$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft File: PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json) Hash identifier: MRgPGRErKeQXAx3JGKXjIiy9iTQ8uvsxc5+35++WIxo= Subject key identifier: 44:E2:51:14:5D:B7:ED:73:F1:CE:A4:1B:1F:FC:25:EE:3B:3A:F1:F2 Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft Manifest number: 029D Signing time: Thu 15 May 2025 01:37:55 +0000 Manifest this update: Thu 15 May 2025 01:37:54 +0000 Manifest next update: Thu 22 May 2025 01:37:54 +0000 Files and hashes: 1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: o/pyEJGzLQ95/ntjOMcDeflNsYDyEwvfG1GVbTWrnRE=) 2: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: jD7jiIEoA0zrb6YHgdu7nodN7r96+edv/r/epjKwp04=) 3: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: HdD/+ld1Uf50ShMo2E2ANBSVseJYDOqUpaCHNPJZLUs=) 4: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 499SL3b2qo6tqtvUtTvrd1ycmIPTXzG0Kk7YhvDP3Mk=) 5: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: qyVadK6PowhxT5dTxZ86nSTovFJ2RAqG5nfVtu7+2Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Validity Not Before: May 15 01:37:54 2025 GMT Not After : May 22 01:37:54 2025 GMT Subject: CN=68254573-35b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f3:61:2c:b5:b4:d1:76:37:4c:da:8e:ab:21: 88:1c:e3:e4:74:3d:d0:f7:48:d6:83:73:2b:c4:f5: 54:58:39:ef:23:f1:2a:6c:be:fb:1b:39:e3:27:89: 49:c2:05:03:78:ab:b9:ea:c3:e6:3d:a5:20:3b:cd: 25:d9:b2:bb:c1:a5:35:aa:d6:4c:ca:d4:9a:1b:1a: 81:1e:aa:c7:15:46:d7:5f:98:c6:9e:f3:fb:a4:16: e4:3c:66:b2:45:28:39:0f:09:f7:59:14:03:7b:a0: 7e:6c:45:5f:39:cb:64:28:09:ad:70:cb:86:ca:59: cd:82:c5:b6:ea:96:a9:6a:fb:e4:7c:b7:d6:e2:bb: db:0b:e3:74:ca:58:b1:87:03:17:a7:a6:51:12:59: f0:4f:1b:5d:31:91:f5:b4:82:d3:5a:9c:78:43:3f: b9:1b:96:18:11:47:4d:ca:5f:d5:13:e9:e0:39:94: e8:8b:94:bd:5d:73:37:63:b7:a1:f8:3f:ed:c7:2f: bb:93:82:31:ad:9e:d1:9d:0a:02:79:8f:50:b0:49: 1c:3d:6c:35:2b:01:0c:f9:b1:a6:3b:2d:15:31:c5: c0:27:2b:1c:5e:22:9e:94:1f:4c:2d:b0:00:fb:6b: a3:fc:7d:fd:da:bb:a7:75:d9:d0:b8:2d:66:d7:ea: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E2:51:14:5D:B7:ED:73:F1:CE:A4:1B:1F:FC:25:EE:3B:3A:F1:F2 X509v3 Authority Key Identifier: keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:2e:09:c6:fa:fe:70:92:2b:a7:00:6f:c5:ed:4e:e8:10:85: 64:44:a3:bc:b4:5e:45:67:64:4e:7d:53:2a:00:d9:37:fc:70: 3e:5c:e6:d9:6f:cf:34:dd:6c:35:51:e6:e3:3b:6c:6b:55:00: e8:fd:46:3d:ad:10:7d:7d:c6:4e:84:46:65:ba:42:58:c7:5a: 5f:2b:b8:48:f7:27:ee:5c:f9:3e:b5:dc:0f:e1:ba:ab:f3:22: 57:e2:13:6a:48:1f:18:3b:49:11:2c:1e:7c:5d:26:d6:1e:a3: 52:61:24:8b:2c:c9:af:a9:1e:09:ae:02:bf:ac:9a:ff:6b:1b: 00:81:c6:1c:82:84:c7:e5:c0:f9:14:91:be:f2:ba:2a:c1:6d: d1:3e:86:89:41:d3:3c:1f:f4:5b:83:a1:69:68:6a:2f:c5:a5: 80:27:ba:bd:cd:1a:92:94:af:4f:20:d7:b3:e3:77:dc:de:ba: 03:2e:6f:3a:84:54:1d:e7:c9:ad:b7:0a:9b:05:b6:e4:1d:2b: b6:5c:ed:d5:f5:49:4e:34:56:2a:0e:de:1d:ce:4d:bc:e0:4b: 11:fb:3f:d4:8b:84:22:57:d3:b9:7f:42:11:87:74:c6:d9:e8: 78:7f:38:8f:39:ab:32:41:21:c8:dc:f5:6b:91:46:bd:67:0e: 05:b8:ad:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODREMTE5NUI1MzI2 RjkyNDlGQkQwHhcNMjUwNTE1MDEzNzU0WhcNMjUwNTIyMDEzNzU0WjAYMRYwFAYD VQQDEw02ODI1NDU3My0zNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/NhLLW00XY3TNqOqyGIHOPkdD3Q90jWg3MrxPVUWDnvI/EqbL77GznjJ4lJ wgUDeKu56sPmPaUgO80l2bK7waU1qtZMytSaGxqBHqrHFUbXX5jGnvP7pBbkPGay RSg5Dwn3WRQDe6B+bEVfOctkKAmtcMuGylnNgsW26papavvkfLfW4rvbC+N0ylix hwMXp6ZRElnwTxtdMZH1tILTWpx4Qz+5G5YYEUdNyl/VE+ngOZToi5S9XXM3Y7eh +D/txy+7k4IxrZ7RnQoCeY9QsEkcPWw1KwEM+bGmOy0VMcXAJyscXiKelB9MLbAA +2uj/H392runddnQuC1m1+phZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETiURRd t+1z8c6kGx/8Je47OvHyMB8GA1UdIwQYMBaAFDz5FggiaBnD6dqE0RlbUyb5JJ+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9FNUQ2RDBBQzA2 NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0djUHAyb1RSR1Z0VEp2a2tu NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQa1dDQ0pvR2NQcDJvVFJHVnRUSnZra243MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFFNC9FNUQ2RDBBQzA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0dj UHAyb1RSR1Z0VEp2a2tuNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWLgnG+v5wkiunAG/F7U7oEIVkRKO8tF5FZ2ROfVMqANk3/HA+XObZ b8803Ww1UebjO2xrVQDo/UY9rRB9fcZOhEZlukJYx1pfK7hI9yfuXPk+tdwP4bqr 8yJX4hNqSB8YO0kRLB58XSbWHqNSYSSLLMmvqR4JrgK/rJr/axsAgcYcgoTH5cD5 FJG+8roqwW3RPoaJQdM8H/Rbg6FpaGovxaWAJ7q9zRqSlK9PINez43fc3roDLm86 hFQd58mttwqbBbbkHSu2XO3V9UlONFYqDt4dzk284EsR+z/Ui4QiV9O5f0IRh3TG 2eh4fziPOasyQSHI3PVrkUa9Zw4FuK0o -----END CERTIFICATE-----Generated at Thu May 15 03:27:08 2025 by rpki-client