$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: DNF3AmxfndbIg1KAc+dTBj/fkKy1aP8VIXXizblM+ME= Subject key identifier: 2A:5A:CA:42:10:7E:E6:44:A5:94:05:EA:7E:7D:A5:9B:26:1E:F6:FB Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 0267 Signing time: Fri 16 May 2025 06:13:19 +0000 Manifest this update: Fri 16 May 2025 06:13:18 +0000 Manifest next update: Fri 23 May 2025 06:13:18 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: /dxmJ63azF8PlZYjqx3haYfKYYDoiL7Ez6/3x3pbmcs=) 2: 38564246ABFB11EFAC5AA210C4F9AE02.roa (hash: JriK+smlaeVNSW2hV9/c5iJWYkLO3JJdybfB3HlZ3ec=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: 2M0t54ZWVSyH7zW4xiy91/NSsBSKVlPooU2mIewxcFg=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: rfdeiioOombk9ugXAhar8jfxVQvhaRByjypcJo5xwas=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: UkKPKDbs79xP57ZHa6k5ILf6dW2MqCjXbsvbl/lq8hg=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: 8uCs5a5eLk7Ncqt7vpJ0jpqLXEXaJ1qSV8aFHl3ul6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 06:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: May 16 06:13:18 2025 GMT Not After : May 23 06:13:18 2025 GMT Subject: CN=6826d77e-be53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:72:8d:9d:95:8f:46:f5:8e:5c:73:02:9f: 1b:9a:58:f9:ee:ec:09:e6:91:36:1c:82:73:b2:95: 9e:10:db:9c:68:26:2e:f4:b7:ae:05:9f:5d:48:d4: b8:ca:18:52:c9:ee:b2:10:c7:15:26:95:b9:b1:b4: bd:7f:7f:87:dc:28:7a:eb:de:eb:b5:14:4e:d6:e9: c3:7c:09:ef:b4:ec:d3:bd:3b:bf:cc:02:74:38:e0: 47:d3:b9:ca:fa:a7:4f:be:9a:a0:21:3d:4f:f3:00: b4:58:33:23:56:89:62:88:56:22:ab:fe:ad:87:d9: 50:c4:83:8c:93:1f:71:04:09:0e:12:59:74:01:7a: d3:a1:0f:a9:22:5b:5a:c1:86:b6:ca:38:0e:23:01: 6d:82:42:a0:58:41:fa:56:66:5b:e6:96:33:a1:b8: 55:d9:ba:ce:59:dd:34:0e:26:ef:a5:85:5e:c0:27: db:af:49:18:fe:67:1e:b4:24:3c:31:91:aa:59:16: 60:65:ca:ba:19:8c:bb:98:cc:98:c1:68:c9:98:41: 1b:40:2d:c2:8d:38:0b:95:bf:ff:90:73:21:d7:27: 65:c1:8b:84:db:df:12:e2:e6:44:ab:e3:9e:c8:89: 29:21:b1:d0:f8:d4:a4:34:00:92:88:b5:37:23:29: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5A:CA:42:10:7E:E6:44:A5:94:05:EA:7E:7D:A5:9B:26:1E:F6:FB X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:77:b1:08:68:f9:0a:9b:7f:69:71:18:f8:de:30:4d:ff:ee: cd:b6:c6:0f:13:f7:2c:ee:9f:a5:18:d2:a2:6b:95:2e:b0:4a: 71:86:19:07:9c:a2:77:2c:99:40:9e:d8:52:ed:04:6f:08:0e: 1b:28:16:98:40:18:65:42:88:87:6f:e3:43:c6:63:a6:37:8c: 76:57:20:e3:96:49:0f:e7:25:ed:4f:4c:46:de:04:25:24:ef: 9e:db:c9:37:11:31:52:44:87:b7:68:ab:f9:73:9d:4a:1d:a0: 81:b1:59:e3:12:c7:78:d9:7f:9c:4d:0b:d8:1b:11:6c:a1:b6: 8a:37:80:1e:87:f4:d1:9e:43:78:89:34:bf:61:9f:4d:d9:ad: c8:77:c4:49:17:82:88:7f:30:66:33:c0:b0:35:94:62:f6:0c: 73:88:20:82:b3:2f:bd:61:39:16:3f:93:79:11:b9:69:1a:8e: db:e9:16:68:13:69:98:0f:2c:35:33:91:ab:ef:8c:77:a0:9f: b7:3e:78:10:3a:be:ad:05:d1:4c:f3:f4:de:e4:4a:4b:d3:95: 20:42:6b:20:04:74:4e:9e:3e:7e:6d:0d:42:41:a3:5e:e7:95: a2:ef:66:3d:53:25:6b:31:ba:4f:3f:c1:c1:4a:e8:e1:c3:67: e9:a2:d3:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwNTE2MDYxMzE4WhcNMjUwNTIzMDYxMzE4WjAYMRYwFAYD VQQDEw02ODI2ZDc3ZS1iZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviFyjZ2Vj0b1jlxzAp8bmlj57uwJ5pE2HIJzspWeENucaCYu9LeuBZ9dSNS4 yhhSye6yEMcVJpW5sbS9f3+H3Ch6697rtRRO1unDfAnvtOzTvTu/zAJ0OOBH07nK +qdPvpqgIT1P8wC0WDMjVoliiFYiq/6th9lQxIOMkx9xBAkOEll0AXrToQ+pIlta wYa2yjgOIwFtgkKgWEH6VmZb5pYzobhV2brOWd00DibvpYVewCfbr0kY/mcetCQ8 MZGqWRZgZcq6GYy7mMyYwWjJmEEbQC3CjTgLlb//kHMh1ydlwYuE298S4uZEq+Oe yIkpIbHQ+NSkNACSiLU3IylM6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpaykIQ fuZEpZQF6n59pZsmHvb7MB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzd7EIaPkKm39pcRj43jBN/+7NtsYPE/cs7p+lGNKia5UusEpxhhkH nKJ3LJlAnthS7QRvCA4bKBaYQBhlQoiHb+NDxmOmN4x2VyDjlkkP5yXtT0xG3gQl JO+e28k3ETFSRIe3aKv5c51KHaCBsVnjEsd42X+cTQvYGxFsobaKN4Aeh/TRnkN4 iTS/YZ9N2a3Id8RJF4KIfzBmM8CwNZRi9gxziCCCsy+9YTkWP5N5EblpGo7b6RZo E2mYDyw1M5Gr74x3oJ+3PngQOr6tBdFM8/Te5EpL05UgQmsgBHROnj5+bQ1CQaNe 55Wi72Y9UyVrMbpPP8HBSujhw2fpotPv -----END CERTIFICATE-----Generated at Fri May 16 18:59:00 2025 by rpki-client