$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: 5so6M3dKuD9/eBAJG63nq0NNKJ2tSE/MJzRh4ywLjZ0= Subject key identifier: C4:44:C9:53:24:20:25:E5:E5:F6:9D:6E:0D:8D:4C:24:DE:82:F2:47 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 0293 Signing time: Thu 03 Jul 2025 02:18:15 +0000 Manifest this update: Thu 03 Jul 2025 02:18:15 +0000 Manifest next update: Thu 10 Jul 2025 02:18:15 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: MNH1qdCOhOeHZXxaCywMp71oLkUkANZkz4gRmNUFFTw=) 2: 38564246ABFB11EFAC5AA210C4F9AE02.roa (hash: leXSAp3oCJ+aQKw6LIPf99YutYgWlqAVbeE3hdBAn58=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: bA7L+jGDZGEL0erGUM3EYZdvPilaftv3/Gg8hdqNMPM=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Jul 3 02:18:15 2025 GMT Not After : Jul 10 02:18:15 2025 GMT Subject: CN=6865e867-86a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:37:3c:33:6f:8b:9e:60:0e:88:4d:54:e1: 32:c0:46:c0:69:98:50:63:6a:f5:a9:c9:d9:97:67: 46:07:4d:63:3c:46:88:74:62:09:7e:f9:bd:b8:16: 91:a6:f6:4b:84:9b:09:5d:4c:ab:7b:97:35:76:c5: dd:72:00:55:88:f5:1f:ca:43:60:08:c0:d0:fd:0f: b6:8d:6b:da:7b:ce:07:6e:ee:f6:ce:34:ce:a9:80: 9f:df:5b:8d:6d:20:9c:d2:e0:d6:06:05:a1:99:a5: 55:bb:e0:e7:1c:dc:28:98:91:10:b3:33:a8:c9:82: 7a:22:0d:79:aa:7c:21:59:af:87:6c:a8:07:09:4c: 09:7c:04:16:67:2b:60:1b:8f:20:dd:4a:96:37:54: c6:eb:43:c3:dc:d2:26:87:8c:01:0a:da:34:09:f6: 46:4c:92:50:5c:48:8b:e1:2b:55:cd:c7:73:a6:3d: b9:e5:9c:71:93:2c:8e:93:31:d4:62:0b:66:39:85: 0b:7d:49:1c:22:d3:63:65:cb:1c:37:ec:52:ed:e0: 67:82:ef:17:af:c8:98:bf:85:8d:40:da:42:55:bc: 19:bb:33:10:d5:3a:14:95:cd:4a:5c:2c:01:58:51: 49:bb:f0:9c:84:ad:f6:ff:6d:96:6c:2f:9b:0c:ce: 45:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:44:C9:53:24:20:25:E5:E5:F6:9D:6E:0D:8D:4C:24:DE:82:F2:47 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:bd:14:3f:97:1a:57:71:52:6c:b6:ae:64:ae:b3:34:6c:37: 43:00:79:2c:ac:c1:30:bc:6d:d4:9e:45:52:f1:c1:ae:08:3f: 40:6a:eb:55:3e:97:34:37:f4:cc:3c:5b:c8:92:90:a7:27:78: 55:9d:2b:5c:cd:ae:b5:62:15:ce:be:1e:cd:7c:9f:59:8c:5c: e0:23:63:2b:4a:e0:06:0a:c1:09:b4:5c:97:e8:90:21:f2:7b: 99:f0:0e:44:eb:88:51:c5:4b:cc:d0:be:a3:e7:ca:5d:1b:27: 23:c5:5f:8e:7b:5a:eb:d7:ef:23:e6:ce:1e:0b:8c:72:01:f0: fa:17:a4:46:5a:c6:41:f8:f1:f6:48:05:b4:99:ef:51:35:a9: 8d:88:46:b9:1e:63:be:39:b3:db:32:fb:f8:b5:4e:0b:4f:bc: b2:bf:7b:37:96:76:20:09:98:55:62:47:41:b7:d1:44:fb:a9: 3c:3a:3c:1f:55:2a:74:07:d0:04:3b:0e:85:72:ab:5d:37:da: 0f:c1:a9:03:8c:1c:b5:04:58:52:94:d0:3f:35:64:f5:32:c2: c1:9d:6b:95:86:bf:51:83:95:32:6f:2c:e1:62:01:0d:3c:c9: 6d:65:77:e4:c4:01:d9:c8:c0:df:8a:1b:0e:87:66:9e:78:6f: 14:83:82:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwNzAzMDIxODE1WhcNMjUwNzEwMDIxODE1WjAYMRYwFAYD VQQDEw02ODY1ZTg2Ny04NmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhw3PDNvi55gDohNVOEywEbAaZhQY2r1qcnZl2dGB01jPEaIdGIJfvm9uBaR pvZLhJsJXUyre5c1dsXdcgBViPUfykNgCMDQ/Q+2jWvae84Hbu72zjTOqYCf31uN bSCc0uDWBgWhmaVVu+DnHNwomJEQszOoyYJ6Ig15qnwhWa+HbKgHCUwJfAQWZytg G48g3UqWN1TG60PD3NImh4wBCto0CfZGTJJQXEiL4StVzcdzpj255ZxxkyyOkzHU YgtmOYULfUkcItNjZcscN+xS7eBngu8Xr8iYv4WNQNpCVbwZuzMQ1ToUlc1KXCwB WFFJu/CchK32/22WbC+bDM5FzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMREyVMk ICXl5fadbg2NTCTegvJHMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZvRQ/lxpXcVJstq5krrM0bDdDAHksrMEwvG3UnkVS8cGuCD9AautV Ppc0N/TMPFvIkpCnJ3hVnStcza61YhXOvh7NfJ9ZjFzgI2MrSuAGCsEJtFyX6JAh 8nuZ8A5E64hRxUvM0L6j58pdGycjxV+Oe1rr1+8j5s4eC4xyAfD6F6RGWsZB+PH2 SAW0me9RNamNiEa5HmO+ObPbMvv4tU4LT7yyv3s3lnYgCZhVYkdBt9FE+6k8Ojwf VSp0B9AEOw6FcqtdN9oPwakDjBy1BFhSlNA/NWT1MsLBnWuVhr9Rg5UybyzhYgEN PMltZXfkxAHZyMDfihsOh2aeeG8Ug4Lz -----END CERTIFICATE-----Generated at Thu Jul 3 09:53:12 2025 by rpki-client