$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: DdmzVPxeXEuGV9p6KF8NAiJnGdcBsxxTGbQ+dRYx61Y= Subject key identifier: 23:61:82:8D:FC:A6:B2:91:3C:69:BA:75:47:20:1C:39:58:12:DE:F7 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 0274 Signing time: Sat 31 May 2025 12:29:50 +0000 Manifest this update: Sat 31 May 2025 12:29:50 +0000 Manifest next update: Sat 07 Jun 2025 12:29:50 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: Nw6OFI/worgB4d2EpAUIGQPIwQmTiW5SX1UtAtw1WXQ=) 2: 38564246ABFB11EFAC5AA210C4F9AE02.roa (hash: 7rZfViKS+ZS1AUV/te0G1cRy/MUZLaIjn7SCs+kRiH8=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: 2M0t54ZWVSyH7zW4xiy91/NSsBSKVlPooU2mIewxcFg=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: rfdeiioOombk9ugXAhar8jfxVQvhaRByjypcJo5xwas=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: UkKPKDbs79xP57ZHa6k5ILf6dW2MqCjXbsvbl/lq8hg=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: 8uCs5a5eLk7Ncqt7vpJ0jpqLXEXaJ1qSV8aFHl3ul6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: May 31 12:29:50 2025 GMT Not After : Jun 7 12:29:50 2025 GMT Subject: CN=683af63e-1bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2b:55:03:6b:79:9a:f6:76:8f:f4:f7:7e:7c: 95:eb:d0:92:7b:38:54:a8:86:34:25:e1:69:fb:4a: 2f:f2:fb:d7:77:cf:85:b1:71:33:ea:f4:78:6e:a4: fe:43:1a:78:e0:ed:87:bb:19:13:56:b3:fb:e5:1b: 61:5b:76:d9:21:72:f4:68:dc:a2:77:1b:d8:e7:6b: 97:46:bd:a1:63:27:13:0b:1b:b2:93:44:ce:8e:63: d8:b9:1d:92:20:ee:d9:fe:d8:d5:79:6e:e7:67:83: f3:1c:ac:a6:2f:4d:c3:fa:85:e6:3d:27:f7:c5:f0: 77:d1:88:72:63:21:6b:06:ba:12:e8:ea:98:c0:3e: e5:c4:c5:f0:0d:7c:ff:f5:04:81:ee:ce:fa:7b:2e: 49:4e:34:95:bd:2c:a8:58:88:e8:31:8b:3f:c6:e3: 9e:fd:b7:16:c7:c9:ce:44:48:b7:01:0a:f3:5f:61: 77:91:70:8e:c9:0c:7b:7d:0f:12:3a:7d:47:11:02: fc:77:c4:ec:da:76:f2:5c:af:8e:bf:70:ff:b5:ba: fc:b8:63:46:3d:63:69:19:8c:d9:8b:04:c6:6a:0e: 59:52:0b:97:f3:77:77:ba:90:2e:d4:b1:f9:8e:0b: d4:c3:de:1f:c5:2a:af:35:3f:27:f6:c6:da:43:1d: 51:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:61:82:8D:FC:A6:B2:91:3C:69:BA:75:47:20:1C:39:58:12:DE:F7 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a5:36:f0:67:0f:ca:e3:f4:f6:96:11:61:23:ba:3d:29:e7: c4:c7:c7:98:05:a4:cf:b4:7e:15:30:0e:5a:c4:b6:0f:ac:31: 14:f8:af:60:04:10:c4:3f:d6:88:c9:55:1f:51:d2:73:80:e7: 68:7c:bd:18:5c:0b:1b:71:67:7c:1b:b7:99:40:60:d0:70:85: 33:de:b1:5f:57:c4:4d:ed:9b:97:84:3a:b0:5c:2a:2d:2e:8e: 20:e4:b1:c1:7d:f0:5d:4f:68:57:eb:f9:01:25:bf:0c:8d:a5: 46:2d:67:f7:0d:78:9d:ac:9b:0e:9d:78:0b:dd:22:2d:fc:88: 20:88:38:53:4c:04:4e:ec:78:7f:6c:2c:dd:2b:5c:6c:c2:71: d0:56:8a:9d:61:e4:c7:30:d6:ea:69:db:3e:0b:e7:44:fd:e9: 15:6f:aa:33:d6:d6:47:02:32:33:7c:32:f9:10:b2:33:5c:5f: 4c:95:3c:c0:9d:7e:32:e6:0a:16:02:2f:a3:25:8a:55:25:07: 8d:3c:b3:c6:97:db:cb:8a:dd:55:3e:4e:5b:04:0b:7c:b4:41: e7:08:23:2d:c2:99:b2:55:ac:56:cb:91:1e:6f:eb:4a:77:31: e8:03:d1:7d:f3:16:f4:df:a9:18:72:c3:c9:63:77:89:9e:d7: f5:ff:2b:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwNTMxMTIyOTUwWhcNMjUwNjA3MTIyOTUwWjAYMRYwFAYD VQQDEw02ODNhZjYzZS0xYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3itVA2t5mvZ2j/T3fnyV69CSezhUqIY0JeFp+0ov8vvXd8+FsXEz6vR4bqT+ Qxp44O2HuxkTVrP75RthW3bZIXL0aNyidxvY52uXRr2hYycTCxuyk0TOjmPYuR2S IO7Z/tjVeW7nZ4PzHKymL03D+oXmPSf3xfB30YhyYyFrBroS6OqYwD7lxMXwDXz/ 9QSB7s76ey5JTjSVvSyoWIjoMYs/xuOe/bcWx8nOREi3AQrzX2F3kXCOyQx7fQ8S On1HEQL8d8Ts2nbyXK+Ov3D/tbr8uGNGPWNpGYzZiwTGag5ZUguX83d3upAu1LH5 jgvUw94fxSqvNT8n9sbaQx1RNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNhgo38 prKRPGm6dUcgHDlYEt73MB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0pTbwZw/K4/T2lhFhI7o9KefEx8eYBaTPtH4VMA5axLYPrDEU+K9g BBDEP9aIyVUfUdJzgOdofL0YXAsbcWd8G7eZQGDQcIUz3rFfV8RN7ZuXhDqwXCot Lo4g5LHBffBdT2hX6/kBJb8MjaVGLWf3DXidrJsOnXgL3SIt/IggiDhTTARO7Hh/ bCzdK1xswnHQVoqdYeTHMNbqads+C+dE/ekVb6oz1tZHAjIzfDL5ELIzXF9MlTzA nX4y5goWAi+jJYpVJQeNPLPGl9vLit1VPk5bBAt8tEHnCCMtwpmyVaxWy5Eeb+tK dzHoA9F98xb036kYcsPJY3eJntf1/yur -----END CERTIFICATE-----Generated at Sat May 31 17:47:23 2025 by rpki-client