$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: ATYpbwYbZhwoO2Da3qerYI/Q0eBLmWBGGdCNcg42SnA= Subject key identifier: 02:72:E6:3E:72:CA:D7:D7:25:AD:30:88:AE:93:5F:E8:4F:0C:1A:6A Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 0186 Signing time: Fri 25 Apr 2025 02:54:09 +0000 Manifest this update: Fri 25 Apr 2025 02:54:08 +0000 Manifest next update: Fri 02 May 2025 02:54:08 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: +gQIbxipfcmtzPPmJ9qI/84RZiz9sCTeEoqQjkq2qFE=) 2: E761FB80118C11F0B9B8B26AC4F9AE02.roa (hash: /75uDbvkq2hvW+aFsSWLKYWGONv7oOopY70G/Ex1fRM=) 3: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: PhSrarlCbMwPtvT6PCvMaDG4Ioq8bEIWBn8LLBxKEUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Apr 25 02:54:08 2025 GMT Not After : May 2 02:54:08 2025 GMT Subject: CN=680af951-11d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:70:d1:bb:a9:32:53:07:f8:a1:b0:26:82: b3:1d:ae:48:f0:20:37:11:32:f4:bb:43:30:f1:f5: d2:45:d6:19:c4:e0:e8:fc:83:a3:d8:87:de:a2:93: df:5c:42:88:f3:7b:7e:ed:15:e0:70:f2:43:17:53: 79:8d:e6:e6:37:a4:f4:13:6a:15:eb:5e:65:0b:7b: 82:53:b1:7e:36:4e:5b:8b:d2:1e:aa:59:c5:8a:ff: 73:67:0a:2e:b0:f7:60:a6:c6:f8:be:bf:1f:fe:d2: f4:5b:6a:f1:bd:17:12:94:e8:a4:34:33:43:05:ff: a8:9f:f1:b9:63:42:7b:81:6d:38:c7:75:6c:bd:94: 95:61:f0:34:1d:0b:b9:8a:49:81:07:01:5e:9f:35: 65:91:e1:a2:7e:44:1e:01:23:a9:fc:22:ae:c4:01: 3a:5c:78:3c:6b:58:71:76:32:1a:64:7e:e7:97:1b: 31:40:4b:e9:0a:a5:2a:83:9a:69:ca:d4:d6:91:06: b0:36:3d:85:f2:26:3b:dc:5a:72:7a:62:1d:9c:42: f2:d0:02:6f:72:dd:41:c4:c2:70:59:d8:a7:64:b5: 72:b5:58:e6:6b:fe:9b:01:2b:70:34:53:e0:af:cf: d4:e1:1a:d9:a4:66:91:33:d5:d6:41:b3:fe:66:8f: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:72:E6:3E:72:CA:D7:D7:25:AD:30:88:AE:93:5F:E8:4F:0C:1A:6A X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:0c:20:46:cd:b3:b4:4f:8c:8b:8f:8a:84:7d:07:0b:4c:41: 03:f8:06:6b:53:63:7f:2c:28:da:39:d2:f2:95:d3:d0:f8:e2: d7:4d:1f:2a:3a:80:e0:77:f8:ce:d2:1c:4a:e7:25:ed:05:4b: b5:0b:3b:d8:85:db:14:bb:dd:06:17:19:e9:b7:f1:ec:72:d0: 14:0c:f5:69:d7:32:e0:63:54:dc:42:d5:41:39:c9:9c:94:8d: 22:06:98:de:5a:0a:4d:d2:90:d4:71:65:56:a3:ac:9f:98:ed: 7a:8e:fc:58:a8:0f:27:de:94:51:ae:0a:39:77:07:3e:7e:af: 57:ca:b1:22:8d:d3:20:ac:63:07:1f:5c:07:c1:82:e0:64:f2: 6d:b0:48:81:c5:64:94:d0:81:a4:46:07:7a:3d:b3:66:03:a7: 6d:08:70:10:aa:09:40:ad:20:c8:48:d2:5c:6b:3a:ac:6d:ca: c4:6a:62:06:3d:74:4d:73:22:65:5b:bd:b6:c9:2e:f7:e1:19: e3:f2:3b:d6:3a:8a:45:4d:94:4c:13:c9:3f:3b:f7:af:a1:57: f6:4e:b8:07:b4:f6:a5:b4:86:ca:25:be:3f:41:e3:da:8f:c1: 14:c3:2e:4c:ca:51:9a:3d:c0:c7:d8:b2:06:2d:db:87:b2:d4: 79:af:c4:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjUwNDI1MDI1NDA4WhcNMjUwNTAyMDI1NDA4WjAYMRYwFAYD VQQDEw02ODBhZjk1MS0xMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuohw0bupMlMH+KGwJoKzHa5I8CA3ETL0u0Mw8fXSRdYZxODo/IOj2IfeopPf XEKI83t+7RXgcPJDF1N5jebmN6T0E2oV615lC3uCU7F+Nk5bi9IeqlnFiv9zZwou sPdgpsb4vr8f/tL0W2rxvRcSlOikNDNDBf+on/G5Y0J7gW04x3VsvZSVYfA0HQu5 ikmBBwFenzVlkeGifkQeASOp/CKuxAE6XHg8a1hxdjIaZH7nlxsxQEvpCqUqg5pp ytTWkQawNj2F8iY73FpyemIdnELy0AJvct1BxMJwWdinZLVytVjma/6bAStwNFPg r8/U4RrZpGaRM9XWQbP+Zo8xcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJy5j5y ytfXJa0wiK6TX+hPDBpqMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYDCBGzbO0T4yLj4qEfQcLTEED+AZrU2N/LCjaOdLyldPQ+OLXTR8q OoDgd/jO0hxK5yXtBUu1CzvYhdsUu90GFxnpt/HsctAUDPVp1zLgY1TcQtVBOcmc lI0iBpjeWgpN0pDUcWVWo6yfmO16jvxYqA8n3pRRrgo5dwc+fq9XyrEijdMgrGMH H1wHwYLgZPJtsEiBxWSU0IGkRgd6PbNmA6dtCHAQqglArSDISNJcazqsbcrEamIG PXRNcyJlW722yS734Rnj8jvWOopFTZRME8k/O/evoVf2TrgHtPaltIbKJb4/QePa j8EUwy5MylGaPcDH2LIGLduHstR5r8Sp -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:11 2025 by rpki-client