$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: 41vXt1ZyltjTZukymm5cE2DaGoq0IRlH/+7IOm8jR94= Subject key identifier: D3:8B:1D:E6:F2:DB:3E:C1:14:C6:B5:F9:1C:30:5C:17:0D:65:B8:C5 Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 01E7 Signing time: Wed 05 Nov 2025 02:52:13 +0000 Manifest this update: Wed 05 Nov 2025 02:52:12 +0000 Manifest next update: Wed 12 Nov 2025 02:52:12 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: ksksbh+jM/URu6r914fStYtFCVftXkiULPdreF0XorM=) 2: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: PhSrarlCbMwPtvT6PCvMaDG4Ioq8bEIWBn8LLBxKEUI=) 3: E761FB80118C11F0B9B8B26AC4F9AE02.roa (hash: /75uDbvkq2hvW+aFsSWLKYWGONv7oOopY70G/Ex1fRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Nov 5 02:52:12 2025 GMT Not After : Nov 12 02:52:12 2025 GMT Subject: CN=690abbdd-3c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:01:48:c2:0b:58:e9:da:df:be:69:e4:92: a2:be:7b:51:78:3e:36:54:27:af:6c:94:17:53:82: 6f:7e:33:c8:c8:3c:d9:e1:5a:9d:ae:5d:7d:0d:c9: 1b:01:99:da:be:da:d2:c5:7a:f6:02:34:ec:66:c7: db:4e:e4:06:2e:c5:a6:d1:bd:7f:63:42:e6:a8:2c: e0:d1:1e:01:70:12:3a:01:e6:bf:94:72:97:08:50: 2d:0b:1b:fd:df:81:45:98:ab:29:cd:e0:09:10:c2: 02:db:89:39:74:5d:c8:63:bf:88:81:5d:80:64:17: ee:7d:46:4b:4a:58:02:59:29:2c:c9:d7:09:f3:13: 48:32:85:2f:9e:1f:0b:c6:0f:f9:4c:dc:12:53:9e: bc:0c:a2:81:11:72:30:51:71:c2:48:f9:71:9c:20: 72:9f:c9:0d:23:8f:23:06:56:f5:69:17:3c:32:f2: 88:99:7f:ad:01:74:2d:ff:89:ab:c5:40:1b:60:ce: c5:8f:37:37:58:73:8b:7a:66:33:b1:4d:fb:b6:a7: e6:0e:a3:7d:92:18:54:45:80:98:44:62:6d:f1:16: f0:6a:65:30:c3:4d:07:2d:5d:5c:45:6a:3f:66:f7: 78:97:4b:77:e9:c9:4f:fa:d7:ce:1a:1b:c4:1d:af: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8B:1D:E6:F2:DB:3E:C1:14:C6:B5:F9:1C:30:5C:17:0D:65:B8:C5 X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e8:e6:94:95:33:4c:30:e0:18:8e:82:cf:11:04:e9:a7:83: b2:86:09:c2:a9:a3:33:90:79:f1:87:55:af:b9:8a:28:f5:68: 27:65:40:16:a0:90:bc:fb:2a:e3:75:3b:03:72:db:ad:6c:1e: 73:3c:0d:ab:eb:5c:eb:87:03:52:4a:04:9d:e1:13:40:76:67: 0b:3c:81:ba:9a:d0:53:62:b0:22:45:c9:d0:d3:8f:72:80:80: e4:5f:2d:c2:2f:7a:06:fa:79:9c:d6:41:f0:d9:1f:93:a6:af: 2e:5f:7c:72:65:f0:fc:33:5d:01:62:62:0c:87:37:6e:53:97: 4e:9b:ed:e8:6a:15:72:78:19:1e:fb:c6:3e:8c:9b:00:70:92: 9c:bc:07:03:ff:1d:36:a8:a7:f7:65:fa:9f:ec:5e:06:52:22: 51:41:0c:6a:3c:93:f0:6e:4b:78:1c:12:6d:c4:ae:f8:f3:aa: f9:de:86:97:8e:ae:b6:4f:cf:94:84:5c:45:62:7b:c2:31:ca: 43:10:00:2a:b2:6e:23:b6:f7:91:11:18:4a:d7:0b:d4:fc:9b: 11:ab:91:fc:5f:75:fe:a5:31:f0:19:66:b0:2d:dd:68:39:a7: 7c:01:9f:78:23:0b:57:a1:8f:fb:42:fc:3b:21:e6:c6:86:02: d6:a4:fd:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjUxMTA1MDI1MjEyWhcNMjUxMTEyMDI1MjEyWjAYMRYwFAYD VQQDEw02OTBhYmJkZC0zYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2UBSMILWOna375p5JKivntReD42VCevbJQXU4JvfjPIyDzZ4Vqdrl19Dckb AZnavtrSxXr2AjTsZsfbTuQGLsWm0b1/Y0LmqCzg0R4BcBI6Aea/lHKXCFAtCxv9 34FFmKspzeAJEMIC24k5dF3IY7+IgV2AZBfufUZLSlgCWSksydcJ8xNIMoUvnh8L xg/5TNwSU568DKKBEXIwUXHCSPlxnCByn8kNI48jBlb1aRc8MvKImX+tAXQt/4mr xUAbYM7Fjzc3WHOLemYzsU37tqfmDqN9khhURYCYRGJt8RbwamUww00HLV1cRWo/ Zvd4l0t36clP+tfOGhvEHa9geQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOLHeby 2z7BFMa1+RwwXBcNZbjFMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA36OaUlTNMMOAYjoLPEQTpp4OyhgnCqaMzkHnxh1WvuYoo9WgnZUAW oJC8+yrjdTsDctutbB5zPA2r61zrhwNSSgSd4RNAdmcLPIG6mtBTYrAiRcnQ049y gIDkXy3CL3oG+nmc1kHw2R+Tpq8uX3xyZfD8M10BYmIMhzduU5dOm+3oahVyeBke +8Y+jJsAcJKcvAcD/x02qKf3Zfqf7F4GUiJRQQxqPJPwbkt4HBJtxK7486r53oaX jq62T8+UhFxFYnvCMcpDEAAqsm4jtveRERhK1wvU/JsRq5H8X3X+pTHwGWawLd1o Oad8AZ94IwtXoY/7Qvw7IebGhgLWpP3B -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:20 2025 by rpki-client