$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft File: plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json) Hash identifier: HxKvaos90s2D0Gm0UYTy9mfepiA/dda2t0jGKPKPtCE= Subject key identifier: 82:74:48:2E:EC:B8:2D:0A:1B:90:33:A5:F6:69:24:41:8E:04:FE:7E Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 Certificate issuer: /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Certificate serial: 1089 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft Manifest number: 1080 Signing time: Fri 22 Aug 2025 17:29:49 +0000 Manifest this update: Fri 22 Aug 2025 17:29:48 +0000 Manifest next update: Fri 29 Aug 2025 17:29:48 +0000 Files and hashes: 1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: UPB46alCQjr3r5pITBFTAoT1bxforWWFSqP4dP1+F/Y=) 2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: qPjQ6qU9b4Y2Yxe9iOnxcnbbcXQxddrSOa1xx9RMf9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4233 (0x1089) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Validity Not Before: Aug 22 17:29:48 2025 GMT Not After : Aug 29 17:29:48 2025 GMT Subject: CN=68a8a90c-d56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5a:8f:0e:49:1e:15:a9:93:a9:c0:db:b2:ab: 7a:8e:ac:d9:d3:f8:54:74:1a:0d:5d:00:46:2c:06: c1:31:0a:aa:f9:c3:15:a4:e7:0f:c3:c7:70:79:23: a6:a0:b0:bb:2e:50:a6:17:61:65:81:f8:43:93:c7: f2:fa:37:03:86:5f:7c:56:43:32:1b:89:16:25:8f: 81:f5:57:7f:48:b9:84:d9:5c:d1:2d:4e:e3:14:5c: e4:bf:71:3e:ac:d3:52:bc:ac:da:6e:5f:0e:a5:d5: 38:62:b3:28:32:dd:0d:06:9a:62:ed:53:c7:d1:3f: e7:a8:34:94:71:eb:c9:13:8b:ce:b8:41:52:94:b4: f6:56:49:b7:f1:38:17:8a:84:46:61:ee:d0:2c:c8: 33:c4:d0:e2:28:48:f0:f1:a0:1e:b9:66:87:d0:2c: 52:00:5d:67:61:9f:8d:ae:c0:92:95:06:0e:3b:59: 22:b9:24:e9:7f:49:17:ef:6f:8e:a2:cc:1e:d1:53: 96:ad:65:32:b4:a0:ce:9f:ca:9a:ec:47:39:e8:9b: 83:04:62:e6:b7:06:28:7c:4f:5b:a4:33:d8:51:1a: d4:59:f6:77:5b:9a:35:72:9e:61:ea:f5:d4:65:bc: cc:fb:af:4c:68:29:6a:49:9d:7f:f5:51:40:27:c3: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:74:48:2E:EC:B8:2D:0A:1B:90:33:A5:F6:69:24:41:8E:04:FE:7E X509v3 Authority Key Identifier: keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:cc:83:51:64:7d:0f:b8:73:65:d5:11:3e:43:29:87:5f:0d: df:c5:aa:85:e0:2e:45:63:13:0b:6c:8a:44:98:e6:4b:31:e9: 60:99:7e:80:4e:03:aa:4b:bd:7e:56:42:d1:9d:85:48:20:f1: 69:b2:ec:16:e0:34:63:7c:53:6a:b3:41:f1:e0:31:81:53:f1: a5:cd:e3:ab:ae:31:9c:16:2c:4f:f8:8f:dc:30:e9:2e:8c:16: 96:3e:6d:72:7b:50:f1:53:31:0f:8a:e5:c5:18:23:07:57:8f: 3c:29:ae:46:3c:e1:d3:b7:b7:10:e8:f8:0d:b1:d3:50:e0:a4: ea:92:fe:6f:6c:93:0b:27:18:a1:37:69:55:a8:1b:2b:ba:63: f3:a4:8b:8f:d9:06:59:9c:1c:58:38:d3:4c:32:54:c1:ae:36: 55:8f:39:06:c3:06:df:99:95:03:e8:27:db:5b:f9:80:cb:d5: df:7d:fb:4f:f0:2d:64:0c:cb:c1:30:9c:64:fa:be:1b:29:79: ee:6c:19:79:ce:19:3b:35:ea:6f:10:bd:d0:63:1b:f5:5b:ab: 0b:f5:6b:67:fc:90:fe:60:94:41:c5:6a:e4:e8:ac:77:3b:c8: 07:c0:91:c5:3d:a6:9f:f3:f5:11:76:52:49:ec:22:83:17:2f: 21:d0:28:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEE2NTEwNERDNzZBOEUwRTZBM0Q5MjE0Njc4OTY4MEI3 M0RERTVGNTgwHhcNMjUwODIyMTcyOTQ4WhcNMjUwODI5MTcyOTQ4WjAYMRYwFAYD VQQDEw02OGE4YTkwYy1kNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8lqPDkkeFamTqcDbsqt6jqzZ0/hUdBoNXQBGLAbBMQqq+cMVpOcPw8dweSOm oLC7LlCmF2FlgfhDk8fy+jcDhl98VkMyG4kWJY+B9Vd/SLmE2VzRLU7jFFzkv3E+ rNNSvKzabl8OpdU4YrMoMt0NBppi7VPH0T/nqDSUcevJE4vOuEFSlLT2Vkm38TgX ioRGYe7QLMgzxNDiKEjw8aAeuWaH0CxSAF1nYZ+NrsCSlQYOO1kiuSTpf0kX72+O oswe0VOWrWUytKDOn8qa7Ec56JuDBGLmtwYofE9bpDPYURrUWfZ3W5o1cp5h6vXU ZbzM+69MaClqSZ1/9VFAJ8MwyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ0SC7s uC0KG5AzpfZpJEGOBP5+MB8GA1UdIwQYMBaAFKZRBNx2qODmo9khRniWgLc93l9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC8wMzMyNDBDMDNB NEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRPYWoyU0ZHZUphQXR6M2VY MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BsRUUzSGFvNE9hajJTRkdlSmFBdHozZVgxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC8wMzMyNDBDMDNBNEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRP YWoyU0ZHZUphQXR6M2VYMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLzINRZH0PuHNl1RE+QymHXw3fxaqF4C5FYxMLbIpEmOZLMelgmX6A TgOqS71+VkLRnYVIIPFpsuwW4DRjfFNqs0Hx4DGBU/GlzeOrrjGcFixP+I/cMOku jBaWPm1ye1DxUzEPiuXFGCMHV488Ka5GPOHTt7cQ6PgNsdNQ4KTqkv5vbJMLJxih N2lVqBsrumPzpIuP2QZZnBxYONNMMlTBrjZVjzkGwwbfmZUD6CfbW/mAy9XffftP 8C1kDMvBMJxk+r4bKXnubBl5zhk7NepvEL3QYxv1W6sL9Wtn/JD+YJRBxWrk6Kx3 O8gHwJHFPaaf8/URdlJJ7CKDFy8h0CjL -----END CERTIFICATE-----Generated at Sun Aug 24 03:08:14 2025 by rpki-client