$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: JpOJl8rR68WPiMp0ymwb57zAQGPzROjGuywhDiF+iUI= Subject key identifier: AA:A4:1E:15:4E:EE:0F:97:06:EA:20:55:CD:F7:DB:CC:D3:84:22:8D Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 02E5 Signing time: Thu 23 Oct 2025 03:07:16 +0000 Manifest this update: Thu 23 Oct 2025 03:07:15 +0000 Manifest next update: Thu 30 Oct 2025 03:07:15 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: W3JhIVAKFc8CCMbjhgOKu0OIEzwZptBqVRZOCvN7xWU=) 2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: 84pcGrR9yrb0lc+y5Ras78T88Umec4YhuuH1jDixkUs=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Oct 23 03:07:15 2025 GMT Not After : Oct 30 03:07:15 2025 GMT Subject: CN=68f99be3-25f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:f0:ab:52:6f:91:4b:53:fd:ee:79:2f:f7: c3:4a:ef:89:9f:9e:41:6f:c8:cd:f3:c5:31:ab:11: dd:43:97:6b:85:c7:ac:86:0e:bd:df:6f:41:9a:1e: 71:f3:01:f7:93:dd:91:56:36:67:c5:a7:35:d4:72: 88:1d:eb:54:75:6f:8f:77:74:ae:1a:5b:aa:ed:37: 27:7d:41:5c:46:51:23:cb:99:41:1b:af:c0:02:b2: 3a:f7:71:20:04:a8:0c:2c:70:a1:73:93:47:68:95: 30:4f:ac:12:87:57:88:58:6c:94:c5:30:75:22:78: 52:5b:e7:59:94:96:76:c4:ea:65:3f:12:18:60:8d: e1:84:eb:48:02:16:aa:4e:72:9c:46:79:00:0b:0b: 80:1a:11:9f:2c:7a:92:a0:90:14:75:31:09:0a:58: 1a:43:bd:39:44:58:ad:f1:8a:1e:54:54:65:f6:81: 15:92:7e:2d:1f:e2:ea:2d:f2:c4:66:37:e2:3a:ce: a0:5e:ba:97:09:11:d5:1f:6e:90:45:b2:7d:db:89: d5:09:81:92:2d:33:79:5d:65:ef:26:88:20:75:e4: 1b:42:4a:35:b2:bb:56:69:14:7f:50:ec:9e:72:79: e5:4f:e5:51:5e:9d:55:6c:ff:bf:c1:35:12:ee:29: a2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A4:1E:15:4E:EE:0F:97:06:EA:20:55:CD:F7:DB:CC:D3:84:22:8D X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:53:4d:35:f1:8d:06:0f:56:70:53:d6:05:97:8a:2c:0f:bf: ba:1a:3e:f0:02:e3:97:a3:60:68:6d:c8:e3:0f:29:f1:44:2c: 77:18:d9:17:78:3b:da:40:23:a6:2c:07:93:05:f0:ab:74:56: f3:6e:a1:6f:c6:10:6c:2b:84:ca:cb:3e:ba:92:75:94:42:66: 9c:35:2b:73:1b:c1:b8:20:47:35:32:87:33:4f:67:77:02:5a: 02:ef:73:5c:84:06:87:14:c3:a0:2d:ff:20:43:48:9f:c9:81: cb:15:60:58:68:03:d6:94:c0:27:4d:6b:36:62:6b:04:7c:11: b1:56:71:61:9e:38:a3:24:bb:eb:a5:51:4d:77:a2:68:fa:6e: 6a:46:40:00:fe:78:bd:a0:1b:fd:3d:76:ef:52:62:e8:c8:10: f9:bf:5e:fb:92:61:70:ed:88:e9:33:24:d8:f5:22:46:f1:a5: 1e:37:14:55:55:e6:48:f6:d9:97:c9:ff:77:b1:1f:43:23:bf: de:9d:0b:ef:9e:32:76:fa:6b:e6:41:51:4f:f4:e3:ae:17:bc: 52:c5:99:f7:03:c5:27:79:ee:35:63:cc:a9:75:ae:f3:ad:7c: 15:e2:d8:56:27:12:b2:d9:12:0a:ac:23:6d:6f:df:fe:42:43: 2f:6e:ea:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUxMDIzMDMwNzE1WhcNMjUxMDMwMDMwNzE1WjAYMRYwFAYD VQQDEw02OGY5OWJlMy0yNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwt7wq1JvkUtT/e55L/fDSu+Jn55Bb8jN88UxqxHdQ5drhceshg69329Bmh5x 8wH3k92RVjZnxac11HKIHetUdW+Pd3SuGluq7TcnfUFcRlEjy5lBG6/AArI693Eg BKgMLHChc5NHaJUwT6wSh1eIWGyUxTB1InhSW+dZlJZ2xOplPxIYYI3hhOtIAhaq TnKcRnkACwuAGhGfLHqSoJAUdTEJClgaQ705RFit8YoeVFRl9oEVkn4tH+LqLfLE ZjfiOs6gXrqXCRHVH26QRbJ924nVCYGSLTN5XWXvJoggdeQbQko1srtWaRR/UOye cnnlT+VRXp1VbP+/wTUS7imiFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqkHhVO 7g+XBuogVc3328zThCKNMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACU0018Y0GD1ZwU9YFl4osD7+6Gj7wAuOXo2BobcjjDynxRCx3GNkX eDvaQCOmLAeTBfCrdFbzbqFvxhBsK4TKyz66knWUQmacNStzG8G4IEc1MoczT2d3 AloC73NchAaHFMOgLf8gQ0ifyYHLFWBYaAPWlMAnTWs2YmsEfBGxVnFhnjijJLvr pVFNd6Jo+m5qRkAA/ni9oBv9PXbvUmLoyBD5v177kmFw7YjpMyTY9SJG8aUeNxRV VeZI9tmXyf93sR9DI7/enQvvnjJ2+mvmQVFP9OOuF7xSxZn3A8Unee41Y8ypda7z rXwV4thWJxKy2RIKrCNtb9/+QkMvburB -----END CERTIFICATE-----Generated at Thu Oct 23 20:22:54 2025 by rpki-client