$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: Oh7zpRxmflqXubBc/kyWghVPfcKl+tX7ubOi9sK7fCc= Subject key identifier: 03:2B:87:D6:2B:BF:31:A9:4C:B9:35:3C:0D:37:9C:FE:1F:17:19:0C Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 01C2 Signing time: Sat 23 Aug 2025 03:13:23 +0000 Manifest this update: Sat 23 Aug 2025 03:13:22 +0000 Manifest next update: Sat 30 Aug 2025 03:13:22 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: xFTfBtEezKI/3hICAGnQ1XJ74+wN3rCuM2waASvfUVs=) 2: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: PhSrarlCbMwPtvT6PCvMaDG4Ioq8bEIWBn8LLBxKEUI=) 3: E761FB80118C11F0B9B8B26AC4F9AE02.roa (hash: /75uDbvkq2hvW+aFsSWLKYWGONv7oOopY70G/Ex1fRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Aug 23 03:13:22 2025 GMT Not After : Aug 30 03:13:22 2025 GMT Subject: CN=68a931d3-1aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:24:b1:7e:3f:9f:33:54:f3:31:e8:06:f4: 2a:fe:f3:1d:c7:16:19:c6:51:d9:c1:74:39:13:2b: dc:5b:ad:b0:b3:92:b5:ac:3a:e9:fd:ea:03:24:41: 80:72:e2:d1:7e:5a:aa:fd:ba:e3:66:63:a2:0d:5a: ee:97:a0:39:1a:2e:36:8d:d5:5b:5a:34:33:a9:2f: f7:b1:b2:04:bc:84:a6:d3:c7:e6:ac:89:e7:97:60: 11:07:21:03:6a:f4:a0:1d:60:20:ca:77:c0:68:7e: 8c:54:b3:e8:c6:d1:2c:c4:80:0a:86:65:be:e3:05: 18:fa:6c:36:d5:75:8b:d0:21:c0:d6:dc:dd:6d:a7: 69:ff:22:5e:1c:d9:98:a9:6d:de:84:b5:4b:fe:bc: a8:72:5e:ec:9b:cb:e8:0d:ac:1e:36:0f:27:38:e9: c8:85:56:9f:85:d8:93:27:a6:db:1b:51:c9:4d:20: 17:d2:60:58:57:f7:3c:b8:88:1f:07:97:48:c4:57: 16:59:47:dc:c7:1d:78:2e:27:26:6a:23:a8:04:f9: 85:97:4b:d6:b5:38:18:bd:81:73:63:9e:7d:48:66: 3f:e9:db:fd:e8:6d:a7:5e:c9:5d:31:fe:39:a1:a6: 5c:22:ea:db:f9:e7:b8:b1:24:0f:c6:9c:db:6a:f4: 61:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2B:87:D6:2B:BF:31:A9:4C:B9:35:3C:0D:37:9C:FE:1F:17:19:0C X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ad:91:9e:f0:9b:b8:4b:09:a6:58:89:96:ca:39:5e:2f:56: 62:30:5a:a3:8b:e3:c4:39:a4:72:8d:db:32:24:8a:b9:f3:aa: f7:58:bc:7d:75:25:25:95:c5:57:b0:03:aa:86:eb:d1:8a:c7: 62:3c:28:2f:97:a3:54:11:1b:89:4a:c2:69:32:6f:e6:2a:29: ba:90:62:bb:34:0b:de:bd:c8:76:62:08:31:97:64:bf:15:b0: fc:ca:f3:49:ef:1b:6a:ac:6c:d2:e2:7f:e2:4d:c2:f8:09:35: 18:f1:09:33:6a:d1:40:bf:8d:9d:cc:59:a6:ca:c7:26:52:cf: ed:27:14:28:c0:84:31:37:6e:1a:ab:20:76:02:3d:9b:2c:b1: e4:69:b9:b5:9e:9d:a4:2b:e1:47:3b:c3:82:50:dd:4c:c2:78: 80:62:bc:d4:78:3e:45:2a:aa:f6:73:0f:87:1f:b3:79:49:f2: 08:b8:7a:77:dd:61:d2:d8:65:df:69:3c:55:c6:66:41:39:a8: e3:4c:c1:20:31:0a:ee:e1:3a:85:cc:a8:b9:fb:ed:37:fd:9c: af:de:ae:68:7f:51:8f:34:42:ed:23:39:a9:7a:91:82:83:54: 5f:af:2e:df:36:12:b7:7b:73:e9:47:4e:e4:a5:47:ac:6a:48: 90:94:96:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjUwODIzMDMxMzIyWhcNMjUwODMwMDMxMzIyWjAYMRYwFAYD VQQDEw02OGE5MzFkMy0xYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi8ksX4/nzNU8zHoBvQq/vMdxxYZxlHZwXQ5EyvcW62ws5K1rDrp/eoDJEGA cuLRflqq/brjZmOiDVrul6A5Gi42jdVbWjQzqS/3sbIEvISm08fmrInnl2ARByED avSgHWAgynfAaH6MVLPoxtEsxIAKhmW+4wUY+mw21XWL0CHA1tzdbadp/yJeHNmY qW3ehLVL/ryocl7sm8voDaweNg8nOOnIhVafhdiTJ6bbG1HJTSAX0mBYV/c8uIgf B5dIxFcWWUfcxx14LicmaiOoBPmFl0vWtTgYvYFzY559SGY/6dv96G2nXsldMf45 oaZcIurb+ee4sSQPxpzbavRhpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMrh9Yr vzGpTLk1PA03nP4fFxkMMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLrZGe8Ju4SwmmWImWyjleL1ZiMFqji+PEOaRyjdsyJIq586r3WLx9 dSUllcVXsAOqhuvRisdiPCgvl6NUERuJSsJpMm/mKim6kGK7NAvevch2Yggxl2S/ FbD8yvNJ7xtqrGzS4n/iTcL4CTUY8QkzatFAv42dzFmmyscmUs/tJxQowIQxN24a qyB2Aj2bLLHkabm1np2kK+FHO8OCUN1MwniAYrzUeD5FKqr2cw+HH7N5SfIIuHp3 3WHS2GXfaTxVxmZBOajjTMEgMQru4TqFzKi5++03/Zyv3q5of1GPNELtIzmpepGC g1Rfry7fNhK3e3PpR07kpUesakiQlJa7 -----END CERTIFICATE-----Generated at Sun Aug 24 21:42:39 2025 by rpki-client