$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: WyZtQCG5QEWjYj6H6OwF3CrXnWTMIbiIQyA0XBgb/4w= Subject key identifier: 81:F8:BF:30:E0:CF:CB:A8:5F:A2:2E:05:9C:06:39:69:13:D4:7E:4A Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 0320 Signing time: Wed 05 Nov 2025 01:10:36 +0000 Manifest this update: Wed 05 Nov 2025 01:10:35 +0000 Manifest next update: Wed 12 Nov 2025 01:10:35 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: TI/KKx5sm4+fyHlhAQrNdlUJfMeCXnw1dyP08tjKkh8=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Nov 5 01:10:35 2025 GMT Not After : Nov 12 01:10:35 2025 GMT Subject: CN=690aa40c-c87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:25:97:02:a4:79:63:08:17:29:79:6e:65:9b: 26:a2:cc:48:65:b8:40:fa:cf:8c:74:b1:33:7d:55: 26:ea:0a:af:e4:1d:d2:5b:8b:84:da:f6:98:33:42: 8a:2f:c8:df:e6:22:c1:11:26:88:70:d5:b1:79:7f: e2:71:e5:5e:54:8c:7c:fc:2b:aa:47:59:c4:6d:2f: b2:83:76:1a:84:b8:74:c9:8b:b7:2b:80:23:50:b9: 2d:31:7f:52:3a:33:18:e8:cc:bb:c2:76:39:b2:7b: 96:eb:b5:76:97:db:4f:29:3e:83:c5:41:2e:78:78: d5:c8:9b:46:76:fd:9b:af:7c:49:a7:b8:35:2e:80: 10:7f:78:17:bc:bc:69:92:d5:8e:ac:ea:0e:0d:34: ac:38:09:81:d8:3b:7c:3b:23:1f:a1:4e:6f:bd:cb: 08:0c:98:2f:28:f5:f0:97:e6:80:b7:57:00:99:c4: 42:7f:dc:50:31:9d:6f:b7:82:26:75:62:09:d8:a6: 23:4f:65:fc:ba:42:f6:19:58:b8:44:7b:e4:10:fe: b6:0b:a7:7c:87:97:8c:e7:d4:5c:80:61:64:56:ab: 61:ed:fb:b5:e5:25:6c:4c:15:7e:76:68:33:9c:36: a5:3b:cb:22:5d:16:47:b5:07:cc:86:5b:66:a6:4b: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F8:BF:30:E0:CF:CB:A8:5F:A2:2E:05:9C:06:39:69:13:D4:7E:4A X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:75:ee:21:c3:ce:1b:c1:32:cd:c8:56:b1:e7:73:f9:20:0f: 5c:6b:e0:66:c4:74:df:22:75:65:38:6b:28:31:7b:54:be:09: 0d:39:30:0f:66:6a:97:38:9d:09:fa:d6:ec:df:2e:59:e3:6b: 71:c6:79:bb:36:c6:af:5e:70:d9:8b:7a:3f:52:1f:7f:16:f2: 5c:8f:aa:79:4a:aa:f3:34:de:98:29:e2:e1:1d:63:19:9d:f2: cd:e3:59:f5:93:1b:fc:61:a1:3d:8c:16:05:75:e4:77:39:cd: 75:cd:d2:79:4d:63:f8:61:7c:d3:f5:0d:61:49:42:4c:aa:65: 6b:46:c6:3d:58:d3:09:20:6d:52:a3:86:24:54:ca:a8:4d:d7: 5f:c3:c9:71:0e:ae:f9:6c:c1:a2:50:5f:a1:3c:24:f8:64:3e: 1a:cd:d8:c0:cf:96:85:7e:58:63:d9:33:58:c0:57:ed:da:b0: 0a:e1:43:9a:eb:6a:c3:2a:e6:16:ab:d0:a4:93:c4:38:10:2b: 18:85:cf:26:45:89:3c:73:7c:81:06:bc:40:86:7d:21:c7:e4: 09:92:88:90:3a:70:7f:80:2d:90:c2:5b:d1:f1:9d:b8:38:8b: eb:b4:9f:8a:4c:92:b4:79:e4:5f:5e:2a:c0:c7:94:6d:8d:32: 94:b4:15:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUxMTA1MDExMDM1WhcNMjUxMTEyMDExMDM1WjAYMRYwFAYD VQQDEw02OTBhYTQwYy1jODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CWXAqR5YwgXKXluZZsmosxIZbhA+s+MdLEzfVUm6gqv5B3SW4uE2vaYM0KK L8jf5iLBESaIcNWxeX/iceVeVIx8/CuqR1nEbS+yg3YahLh0yYu3K4AjULktMX9S OjMY6My7wnY5snuW67V2l9tPKT6DxUEueHjVyJtGdv2br3xJp7g1LoAQf3gXvLxp ktWOrOoODTSsOAmB2Dt8OyMfoU5vvcsIDJgvKPXwl+aAt1cAmcRCf9xQMZ1vt4Im dWIJ2KYjT2X8ukL2GVi4RHvkEP62C6d8h5eM59RcgGFkVqth7fu15SVsTBV+dmgz nDalO8siXRZHtQfMhltmpkvlBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH4vzDg z8uoX6IuBZwGOWkT1H5KMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOde4hw84bwTLNyFax53P5IA9ca+BmxHTfInVlOGsoMXtUvgkNOTAP ZmqXOJ0J+tbs3y5Z42txxnm7NsavXnDZi3o/Uh9/FvJcj6p5SqrzNN6YKeLhHWMZ nfLN41n1kxv8YaE9jBYFdeR3Oc11zdJ5TWP4YXzT9Q1hSUJMqmVrRsY9WNMJIG1S o4YkVMqoTddfw8lxDq75bMGiUF+hPCT4ZD4azdjAz5aFflhj2TNYwFft2rAK4UOa 62rDKuYWq9Ckk8Q4ECsYhc8mRYk8c3yBBrxAhn0hx+QJkoiQOnB/gC2QwlvR8Z24 OIvrtJ+KTJK0eeRfXirAx5RtjTKUtBX2 -----END CERTIFICATE-----Generated at Thu Nov 6 03:48:45 2025 by rpki-client