$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft File: PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json) Hash identifier: pbz+a0rSC3QsKexWuOBMReFqCHerhFAVPr73Jd0Oe98= Subject key identifier: 13:4A:2C:FF:A6:B7:26:D2:2E:95:F9:5B:52:2C:47:23:59:E5:12:37 Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Certificate serial: 02E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft Manifest number: 02CF Signing time: Sat 23 Aug 2025 01:42:50 +0000 Manifest this update: Sat 23 Aug 2025 01:42:49 +0000 Manifest next update: Sat 30 Aug 2025 01:42:49 +0000 Files and hashes: 1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: SE1eGanFY+qCpunoFhcz1B6l3jd/1kMmFaJ/MZUIlig=) 2: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: jD7jiIEoA0zrb6YHgdu7nodN7r96+edv/r/epjKwp04=) 3: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: HdD/+ld1Uf50ShMo2E2ANBSVseJYDOqUpaCHNPJZLUs=) 4: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 499SL3b2qo6tqtvUtTvrd1ycmIPTXzG0Kk7YhvDP3Mk=) 5: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: qyVadK6PowhxT5dTxZ86nSTovFJ2RAqG5nfVtu7+2Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Validity Not Before: Aug 23 01:42:49 2025 GMT Not After : Aug 30 01:42:49 2025 GMT Subject: CN=68a91c99-ed39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:ed:aa:62:1d:44:65:c9:25:ea:07:39:44: c5:07:20:78:7e:83:17:d1:14:6f:83:8e:95:5c:71: ea:a8:71:aa:a8:c5:a6:c2:8d:50:6d:f2:64:df:ad: ee:40:23:b5:31:8b:9e:9c:65:bf:3f:87:8e:d6:b7: d6:e3:46:9f:99:58:3e:1b:4f:70:2c:1b:07:46:bb: 8f:8e:96:cb:bf:d9:bb:7e:e2:50:d3:f2:35:39:32: 4f:b0:d0:31:86:b7:fd:30:25:39:c8:a5:48:f2:f2: 95:b2:40:9e:58:38:57:18:c4:dc:8b:69:ee:17:ad: ba:89:d6:71:4c:ce:11:37:0f:2b:b9:14:2b:cc:03: b1:b7:80:21:e3:c1:32:cb:5a:02:d4:84:07:8b:ca: 1e:1b:dc:56:ce:57:63:42:63:ca:c9:53:48:57:09: 7b:59:45:3d:ae:81:bd:c5:20:59:62:31:29:33:15: 41:7d:58:61:ed:c0:f7:a4:cf:d2:97:c6:79:04:45: ef:b0:e5:55:14:bd:18:9d:e6:1d:7a:d1:46:7c:7f: af:2c:cb:ec:56:9c:fd:ce:25:cb:77:59:eb:05:ed: b7:79:cd:69:18:db:c3:ff:93:b5:ce:85:5f:6d:62: 28:35:3c:dd:b4:89:25:70:ff:d9:a2:f3:8e:75:08: fd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4A:2C:FF:A6:B7:26:D2:2E:95:F9:5B:52:2C:47:23:59:E5:12:37 X509v3 Authority Key Identifier: keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:5e:1b:04:dc:8f:49:7a:51:30:3f:fc:fb:3b:c0:e7:9e:e8: 0d:46:0c:5b:99:5f:a1:aa:5f:b0:67:70:ff:82:ad:29:7a:7e: 68:a9:fa:c2:93:a6:82:2d:cd:23:fb:53:fd:bf:c4:2a:08:99: e0:0c:05:9e:f4:b8:6b:51:9e:73:dd:6c:5a:3c:fa:f0:98:54: 21:cd:fb:7d:95:04:7d:dd:da:a0:a2:6e:cd:6a:cb:56:5f:8c: ba:a3:a8:10:3a:a7:d9:4e:f1:8c:e5:6a:2e:49:c3:23:c4:e4: 32:95:51:b2:7c:46:ae:52:e4:d4:5b:30:ed:f0:ac:db:86:e7: ec:ff:64:04:68:dd:8b:62:44:64:a2:c8:2b:56:4e:e4:59:85: 3a:6d:25:f5:d7:63:69:49:ba:18:4a:31:e5:ba:18:35:d8:28: 0e:a0:7c:b9:4d:02:b9:e1:a9:f8:ef:53:82:63:92:f7:ca:af: 07:ca:a9:70:8c:1a:35:1c:3d:07:46:6c:21:49:39:b1:98:8e: 65:ea:c2:46:a6:3d:84:79:76:43:44:21:c9:86:1d:41:24:11: 54:77:3b:00:d2:4a:23:8c:34:06:72:ea:d4:0e:03:0a:9d:f6: 91:b9:70:74:02:db:9f:af:47:a4:88:83:b8:ea:ca:94:b0:ba: 59:6e:a2:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODREMTE5NUI1MzI2 RjkyNDlGQkQwHhcNMjUwODIzMDE0MjQ5WhcNMjUwODMwMDE0MjQ5WjAYMRYwFAYD VQQDEw02OGE5MWM5OS1lZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV7tqmIdRGXJJeoHOUTFByB4foMX0RRvg46VXHHqqHGqqMWmwo1QbfJk363u QCO1MYuenGW/P4eO1rfW40afmVg+G09wLBsHRruPjpbLv9m7fuJQ0/I1OTJPsNAx hrf9MCU5yKVI8vKVskCeWDhXGMTci2nuF626idZxTM4RNw8ruRQrzAOxt4Ah48Ey y1oC1IQHi8oeG9xWzldjQmPKyVNIVwl7WUU9roG9xSBZYjEpMxVBfVhh7cD3pM/S l8Z5BEXvsOVVFL0YneYdetFGfH+vLMvsVpz9ziXLd1nrBe23ec1pGNvD/5O1zoVf bWIoNTzdtIklcP/ZovOOdQj9qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNKLP+m tybSLpX5W1IsRyNZ5RI3MB8GA1UdIwQYMBaAFDz5FggiaBnD6dqE0RlbUyb5JJ+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9FNUQ2RDBBQzA2 NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0djUHAyb1RSR1Z0VEp2a2tu NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQa1dDQ0pvR2NQcDJvVFJHVnRUSnZra243MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFFNC9FNUQ2RDBBQzA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0dj UHAyb1RSR1Z0VEp2a2tuNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1XhsE3I9JelEwP/z7O8DnnugNRgxbmV+hql+wZ3D/gq0pen5oqfrC k6aCLc0j+1P9v8QqCJngDAWe9LhrUZ5z3WxaPPrwmFQhzft9lQR93dqgom7NastW X4y6o6gQOqfZTvGM5WouScMjxOQylVGyfEauUuTUWzDt8Kzbhufs/2QEaN2LYkRk osgrVk7kWYU6bSX112NpSboYSjHluhg12CgOoHy5TQK54an471OCY5L3yq8Hyqlw jBo1HD0HRmwhSTmxmI5l6sJGpj2EeXZDRCHJhh1BJBFUdzsA0kojjDQGcurUDgMK nfaRuXB0Atufr0ekiIO46sqUsLpZbqIL -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:09 2025 by rpki-client