$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft File: plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json) Hash identifier: pgGCaKHbcV2cC528+jyvnYjV69oHNKSJ2Xg0eyUCK2U= Subject key identifier: 13:44:CE:35:26:E1:0F:19:C5:99:30:34:9C:F9:13:3F:B0:0E:57:9A Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 Certificate issuer: /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Certificate serial: 106F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft Manifest number: 1066 Signing time: Wed 02 Jul 2025 17:35:13 +0000 Manifest this update: Wed 02 Jul 2025 17:35:12 +0000 Manifest next update: Wed 09 Jul 2025 17:35:12 +0000 Files and hashes: 1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: JKuQQ5kRsd5oneEvHOQ1Omdx21vaMnrvxZTrbUdIQKk=) 2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: qPjQ6qU9b4Y2Yxe9iOnxcnbbcXQxddrSOa1xx9RMf9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4207 (0x106f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Validity Not Before: Jul 2 17:35:12 2025 GMT Not After : Jul 9 17:35:12 2025 GMT Subject: CN=68656dd1-f45c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:06:ae:0f:2a:45:ea:b0:89:a2:8c:d3:19: f3:d2:48:94:09:f3:ef:e2:a0:59:6f:35:8c:88:af: 64:96:f4:bd:20:bc:c6:c2:11:e3:1b:7e:61:02:c3: 36:02:9a:04:ba:c5:5c:06:87:6c:34:f2:bf:33:db: 29:cd:f8:23:5c:24:36:da:86:43:b3:61:36:11:bd: 23:b2:ed:d6:9b:2f:f1:fb:21:68:18:47:a4:94:81: 2d:76:77:c8:f8:61:14:e5:81:76:42:c9:75:4b:1d: c1:28:f1:8c:87:6d:64:66:f1:77:6d:45:d5:2d:67: f9:86:25:d1:e7:59:ff:6d:78:21:ed:04:18:6b:9d: 2a:b2:ad:9f:65:35:e1:a5:41:d4:bf:e6:4a:59:34: 56:01:67:51:dd:77:85:d5:d6:20:32:34:8f:6e:b3: c8:9e:22:81:5c:ad:c9:c4:31:8f:69:a1:6d:d8:c0: 21:a5:8b:df:7a:27:d3:d4:b2:31:91:24:e2:f8:e6: 60:fa:74:8c:2f:4b:95:6a:aa:54:f0:a0:89:f1:e4: e3:19:22:7e:06:7c:2e:fc:15:a0:df:48:e9:32:0e: ed:77:ec:64:73:68:87:f0:34:6a:a5:03:17:a0:40: 0f:71:a8:2d:42:9e:9a:04:c5:55:99:a7:9e:5f:23: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:44:CE:35:26:E1:0F:19:C5:99:30:34:9C:F9:13:3F:B0:0E:57:9A X509v3 Authority Key Identifier: keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a0:08:22:49:32:d2:39:f1:37:2a:1d:a6:26:be:c2:87:ef: b5:16:ad:01:66:ae:b1:5c:69:c6:a3:d6:a0:ba:c8:8d:46:b4: 19:d9:b7:4f:11:67:50:cc:48:85:19:97:e5:8f:cd:ce:7f:0a: bf:ac:0c:7c:78:e3:8b:20:94:c5:a9:a4:d6:e6:90:72:72:9b: 31:7e:c7:db:f1:c3:3f:40:0c:6a:b0:46:ab:3f:8a:ec:df:36: b6:b1:94:db:83:b9:4f:72:b9:a0:2f:45:c2:1e:7f:29:ab:1a: a5:6f:d6:7b:ab:af:73:53:bb:eb:59:12:1a:1e:cb:5e:e5:7f: 51:09:76:ac:e7:48:e1:cc:14:bf:4a:b5:31:fb:d3:65:2f:8d: 2b:05:19:58:0d:9f:df:fa:6e:86:62:c7:5b:01:14:a4:cd:05: 3c:12:27:cc:0b:d6:77:07:2f:99:9e:c7:62:53:3a:e4:b7:8e: 7c:02:81:c7:15:77:b3:3e:d1:16:1b:99:bd:b4:16:20:4b:bf: 74:8c:a1:4c:9d:a4:41:18:ac:17:95:24:1e:3b:d3:0a:be:4a: 43:c0:99:de:33:4e:4a:ea:25:50:be:cb:50:79:bb:5d:94:36: 4b:f4:64:3d:9d:21:d9:2d:4c:bf:02:9a:3d:a1:75:c4:45:61: 39:6a:59:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEE2NTEwNERDNzZBOEUwRTZBM0Q5MjE0Njc4OTY4MEI3 M0RERTVGNTgwHhcNMjUwNzAyMTczNTEyWhcNMjUwNzA5MTczNTEyWjAYMRYwFAYD VQQDEw02ODY1NmRkMS1mNDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYIGrg8qReqwiaKM0xnz0kiUCfPv4qBZbzWMiK9klvS9ILzGwhHjG35hAsM2 ApoEusVcBodsNPK/M9spzfgjXCQ22oZDs2E2Eb0jsu3Wmy/x+yFoGEeklIEtdnfI +GEU5YF2Qsl1Sx3BKPGMh21kZvF3bUXVLWf5hiXR51n/bXgh7QQYa50qsq2fZTXh pUHUv+ZKWTRWAWdR3XeF1dYgMjSPbrPIniKBXK3JxDGPaaFt2MAhpYvfeifT1LIx kSTi+OZg+nSML0uVaqpU8KCJ8eTjGSJ+Bnwu/BWg30jpMg7td+xkc2iH8DRqpQMX oEAPcagtQp6aBMVVmaeeXyNfiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNEzjUm 4Q8ZxZkwNJz5Ez+wDleaMB8GA1UdIwQYMBaAFKZRBNx2qODmo9khRniWgLc93l9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC8wMzMyNDBDMDNB NEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRPYWoyU0ZHZUphQXR6M2VY MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BsRUUzSGFvNE9hajJTRkdlSmFBdHozZVgxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC8wMzMyNDBDMDNBNEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRP YWoyU0ZHZUphQXR6M2VYMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWoAgiSTLSOfE3Kh2mJr7Ch++1Fq0BZq6xXGnGo9agusiNRrQZ2bdP EWdQzEiFGZflj83Ofwq/rAx8eOOLIJTFqaTW5pBycpsxfsfb8cM/QAxqsEarP4rs 3za2sZTbg7lPcrmgL0XCHn8pqxqlb9Z7q69zU7vrWRIaHste5X9RCXas50jhzBS/ SrUx+9NlL40rBRlYDZ/f+m6GYsdbARSkzQU8EifMC9Z3By+ZnsdiUzrkt458AoHH FXezPtEWG5m9tBYgS790jKFMnaRBGKwXlSQeO9MKvkpDwJneM05K6iVQvstQebtd lDZL9GQ9nSHZLUy/Apo9oXXERWE5alkP -----END CERTIFICATE-----Generated at Fri Jul 4 10:33:31 2025 by rpki-client