$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: nBZiEEFQGe2wDWXLW/qg3bH8zaxohgAaJQoJ6TzVKuA= Subject key identifier: 4C:05:81:17:FD:55:5F:91:92:71:A3:BB:0D:7E:A8:4C:E2:F2:6D:41 Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 02EE Signing time: Tue 29 Jul 2025 01:54:07 +0000 Manifest this update: Tue 29 Jul 2025 01:54:07 +0000 Manifest next update: Tue 05 Aug 2025 01:54:07 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: CK9+CjeROifpfGJCEKCd1hF55TUDwnLS166uDs+1qvA=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 01:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Jul 29 01:54:07 2025 GMT Not After : Aug 5 01:54:07 2025 GMT Subject: CN=688829bf-a4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:13:b6:32:2a:eb:40:7e:9a:15:af:a5:6e: 69:79:f5:a7:3c:d3:26:28:98:4c:f6:41:8f:4a:af: ed:a2:ec:3e:82:f1:78:6e:8f:38:8f:13:c2:03:c8: 15:f5:5f:ad:55:20:31:ce:76:3d:5f:05:bb:a9:b4: 0d:87:3b:2c:5f:44:8e:6a:2f:35:5d:55:c6:13:0b: 78:cf:a4:45:b1:cc:7f:d6:aa:f1:54:ff:15:4c:25: 65:b0:11:d0:2c:75:0d:7f:2f:d9:c7:98:43:dc:ff: 88:dc:14:a5:6c:c1:94:57:40:91:66:3a:c0:ce:82: 6f:22:34:20:fe:22:e3:9c:4b:43:a9:c4:26:2a:5c: 64:67:b9:4b:65:e3:11:b6:90:a5:07:62:b0:f3:de: 4e:0c:c1:13:c8:90:d9:30:22:6f:28:5b:e9:38:f7: 8f:d8:d4:5f:22:9e:dc:17:8d:ec:79:f0:ee:cd:ee: 3a:ec:1b:06:75:43:1f:5b:5f:b0:37:ad:18:c7:c4: 62:a4:d4:e1:44:aa:15:c2:9b:3b:51:a4:b3:e0:9b: a3:aa:cd:3c:f8:4c:ac:27:e0:7c:21:27:53:d6:47: 84:94:d7:2c:24:d3:ec:cb:9b:ec:6b:a0:b9:bf:e0: 14:22:0c:6e:9a:41:53:40:7f:05:2e:1d:6d:49:34: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:05:81:17:FD:55:5F:91:92:71:A3:BB:0D:7E:A8:4C:E2:F2:6D:41 X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:27:69:ef:88:fe:5e:21:3e:4b:37:47:f2:d1:49:60:54:e1: 33:c6:d3:0b:e2:7d:b8:6a:30:b0:09:4d:cf:6b:a4:9b:df:40: b0:1b:6b:b5:85:83:80:fa:71:33:5c:50:b1:01:d8:e9:ef:cb: 18:8d:39:96:e7:7a:b1:b2:28:76:59:39:c3:c2:4f:e1:76:9b: e9:a9:92:db:84:51:31:eb:f1:8b:b5:76:74:05:bd:bc:fd:2e: 7e:92:a2:d7:03:00:ee:53:31:63:6a:68:8c:8c:64:5d:87:2b: 37:53:26:b3:dc:c7:1e:29:bc:71:6f:70:34:41:ad:bb:db:12: 6c:0d:f0:4e:7e:80:a5:d9:69:43:3f:5b:b9:3b:df:66:be:8c: 68:a5:cc:b7:84:6d:70:30:39:68:9c:e3:a5:49:af:a4:e0:e3: 7b:ce:fc:09:bf:22:9c:fa:9f:57:09:ca:f9:89:57:c0:90:34: c8:50:ea:22:ff:03:26:38:b2:91:b6:29:47:83:bf:70:ad:67: 39:8c:8d:e8:39:39:3f:23:40:24:b2:da:fa:5e:e8:c5:3b:71: 8b:04:c4:5f:0f:d5:a3:2d:4e:88:a1:ff:34:a8:53:f9:d7:43: 21:49:b6:ff:5f:90:8d:67:1e:2d:62:a0:12:86:fc:a0:fa:6e: 54:88:41:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUwNzI5MDE1NDA3WhcNMjUwODA1MDE1NDA3WjAYMRYwFAYD VQQDEw02ODg4MjliZi1hNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2QTtjIq60B+mhWvpW5pefWnPNMmKJhM9kGPSq/touw+gvF4bo84jxPCA8gV 9V+tVSAxznY9XwW7qbQNhzssX0SOai81XVXGEwt4z6RFscx/1qrxVP8VTCVlsBHQ LHUNfy/Zx5hD3P+I3BSlbMGUV0CRZjrAzoJvIjQg/iLjnEtDqcQmKlxkZ7lLZeMR tpClB2Kw895ODMETyJDZMCJvKFvpOPeP2NRfIp7cF43sefDuze467BsGdUMfW1+w N60Yx8RipNThRKoVwps7UaSz4Jujqs08+EysJ+B8ISdT1keElNcsJNPsy5vsa6C5 v+AUIgxumkFTQH8FLh1tSTSf0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwFgRf9 VV+RknGjuw1+qEzi8m1BMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7J2nviP5eIT5LN0fy0UlgVOEzxtML4n24ajCwCU3Pa6Sb30CwG2u1 hYOA+nEzXFCxAdjp78sYjTmW53qxsih2WTnDwk/hdpvpqZLbhFEx6/GLtXZ0Bb28 /S5+kqLXAwDuUzFjamiMjGRdhys3Uyaz3MceKbxxb3A0Qa272xJsDfBOfoCl2WlD P1u5O99mvoxopcy3hG1wMDlonOOlSa+k4ON7zvwJvyKc+p9XCcr5iVfAkDTIUOoi /wMmOLKRtilHg79wrWc5jI3oOTk/I0Akstr6XujFO3GLBMRfD9WjLU6Iof80qFP5 10MhSbb/X5CNZx4tYqAShvyg+m5UiEEv -----END CERTIFICATE-----Generated at Wed Jul 30 14:46:30 2025 by rpki-client