$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: vxxttDu/D0U+8Ku+NAPiYjXnr8EA0QUYcnj9TqIG9Bc= Subject key identifier: B9:6C:42:1A:AE:FD:76:4E:1E:FA:55:90:D7:FB:D4:E9:D3:F5:71:25 Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 019C Signing time: Mon 09 Jun 2025 02:36:43 +0000 Manifest this update: Mon 09 Jun 2025 02:36:43 +0000 Manifest next update: Mon 16 Jun 2025 02:36:43 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: Q2zxcbzURGWXXaIFWmxwbodGHKo6PTQCogc67SPg80Q=) 2: E761FB80118C11F0B9B8B26AC4F9AE02.roa (hash: /75uDbvkq2hvW+aFsSWLKYWGONv7oOopY70G/Ex1fRM=) 3: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: PhSrarlCbMwPtvT6PCvMaDG4Ioq8bEIWBn8LLBxKEUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 02:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Jun 9 02:36:43 2025 GMT Not After : Jun 16 02:36:43 2025 GMT Subject: CN=684648bb-d3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:48:eb:61:66:cc:e1:82:ee:8b:c5:18:85: 69:76:50:14:88:2e:03:40:ef:8a:21:93:73:ce:46: 2a:0d:8c:dc:48:9b:61:17:dc:dc:35:52:35:1d:b4: 5d:ce:6a:69:55:90:74:8c:03:a3:48:8e:33:b9:85: 93:9f:ec:66:7c:5d:a0:fb:1a:ca:fa:87:6a:6c:c2: 33:8b:48:87:d3:8f:93:d9:1c:86:9a:c3:ef:00:77: ba:66:a5:1f:64:9f:77:9f:ef:10:b8:c0:bc:bf:96: 81:f9:09:d8:00:c3:08:49:a4:17:cd:18:c8:56:71: c8:9e:c8:7a:33:04:81:8c:e8:44:82:ed:d5:ad:24: a3:58:ca:89:58:c7:d2:cd:d4:18:38:5e:14:f7:7e: d7:5a:74:b0:34:db:fe:7f:1c:6d:ae:a3:1c:97:cd: 52:98:2a:79:21:a7:8a:16:b3:3f:79:44:ae:af:93: 5b:d1:bb:80:25:27:bd:4c:09:76:22:2b:ea:6d:81: 49:2c:13:a0:81:65:08:c1:46:7a:fa:b1:71:6c:83: 41:2f:dc:de:d6:91:d5:3e:99:41:94:95:8b:ea:b6: 40:42:0c:97:17:4a:10:1d:a2:45:0b:08:09:fc:dd: eb:9e:42:91:fc:87:07:85:da:d1:5f:05:37:f0:46: c2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6C:42:1A:AE:FD:76:4E:1E:FA:55:90:D7:FB:D4:E9:D3:F5:71:25 X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ce:3b:b1:0b:e0:75:96:0e:78:01:f2:2d:ac:c9:e9:95:10: 29:a2:2c:aa:05:a8:8d:33:27:e8:33:3d:34:fc:08:7a:2a:c1: 70:19:a4:78:d9:14:97:e2:65:53:a6:74:30:d5:a0:27:34:ea: 0c:3d:14:f5:92:71:e6:28:b9:97:ee:18:9e:e2:1f:aa:b2:1e: 58:37:93:ef:00:65:b8:56:d2:96:90:4b:aa:38:89:a3:c6:e7: 4d:c5:bb:92:38:e8:e8:d3:4c:21:c9:e9:6e:dc:f5:90:ae:6e: 48:09:a2:b5:ba:a4:e5:2f:51:bf:ac:2c:90:15:cd:b6:2b:45: ea:5f:2a:a8:f7:b8:67:0d:f1:05:4d:e4:01:c4:ef:fe:bc:c7: 53:27:24:45:63:40:03:a5:be:47:88:7c:1f:1c:79:d9:52:b9: df:15:07:b7:cf:cc:63:63:f7:08:66:72:64:f7:6e:5c:fd:f3: a7:92:f9:3d:44:84:b0:29:c6:b2:64:45:21:56:69:53:94:16: 94:5a:1a:95:04:4c:34:d0:ef:94:63:dc:f2:55:d8:71:ac:9a: 7b:06:91:d6:4a:ba:18:59:e4:d8:0d:83:17:95:3a:f4:8c:f3: f7:dc:b3:54:90:87:e6:40:59:d8:d5:ad:a4:68:e7:32:8d:2f: 2a:31:45:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjUwNjA5MDIzNjQzWhcNMjUwNjE2MDIzNjQzWjAYMRYwFAYD VQQDEw02ODQ2NDhiYi1kM2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjBI62FmzOGC7ovFGIVpdlAUiC4DQO+KIZNzzkYqDYzcSJthF9zcNVI1HbRd zmppVZB0jAOjSI4zuYWTn+xmfF2g+xrK+odqbMIzi0iH04+T2RyGmsPvAHe6ZqUf ZJ93n+8QuMC8v5aB+QnYAMMISaQXzRjIVnHInsh6MwSBjOhEgu3VrSSjWMqJWMfS zdQYOF4U937XWnSwNNv+fxxtrqMcl81SmCp5IaeKFrM/eUSur5Nb0buAJSe9TAl2 IivqbYFJLBOggWUIwUZ6+rFxbINBL9ze1pHVPplBlJWL6rZAQgyXF0oQHaJFCwgJ /N3rnkKR/IcHhdrRXwU38EbCxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlsQhqu /XZOHvpVkNf71OnT9XElMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8zjuxC+B1lg54AfItrMnplRApoiyqBaiNMyfoMz00/Ah6KsFwGaR4 2RSX4mVTpnQw1aAnNOoMPRT1knHmKLmX7hie4h+qsh5YN5PvAGW4VtKWkEuqOImj xudNxbuSOOjo00whyelu3PWQrm5ICaK1uqTlL1G/rCyQFc22K0XqXyqo97hnDfEF TeQBxO/+vMdTJyRFY0ADpb5HiHwfHHnZUrnfFQe3z8xjY/cIZnJk925c/fOnkvk9 RISwKcayZEUhVmlTlBaUWhqVBEw00O+UY9zyVdhxrJp7BpHWSroYWeTYDYMXlTr0 jPP33LNUkIfmQFnY1a2kaOcyjS8qMUUM -----END CERTIFICATE-----Generated at Tue Jun 10 12:06:10 2025 by rpki-client