$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: u0qmqF7KZWFcZ9RrfxHL6nKBumo/401wR0kD1TIFi3w= Subject key identifier: 32:28:C5:4C:DF:B1:31:D1:7A:36:C7:8F:ED:7E:8E:AB:94:EA:8A:3B Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 01E6 Signing time: Mon 03 Nov 2025 02:43:54 +0000 Manifest this update: Mon 03 Nov 2025 02:43:53 +0000 Manifest next update: Mon 10 Nov 2025 02:43:53 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: 7eDYHcnLzj6Q+Vkkqku/bNSumqXEg1WzCU9eBN1qoDA=) 2: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: PhSrarlCbMwPtvT6PCvMaDG4Ioq8bEIWBn8LLBxKEUI=) 3: E761FB80118C11F0B9B8B26AC4F9AE02.roa (hash: /75uDbvkq2hvW+aFsSWLKYWGONv7oOopY70G/Ex1fRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Nov 3 02:43:53 2025 GMT Not After : Nov 10 02:43:53 2025 GMT Subject: CN=690816ea-c931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:55:c0:95:6d:8f:1f:2b:1d:6e:b8:94:81: 7a:62:4e:34:b9:64:24:7f:df:6e:22:05:27:89:6f: 98:6c:70:61:a0:94:53:7a:9c:de:95:db:2b:4e:14: 6c:d0:43:07:d3:4f:45:57:06:f3:b4:ef:64:59:66: da:aa:ab:19:99:99:40:47:ef:e4:81:9f:36:30:8a: ae:41:2b:77:44:21:ef:35:be:33:c1:54:e3:0e:88: 95:3f:97:fb:41:0e:e5:2a:c2:b2:ae:4c:c9:5e:47: f9:40:d7:76:ae:1f:63:89:c4:9e:d0:a3:42:9c:73: d5:ab:7c:13:c4:00:39:4e:95:61:77:03:3e:8a:0b: 6b:11:cf:f2:7a:c7:33:1b:30:55:9b:b2:03:0a:43: 39:a6:c4:a8:14:82:5d:6a:8e:1a:c4:79:4e:1e:ef: 61:ae:a1:c5:45:e4:c6:ed:c8:c2:d3:3b:2f:43:06: b7:a0:e6:b0:46:82:96:44:18:34:a3:e2:6f:e5:25: 75:17:13:d9:ec:b9:a5:e7:1e:1d:65:d2:8a:bb:1b: d3:b1:d7:b8:65:a6:1c:fe:8d:dc:f2:4b:62:c7:5f: 5c:b3:c0:89:64:08:d5:7a:ec:6b:70:4c:9c:ef:54: e7:13:fe:73:33:f9:58:4b:0f:18:06:c6:d6:99:fe: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:28:C5:4C:DF:B1:31:D1:7A:36:C7:8F:ED:7E:8E:AB:94:EA:8A:3B X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ec:91:3b:0c:be:c8:06:b2:46:d8:69:81:de:b1:6d:86:f2: 9e:32:7b:a3:54:d1:07:62:17:39:65:a5:69:c1:6e:d7:3f:23: cf:a8:43:27:cf:8c:cd:6d:08:fb:ce:50:3f:ee:97:8f:61:cd: 1b:ad:21:66:35:d2:14:42:be:7b:16:40:8a:9b:eb:e6:4f:b3: 94:89:e9:1d:b6:9d:36:e0:d3:a0:5a:70:f1:71:8f:17:ad:c1: 90:50:b2:11:13:4a:2f:9c:c9:aa:5f:6f:15:84:1a:0d:bd:d5: 42:f5:3c:14:9d:32:c5:39:83:27:6f:73:b3:29:aa:66:fe:14: 30:40:f6:51:19:f5:e9:d0:70:d4:ce:12:b8:9b:a1:ba:35:8f: 5d:53:59:06:3d:b1:d9:a3:c2:f8:d9:23:ec:7b:9e:49:aa:03: d5:fe:73:e4:3c:47:d4:f7:e9:0b:bf:c3:de:8b:e3:09:9e:93: c1:8e:26:eb:3a:99:be:66:03:1b:f9:19:af:c3:1d:bf:5c:88: 94:3a:f9:fc:69:3e:ff:55:2a:15:73:fa:ca:23:58:aa:0c:18: bd:95:31:89:52:1e:23:35:6f:df:eb:b4:bc:7a:ab:7c:be:ec: 2c:30:2b:68:19:57:27:8c:16:8d:be:7d:e1:bf:9c:76:97:00: ad:af:2d:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjUxMTAzMDI0MzUzWhcNMjUxMTEwMDI0MzUzWjAYMRYwFAYD VQQDEw02OTA4MTZlYS1jOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+hVwJVtjx8rHW64lIF6Yk40uWQkf99uIgUniW+YbHBhoJRTepzeldsrThRs 0EMH009FVwbztO9kWWbaqqsZmZlAR+/kgZ82MIquQSt3RCHvNb4zwVTjDoiVP5f7 QQ7lKsKyrkzJXkf5QNd2rh9jicSe0KNCnHPVq3wTxAA5TpVhdwM+igtrEc/yescz GzBVm7IDCkM5psSoFIJdao4axHlOHu9hrqHFReTG7cjC0zsvQwa3oOawRoKWRBg0 o+Jv5SV1FxPZ7Lml5x4dZdKKuxvTsde4ZaYc/o3c8ktix19cs8CJZAjVeuxrcEyc 71TnE/5zM/lYSw8YBsbWmf4OyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIoxUzf sTHRejbHj+1+jquU6oo7MB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH7JE7DL7IBrJG2GmB3rFthvKeMnujVNEHYhc5ZaVpwW7XPyPPqEMn z4zNbQj7zlA/7pePYc0brSFmNdIUQr57FkCKm+vmT7OUiekdtp024NOgWnDxcY8X rcGQULIRE0ovnMmqX28VhBoNvdVC9TwUnTLFOYMnb3OzKapm/hQwQPZRGfXp0HDU zhK4m6G6NY9dU1kGPbHZo8L42SPse55JqgPV/nPkPEfU9+kLv8Pei+MJnpPBjibr Opm+ZgMb+Rmvwx2/XIiUOvn8aT7/VSoVc/rKI1iqDBi9lTGJUh4jNW/f67S8eqt8 vuwsMCtoGVcnjBaNvn3hv5x2lwCtry1H -----END CERTIFICATE-----Generated at Mon Nov 3 12:57:56 2025 by rpki-client