$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json) Hash identifier: O7kBAqN3xqBHUkvw+K9GMSD/y1iiE3ECVzVZaiJ8YnE= Subject key identifier: 55:39:AE:53:66:53:1E:FA:75:F5:AA:A4:F5:CF:E5:BE:64:B5:0A:25 Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Certificate serial: 07D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft Manifest number: 07CB Signing time: Sat 06 Sep 2025 21:25:23 +0000 Manifest this update: Sat 06 Sep 2025 21:25:23 +0000 Manifest next update: Sat 13 Sep 2025 21:25:23 +0000 Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: g6KcKaqG0GPhzvXyrLKukM/vFGncKpX+rbBvCxcVZJk=) 2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: J9GQPP4a7clIhGgoBAM9KLX43lz+eBaMPakWPFWVHmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Validity Not Before: Sep 6 21:25:23 2025 GMT Not After : Sep 13 21:25:23 2025 GMT Subject: CN=68bca6c3-0cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:7a:d1:f1:33:2a:f6:d9:c5:35:b4:d7:8f: 8a:64:90:0d:85:ff:4c:7a:bd:ad:66:57:99:aa:a1: 76:42:f6:05:44:7a:54:22:8d:39:0a:b4:26:61:f5: 43:46:26:11:ba:74:84:ed:10:4f:fd:16:9d:66:64: df:cf:9e:9e:57:ee:85:8f:6f:f1:33:a5:20:f2:6e: dd:33:2b:a3:9a:34:dc:9f:73:07:59:93:62:c6:d9: fb:58:af:b5:55:47:a8:25:ca:1d:1f:a2:6d:ee:ae: a9:57:26:44:0b:05:c2:42:a2:47:be:4d:6d:01:11: 1d:43:03:dd:c5:77:a8:d7:e9:7b:03:07:5a:d1:6e: 60:f7:cb:19:30:2d:2b:03:58:31:34:4a:f4:6f:6f: c9:af:26:e9:65:bc:27:49:d6:52:32:a9:b2:f9:2b: f3:b9:2b:1c:1f:4e:ba:41:33:0e:3b:ab:ce:12:09: 48:e1:e6:aa:14:8c:78:f5:83:de:37:e9:dc:16:89: f1:f8:b2:30:f0:1f:b4:b7:65:fe:2f:b7:be:bc:ad: 86:06:28:0e:94:86:51:49:83:56:2e:22:a7:25:a6: 16:98:4b:b5:e6:a0:1e:17:9e:95:38:e9:7f:78:b8: 59:27:ca:1f:ba:dc:ad:71:7d:7e:d3:13:24:ff:0d: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:39:AE:53:66:53:1E:FA:75:F5:AA:A4:F5:CF:E5:BE:64:B5:0A:25 X509v3 Authority Key Identifier: keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:98:c5:7f:4f:95:66:50:e8:57:a7:b3:39:bc:b7:75:a5:66: 35:0f:44:35:06:f2:74:63:ab:cd:4a:41:08:6b:9f:75:3e:fa: 4d:9a:14:af:2d:ea:02:de:92:c7:ea:62:7a:d0:8a:34:d0:e9: 87:a4:d7:36:00:7f:76:0d:c1:00:5d:42:b5:31:93:57:1f:8a: 4b:ca:4f:b8:fe:65:c5:73:d8:e0:fe:8d:9b:36:a5:4c:b3:e2: 72:14:fa:c3:a9:e2:13:e5:5d:76:d1:da:28:fd:e7:86:1c:71: 3c:35:86:d9:0b:d1:24:41:c9:68:d7:bb:35:5a:f2:e0:18:19: fd:71:d1:ff:e6:09:99:de:c6:f1:f8:d1:68:eb:0c:7d:87:e9: 72:f5:1b:b0:a4:c2:b6:fe:e5:6b:b4:94:c4:71:bb:45:8e:8c: 64:cb:62:1f:d7:0c:c7:fd:cb:95:d3:d0:56:29:4c:29:f9:db: 41:6e:ac:65:47:60:12:45:50:50:36:50:40:c3:e1:01:1d:89: a1:da:7d:16:bc:75:af:8e:47:a0:3d:42:02:05:97:db:bf:e3: 64:88:fe:ce:61:04:fa:8a:8f:8e:10:cd:b5:fd:d2:e9:33:53: 22:20:57:68:68:3e:47:a9:9b:91:8c:65:a5:23:86:80:88:40: 09:8a:34:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4 RjY3MTQ3QjAwHhcNMjUwOTA2MjEyNTIzWhcNMjUwOTEzMjEyNTIzWjAYMRYwFAYD VQQDEw02OGJjYTZjMy0wY2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYh60fEzKvbZxTW014+KZJANhf9Mer2tZleZqqF2QvYFRHpUIo05CrQmYfVD RiYRunSE7RBP/RadZmTfz56eV+6Fj2/xM6Ug8m7dMyujmjTcn3MHWZNixtn7WK+1 VUeoJcodH6Jt7q6pVyZECwXCQqJHvk1tAREdQwPdxXeo1+l7Awda0W5g98sZMC0r A1gxNEr0b2/JrybpZbwnSdZSMqmy+SvzuSscH066QTMOO6vOEglI4eaqFIx49YPe N+ncFonx+LIw8B+0t2X+L7e+vK2GBigOlIZRSYNWLiKnJaYWmEu15qAeF56VOOl/ eLhZJ8ofutytcX1+0xMk/w3hZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFU5rlNm Ux76dfWqpPXP5b5ktQolMB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4 NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ4OS9DNkE0QTVFMjA4NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtu RmVRVGJwdW9Wcm1QWnhSN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBmMV/T5VmUOhXp7M5vLd1pWY1D0Q1BvJ0Y6vNSkEIa591PvpNmhSv LeoC3pLH6mJ60Io00OmHpNc2AH92DcEAXUK1MZNXH4pLyk+4/mXFc9jg/o2bNqVM s+JyFPrDqeIT5V120doo/eeGHHE8NYbZC9EkQclo17s1WvLgGBn9cdH/5gmZ3sbx +NFo6wx9h+ly9RuwpMK2/uVrtJTEcbtFjoxky2If1wzH/cuV09BWKUwp+dtBbqxl R2ASRVBQNlBAw+EBHYmh2n0WvHWvjkegPUICBZfbv+NkiP7OYQT6io+OEM21/dLp M1MiIFdoaD5HqZuRjGWlI4aAiEAJijRz -----END CERTIFICATE-----Generated at Sun Sep 7 14:33:09 2025 by rpki-client