$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json) Hash identifier: 7Y71nLGK4z60oQS2m34RMVOXEHMQhFtq31JheRtlKWw= Subject key identifier: E5:57:5C:1D:AC:AD:67:1B:0A:9B:23:A6:33:85:CD:A3:4A:B5:CA:E6 Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Certificate serial: 079E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft Manifest number: 0798 Signing time: Fri 30 May 2025 21:32:41 +0000 Manifest this update: Fri 30 May 2025 21:32:41 +0000 Manifest next update: Fri 06 Jun 2025 21:32:41 +0000 Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: vdZmW8h/nYf0PX2r7E0MkeuqsFEOCybSBE6XRNgDl6E=) 2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: J9GQPP4a7clIhGgoBAM9KLX43lz+eBaMPakWPFWVHmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1950 (0x79e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Validity Not Before: May 30 21:32:41 2025 GMT Not After : Jun 6 21:32:41 2025 GMT Subject: CN=683a23f9-b365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:98:d7:7a:a0:de:1d:49:ab:c4:c4:7c:4a: f4:08:8b:c7:0d:a9:35:52:5c:d8:5e:9e:61:39:20: 5d:82:f5:22:75:c3:bf:a3:7a:d3:7e:86:40:7e:e9: 7d:c8:f6:3c:d0:a9:12:79:43:6f:4b:d8:e5:bd:fb: bd:2b:4e:41:2c:65:b2:5f:98:08:14:5a:fa:4c:4d: f9:37:3f:2a:d3:b6:b3:cc:37:52:05:c7:26:cd:01: 4b:be:57:2c:be:93:06:ef:8a:7b:5e:f8:c9:4a:14: cd:df:59:73:00:46:46:2f:47:2f:31:f7:85:40:cd: 9c:75:5d:28:af:36:9d:00:78:d2:f3:cd:c2:e2:22: 4a:7b:a6:b2:2f:c7:58:9f:80:d9:43:fb:33:39:07: dd:87:0a:73:19:f2:3f:aa:74:06:7e:ba:a8:63:02: 76:62:0f:d4:61:99:c5:68:47:cb:4d:81:85:b9:9d: 14:d7:ff:b4:b1:e4:e0:55:4a:dc:a2:17:11:01:ce: ca:7d:bf:ac:e9:4d:77:4f:87:63:3a:d0:ea:b8:ac: 45:32:8c:08:9a:78:0a:6c:a6:11:ac:70:a0:61:a3: 47:56:82:44:f2:76:ad:9a:97:41:3f:7d:3c:72:ac: c7:15:41:37:20:63:7f:dd:04:4f:52:a7:90:b9:a0: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:57:5C:1D:AC:AD:67:1B:0A:9B:23:A6:33:85:CD:A3:4A:B5:CA:E6 X509v3 Authority Key Identifier: keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:1b:e7:05:34:b1:0a:79:b7:54:13:54:e5:ca:a8:04:5b:8f: 7f:38:dc:53:fb:e1:7c:95:d0:e5:4e:62:e0:40:4c:fd:58:e4: ed:f8:90:be:4b:79:22:e5:70:cf:48:d1:54:31:a7:39:57:a0: 40:1d:ec:f0:15:02:c2:8a:79:df:b8:6e:3c:7d:89:b8:9c:ce: 3d:1d:29:72:c5:30:7d:61:6b:c5:86:41:e2:41:12:81:1a:e7: 73:eb:52:20:1d:34:65:94:ca:38:b7:61:97:53:f0:57:9b:05: 6e:05:e2:98:13:da:a3:b9:f9:ba:8a:88:22:51:7d:ea:8f:37: 4f:60:d4:d8:aa:f3:d0:de:a5:5d:fe:76:ea:9b:0a:7d:06:69: 52:53:95:e3:d9:81:30:6f:64:5a:af:d0:08:7e:c2:26:37:50: ad:aa:0c:cb:d5:7c:2a:72:d3:5b:9e:ef:32:67:b8:82:85:33: 48:1f:1c:83:b9:9a:eb:ae:50:d3:6a:21:3d:17:ae:55:22:fd: 90:ea:b3:2f:64:fc:4e:51:d0:f2:e5:9c:76:70:4f:18:59:9c: 2d:bb:e0:9f:07:e8:af:83:53:eb:bf:15:04:39:04:48:da:6a: 50:b4:7f:a1:f2:fb:cd:c7:db:76:81:a8:1c:9f:69:d3:fc:ef: 3e:aa:53:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4 RjY3MTQ3QjAwHhcNMjUwNTMwMjEzMjQxWhcNMjUwNjA2MjEzMjQxWjAYMRYwFAYD VQQDEw02ODNhMjNmOS1iMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzeY13qg3h1Jq8TEfEr0CIvHDak1UlzYXp5hOSBdgvUidcO/o3rTfoZAful9 yPY80KkSeUNvS9jlvfu9K05BLGWyX5gIFFr6TE35Nz8q07azzDdSBccmzQFLvlcs vpMG74p7XvjJShTN31lzAEZGL0cvMfeFQM2cdV0orzadAHjS883C4iJKe6ayL8dY n4DZQ/szOQfdhwpzGfI/qnQGfrqoYwJ2Yg/UYZnFaEfLTYGFuZ0U1/+0seTgVUrc ohcRAc7Kfb+s6U13T4djOtDquKxFMowImngKbKYRrHCgYaNHVoJE8natmpdBP308 cqzHFUE3IGN/3QRPUqeQuaDgSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVXXB2s rWcbCpsjpjOFzaNKtcrmMB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4 NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ4OS9DNkE0QTVFMjA4NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtu RmVRVGJwdW9Wcm1QWnhSN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXG+cFNLEKebdUE1TlyqgEW49/ONxT++F8ldDlTmLgQEz9WOTt+JC+ S3ki5XDPSNFUMac5V6BAHezwFQLCinnfuG48fYm4nM49HSlyxTB9YWvFhkHiQRKB Gudz61IgHTRllMo4t2GXU/BXmwVuBeKYE9qjufm6iogiUX3qjzdPYNTYqvPQ3qVd /nbqmwp9BmlSU5Xj2YEwb2Rar9AIfsImN1CtqgzL1XwqctNbnu8yZ7iChTNIHxyD uZrrrlDTaiE9F65VIv2Q6rMvZPxOUdDy5Zx2cE8YWZwtu+CfB+ivg1PrvxUEOQRI 2mpQtH+h8vvNx9t2gagcn2nT/O8+qlPw -----END CERTIFICATE-----Generated at Sat May 31 17:39:21 2025 by rpki-client