$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: DotPV74a5ojOEkJBDWwa7pSOuGrX9ysnTsXNSXBsVSE= Subject key identifier: 50:38:8D:4C:22:56:32:01:8F:3D:1E:F0:5C:9D:BE:E9:41:84:2E:FA Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 029B Signing time: Sat 19 Jul 2025 02:18:51 +0000 Manifest this update: Sat 19 Jul 2025 02:18:50 +0000 Manifest next update: Sat 26 Jul 2025 02:18:50 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: UDvu5sQw5qgI7N+yOXxUWpvB2cIdedshHf1YM37rzjc=) 2: 38564246ABFB11EFAC5AA210C4F9AE02.roa (hash: leXSAp3oCJ+aQKw6LIPf99YutYgWlqAVbeE3hdBAn58=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: bA7L+jGDZGEL0erGUM3EYZdvPilaftv3/Gg8hdqNMPM=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Jul 19 02:18:50 2025 GMT Not After : Jul 26 02:18:50 2025 GMT Subject: CN=687b008b-f84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:51:d7:b8:d2:d5:0d:15:a0:94:6b:87:7e: 48:37:17:76:2a:9e:e6:19:a9:d6:2c:13:ea:3f:0a: 55:c5:e4:79:c8:be:f8:40:60:dd:e0:96:f6:56:0b: c3:bb:7d:e2:4d:a9:e8:03:e3:15:4f:20:5a:08:d5: 29:c6:69:27:a7:13:b8:af:cd:c2:35:73:b1:0a:bf: 4b:58:3d:74:70:f7:82:e5:2b:f3:9d:78:45:f5:4a: ae:1b:ad:d4:dc:0b:a7:1f:56:3e:c0:f0:84:f9:c8: f7:98:a4:69:6b:6c:c3:07:5a:bc:c6:0f:ec:e0:78: b2:e7:4a:89:8b:3a:84:de:b8:f8:17:5f:67:a2:b1: 31:2f:7e:59:f9:c6:c6:2c:d2:c4:43:3b:73:56:c1: 4f:ef:c5:0e:6b:4e:b5:ac:34:c9:6b:08:a8:ee:87: b4:30:5f:2b:94:94:a0:5b:d4:95:6b:16:ee:b2:3b: 3a:40:f4:24:21:12:09:d6:c8:ba:d3:44:d9:bb:b2: a0:ff:32:02:6b:73:0f:e3:6c:31:b7:64:b3:ab:f7: 39:df:92:74:91:53:90:15:98:1b:29:67:d7:77:98: 68:65:6f:0a:c4:6b:48:81:ec:6b:53:a4:a2:32:6f: 94:f4:20:b2:66:07:0d:ab:a8:b6:08:20:17:0b:3f: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:38:8D:4C:22:56:32:01:8F:3D:1E:F0:5C:9D:BE:E9:41:84:2E:FA X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:38:9c:75:67:9d:28:24:30:59:39:3c:ea:5e:ca:8b:f9:32: c6:79:49:77:05:bd:bc:02:5f:3d:2a:43:ff:ba:91:ae:18:59: d3:74:59:00:45:72:8c:ef:ac:a9:86:43:5b:f2:39:ce:61:6f: 87:8d:59:6a:ed:41:1e:f6:86:86:f7:9b:08:d2:4b:7e:ad:e7: fa:7b:ae:6e:fa:b7:32:d8:d4:b9:7a:46:c4:ce:94:70:09:fc: 71:32:1d:e8:5d:a1:8c:35:37:61:54:16:3b:d2:fc:29:cc:60: 38:22:46:bd:9a:7b:3a:53:80:c7:5d:1f:25:a2:f1:7a:79:4e: be:a9:96:0d:62:be:42:ee:c2:bb:92:a4:e0:79:23:ab:b0:b5: 55:b3:70:5c:8d:20:af:47:a9:26:84:22:47:8a:14:0c:b5:f9: 73:08:89:76:e1:c2:a5:e1:d2:3c:0e:92:1a:9d:ba:8d:14:a2: af:67:90:fe:7d:28:d0:83:42:ae:96:97:a8:81:62:7b:7f:c0: d4:00:b0:2d:8d:c2:01:7a:24:96:2e:d7:d5:a8:c2:a7:3d:b5: a9:6c:d2:af:5c:8c:da:00:9f:24:3d:15:f8:a2:c7:6d:48:41: a7:fe:8e:7b:21:23:df:f9:34:ba:36:c4:e3:75:d7:8e:37:3c: a7:b7:0b:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwNzE5MDIxODUwWhcNMjUwNzI2MDIxODUwWjAYMRYwFAYD VQQDEw02ODdiMDA4Yi1mODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/xR17jS1Q0VoJRrh35INxd2Kp7mGanWLBPqPwpVxeR5yL74QGDd4Jb2VgvD u33iTanoA+MVTyBaCNUpxmknpxO4r83CNXOxCr9LWD10cPeC5SvznXhF9UquG63U 3AunH1Y+wPCE+cj3mKRpa2zDB1q8xg/s4Hiy50qJizqE3rj4F19norExL35Z+cbG LNLEQztzVsFP78UOa061rDTJawio7oe0MF8rlJSgW9SVaxbusjs6QPQkIRIJ1si6 00TZu7Kg/zICa3MP42wxt2Szq/c535J0kVOQFZgbKWfXd5hoZW8KxGtIgexrU6Si Mm+U9CCyZgcNq6i2CCAXCz/+RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFA4jUwi VjIBjz0e8FydvulBhC76MB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLOJx1Z50oJDBZOTzqXsqL+TLGeUl3Bb28Al89KkP/upGuGFnTdFkA RXKM76yphkNb8jnOYW+HjVlq7UEe9oaG95sI0kt+ref6e65u+rcy2NS5ekbEzpRw CfxxMh3oXaGMNTdhVBY70vwpzGA4Ika9mns6U4DHXR8lovF6eU6+qZYNYr5C7sK7 kqTgeSOrsLVVs3BcjSCvR6kmhCJHihQMtflzCIl24cKl4dI8DpIanbqNFKKvZ5D+ fSjQg0KulpeogWJ7f8DUALAtjcIBeiSWLtfVqMKnPbWpbNKvXIzaAJ8kPRX4osdt SEGn/o57ISPf+TS6NsTjddeONzyntws9 -----END CERTIFICATE-----Generated at Sun Jul 20 15:14:11 2025 by rpki-client