$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: TyGCB1L6F24bptmnmXCq+uYc9Tx7tNuuGaQoLAVdewo= Subject key identifier: 2A:F9:96:3D:B2:6B:B1:B2:D7:3F:B6:46:07:FD:28:85:70:A5:92:2C Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 0315 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 02CB Signing time: Sun 07 Sep 2025 02:13:12 +0000 Manifest this update: Sun 07 Sep 2025 02:13:12 +0000 Manifest next update: Sun 14 Sep 2025 02:13:12 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: 9/bU4FgEn+skTQNQRE/QJHMLsvf34DEyqa8HVXGv9G0=) 2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: 47mQF6PfDXtTIGLoH5wN3S2ft4gFnWfdQE9ZmrAM1zk=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Sep 7 02:13:12 2025 GMT Not After : Sep 14 02:13:12 2025 GMT Subject: CN=68bcea38-1f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:e6:9a:3d:84:e6:f8:f2:92:29:53:88:ed: 64:65:f6:24:4f:1c:21:e9:a2:81:c2:96:e8:a9:e8: e0:a9:b5:88:e1:6f:04:7d:54:fa:ad:a9:71:d8:3b: af:e0:91:27:6d:5b:b6:25:48:f8:b6:45:65:5c:ab: 58:17:03:12:a6:f4:6e:77:ea:bc:c7:07:61:86:8c: 67:26:df:e3:31:e5:a9:af:c8:29:80:39:bb:94:de: 49:c9:bc:44:74:a2:7f:6f:a7:60:fa:54:be:cb:a9: 75:e7:ef:5c:e2:af:b3:f4:78:03:2d:41:81:b1:0a: 9e:4a:8e:66:f7:d3:90:6b:f2:f5:b0:96:49:e5:20: 9c:ac:60:28:4f:a0:31:ba:b6:6c:05:37:a7:11:c4: ca:30:94:f2:ee:92:60:87:ba:d5:fb:d5:9a:f1:f1: dc:77:2d:02:26:c0:aa:ac:cb:d2:34:ce:eb:b5:8e: 10:d6:e6:91:4b:0e:0b:e6:eb:5e:89:27:7d:d4:bc: b0:df:11:0f:50:7d:50:50:43:02:55:ab:f3:cd:6b: 42:22:6f:91:ab:d3:e6:85:a8:07:cb:8f:f7:00:0d: 0e:3b:6a:43:da:9f:f1:e3:c6:36:1d:b2:ff:f0:38: c3:44:95:0d:ba:8b:4f:fd:1c:0c:b8:2a:b2:94:87: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F9:96:3D:B2:6B:B1:B2:D7:3F:B6:46:07:FD:28:85:70:A5:92:2C X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f1:6c:a1:8b:57:db:c0:3d:95:ed:03:1a:81:ad:41:2d:47: cd:c3:47:69:d5:7c:03:d1:0a:35:10:9f:c0:b5:90:a8:91:5a: 81:c0:db:97:d7:35:99:05:cc:e5:03:89:b1:f6:50:40:1f:e9: e5:02:51:46:13:f9:10:c2:ea:8c:22:d9:62:eb:f2:cf:dc:53: bf:f3:07:bf:fb:f1:a5:dc:6d:26:60:9e:d5:1b:b7:bf:c8:a4: e6:42:33:65:aa:26:15:3a:c9:db:69:f3:ba:83:12:0e:d4:6f: e3:15:8d:d2:59:4b:24:49:cd:8f:38:63:a2:79:86:8c:2e:98: 61:00:b8:24:34:7f:f3:dd:a8:40:b1:ce:aa:b7:34:35:c5:78: ea:63:10:8c:91:65:4a:45:92:73:90:fe:4e:83:87:ae:1e:21: a6:5d:b9:d6:d2:37:10:7d:03:b4:b0:f1:9d:4d:04:c9:f5:22: d9:b1:71:cf:e2:f5:8a:e8:b0:c8:0a:a6:b9:9d:c9:25:07:61: f2:85:af:13:40:22:76:5f:13:9e:91:9c:1d:df:b3:70:5d:0a: 49:87:3e:87:66:3f:d6:d2:21:10:67:a1:02:fa:86:d4:75:65: 44:50:65:9b:ba:74:ce:e5:49:14:ea:c8:55:c1:95:ef:56:04: 74:be:9b:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwOTA3MDIxMzEyWhcNMjUwOTE0MDIxMzEyWjAYMRYwFAYD VQQDEw02OGJjZWEzOC0xZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywXmmj2E5vjykilTiO1kZfYkTxwh6aKBwpboqejgqbWI4W8EfVT6ralx2Duv 4JEnbVu2JUj4tkVlXKtYFwMSpvRud+q8xwdhhoxnJt/jMeWpr8gpgDm7lN5JybxE dKJ/b6dg+lS+y6l15+9c4q+z9HgDLUGBsQqeSo5m99OQa/L1sJZJ5SCcrGAoT6Ax urZsBTenEcTKMJTy7pJgh7rV+9Wa8fHcdy0CJsCqrMvSNM7rtY4Q1uaRSw4L5ute iSd91Lyw3xEPUH1QUEMCVavzzWtCIm+Rq9PmhagHy4/3AA0OO2pD2p/x48Y2HbL/ 8DjDRJUNuotP/RwMuCqylIfH2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr5lj2y a7Gy1z+2Rgf9KIVwpZIsMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF8Wyhi1fbwD2V7QMaga1BLUfNw0dp1XwD0Qo1EJ/AtZCokVqBwNuX 1zWZBczlA4mx9lBAH+nlAlFGE/kQwuqMItli6/LP3FO/8we/+/Gl3G0mYJ7VG7e/ yKTmQjNlqiYVOsnbafO6gxIO1G/jFY3SWUskSc2POGOieYaMLphhALgkNH/z3ahA sc6qtzQ1xXjqYxCMkWVKRZJzkP5Og4euHiGmXbnW0jcQfQO0sPGdTQTJ9SLZsXHP 4vWK6LDICqa5ncklB2Hyha8TQCJ2XxOekZwd37NwXQpJhz6HZj/W0iEQZ6EC+obU dWVEUGWbunTO5UkU6shVwZXvVgR0vpsO -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:39 2025 by rpki-client