$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft File: ssb_p2w86pWbar20kn5QEjIHLWI.mft (raw, json) Hash identifier: HzO5/w5APM42AoXR/9u8ep0vYa3F2pKY+G23OmtWCpI= Subject key identifier: B4:BB:9E:F5:72:AB:A7:80:86:71:55:22:6E:82:39:6C:26:52:5F:04 Authority key identifier: B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 Certificate issuer: /CN=A911BD0C/serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft Manifest number: 40 Signing time: Fri 05 Sep 2025 07:58:31 +0000 Manifest this update: Fri 05 Sep 2025 07:58:30 +0000 Manifest next update: Fri 12 Sep 2025 07:58:30 +0000 Files and hashes: 1: ssb_p2w86pWbar20kn5QEjIHLWI.crl (hash: FikFCihQxz2K8r+w6KaqKwjDzobb1xMy48HLJOqZHzs=) 2: B977F0322B3411F08FD74443C4F9AE02.roa (hash: v+cdW5qRRy42rcVfsQ7WNZFoarz0/H2Wz0ZGcvG0ojI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD0C, serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Validity Not Before: Sep 5 07:58:30 2025 GMT Not After : Sep 12 07:58:30 2025 GMT Subject: CN=68ba9827-f451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:8b:df:78:b4:e4:2f:b1:5d:38:e0:22:28: 0e:da:ec:f2:3d:ec:44:ed:52:87:d8:41:5a:06:66: c8:06:df:f4:db:9e:23:a6:d9:92:8a:e5:0f:ad:d9: b9:e6:0f:c6:17:a8:c9:8d:ee:90:56:a8:75:07:74: 1f:56:a9:f4:91:d5:0c:c3:cd:2d:4b:c4:3e:a6:62: f2:7f:1a:c0:58:ab:3d:5a:4f:7c:77:13:d0:2d:44: 17:54:92:8b:48:b9:5e:93:5c:19:c9:5c:cf:0c:35: 61:fb:82:3b:3a:7d:c1:43:46:fd:00:f0:41:20:4e: 05:db:26:10:74:2c:07:7f:c3:20:8a:07:6b:6d:0d: 1a:20:55:7b:b9:f6:c0:ef:7d:4c:54:7f:d6:a3:fc: 2b:fc:ad:64:37:0c:58:08:3b:e2:26:d2:21:ee:f1: 70:65:cc:aa:f5:52:b2:a3:4f:b1:87:9a:68:f7:b4: 01:bc:79:73:50:51:63:5f:e7:66:ac:83:fc:40:64: b7:97:b0:ad:c8:e4:a3:1b:08:9f:2f:d7:fe:bd:d0: b4:6b:04:a6:6b:2e:0a:db:61:3e:38:25:a0:25:14: 76:0c:85:cf:9b:af:1c:fd:31:76:c1:9e:0a:5a:e5: 88:df:2c:25:e3:bb:79:38:31:48:98:f7:24:52:32: ce:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BB:9E:F5:72:AB:A7:80:86:71:55:22:6E:82:39:6C:26:52:5F:04 X509v3 Authority Key Identifier: keyid:B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1d:6e:fe:76:e8:e6:61:6b:ee:c3:1e:98:11:ec:be:35:73: 5e:c4:ef:41:08:62:2f:e1:f6:90:9a:fe:b1:e3:89:8b:0c:bb: c9:07:c5:1b:af:e5:2a:27:9e:f8:47:56:43:c6:4b:0a:42:e2: 83:4c:a9:69:22:f9:d7:8b:4c:0b:96:09:bb:0b:77:95:0b:0a: ed:73:a9:a7:3f:43:e7:93:9e:d1:db:97:e5:36:3a:52:23:98: 2d:62:07:ea:27:bd:87:5f:fa:e9:d0:b7:2d:70:f5:22:cd:e5: cd:cc:74:04:7c:96:59:23:18:47:d7:d5:2c:33:bd:5b:3e:9a: 71:a7:7e:a4:f8:e1:4f:ad:00:84:ac:83:89:55:a1:6d:21:cf: 1f:9e:6b:f6:d1:80:87:c7:e5:8b:75:72:6c:cd:0f:41:b7:43: 57:e6:d8:16:06:ae:0b:15:3a:31:16:5b:0d:8c:67:1a:92:d7: 21:ed:81:48:aa:b5:5e:86:3b:a6:50:d1:84:bb:0b:e6:64:49: 5e:e1:38:d1:31:a5:8b:49:ca:36:cf:b4:82:e3:6a:5f:ba:2e: 1f:ec:39:76:fa:ac:76:21:73:b4:d6:9a:68:7e:37:6e:4c:20: ff:c0:92:cf:7b:cc:f4:7b:94:5f:c1:05:63:38:3b:30:64:4d: 89:82:63:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQwQzExMC8GA1UEBRMoQjJDNkZGQTc2QzNDRUE5NTlCNkFCREI0OTI3RTUwMTIz MjA3MkQ2MjAeFw0yNTA5MDUwNzU4MzBaFw0yNTA5MTIwNzU4MzBaMBgxFjAUBgNV BAMTDTY4YmE5ODI3LWY0NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdwovfeLTkL7FdOOAiKA7a7PI97ETtUofYQVoGZsgG3/TbniOm2ZKK5Q+t2bnm D8YXqMmN7pBWqHUHdB9WqfSR1QzDzS1LxD6mYvJ/GsBYqz1aT3x3E9AtRBdUkotI uV6TXBnJXM8MNWH7gjs6fcFDRv0A8EEgTgXbJhB0LAd/wyCKB2ttDRogVXu59sDv fUxUf9aj/Cv8rWQ3DFgIO+Im0iHu8XBlzKr1UrKjT7GHmmj3tAG8eXNQUWNf52as g/xAZLeXsK3I5KMbCJ8v1/690LRrBKZrLgrbYT44JaAlFHYMhc+brxz9MXbBngpa 5YjfLCXju3k4MUiY9yRSMs4NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtLue9XKr p4CGcVUiboI5bCZSXwQwHwYDVR0jBBgwFoAUssb/p2w86pWbar20kn5QEjIHLWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDBDL0JDMjE0MTVFMkIz MzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBXYmFyMjBrbjVRRWpJSExX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3NiX3Aydzg2cFdiYXIyMGtuNVFFaklITFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDBDL0JDMjE0MTVFMkIzMzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBX YmFyMjBrbjVRRWpJSExXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD8dbv526OZha+7DHpgR7L41c17E70EIYi/h9pCa/rHjiYsMu8kHxRuv 5SonnvhHVkPGSwpC4oNMqWki+deLTAuWCbsLd5ULCu1zqac/Q+eTntHbl+U2OlIj mC1iB+onvYdf+unQty1w9SLN5c3MdAR8llkjGEfX1SwzvVs+mnGnfqT44U+tAISs g4lVoW0hzx+ea/bRgIfH5Yt1cmzND0G3Q1fm2BYGrgsVOjEWWw2MZxqS1yHtgUiq tV6GO6ZQ0YS7C+ZkSV7hONExpYtJyjbPtILjal+6Lh/sOXb6rHYhc7TWmmh+N25M IP/Aks97zPR7lF/BBWM4OzBkTYmCY5M= -----END CERTIFICATE-----Generated at Sat Sep 6 14:40:34 2025 by rpki-client