1d:b5:88:26:05:1f:98:ca:6d:80: 35:fa:66:aa:73:17:42:3b:b9:61:5d:1f:cb:1a:69:29:60:ec: fc:55:c4:66:30:86:ac:68:d0:6e:4a:80:9d:77:c0:82:ac:4f: 2b:e7:73:a4:14:ce:86:49:35:47:8c:b2:65:57:ca:9e:2c:65: 54:63:ef:19:a0:c0:f4:f3:eb:da:4c:fc:b3:6c:bd:30:76:1c: 33:71:a0:53:2a:9b:f2:1c:f3:ef:3f:0e:5e:fe:b2:4b:90:36: 03:d8:79:19:6d:a0:6b:b4:7a:61:09:94:7e:12:64:8c:1a:1e: 8b:bf:f5:8b:2b:58:0c:87:95:8b:f6:6d:cb:9d:36:77:d4:9c: 5a:97:76:39:a8:f6:cd:13:78:7e:3d:73:9e:67:9a:e3:5d:ce: 26:2f:9c:56:ec:58:f6:a4:3e:41:6b:7a:34:b0:a8:a7:3b:53: 01:9f:c7:96:05:b9:9a:cc:92:a5:67:9a:be:46:b1:78:7b:51: 7f:5d:e2:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUxMTAzMDEwMjU2WhcNMjUxMTEwMDEwMjU2WjAYMRYwFAYD VQQDEw02OTA3ZmY0MC04ZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAom3ZGbcGPHy7CigRmb4tR3nsbXwraJO7oMsYMZfvmmEdWJlUd/n/H/E5CPLx g/sIo0La9OaeGOjmTSJ/b9IzCGAWAFSS7So7Z2beFv+sMNxZAEqPBnIwVrYbziMH YBIAcQCtTGrkro9vlPPfzvUa4Ip0d+jQ1uhKGztEQE18sws6nadlZEAQY8MFXgba uyadoXCbMR3I9U0s3ePTvbqLyuc0zqMg3x/ljHxPK96Ckef6PoFLNMgwujy/VIrh 5vZsFNEyRu4XvJJFfEnK6oRbBYrLdnzvnvAs0fWliBO0eNZ0VDrwBYVEnw6KyaPR ZbE2Fw6rXdjoII5pBqnhYLpLywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHz60eDs TiJGN5GIKxjAZO+KrGJDMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwtqX5J0Jttzk8ra7G6x/LVEww+G1W/jw0JdNwK/u9aNOgBIt4IC5g iEvScHSMwFn4czIHKDdjA0fxigDZtx21iCYFH5jKbYA1+maqcxdCO7lhXR/LGmkp YOz8VcRmMIasaNBuSoCdd8CCrE8r53OkFM6GSTVHjLJlV8qeLGVUY+8ZoMD08+va TPyzbL0wdhwzcaBTKpvyHPPvPw5e/rJLkDYD2HkZbaBrtHphCZR+EmSMGh6Lv/WL K1gMh5WL9m3LnTZ31Jxal3Y5qPbNE3h+PXOeZ5rjXc4mL5xW7Fj2pD5Ba3o0sKin O1MBn8eWBbmazJKlZ5q+RrF4e1F/XeJO -----END CERTIFICATE-----Generated at Tue Nov 4 08:08:05 2025 by rpki-client