$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft File: ssb_p2w86pWbar20kn5QEjIHLWI.mft (raw, json) Hash identifier: nmcmM2T3kLlqHaXyn6Ukk/T5yHG9f36mgjOLgjTMpfI= Subject key identifier: E1:34:FD:E3:AC:BA:C3:FD:34:8A:56:CD:9D:89:71:39:9E:21:6F:DB Authority key identifier: B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 Certificate issuer: /CN=A911BD0C/serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft Manifest number: 0E Signing time: Sat 31 May 2025 07:38:44 +0000 Manifest this update: Sat 31 May 2025 07:38:43 +0000 Manifest next update: Sat 07 Jun 2025 07:38:43 +0000 Files and hashes: 1: ssb_p2w86pWbar20kn5QEjIHLWI.crl (hash: AOUMoGXomvlfBgQT1JaNAz7TvvkiSIrnFZUuoal5t14=) 2: B977F0322B3411F08FD74443C4F9AE02.roa (hash: v+cdW5qRRy42rcVfsQ7WNZFoarz0/H2Wz0ZGcvG0ojI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD0C, serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Validity Not Before: May 31 07:38:43 2025 GMT Not After : Jun 7 07:38:43 2025 GMT Subject: CN=683ab203-2864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:07:60:c2:66:15:e5:b7:87:2d:4c:4b:71:bc: 46:57:5b:bc:0b:df:35:b3:28:92:ec:78:bf:60:54: 9d:24:4c:a8:e0:ff:2f:ce:d2:7f:54:ba:82:26:49: 97:1b:37:ba:d4:6d:73:63:ab:ae:55:4b:a0:3b:68: 6a:ac:92:e9:50:ab:fe:f7:d3:67:b5:61:a7:5b:2d: 81:26:0f:27:d3:00:37:f7:19:6d:61:7a:02:72:f4: e2:6c:f2:59:9b:d1:a2:71:9d:db:31:60:a5:b4:e3: b2:dc:d3:da:e3:55:37:bc:19:c8:2a:69:ef:2e:83: 26:bf:a9:d2:f6:c8:79:b1:b3:70:7c:a7:3d:7d:cf: d6:c8:cf:81:b9:11:6a:c0:2c:3b:00:0a:04:c8:9e: d2:55:3c:2e:c4:2f:bd:7d:d9:84:51:35:3d:6f:7f: 36:a2:53:d0:db:0b:88:54:de:e3:59:62:ea:e2:85: c8:2f:e0:a5:de:81:98:74:6b:e6:8e:a6:a5:7f:64: 54:34:83:32:61:ba:c0:82:d8:3c:02:95:be:43:32: 2e:84:f8:a5:63:1c:d2:93:ad:e3:c7:2d:fc:be:3e: dd:ad:17:21:20:7e:56:de:d0:f4:09:1c:83:d6:90: e1:7a:b6:f4:20:56:83:63:7d:dc:79:bb:4a:f5:9b: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:34:FD:E3:AC:BA:C3:FD:34:8A:56:CD:9D:89:71:39:9E:21:6F:DB X509v3 Authority Key Identifier: keyid:B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2a:89:a6:db:5d:a0:e8:dd:87:0d:cf:37:65:70:ea:bc:b1: 78:89:28:36:10:ae:b1:8d:f6:5f:ce:98:0f:5c:24:78:9e:64: 13:ad:af:d3:e6:58:77:b5:08:43:71:88:42:3c:3d:f1:dd:75: 85:22:61:5d:02:9c:22:0d:a7:ea:6c:13:61:18:43:4c:e4:4f: 29:3b:7d:42:94:ae:87:2b:dc:f5:d8:bb:e7:61:d2:40:7a:e3: 6e:b6:e0:8d:5f:2e:b6:29:f6:f1:36:3d:b9:27:20:c7:33:8a: 38:b3:8e:e9:3d:b3:d0:2d:26:25:ee:d0:4f:1c:a1:d9:40:4a: 4a:16:f5:24:65:42:45:39:9e:33:6a:5f:34:20:0a:08:25:62: c4:97:82:fe:f7:8e:e6:6e:5d:d9:d5:11:45:fd:3c:cb:a5:f9: 6c:1a:8a:9d:f1:2b:d7:93:2b:42:e1:68:4c:d6:24:25:6f:11: d7:09:51:b3:c6:93:1a:6e:8a:f3:1c:e9:40:3e:94:6c:2d:fd: b6:60:ca:55:98:9b:e1:c6:0c:a7:e6:d6:93:47:e5:e4:cc:78: 30:32:12:36:64:19:5d:9a:81:44:8e:c8:92:74:1a:14:a0:42: 11:50:1e:09:9e:11:ac:d9:22:89:d6:4f:6f:8f:13:a5:83:95: 8c:bd:a8:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQwQzExMC8GA1UEBRMoQjJDNkZGQTc2QzNDRUE5NTlCNkFCREI0OTI3RTUwMTIz MjA3MkQ2MjAeFw0yNTA1MzEwNzM4NDNaFw0yNTA2MDcwNzM4NDNaMBgxFjAUBgNV BAMTDTY4M2FiMjAzLTI4NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3B2DCZhXlt4ctTEtxvEZXW7wL3zWzKJLseL9gVJ0kTKjg/y/O0n9UuoImSZcb N7rUbXNjq65VS6A7aGqskulQq/7302e1YadbLYEmDyfTADf3GW1hegJy9OJs8lmb 0aJxndsxYKW047Lc09rjVTe8Gcgqae8ugya/qdL2yHmxs3B8pz19z9bIz4G5EWrA LDsACgTIntJVPC7EL7192YRRNT1vfzaiU9DbC4hU3uNZYurihcgv4KXegZh0a+aO pqV/ZFQ0gzJhusCC2DwClb5DMi6E+KVjHNKTrePHLfy+Pt2tFyEgflbe0PQJHIPW kOF6tvQgVoNjfdx5u0r1m1/BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4TT946y6 w/00ilbNnYlxOZ4hb9swHwYDVR0jBBgwFoAUssb/p2w86pWbar20kn5QEjIHLWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDBDL0JDMjE0MTVFMkIz MzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBXYmFyMjBrbjVRRWpJSExX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3NiX3Aydzg2cFdiYXIyMGtuNVFFaklITFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDBDL0JDMjE0MTVFMkIzMzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBX YmFyMjBrbjVRRWpJSExXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABMqiabbXaDo3YcNzzdlcOq8sXiJKDYQrrGN9l/OmA9cJHieZBOtr9Pm WHe1CENxiEI8PfHddYUiYV0CnCINp+psE2EYQ0zkTyk7fUKUrocr3PXYu+dh0kB6 42624I1fLrYp9vE2PbknIMczijizjuk9s9AtJiXu0E8codlASkoW9SRlQkU5njNq XzQgCgglYsSXgv73juZuXdnVEUX9PMul+Wwaip3xK9eTK0LhaEzWJCVvEdcJUbPG kxpuivMc6UA+lGwt/bZgylWYm+HGDKfm1pNH5eTMeDAyEjZkGV2agUSOyJJ0GhSg QhFQHgmeEazZIonWT2+PE6WDlYy9qNk= -----END CERTIFICATE-----Generated at Sat May 31 16:50:44 2025 by rpki-client