$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: yhLFyrnGhirRpPRBTfxp4r14q7IEQqpw77r2H7K4jrA= Subject key identifier: 69:09:03:20:D4:3F:E6:49:C4:BF:11:14:57:4A:EF:C1:7E:F6:EF:14 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 0670 Signing time: Mon 08 Sep 2025 22:45:49 +0000 Manifest this update: Mon 08 Sep 2025 22:45:49 +0000 Manifest next update: Mon 15 Sep 2025 22:45:49 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: g0Uw0mcEFLOBAaaH7ISk/TYIhztERd79M3A35Gutih0=) 2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: +s2eZecZzBHi2TTyZXd1eJhQogRo8Y85r4PmKMG3WZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: Sep 8 22:45:49 2025 GMT Not After : Sep 15 22:45:49 2025 GMT Subject: CN=68bf5c9d-0593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:56:22:a1:da:ee:17:65:60:37:c9:a8:b0:18: 0d:7a:ba:89:28:54:d5:40:9b:bd:19:3d:07:c6:88: 28:4d:46:f2:7b:ca:a5:67:ff:9f:4c:3d:20:e8:3f: 7a:04:53:37:46:b0:ba:04:6a:e3:53:c2:fc:d2:e7: ad:3e:c7:c5:96:5d:66:f2:80:f5:76:c3:ab:40:62: eb:af:2d:68:dd:fe:e2:cf:7f:fe:30:80:ec:7c:d2: d4:9b:5e:4c:3d:3e:d1:d2:30:a9:b6:06:71:35:9d: 2a:b2:d4:d5:bb:d4:b1:77:97:d6:8a:a9:8e:a3:17: 0a:aa:e5:fa:30:d6:a2:26:24:9a:5e:0d:dd:6d:49: 83:97:bf:94:ef:aa:d5:02:0a:23:19:29:d4:b0:c2: d6:2a:af:03:5d:6a:9e:e2:27:96:ea:3b:79:83:f7: 83:fb:78:ec:05:36:87:fc:04:aa:6f:86:f9:47:4a: 80:5f:84:ab:4f:0b:97:57:d6:82:47:dc:ee:22:f9: 38:e5:f7:09:c2:68:31:97:f6:58:3b:72:e3:29:63: f7:16:1f:9d:3e:fe:17:29:8e:24:82:d8:3b:55:c7: d8:56:0b:1c:03:5f:b6:af:b1:30:15:19:25:cc:07: 52:50:f0:18:f7:24:5a:7a:f7:ec:6e:8b:5f:18:6f: 69:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:09:03:20:D4:3F:E6:49:C4:BF:11:14:57:4A:EF:C1:7E:F6:EF:14 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:90:27:11:11:1f:e4:76:3b:d0:72:0b:28:33:92:e8:19:cc: 0f:c3:96:96:5a:8a:a8:2d:97:da:14:f4:3f:96:e1:05:f8:7b: cd:a2:79:29:fe:99:3f:07:cf:ba:e0:73:92:b6:cc:9f:94:68: e4:de:cc:ab:98:a1:36:b7:2f:fd:c3:35:45:f7:4e:57:4e:7c: 99:49:fe:16:14:52:6f:2a:05:18:3d:82:a0:31:9f:ef:f7:c3: 86:f4:56:e6:04:ab:84:de:7f:c8:72:1a:e4:cc:b1:6d:00:35: 4f:85:82:08:7c:4a:f2:a6:98:5a:d3:8e:5d:b5:49:2c:6d:5a: 04:45:bc:f4:94:b2:1d:82:42:d5:5a:a2:c6:94:70:a4:f2:cf: 89:91:20:f9:41:70:6c:5b:ab:a6:81:50:bb:41:79:99:93:52: 44:9e:dd:3f:ea:53:55:a3:a2:9e:b1:d0:c9:b8:77:75:ca:34: 49:df:ef:82:d1:61:bc:35:19:2f:f6:f4:02:08:98:6b:b4:79: 91:23:ac:7b:c7:55:c3:a2:ef:11:8c:d9:58:a3:d1:1b:7f:e8: 01:28:6f:36:50:01:13:ea:90:14:2e:85:ee:b7:fd:a5:10:99: 2c:04:4f:20:82:fd:d1:bf:03:37:ac:33:73:bb:e7:a1:3b:ec: 2b:79:3d:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjUwOTA4MjI0NTQ5WhcNMjUwOTE1MjI0NTQ5WjAYMRYwFAYD VQQDEw02OGJmNWM5ZC0wNTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01YiodruF2VgN8mosBgNerqJKFTVQJu9GT0HxogoTUbye8qlZ/+fTD0g6D96 BFM3RrC6BGrjU8L80uetPsfFll1m8oD1dsOrQGLrry1o3f7iz3/+MIDsfNLUm15M PT7R0jCptgZxNZ0qstTVu9Sxd5fWiqmOoxcKquX6MNaiJiSaXg3dbUmDl7+U76rV AgojGSnUsMLWKq8DXWqe4ieW6jt5g/eD+3jsBTaH/ASqb4b5R0qAX4SrTwuXV9aC R9zuIvk45fcJwmgxl/ZYO3LjKWP3Fh+dPv4XKY4kgtg7VcfYVgscA1+2r7EwFRkl zAdSUPAY9yRaevfsbotfGG9pQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkJAyDU P+ZJxL8RFFdK78F+9u8UMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAkCcRER/kdjvQcgsoM5LoGcwPw5aWWoqoLZfaFPQ/luEF+HvNonkp /pk/B8+64HOStsyflGjk3syrmKE2ty/9wzVF905XTnyZSf4WFFJvKgUYPYKgMZ/v 98OG9FbmBKuE3n/IchrkzLFtADVPhYIIfEryppha045dtUksbVoERbz0lLIdgkLV WqLGlHCk8s+JkSD5QXBsW6umgVC7QXmZk1JEnt0/6lNVo6KesdDJuHd1yjRJ3++C 0WG8NRkv9vQCCJhrtHmRI6x7x1XDou8RjNlYo9Ebf+gBKG82UAET6pAULoXut/2l EJksBE8ggv3RvwM3rDNzu+ehO+wreT1S -----END CERTIFICATE-----Generated at Wed Sep 10 03:16:36 2025 by rpki-client