$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: Fa/VWPP9H7Jc0doFxxb9nUurolQjMA+De/YzscYy6HE= Subject key identifier: 3D:CB:C0:46:8C:A3:23:71:5B:06:D8:85:07:E3:19:E9:04:BC:27:24 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 067B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 0653 Signing time: Fri 18 Jul 2025 23:06:22 +0000 Manifest this update: Fri 18 Jul 2025 23:06:22 +0000 Manifest next update: Fri 25 Jul 2025 23:06:22 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: Wo4xCKeJTM5EkEWrlAtiDK2a2dRo4q2L7TWnIAtQxpE=) 2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: CvSPVq3Ao9wPfXBwbGY/XZu0M+365J1WHXP7HCUvGEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: Jul 18 23:06:22 2025 GMT Not After : Jul 25 23:06:22 2025 GMT Subject: CN=687ad36e-995f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:e5:21:7b:e6:0c:cf:d5:5f:b6:45:47:d0: 9b:f5:ed:7f:58:bc:5d:77:1d:74:b8:e5:6e:6a:72: 17:2a:c2:67:19:05:93:dc:24:15:0e:e9:02:ad:8e: ab:2e:da:5b:e1:f2:7b:c5:c8:17:4e:74:81:6e:20: 35:60:d8:9b:69:58:91:1c:26:31:1f:2d:19:33:2f: 45:31:07:b7:7d:38:ef:68:3d:66:17:0d:ea:f8:aa: 1e:ac:89:a5:f6:6d:56:4b:12:8d:c7:19:fc:ef:cf: 39:2f:4f:cd:01:75:d0:db:c0:7b:08:3a:ea:6c:d3: 79:4c:82:c3:20:3f:45:d2:d3:83:49:d5:f6:24:ca: 66:6d:d9:ec:1f:2f:47:07:b4:16:22:b2:6a:7f:ad: c9:e8:38:28:76:02:b4:5f:e9:16:46:78:2b:75:30: 6b:31:ba:83:b1:20:b3:61:01:38:6e:02:a9:d3:6c: eb:cc:5b:99:69:2f:dc:e3:f0:d2:9d:31:e0:1b:a1: 21:48:3f:8a:a5:46:a3:e5:6e:e1:3e:9d:d3:03:d9: 7e:98:e1:a7:be:5f:19:71:15:4f:02:f0:08:31:2a: df:2a:7b:fb:e0:81:f4:00:ad:9c:64:f6:2b:b6:0e: be:d2:55:34:e3:13:f9:21:6c:72:c5:0a:5b:36:5a: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CB:C0:46:8C:A3:23:71:5B:06:D8:85:07:E3:19:E9:04:BC:27:24 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b6:ed:a3:24:bc:e5:44:c9:4f:32:c8:91:44:92:8d:7a:1e: 69:97:17:ec:71:54:98:74:8c:47:4b:9d:2c:6a:04:c1:5b:1f: c4:46:9c:ed:96:17:3e:34:7d:75:cc:fd:31:5a:bd:8e:8a:71: e5:6e:5d:a0:8d:b8:85:a8:ea:d7:21:2a:10:01:4b:06:b8:a1: dd:c3:77:60:68:b2:cf:fe:8e:94:54:f0:8e:ec:03:8a:b1:55: 25:d2:d8:34:98:28:af:52:f9:d0:9b:43:c0:2f:1a:d8:c4:8e: 11:2f:26:9c:b7:99:0b:ad:09:37:cd:c8:1d:29:b4:6a:1a:77: 9d:eb:a9:0e:83:33:e8:2e:d7:17:68:fb:5a:9a:1a:45:cf:01: e3:89:0a:bf:d0:91:4d:5e:85:ee:ef:20:3b:b6:11:e5:c2:9c: 13:fa:19:52:20:a4:46:a3:24:9d:b9:7f:b5:c2:4d:30:52:51: 63:ea:db:ae:2a:aa:e0:00:ee:8d:26:5a:23:fd:cb:7f:c7:78: 58:06:c4:dd:5c:78:d5:c8:02:bc:4a:45:d0:e5:0c:a4:4a:96: 9b:b5:7d:10:16:b2:1e:87:dc:b6:9e:91:d0:94:ee:f0:e2:c7: a3:87:8c:e2:04:04:3d:1d:c4:a8:6b:0c:e1:63:61:38:5f:2b: 95:7c:dc:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjUwNzE4MjMwNjIyWhcNMjUwNzI1MjMwNjIyWjAYMRYwFAYD VQQDEw02ODdhZDM2ZS05OTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuLlIXvmDM/VX7ZFR9Cb9e1/WLxddx10uOVuanIXKsJnGQWT3CQVDukCrY6r Ltpb4fJ7xcgXTnSBbiA1YNibaViRHCYxHy0ZMy9FMQe3fTjvaD1mFw3q+KoerIml 9m1WSxKNxxn87885L0/NAXXQ28B7CDrqbNN5TILDID9F0tODSdX2JMpmbdnsHy9H B7QWIrJqf63J6DgodgK0X+kWRngrdTBrMbqDsSCzYQE4bgKp02zrzFuZaS/c4/DS nTHgG6EhSD+KpUaj5W7hPp3TA9l+mOGnvl8ZcRVPAvAIMSrfKnv74IH0AK2cZPYr tg6+0lU04xP5IWxyxQpbNloMiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3LwEaM oyNxWwbYhQfjGekEvCckMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFtu2jJLzlRMlPMsiRRJKNeh5plxfscVSYdIxHS50sagTBWx/ERpzt lhc+NH11zP0xWr2OinHlbl2gjbiFqOrXISoQAUsGuKHdw3dgaLLP/o6UVPCO7AOK sVUl0tg0mCivUvnQm0PALxrYxI4RLyact5kLrQk3zcgdKbRqGned66kOgzPoLtcX aPtamhpFzwHjiQq/0JFNXoXu7yA7thHlwpwT+hlSIKRGoySduX+1wk0wUlFj6tuu KqrgAO6NJloj/ct/x3hYBsTdXHjVyAK8SkXQ5QykSpabtX0QFrIeh9y2npHQlO7w 4sejh4ziBAQ9HcSoawzhY2E4XyuVfNwo -----END CERTIFICATE-----Generated at Sun Jul 20 10:36:20 2025 by rpki-client