$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft File: ssb_p2w86pWbar20kn5QEjIHLWI.mft (raw, json) Hash identifier: uzvKNOJ/mEoULsMbAzOvgMH4KLORfKfJ0t78MeUhu3A= Subject key identifier: 3C:C8:D8:0C:31:CA:02:50:82:4E:9B:32:E9:BC:D4:9B:66:EC:18:F8 Authority key identifier: B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 Certificate issuer: /CN=A911BD0C/serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft Manifest number: 57 Signing time: Thu 23 Oct 2025 09:20:34 +0000 Manifest this update: Thu 23 Oct 2025 09:20:33 +0000 Manifest next update: Thu 30 Oct 2025 09:20:33 +0000 Files and hashes: 1: ssb_p2w86pWbar20kn5QEjIHLWI.crl (hash: zeWRatQDml3Gl00MjDyCXUjQv3zGsyvrnd1Pd9bPQWo=) 2: B977F0322B3411F08FD74443C4F9AE02.roa (hash: v+cdW5qRRy42rcVfsQ7WNZFoarz0/H2Wz0ZGcvG0ojI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD0C, serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Validity Not Before: Oct 23 09:20:33 2025 GMT Not After : Oct 30 09:20:33 2025 GMT Subject: CN=68f9f361-eead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:0c:49:85:67:21:62:5d:ca:35:2b:53:83: 9a:11:5d:78:05:8c:53:69:72:b7:51:a8:aa:56:ed: dc:f4:f5:56:5e:d5:59:f4:6a:4d:b4:0b:a5:d2:e1: fe:4b:60:45:d2:bf:7c:35:e5:fb:f3:7d:ad:01:a1: e4:8d:63:9e:79:f9:2c:84:70:e7:73:a1:53:c2:95: 06:f0:28:67:45:e3:ac:54:10:cd:37:ce:f3:2a:4f: f7:a3:98:85:d8:1a:f2:b7:d0:48:b3:6b:3e:78:2f: ec:57:df:33:ed:e1:8e:2e:ba:b2:a0:58:6a:83:45: bd:a5:f4:9e:0a:e1:01:e8:1d:64:cb:a2:04:54:b0: 26:66:df:55:b3:72:59:60:a0:0d:a1:23:92:75:80: 26:df:9b:50:92:6a:f0:04:34:1c:4c:73:62:a6:99: ae:4a:c4:b0:6a:4f:67:d4:fd:ed:33:84:75:ca:04: 9a:08:28:70:03:a6:d7:fd:bb:b1:ee:75:1f:d7:70: 10:e9:64:94:04:8d:26:42:81:36:ed:22:ff:fe:31: 60:1f:57:d6:fc:63:b0:fb:06:58:3e:5f:df:f5:02: 26:c0:90:16:2b:b8:13:1f:2a:4c:91:ee:32:30:1d: 2f:50:90:a0:c8:16:ce:76:a3:5f:14:98:74:69:97: f4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C8:D8:0C:31:CA:02:50:82:4E:9B:32:E9:BC:D4:9B:66:EC:18:F8 X509v3 Authority Key Identifier: keyid:B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b1:92:22:50:31:b4:01:b0:54:3a:ee:a8:e4:89:08:52:ac: 80:45:6e:fb:4c:10:de:00:e4:22:11:fb:b0:02:2e:fb:fe:ca: 62:3b:21:2d:8f:d9:b1:0a:9f:4d:15:ab:d9:72:35:91:dc:e1: 8a:49:0b:9a:6d:cf:31:24:be:72:36:46:f9:d8:77:63:f3:02: 61:01:56:57:74:a5:20:21:53:11:b6:cc:f7:06:11:35:a8:b5: 76:81:af:9d:76:17:7c:0f:a4:88:8b:9a:3d:54:25:f7:95:c9: 96:51:ae:79:89:69:de:0d:cf:2e:0c:c5:ca:10:d9:b4:41:bb: d3:0c:86:79:8f:3d:d4:e9:d6:e5:16:39:b7:24:f4:59:c5:a0: b2:bb:25:fa:c6:a4:23:3e:cc:b3:42:22:0c:a6:07:c8:ef:96: 04:eb:ed:db:64:4f:0d:3e:3a:94:93:ad:3e:49:87:7e:7e:53: 2e:f9:11:71:c0:36:ad:9f:c1:75:49:4f:ae:a5:f1:bd:6c:52: a2:8d:31:d1:cd:a5:24:f4:7e:bc:c1:e5:a2:ef:76:09:b0:1a: ad:90:81:fd:18:47:00:f1:45:da:69:6a:25:05:a7:1f:3a:59: 76:0f:75:94:e3:b1:35:ab:08:55:fd:54:30:ab:3e:3c:18:13: 75:14:31:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQwQzExMC8GA1UEBRMoQjJDNkZGQTc2QzNDRUE5NTlCNkFCREI0OTI3RTUwMTIz MjA3MkQ2MjAeFw0yNTEwMjMwOTIwMzNaFw0yNTEwMzAwOTIwMzNaMBgxFjAUBgNV BAMTDTY4ZjlmMzYxLWVlYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQxwxJhWchYl3KNStTg5oRXXgFjFNpcrdRqKpW7dz09VZe1Vn0ak20C6XS4f5L YEXSv3w15fvzfa0BoeSNY555+SyEcOdzoVPClQbwKGdF46xUEM03zvMqT/ejmIXY GvK30Eizaz54L+xX3zPt4Y4uurKgWGqDRb2l9J4K4QHoHWTLogRUsCZm31Wzcllg oA2hI5J1gCbfm1CSavAENBxMc2Kmma5KxLBqT2fU/e0zhHXKBJoIKHADptf9u7Hu dR/XcBDpZJQEjSZCgTbtIv/+MWAfV9b8Y7D7Blg+X9/1AibAkBYruBMfKkyR7jIw HS9QkKDIFs52o18UmHRpl/SJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPMjYDDHK AlCCTpsy6bzUm2bsGPgwHwYDVR0jBBgwFoAUssb/p2w86pWbar20kn5QEjIHLWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDBDL0JDMjE0MTVFMkIz MzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBXYmFyMjBrbjVRRWpJSExX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3NiX3Aydzg2cFdiYXIyMGtuNVFFaklITFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDBDL0JDMjE0MTVFMkIzMzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBX YmFyMjBrbjVRRWpJSExXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI6xkiJQMbQBsFQ67qjkiQhSrIBFbvtMEN4A5CIR+7ACLvv+ymI7IS2P 2bEKn00Vq9lyNZHc4YpJC5ptzzEkvnI2RvnYd2PzAmEBVld0pSAhUxG2zPcGETWo tXaBr512F3wPpIiLmj1UJfeVyZZRrnmJad4Nzy4MxcoQ2bRBu9MMhnmPPdTp1uUW Obck9FnFoLK7JfrGpCM+zLNCIgymB8jvlgTr7dtkTw0+OpSTrT5Jh35+Uy75EXHA Nq2fwXVJT66l8b1sUqKNMdHNpST0frzB5aLvdgmwGq2Qgf0YRwDxRdppaiUFpx86 WXYPdZTjsTWrCFX9VDCrPjwYE3UUMfE= -----END CERTIFICATE-----Generated at Fri Oct 24 09:09:55 2025 by rpki-client