$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: gMNmZpYk9Y17qio1b7r045eB/eE5ouyhNuM/3nk9pvs= Subject key identifier: 8E:AC:AD:8C:57:55:16:ED:FB:B8:AC:B7:CB:CB:BF:25:28:A8:F5:2D Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 0330 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 02E4 Signing time: Sun 19 Oct 2025 03:54:33 +0000 Manifest this update: Sun 19 Oct 2025 03:54:33 +0000 Manifest next update: Sun 26 Oct 2025 03:54:33 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: fVItGizGLbRzJ/1qLsp6c5vAE7dvod4L3Miw7KFiHLk=) 2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: 84pcGrR9yrb0lc+y5Ras78T88Umec4YhuuH1jDixkUs=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Oct 19 03:54:33 2025 GMT Not After : Oct 26 03:54:33 2025 GMT Subject: CN=68f460f9-73fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:5e:cb:2a:16:10:37:88:d4:ab:31:7d:32: 13:56:26:62:2a:0e:e4:8e:8d:d8:6d:1f:c3:77:cc: 6a:e7:db:b3:17:96:79:d2:e2:51:3c:ea:bf:f0:ef: b5:76:0b:7c:37:13:cd:79:f7:4f:6e:39:05:87:13: a9:78:bb:57:a8:f2:13:1f:76:d4:db:1a:16:50:69: 39:da:60:74:65:90:8b:3a:47:b9:04:0c:38:25:f3: a1:93:af:60:5d:d9:19:9f:c5:cb:94:ba:14:28:be: 6c:09:9b:dd:ff:59:3a:8a:e1:e4:2e:aa:ef:b6:84: 4f:54:d5:60:0e:f7:45:f0:2f:16:70:db:f5:33:1e: ba:f9:57:25:86:1d:18:f2:d0:74:36:59:b9:8e:8f: 42:5d:67:ac:40:74:0e:da:c6:a7:67:a4:c9:03:e9: 9f:82:cc:b6:bf:f8:24:ef:78:4b:ee:80:34:f3:8f: f5:4b:16:cc:d6:27:88:a5:9e:f1:ed:83:b1:35:17: f4:10:48:f7:57:ce:e9:79:14:3b:35:2b:10:57:05: cb:29:d8:b7:38:61:94:b1:7b:26:7c:0e:61:4e:c2: aa:27:f9:02:f7:0a:ea:27:47:a0:30:6e:69:e9:9f: 04:f9:89:11:b6:14:ef:72:04:00:27:b2:21:90:d6: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AC:AD:8C:57:55:16:ED:FB:B8:AC:B7:CB:CB:BF:25:28:A8:F5:2D X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:dc:a6:da:2b:fc:e9:82:37:3a:38:09:f4:85:fe:75:1c:68: 86:a1:fb:6b:73:70:a6:93:8d:6c:ea:8b:e1:56:74:8d:48:a3: 1c:d4:12:4c:34:36:16:21:ee:56:f9:7e:54:46:1f:c5:8d:c0: c2:1c:46:2d:bf:1a:d5:34:34:a7:6c:2e:1a:11:e0:3a:ae:1d: 0a:08:70:78:07:3d:24:b3:3b:e1:56:90:cf:85:52:36:22:d8: 3c:78:e2:6b:2f:4a:6a:0f:b0:54:bc:0e:65:ff:fd:84:e8:32: f5:9a:aa:32:d3:c3:73:68:81:54:c9:a4:f8:b5:f7:de:9c:e9: 9a:17:48:38:53:55:26:8e:39:28:79:18:25:1b:46:ae:9d:ab: f1:d7:6c:24:4a:43:a4:ba:68:c9:25:5c:6b:26:af:dd:da:02: 24:e6:df:67:00:2a:4c:a1:be:0c:85:10:fc:bd:40:c9:35:54: a9:71:ec:30:2f:05:07:dc:09:b8:40:47:48:6d:82:31:45:fd: 84:ea:cc:0e:fa:a6:9d:ef:63:fe:ed:82:17:a5:19:a5:0b:f9: 46:04:4d:0f:94:a9:29:17:7d:a2:70:ca:53:6e:db:aa:8c:00: 8d:c6:60:eb:21:64:7f:47:fb:7e:fd:a0:0b:33:7d:45:ce:44: cb:16:90:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUxMDE5MDM1NDMzWhcNMjUxMDI2MDM1NDMzWjAYMRYwFAYD VQQDEw02OGY0NjBmOS03M2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tZeyyoWEDeI1KsxfTITViZiKg7kjo3YbR/Dd8xq59uzF5Z50uJRPOq/8O+1 dgt8NxPNefdPbjkFhxOpeLtXqPITH3bU2xoWUGk52mB0ZZCLOke5BAw4JfOhk69g XdkZn8XLlLoUKL5sCZvd/1k6iuHkLqrvtoRPVNVgDvdF8C8WcNv1Mx66+Vclhh0Y 8tB0Nlm5jo9CXWesQHQO2sanZ6TJA+mfgsy2v/gk73hL7oA084/1SxbM1ieIpZ7x 7YOxNRf0EEj3V87peRQ7NSsQVwXLKdi3OGGUsXsmfA5hTsKqJ/kC9wrqJ0egMG5p 6Z8E+YkRthTvcgQAJ7IhkNaxYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6srYxX VRbt+7ist8vLvyUoqPUtMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW3KbaK/zpgjc6OAn0hf51HGiGoftrc3Cmk41s6ovhVnSNSKMc1BJM NDYWIe5W+X5URh/FjcDCHEYtvxrVNDSnbC4aEeA6rh0KCHB4Bz0kszvhVpDPhVI2 Itg8eOJrL0pqD7BUvA5l//2E6DL1mqoy08NzaIFUyaT4tffenOmaF0g4U1Umjjko eRglG0aunavx12wkSkOkumjJJVxrJq/d2gIk5t9nACpMob4MhRD8vUDJNVSpceww LwUH3Am4QEdIbYIxRf2E6swO+qad72P+7YIXpRmlC/lGBE0PlKkpF32icMpTbtuq jACNxmDrIWR/R/t+/aALM31FzkTLFpDT -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:35 2025 by rpki-client