$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json) Hash identifier: 9coWp0zB29/gcZxWIBqK1eIFNiFJ02qWDOTGmjHYGjk= Subject key identifier: D0:F4:D2:85:26:9C:35:9E:73:9B:C8:12:AE:39:5C:EE:56:72:F7:ED Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft Manifest number: 07BC Signing time: Fri 08 Aug 2025 21:35:23 +0000 Manifest this update: Fri 08 Aug 2025 21:35:22 +0000 Manifest next update: Fri 15 Aug 2025 21:35:22 +0000 Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: 0cUuOSll1piI/pFEB4xmijmcPhkm5gOAuU+v+ZA2264=) 2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: J9GQPP4a7clIhGgoBAM9KLX43lz+eBaMPakWPFWVHmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Validity Not Before: Aug 8 21:35:22 2025 GMT Not After : Aug 15 21:35:22 2025 GMT Subject: CN=68966d9b-87b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:af:f5:2f:28:fd:d0:f6:14:24:2e:cc:e1:50: 94:01:59:42:38:7c:72:31:9c:af:9a:2e:a9:cf:a2: 8f:ca:d4:4c:88:b2:14:25:5e:b6:f6:57:26:1d:d6: ae:8f:30:15:1d:5f:59:b4:4a:d9:98:cd:3c:bf:0e: 32:60:b7:3c:a2:7f:1e:52:62:37:56:f9:ff:f9:c5: e9:ae:f2:77:36:3c:a5:6d:77:ee:04:a6:6f:ac:60: 17:9a:96:54:91:6e:39:23:1c:13:5b:a1:29:ef:a3: 5e:ea:65:f8:6e:cc:b6:54:a6:cc:1b:59:27:04:ae: 7a:34:d1:c1:23:dc:31:30:ca:14:73:ca:6c:bd:2d: a9:81:53:97:4e:2f:02:ec:23:79:5d:54:5d:00:73: ca:9d:a4:a1:19:fe:25:79:48:f7:1b:c1:34:42:0b: ff:50:27:fc:66:b9:fb:b2:0e:90:08:dc:37:9f:80: 87:63:5c:88:5d:e6:96:f7:4a:16:53:57:04:8c:52: c5:30:4e:c1:a8:22:c0:92:12:43:f6:d1:4a:15:d9: 54:5f:56:3d:e4:4a:56:7a:e1:98:fc:63:f6:c9:e1: e5:d7:d3:cf:15:9d:d3:69:c5:4d:f9:b5:4a:f4:95: 03:9d:61:cd:f2:ed:5d:03:6c:14:bc:ea:32:1e:85: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F4:D2:85:26:9C:35:9E:73:9B:C8:12:AE:39:5C:EE:56:72:F7:ED X509v3 Authority Key Identifier: keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:60:77:54:95:4c:cd:af:04:b1:27:c0:c1:6b:ed:ed:5e:40: f6:8d:5d:76:60:71:9a:8b:38:ae:a1:8c:1f:89:65:b7:bc:51: e7:10:07:28:2e:6a:54:45:31:06:c8:d6:b2:f9:a1:2d:5a:04: dd:7c:03:13:61:21:c3:37:76:16:41:b3:c5:56:01:10:ca:4c: 48:7f:20:e3:2b:31:9c:d0:b8:71:c9:be:60:00:04:07:5f:c6: b0:74:c6:2f:bb:2e:f4:1b:26:5c:5d:3a:a3:9a:a3:bc:1c:e5: e8:21:ef:7a:47:bf:d4:9e:6f:70:f9:47:83:b0:43:04:c2:3c: 8f:cf:53:1d:ad:07:9a:40:f8:cc:51:0b:e5:54:5f:2b:a5:61: a5:5e:e2:fd:fc:06:00:ac:45:f0:00:92:e6:12:2c:a3:74:df: 23:77:75:87:d9:9e:65:bc:aa:b4:6b:34:21:60:cb:db:7d:83: 2f:c9:41:fb:48:40:7a:09:cb:ac:46:a1:54:1e:21:7f:8d:fc: 07:20:92:20:b1:cf:bc:63:00:ef:f2:f9:7b:b9:8e:81:8e:dc: 33:fb:38:7d:e7:c4:14:2d:89:4c:90:50:34:28:93:ad:9a:94: ee:f9:d0:63:5f:e4:0b:3a:96:9c:6a:cb:bf:a4:24:4e:57:10: ab:ef:86:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4 RjY3MTQ3QjAwHhcNMjUwODA4MjEzNTIyWhcNMjUwODE1MjEzNTIyWjAYMRYwFAYD VQQDEw02ODk2NmQ5Yi04N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1a/1Lyj90PYUJC7M4VCUAVlCOHxyMZyvmi6pz6KPytRMiLIUJV629lcmHdau jzAVHV9ZtErZmM08vw4yYLc8on8eUmI3Vvn/+cXprvJ3NjylbXfuBKZvrGAXmpZU kW45IxwTW6Ep76Ne6mX4bsy2VKbMG1knBK56NNHBI9wxMMoUc8psvS2pgVOXTi8C 7CN5XVRdAHPKnaShGf4leUj3G8E0Qgv/UCf8Zrn7sg6QCNw3n4CHY1yIXeaW90oW U1cEjFLFME7BqCLAkhJD9tFKFdlUX1Y95EpWeuGY/GP2yeHl19PPFZ3TacVN+bVK 9JUDnWHN8u1dA2wUvOoyHoVyEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFND00oUm nDWec5vIEq45XO5WcvftMB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4 NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ4OS9DNkE0QTVFMjA4NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtu RmVRVGJwdW9Wcm1QWnhSN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfYHdUlUzNrwSxJ8DBa+3tXkD2jV12YHGaiziuoYwfiWW3vFHnEAco LmpURTEGyNay+aEtWgTdfAMTYSHDN3YWQbPFVgEQykxIfyDjKzGc0Lhxyb5gAAQH X8awdMYvuy70GyZcXTqjmqO8HOXoIe96R7/Unm9w+UeDsEMEwjyPz1MdrQeaQPjM UQvlVF8rpWGlXuL9/AYArEXwAJLmEiyjdN8jd3WH2Z5lvKq0azQhYMvbfYMvyUH7 SEB6CcusRqFUHiF/jfwHIJIgsc+8YwDv8vl7uY6Bjtwz+zh958QULYlMkFA0KJOt mpTu+dBjX+QLOpacasu/pCROVxCr74Yq -----END CERTIFICATE-----Generated at Sun Aug 10 21:10:19 2025 by rpki-client