$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: AJ6h3kcjsLjKjzzaekb+H+OYj4rm7D2citHCivNkLgo= Subject key identifier: 35:1B:B7:6B:33:20:9B:81:4D:02:9C:08:F2:9D:88:64:32:97:F9:69 Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 0309 Signing time: Fri 19 Sep 2025 01:36:23 +0000 Manifest this update: Fri 19 Sep 2025 01:36:22 +0000 Manifest next update: Fri 26 Sep 2025 01:36:22 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: 6KD+RLGLH7YPizOmRe+NpVdwWdPvmtQTjRcDpMF8BcE=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Sep 19 01:36:22 2025 GMT Not After : Sep 26 01:36:22 2025 GMT Subject: CN=68ccb397-697b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:d1:08:a5:6b:33:61:81:c8:84:46:22:bf: 36:14:6c:9c:a7:a0:b5:a9:fa:66:41:75:66:d7:7e: 69:e8:7e:ed:91:9f:79:97:4b:9b:45:90:73:42:31: c3:6b:8d:cb:d2:94:e2:92:32:ae:22:cb:62:9c:15: dc:a1:57:8e:82:86:d9:2d:7c:02:ca:6b:58:fe:9b: 73:8e:62:ae:62:fa:43:27:59:d7:e0:96:24:38:a5: e6:49:08:6f:83:42:e2:ea:9c:3d:94:35:8c:88:be: b4:36:35:a0:5d:c7:d5:4e:e9:a6:05:7b:6e:b8:f3: 09:e8:c7:fd:72:5f:82:ab:2d:55:bb:f4:be:c9:a8: 6c:da:4a:c9:35:c0:17:4d:8d:27:ae:40:29:05:c5: 18:2d:0f:76:d2:f7:f4:6e:3a:01:3f:69:15:6a:97: a8:4c:58:18:2e:4d:76:7f:7e:2c:ea:16:f8:d0:5b: f2:80:85:e4:4f:33:3b:b7:b0:11:64:68:9c:1e:79: 8e:84:5e:d0:62:38:81:bb:79:c8:25:c5:46:85:21: 2a:df:8d:69:46:35:ae:bb:7d:b4:42:e5:4d:4a:f4: 90:de:60:8b:aa:8f:6f:e1:6c:b6:54:fd:2f:63:06: e8:af:97:f8:57:d6:fb:b4:be:86:f0:49:aa:e1:99: 7b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1B:B7:6B:33:20:9B:81:4D:02:9C:08:F2:9D:88:64:32:97:F9:69 X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a7:44:0c:b1:f8:25:e3:40:2d:bc:d5:1f:cc:5c:08:c8:2b: 7f:56:6b:91:0f:2d:2d:65:a3:2f:d5:ea:00:93:6d:07:fa:27: 0f:7a:4e:0a:38:f9:44:f3:e0:3b:82:4e:12:5c:55:2c:76:40: 60:d0:7b:98:bc:09:64:aa:86:54:7e:d5:c9:58:3c:65:3f:42: 7c:bf:ac:fd:71:f1:3d:69:95:18:cc:8c:51:7a:34:28:c4:d0: 57:91:b1:0d:28:f3:c8:8d:e5:09:83:71:8b:9d:28:09:32:62: 36:7c:c2:af:75:71:f1:4b:1f:19:43:88:07:4c:b9:0a:c3:8c: 14:0e:71:7b:4c:67:01:aa:f8:c5:18:93:a1:4f:71:0b:ec:cd: ae:6a:86:27:91:8d:f7:fc:68:b9:16:71:88:ec:2c:fb:8b:9a: a3:f9:eb:30:54:40:fd:a3:f9:a8:f1:58:fa:d1:df:cb:85:89: 17:b7:8b:33:36:73:0b:7a:2e:8f:be:a4:4f:b7:a1:dd:ed:af: 2d:5b:28:22:2a:47:fa:6c:5f:be:86:3b:e0:62:1e:a4:22:e4: fd:38:49:19:48:c9:39:c9:27:b8:55:09:99:53:c2:b7:ca:fe: 19:b3:ed:82:38:f4:48:94:5a:84:16:de:e1:8d:86:01:3a:8d: 68:81:33:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUwOTE5MDEzNjIyWhcNMjUwOTI2MDEzNjIyWjAYMRYwFAYD VQQDEw02OGNjYjM5Ny02OTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gPRCKVrM2GByIRGIr82FGycp6C1qfpmQXVm135p6H7tkZ95l0ubRZBzQjHD a43L0pTikjKuIstinBXcoVeOgobZLXwCymtY/ptzjmKuYvpDJ1nX4JYkOKXmSQhv g0Li6pw9lDWMiL60NjWgXcfVTummBXtuuPMJ6Mf9cl+Cqy1Vu/S+yahs2krJNcAX TY0nrkApBcUYLQ920vf0bjoBP2kVapeoTFgYLk12f34s6hb40FvygIXkTzM7t7AR ZGicHnmOhF7QYjiBu3nIJcVGhSEq341pRjWuu320QuVNSvSQ3mCLqo9v4Wy2VP0v Ywbor5f4V9b7tL6G8Emq4Zl7JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUbt2sz IJuBTQKcCPKdiGQyl/lpMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTp0QMsfgl40AtvNUfzFwIyCt/VmuRDy0tZaMv1eoAk20H+icPek4K OPlE8+A7gk4SXFUsdkBg0HuYvAlkqoZUftXJWDxlP0J8v6z9cfE9aZUYzIxRejQo xNBXkbENKPPIjeUJg3GLnSgJMmI2fMKvdXHxSx8ZQ4gHTLkKw4wUDnF7TGcBqvjF GJOhT3EL7M2uaoYnkY33/Gi5FnGI7Cz7i5qj+eswVED9o/mo8Vj60d/LhYkXt4sz NnMLei6PvqRPt6Hd7a8tWygiKkf6bF++hjvgYh6kIuT9OEkZSMk5ySe4VQmZU8K3 yv4Zs+2COPRIlFqEFt7hjYYBOo1ogTPI -----END CERTIFICATE-----Generated at Sat Sep 20 00:45:50 2025 by rpki-client