$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: +pzef7lJPQ0N+/0WKIIkioP3mvU3DYzoylVxE1bhuQc= Subject key identifier: 4B:EB:AA:4B:25:2A:E6:38:4B:FD:FD:0F:A8:F3:61:C7:C8:BD:B1:B3 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 02C3 Signing time: Sat 23 Aug 2025 02:03:40 +0000 Manifest this update: Sat 23 Aug 2025 02:03:40 +0000 Manifest next update: Sat 30 Aug 2025 02:03:40 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: pAH5dkpaC+jxNk1J6I+mlUr65lV2bqg6i2qdgBh0tvU=) 2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: 47mQF6PfDXtTIGLoH5wN3S2ft4gFnWfdQE9ZmrAM1zk=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Aug 23 02:03:40 2025 GMT Not After : Aug 30 02:03:40 2025 GMT Subject: CN=68a9217c-c96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:1c:59:4a:91:02:74:00:4b:75:53:d2:a3: 78:7d:13:8a:2a:c4:d2:6b:49:62:74:30:fd:8e:d1: b5:0c:72:e3:10:29:33:49:1b:bf:a0:8d:a7:8b:4b: 65:68:72:0b:66:75:86:5d:78:54:58:89:c2:16:89: 4b:95:87:9b:2e:45:a7:c9:fb:5f:06:b5:04:ce:0d: 98:a5:1d:26:94:db:d4:f6:1f:b1:e4:ad:a4:5a:39: b0:a1:0f:e2:41:99:30:9c:32:5f:ac:38:88:30:7a: 7b:a4:08:0f:8c:8c:19:5d:75:2c:ba:a2:e0:43:be: 65:f3:e2:f8:3c:46:98:be:21:65:3c:89:38:00:b5: 61:66:9a:3b:7a:b1:26:d7:8d:5e:8b:71:1c:76:5b: b4:94:25:4b:d4:20:4c:1a:22:f2:80:ce:08:6b:f2: 19:8d:4a:fc:0a:71:a5:ff:b4:10:5f:44:46:7a:19: fd:78:8e:66:f1:8e:ca:87:9b:61:3b:0d:2a:a6:ac: 2f:a1:8a:86:35:ae:1b:c6:72:dd:76:3a:b5:e4:a8: 4f:69:6e:83:13:e4:c1:5c:a8:80:50:fa:67:7c:c4: 69:f4:8f:b8:26:7c:4a:24:ba:e4:74:dc:5c:cd:43: 9d:0d:7b:31:40:64:bd:c7:73:ba:19:d7:6c:83:cf: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EB:AA:4B:25:2A:E6:38:4B:FD:FD:0F:A8:F3:61:C7:C8:BD:B1:B3 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9a:0d:6c:4b:77:a2:46:60:a9:fa:08:95:d5:5f:23:1c:95: 9b:a8:d5:8f:32:02:37:49:15:6c:cb:ee:28:89:72:3e:3a:cc: 2d:33:1f:9f:80:61:d4:48:43:f1:9c:43:a7:83:39:66:28:b2: 3c:72:35:e9:67:cc:47:24:90:8f:2c:45:2b:d0:a9:b2:48:5b: 52:bf:07:2a:a1:29:6a:6e:20:a1:14:51:79:fe:8c:fd:c5:fb: aa:5e:f6:3f:84:a4:f7:28:1f:38:ff:c8:ad:be:ab:ea:2b:a8: 86:cf:90:8b:d0:47:62:79:0e:61:02:c2:d3:2a:d7:ce:5f:d1: b1:37:0f:d3:13:d5:98:31:c9:32:0f:59:e9:86:ed:4f:9a:cf: 40:51:06:7a:5b:62:a0:f5:00:6a:8d:17:a4:bf:e5:69:27:c6: b4:f4:84:cc:11:e2:89:72:6b:dd:a9:4d:b4:5c:24:c1:09:d9: b8:b2:82:bb:4a:f4:b1:1c:00:68:29:01:f2:43:af:cf:d7:14: c9:bb:40:97:11:37:22:c0:8b:76:b9:52:8b:ce:28:73:cb:3a: 81:cf:3e:7f:16:8d:35:18:96:c7:2f:8b:19:1b:d3:3d:45:b0: 2b:fc:84:35:d6:7f:9f:e7:e7:66:cd:1a:5c:e8:65:57:97:47: f8:66:13:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwODIzMDIwMzQwWhcNMjUwODMwMDIwMzQwWjAYMRYwFAYD VQQDEw02OGE5MjE3Yy1jOTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy8cWUqRAnQAS3VT0qN4fROKKsTSa0lidDD9jtG1DHLjECkzSRu/oI2ni0tl aHILZnWGXXhUWInCFolLlYebLkWnyftfBrUEzg2YpR0mlNvU9h+x5K2kWjmwoQ/i QZkwnDJfrDiIMHp7pAgPjIwZXXUsuqLgQ75l8+L4PEaYviFlPIk4ALVhZpo7erEm 141ei3Ecdlu0lCVL1CBMGiLygM4Ia/IZjUr8CnGl/7QQX0RGehn9eI5m8Y7Kh5th Ow0qpqwvoYqGNa4bxnLddjq15KhPaW6DE+TBXKiAUPpnfMRp9I+4JnxKJLrkdNxc zUOdDXsxQGS9x3O6Gddsg8/B3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvrqksl KuY4S/39D6jzYcfIvbGzMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvmg1sS3eiRmCp+giV1V8jHJWbqNWPMgI3SRVsy+4oiXI+OswtMx+f gGHUSEPxnEOngzlmKLI8cjXpZ8xHJJCPLEUr0KmySFtSvwcqoSlqbiChFFF5/oz9 xfuqXvY/hKT3KB84/8itvqvqK6iGz5CL0EdieQ5hAsLTKtfOX9GxNw/TE9WYMcky D1nphu1Pms9AUQZ6W2Kg9QBqjRekv+VpJ8a09ITMEeKJcmvdqU20XCTBCdm4soK7 SvSxHABoKQHyQ6/P1xTJu0CXETciwIt2uVKLzihzyzqBzz5/Fo01GJbHL4sZG9M9 RbAr/IQ11n+f5+dmzRpc6GVXl0f4ZhMi -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:30 2025 by rpki-client