$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: OHiraMVHh/H/Vm8AnO4RCna09W4l0m+H6jfuen17wKQ= Subject key identifier: 24:F2:B9:6F:2B:5F:76:0E:0D:F1:FB:FD:B9:58:FD:F1:26:8F:87:F3 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 064D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 062D Signing time: Fri 30 May 2025 23:04:30 +0000 Manifest this update: Fri 30 May 2025 23:04:30 +0000 Manifest next update: Fri 06 Jun 2025 23:04:30 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: bgJsW9aDuoP1YZCorbgooWlsjhfvPOVhWytaP0D/Mw8=) 2: 4E76D152B51411ECB8632A19C4F9AE02.roa (hash: YPDLp+PM+yv2layG45gYKpsX7TXBxQVHcONStmzQZuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: May 30 23:04:30 2025 GMT Not After : Jun 6 23:04:30 2025 GMT Subject: CN=683a397e-82e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:05:a1:7d:6c:c7:88:20:ba:4d:50:68:89: b5:e1:6f:fe:f3:d1:86:87:ec:e8:53:28:b7:74:01: 09:e4:40:94:f1:0a:db:a4:7a:d5:20:0a:25:7c:4f: 4d:0d:fc:12:6f:85:b3:82:f2:8b:5b:a6:c7:e6:36: 7a:f0:b0:f9:9c:d7:ea:55:60:b7:44:e1:41:d9:2f: c7:da:48:30:a9:f1:4a:32:ac:57:28:72:2b:d6:c8: 9f:91:7c:12:0b:b7:b7:34:8f:74:fa:34:e8:2d:6d: 92:4b:13:2b:6a:3d:5d:9d:6a:a5:c6:90:44:72:83: d3:5e:11:df:b2:94:70:fd:aa:c4:8b:02:68:94:62: 0b:04:05:eb:c9:65:a6:c0:a7:ad:4d:88:4e:10:98: 4c:b7:65:f5:e5:2d:3a:7d:62:aa:ec:d6:0f:72:d4: 2f:45:14:e5:97:6a:8e:71:46:a8:9e:27:85:32:e5: a9:02:e3:22:b4:11:15:d4:37:99:07:33:26:f9:e3: 9d:c2:bc:3d:92:1f:5b:af:23:f0:c3:ea:75:d7:f9: 19:0d:3f:6f:39:f1:24:df:63:76:15:3f:53:1c:ef: 14:39:f1:9e:7d:ef:78:e1:a4:34:b8:b6:50:4c:32: 93:c6:2d:b3:98:9c:12:b9:bf:c6:12:8b:26:48:2c: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F2:B9:6F:2B:5F:76:0E:0D:F1:FB:FD:B9:58:FD:F1:26:8F:87:F3 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f5:e1:bd:de:78:c5:12:07:ab:54:2e:7d:8e:86:0a:df:f3: aa:54:06:2d:d1:49:28:4c:49:c5:e0:aa:c2:0a:91:3c:5a:88: f5:42:94:ce:88:55:7b:ce:7b:c9:85:bc:ed:bf:17:71:d1:0c: 38:4a:51:56:d7:fb:09:76:a6:f6:fd:92:a5:57:5c:0b:5d:06: 2a:99:5a:7a:7d:b6:58:2d:7c:88:52:a8:6e:46:9a:53:7f:f0: 77:0f:57:48:11:c1:b7:c1:f3:5e:2a:c8:c1:d8:eb:8e:84:e6: 45:94:b5:78:48:cb:f6:69:0d:68:be:47:4c:74:e1:42:2c:ce: 5f:c2:6d:36:5c:c3:de:1b:76:af:a3:f3:73:43:f9:e8:64:77: 9f:ef:3f:89:6d:19:70:62:d0:cf:cc:3b:f9:e0:35:00:f3:d6: 5a:c4:16:20:f0:5b:fd:40:7c:fb:fb:27:2d:39:e8:70:6e:ce: 0c:5d:66:c7:6a:a5:66:a1:55:c6:28:46:76:7a:ed:93:41:3d: 4b:d2:ad:9e:44:e9:12:4e:de:d7:f0:57:28:31:63:9c:3e:58: 6d:71:fe:24:8e:52:be:2d:5b:f8:1a:d4:fe:70:40:f7:f5:2a: 8e:5b:d8:47:6e:d5:c5:82:24:37:3a:d6:fb:0b:97:11:26:9b: 87:83:a9:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjUwNTMwMjMwNDMwWhcNMjUwNjA2MjMwNDMwWjAYMRYwFAYD VQQDEw02ODNhMzk3ZS04MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUUFoX1sx4gguk1QaIm14W/+89GGh+zoUyi3dAEJ5ECU8QrbpHrVIAolfE9N DfwSb4WzgvKLW6bH5jZ68LD5nNfqVWC3ROFB2S/H2kgwqfFKMqxXKHIr1sifkXwS C7e3NI90+jToLW2SSxMraj1dnWqlxpBEcoPTXhHfspRw/arEiwJolGILBAXryWWm wKetTYhOEJhMt2X15S06fWKq7NYPctQvRRTll2qOcUaonieFMuWpAuMitBEV1DeZ BzMm+eOdwrw9kh9bryPww+p11/kZDT9vOfEk32N2FT9THO8UOfGefe944aQ0uLZQ TDKTxi2zmJwSub/GEosmSCxpOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTyuW8r X3YODfH7/blY/fEmj4fzMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb9eG93njFEgerVC59joYK3/OqVAYt0UkoTEnF4KrCCpE8Woj1QpTO iFV7znvJhbztvxdx0Qw4SlFW1/sJdqb2/ZKlV1wLXQYqmVp6fbZYLXyIUqhuRppT f/B3D1dIEcG3wfNeKsjB2OuOhOZFlLV4SMv2aQ1ovkdMdOFCLM5fwm02XMPeG3av o/NzQ/noZHef7z+JbRlwYtDPzDv54DUA89ZaxBYg8Fv9QHz7+yctOehwbs4MXWbH aqVmoVXGKEZ2eu2TQT1L0q2eROkSTt7X8FcoMWOcPlhtcf4kjlK+LVv4GtT+cED3 9SqOW9hHbtXFgiQ3Otb7C5cRJpuHg6lI -----END CERTIFICATE-----Generated at Sat May 31 15:23:10 2025 by rpki-client