$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: ipUOoaoGhfVjcVfDutf2aC4mdrz1aPiz4v+iko8n5qw= Subject key identifier: CA:AE:9A:B4:57:90:56:15:C0:02:75:8D:59:19:07:94:55:30:B5:96 Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 01A7 Signing time: Tue 01 Jul 2025 03:47:46 +0000 Manifest this update: Tue 01 Jul 2025 03:47:45 +0000 Manifest next update: Tue 08 Jul 2025 03:47:45 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: kj6Uywk4D4FT3JMsSvOXX44mSunUOzmcYKOXJCFDjhs=) 2: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: PhSrarlCbMwPtvT6PCvMaDG4Ioq8bEIWBn8LLBxKEUI=) 3: E761FB80118C11F0B9B8B26AC4F9AE02.roa (hash: /75uDbvkq2hvW+aFsSWLKYWGONv7oOopY70G/Ex1fRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Jul 1 03:47:45 2025 GMT Not After : Jul 8 03:47:45 2025 GMT Subject: CN=68635a61-8018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:06:f8:03:f6:bf:9d:3d:b8:4b:c3:63:50:c6: bf:de:12:f2:fc:0c:fa:d2:ba:93:7c:93:64:c2:de: 16:e3:ce:90:0f:62:e2:57:15:ae:71:9f:00:05:f9: ef:14:8c:71:9b:5a:6b:7f:55:80:7a:9a:f0:1f:42: cf:1b:84:dc:1e:32:dd:79:49:3a:55:57:28:85:96: d5:db:26:d3:5e:c6:55:d7:f8:13:ab:4e:74:df:ed: 43:15:8f:e2:61:44:b8:7d:77:1c:ef:6b:e8:fa:46: 23:16:83:ea:b4:ed:d5:13:92:a2:04:1c:01:b6:9e: 6a:96:77:cf:7a:bf:2a:5f:52:03:42:1f:d9:6e:04: 0a:34:08:04:6e:9c:ec:ab:be:df:ba:cb:f7:84:22: 36:e6:47:cb:d1:62:1d:f4:12:74:23:b5:dd:73:66: aa:f2:bc:91:e6:de:62:3d:27:3a:d7:50:71:28:43: 06:40:95:2b:bb:b0:53:14:0f:b8:ef:38:9a:dc:2c: a0:9a:2b:f6:4b:23:5c:14:b6:f6:7f:51:ae:74:b8: 28:ad:85:d5:9a:9f:ba:8c:eb:9a:6c:20:01:e1:ad: 1b:04:25:ed:38:f6:d3:ec:73:db:50:ab:12:7b:a2: 96:be:73:43:35:33:f1:15:13:39:b5:09:5f:53:c3: 70:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:9A:B4:57:90:56:15:C0:02:75:8D:59:19:07:94:55:30:B5:96 X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ba:7c:c3:58:3b:8f:5c:5e:ee:10:5a:0e:a8:57:7d:20:c0: bc:00:96:57:fb:c7:f7:da:74:b8:ee:fb:3a:48:4c:27:d4:31: 61:b7:ac:3d:3f:75:e1:bf:3c:10:aa:ca:68:06:b0:83:cd:f2: 62:da:d7:bf:b8:bf:92:b9:1b:f9:da:5d:ab:c0:62:f1:77:0a: 6f:5f:b4:44:1e:cb:3d:56:17:55:af:29:f7:a9:e5:15:b0:19: d1:55:54:22:92:6f:b8:2f:40:82:52:cb:4b:17:ab:73:c7:f0: 4c:ae:d2:db:e9:54:3a:91:b1:9e:fe:ff:5b:16:c8:11:22:31: c0:1a:06:00:44:d0:66:4e:15:04:b1:ee:2c:4e:03:dd:12:4c: e3:f2:f2:fc:ca:41:b1:ed:07:74:74:c3:21:27:cb:a4:80:22: 6e:73:e9:36:be:c7:4f:31:33:0f:5e:73:f6:4f:06:63:05:06: c2:5f:fb:0e:ce:93:0e:e9:49:78:a5:99:84:9c:e0:18:60:63: 9e:55:c2:4b:c5:9c:8e:20:7e:53:87:ac:a5:5c:52:a9:83:11: d0:52:f6:0a:ff:f5:0c:2b:89:ed:ce:4f:f2:3e:c0:36:3e:01: fb:a6:34:0f:e9:fb:7a:0b:5e:f1:3d:1d:77:88:b0:a1:79:42: ea:4b:81:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjUwNzAxMDM0NzQ1WhcNMjUwNzA4MDM0NzQ1WjAYMRYwFAYD VQQDEw02ODYzNWE2MS04MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gb4A/a/nT24S8NjUMa/3hLy/Az60rqTfJNkwt4W486QD2LiVxWucZ8ABfnv FIxxm1prf1WAeprwH0LPG4TcHjLdeUk6VVcohZbV2ybTXsZV1/gTq0503+1DFY/i YUS4fXcc72vo+kYjFoPqtO3VE5KiBBwBtp5qlnfPer8qX1IDQh/ZbgQKNAgEbpzs q77fusv3hCI25kfL0WId9BJ0I7Xdc2aq8ryR5t5iPSc611BxKEMGQJUru7BTFA+4 7zia3Cygmiv2SyNcFLb2f1GudLgorYXVmp+6jOuabCAB4a0bBCXtOPbT7HPbUKsS e6KWvnNDNTPxFRM5tQlfU8NwEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqumrRX kFYVwAJ1jVkZB5RVMLWWMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMunzDWDuPXF7uEFoOqFd9IMC8AJZX+8f32nS47vs6SEwn1DFht6w9 P3XhvzwQqspoBrCDzfJi2te/uL+SuRv52l2rwGLxdwpvX7REHss9VhdVryn3qeUV sBnRVVQikm+4L0CCUstLF6tzx/BMrtLb6VQ6kbGe/v9bFsgRIjHAGgYARNBmThUE se4sTgPdEkzj8vL8ykGx7Qd0dMMhJ8ukgCJuc+k2vsdPMTMPXnP2TwZjBQbCX/sO zpMO6Ul4pZmEnOAYYGOeVcJLxZyOIH5Th6ylXFKpgxHQUvYK//UMK4ntzk/yPsA2 PgH7pjQP6ft6C17xPR13iLCheULqS4Fk -----END CERTIFICATE-----Generated at Wed Jul 2 15:59:55 2025 by rpki-client