$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft File: plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json) Hash identifier: hu84wgIAIZbl0MbvDpbMDnUAfoKB6F8YZwMJT39JcV4= Subject key identifier: 1C:E1:7D:B3:EB:DD:56:0B:70:A6:79:39:2A:24:05:A9:CB:4C:A7:54 Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 Certificate issuer: /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Certificate serial: 1069 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft Manifest number: 1060 Signing time: Fri 20 Jun 2025 17:23:13 +0000 Manifest this update: Fri 20 Jun 2025 17:23:12 +0000 Manifest next update: Fri 27 Jun 2025 17:23:12 +0000 Files and hashes: 1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: MC7TT+6dClo+Fvc0MwmtLWC+TU8nqTGxFgD9FVptZQw=) 2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: qPjQ6qU9b4Y2Yxe9iOnxcnbbcXQxddrSOa1xx9RMf9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 17:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4201 (0x1069) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Validity Not Before: Jun 20 17:23:12 2025 GMT Not After : Jun 27 17:23:12 2025 GMT Subject: CN=68559900-5cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e3:41:bf:39:41:39:76:9b:86:68:56:49:b9: c5:e6:9c:6d:5c:e8:80:25:ac:d7:f6:fc:35:7f:75: 28:bc:43:4b:b6:dd:6f:cb:82:e6:51:35:03:31:31: 03:d8:a8:78:94:4c:6b:3c:99:20:30:98:90:fb:84: 6e:5c:50:07:ed:84:ef:34:8d:2d:89:80:28:f8:27: 57:03:db:71:c7:06:e8:c7:ab:fe:90:ce:dd:07:c5: 81:22:a4:24:c8:43:bd:28:48:e4:56:e5:06:18:f7: d4:03:dc:c3:1b:98:5a:70:9f:a4:c0:99:61:0d:35: c2:f9:5e:74:97:54:a0:66:6f:64:01:b2:f1:77:52: 0a:7d:ce:74:db:48:0d:a8:67:5a:fc:3e:ca:84:e7: 63:48:04:ed:c3:c4:44:ed:8b:36:2d:58:3a:bd:cd: f2:df:59:ce:aa:77:28:a8:a3:54:6d:9b:6b:f2:2d: 23:28:ab:b7:e6:2e:52:a8:b3:26:13:77:ec:bc:68: d1:76:f6:dc:cc:e1:91:e6:f6:d4:97:87:a7:c8:d8: 05:32:0c:ba:d2:0e:5c:90:a9:92:f3:e3:0a:9f:f6: fa:98:0d:db:36:59:1d:d6:d0:f8:24:93:50:78:cf: a9:33:32:1b:ce:cf:9f:1e:c6:97:bb:25:0d:42:b1: d4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E1:7D:B3:EB:DD:56:0B:70:A6:79:39:2A:24:05:A9:CB:4C:A7:54 X509v3 Authority Key Identifier: keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:80:ac:b1:44:73:79:b8:79:29:12:9f:2c:24:c9:c7:61:14: 3c:ce:dd:a0:8d:40:8b:b4:05:c4:a3:63:e5:87:af:9f:3b:cd: a7:3f:3c:0a:3e:a1:24:f6:6a:3a:fc:21:f2:32:05:55:56:ff: c1:1c:c3:48:c1:c5:1d:f5:12:22:6f:76:78:ae:9a:b8:09:7f: 79:0d:f0:b1:16:a9:67:79:ad:ee:0f:2e:63:c7:54:ff:9f:de: 23:e8:58:90:3e:bb:a0:61:c1:2e:63:65:e0:10:4a:91:91:d7: 59:6d:4b:75:b0:f5:32:86:5d:04:12:13:53:ed:34:6a:7b:06: d3:08:44:e6:bc:2b:00:1a:a0:1c:c0:f2:f5:49:51:a0:86:1a: f0:3a:0f:26:ee:19:7a:3f:9f:10:ff:8f:75:4d:18:46:8c:f3: c0:9f:e8:a6:83:ca:9f:08:3d:66:18:4d:0a:60:c2:14:bd:4d: 4f:4c:a1:12:8a:1d:ae:59:ce:40:7e:f6:9d:00:87:eb:be:aa: a1:95:ff:33:08:59:52:0f:a8:c0:87:de:f3:8c:b9:a4:e9:06: 77:b1:ab:66:25:60:50:21:12:bc:1e:73:73:c2:2b:1d:70:4e: 1a:0d:ed:ee:2d:a3:93:50:bd:2a:d5:05:2b:05:1d:a9:1c:68: 52:45:ed:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEE2NTEwNERDNzZBOEUwRTZBM0Q5MjE0Njc4OTY4MEI3 M0RERTVGNTgwHhcNMjUwNjIwMTcyMzEyWhcNMjUwNjI3MTcyMzEyWjAYMRYwFAYD VQQDEw02ODU1OTkwMC01Y2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+NBvzlBOXabhmhWSbnF5pxtXOiAJazX9vw1f3UovENLtt1vy4LmUTUDMTED 2Kh4lExrPJkgMJiQ+4RuXFAH7YTvNI0tiYAo+CdXA9txxwbox6v+kM7dB8WBIqQk yEO9KEjkVuUGGPfUA9zDG5hacJ+kwJlhDTXC+V50l1SgZm9kAbLxd1IKfc5020gN qGda/D7KhOdjSATtw8RE7Ys2LVg6vc3y31nOqncoqKNUbZtr8i0jKKu35i5SqLMm E3fsvGjRdvbczOGR5vbUl4enyNgFMgy60g5ckKmS8+MKn/b6mA3bNlkd1tD4JJNQ eM+pMzIbzs+fHsaXuyUNQrHUBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzhfbPr 3VYLcKZ5OSokBanLTKdUMB8GA1UdIwQYMBaAFKZRBNx2qODmo9khRniWgLc93l9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC8wMzMyNDBDMDNB NEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRPYWoyU0ZHZUphQXR6M2VY MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BsRUUzSGFvNE9hajJTRkdlSmFBdHozZVgxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC8wMzMyNDBDMDNBNEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRP YWoyU0ZHZUphQXR6M2VYMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1gKyxRHN5uHkpEp8sJMnHYRQ8zt2gjUCLtAXEo2Plh6+fO82nPzwK PqEk9mo6/CHyMgVVVv/BHMNIwcUd9RIib3Z4rpq4CX95DfCxFqlnea3uDy5jx1T/ n94j6FiQPrugYcEuY2XgEEqRkddZbUt1sPUyhl0EEhNT7TRqewbTCETmvCsAGqAc wPL1SVGghhrwOg8m7hl6P58Q/491TRhGjPPAn+img8qfCD1mGE0KYMIUvU1PTKES ih2uWc5AfvadAIfrvqqhlf8zCFlSD6jAh97zjLmk6QZ3satmJWBQIRK8HnNzwisd cE4aDe3uLaOTUL0q1QUrBR2pHGhSRe1/ -----END CERTIFICATE-----Generated at Sat Jun 21 15:41:28 2025 by rpki-client