$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft File: ssb_p2w86pWbar20kn5QEjIHLWI.mft (raw, json) Hash identifier: R3dyXulahFoyXlzunjeKKeAtRQ6o76B21uWbNz+O5Kw= Subject key identifier: 87:EC:EB:A1:65:DC:EF:8E:F2:5F:A6:0F:B2:5D:BA:90:E2:D0:83:5B Authority key identifier: B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 Certificate issuer: /CN=A911BD0C/serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft Manifest number: 27 Signing time: Sat 19 Jul 2025 08:03:01 +0000 Manifest this update: Sat 19 Jul 2025 08:03:01 +0000 Manifest next update: Sat 26 Jul 2025 08:03:01 +0000 Files and hashes: 1: ssb_p2w86pWbar20kn5QEjIHLWI.crl (hash: yxqQvDw5lOjIUT05KNUT/E29TYEKDn1Z1dwiz4VoWhg=) 2: B977F0322B3411F08FD74443C4F9AE02.roa (hash: v+cdW5qRRy42rcVfsQ7WNZFoarz0/H2Wz0ZGcvG0ojI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD0C, serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Validity Not Before: Jul 19 08:03:01 2025 GMT Not After : Jul 26 08:03:01 2025 GMT Subject: CN=687b5135-3fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:25:5a:7e:72:31:ea:53:21:49:8b:fb:28: e3:73:0d:cd:9f:01:39:e5:eb:6c:9a:1e:ad:0c:12: 68:0c:80:9e:6e:6b:d2:16:69:d1:a6:b9:5d:d0:73: 71:71:55:7c:6b:11:30:2e:6d:a8:05:f9:c8:73:9f: b1:0d:14:d6:ce:0d:8d:e1:a0:01:f0:c7:dc:f0:f6: 0c:2a:5e:7b:22:4b:02:74:e2:39:32:02:4e:07:8c: cf:0f:9d:78:1f:c1:da:de:3e:dc:1c:8b:02:f9:7b: 65:f4:92:7b:03:4e:1e:aa:f0:d5:81:22:e2:57:6e: e5:c3:80:3a:b3:59:5f:7a:45:64:8f:41:ac:ca:f8: 39:2b:91:6d:5c:41:56:6a:72:58:c1:9f:9b:e1:dd: 2a:13:e3:20:a7:af:06:0a:88:c8:7a:de:f3:17:b5: c2:9e:ae:8d:47:85:e4:f1:13:bd:4a:0b:af:2b:9c: da:ae:a4:d7:62:ac:58:80:0e:b3:c4:a2:f3:72:96: a6:4b:30:b0:e8:85:da:2a:11:f4:f6:19:d6:be:ff: 13:86:d7:88:91:d1:59:30:28:f2:60:aa:b8:64:06: ec:79:e0:64:fe:a0:45:f7:67:84:48:a6:4d:23:23: 47:e2:cd:32:99:3a:59:13:6b:a1:35:8a:d8:63:1e: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EC:EB:A1:65:DC:EF:8E:F2:5F:A6:0F:B2:5D:BA:90:E2:D0:83:5B X509v3 Authority Key Identifier: keyid:B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:12:f5:8b:aa:89:f8:42:93:3f:74:d3:c8:e4:88:a6:48:a3: 09:e0:be:a0:84:aa:ee:a7:f4:b6:f7:2c:32:9c:c6:ec:c3:b2: f1:83:8e:5f:42:44:c8:90:f2:8f:10:2d:66:2c:ea:b0:85:b3: 50:e0:05:9c:36:e1:e4:13:35:34:e7:3f:c8:ce:f1:10:d7:43: 21:81:f3:78:05:f8:59:4f:66:7f:c2:bc:28:12:36:18:da:99: 7d:d3:bb:35:a6:07:6e:1f:1b:27:e3:1a:a3:90:40:b2:f0:a6: 53:19:c1:51:c2:d4:c0:73:ed:0c:5c:85:2b:31:8f:bd:dd:96: 9a:87:33:d8:34:03:1c:25:36:72:02:b5:82:31:16:a6:4b:48: 21:20:64:36:56:84:69:66:4b:10:21:a5:c9:d2:40:9c:d8:3b: d9:6a:03:e0:60:f6:cb:9d:25:7a:c6:de:4e:6e:1e:1f:43:b5: 1f:9a:7b:fb:47:b3:f2:3f:db:c2:93:18:82:cb:89:e4:7a:bf: 0e:e5:74:ba:30:7f:bb:31:ee:1f:b0:fb:5a:67:f1:9d:6e:a3: 9a:78:bd:15:b9:6a:b1:a0:07:df:4c:34:6e:49:ee:31:ea:33: 8d:53:ab:c0:db:97:33:2e:33:f6:5c:d5:3a:9a:af:03:19:83: ef:5d:ae:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQwQzExMC8GA1UEBRMoQjJDNkZGQTc2QzNDRUE5NTlCNkFCREI0OTI3RTUwMTIz MjA3MkQ2MjAeFw0yNTA3MTkwODAzMDFaFw0yNTA3MjYwODAzMDFaMBgxFjAUBgNV BAMTDTY4N2I1MTM1LTNmZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC69yVafnIx6lMhSYv7KONzDc2fATnl62yaHq0MEmgMgJ5ua9IWadGmuV3Qc3Fx VXxrETAubagF+chzn7ENFNbODY3hoAHwx9zw9gwqXnsiSwJ04jkyAk4HjM8PnXgf wdrePtwciwL5e2X0knsDTh6q8NWBIuJXbuXDgDqzWV96RWSPQazK+DkrkW1cQVZq cljBn5vh3SoT4yCnrwYKiMh63vMXtcKero1HheTxE71KC68rnNqupNdirFiADrPE ovNylqZLMLDohdoqEfT2Gda+/xOG14iR0VkwKPJgqrhkBux54GT+oEX3Z4RIpk0j I0fizTKZOlkTa6E1ithjHt/VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh+zroWXc 747yX6YPsl26kOLQg1swHwYDVR0jBBgwFoAUssb/p2w86pWbar20kn5QEjIHLWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDBDL0JDMjE0MTVFMkIz MzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBXYmFyMjBrbjVRRWpJSExX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3NiX3Aydzg2cFdiYXIyMGtuNVFFaklITFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDBDL0JDMjE0MTVFMkIzMzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBX YmFyMjBrbjVRRWpJSExXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMkS9YuqifhCkz9008jkiKZIowngvqCEqu6n9Lb3LDKcxuzDsvGDjl9C RMiQ8o8QLWYs6rCFs1DgBZw24eQTNTTnP8jO8RDXQyGB83gF+FlPZn/CvCgSNhja mX3TuzWmB24fGyfjGqOQQLLwplMZwVHC1MBz7QxchSsxj73dlpqHM9g0AxwlNnIC tYIxFqZLSCEgZDZWhGlmSxAhpcnSQJzYO9lqA+Bg9sudJXrG3k5uHh9DtR+ae/tH s/I/28KTGILLieR6vw7ldLowf7sx7h+w+1pn8Z1uo5p4vRW5arGgB99MNG5J7jHq M41Tq8DblzMuM/Zc1TqarwMZg+9dro0= -----END CERTIFICATE-----Generated at Sun Jul 20 07:25:15 2025 by rpki-client