$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json) Hash identifier: EgVa28jaNju5YfUKkhjNvstYsXIxpFedurWnxtWx1gs= Subject key identifier: 0C:A1:86:B5:45:C1:22:0C:4D:5E:41:53:F9:6F:B5:E0:79:F1:E4:D0 Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft Manifest number: 079F Signing time: Thu 12 Jun 2025 21:00:06 +0000 Manifest this update: Thu 12 Jun 2025 21:00:06 +0000 Manifest next update: Thu 19 Jun 2025 21:00:06 +0000 Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: hUv94rz0MZR7Gh8D77NqDh9biARoLAYxvHv4wUmM8s4=) 2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: J9GQPP4a7clIhGgoBAM9KLX43lz+eBaMPakWPFWVHmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Validity Not Before: Jun 12 21:00:06 2025 GMT Not After : Jun 19 21:00:06 2025 GMT Subject: CN=684b3fd6-0400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f6:7a:47:4c:51:33:d1:2d:29:45:ad:9d:5e: 48:a6:86:73:71:c3:d8:19:80:b1:82:10:b9:41:58: de:3e:4d:14:8e:90:cb:a7:22:8c:a8:66:3b:e3:21: 67:ba:68:15:86:e3:7a:ed:0d:90:af:24:09:98:5b: 24:56:3f:6b:99:f3:43:33:1f:71:0a:02:6e:d8:88: d9:8e:df:f4:34:8b:c2:c4:11:6e:6c:1d:f5:e1:28: 9e:53:90:fd:a6:09:08:53:81:f3:d1:be:14:00:ed: 5b:5b:2d:c1:8a:78:9f:b4:f2:ad:3c:b7:97:04:b5: b0:e2:40:e7:db:93:ad:dc:a1:87:ff:19:91:de:f5: 48:de:f6:89:ed:45:cf:d7:4b:aa:c1:2c:9a:fc:15: ca:41:3f:02:0a:0a:81:43:ee:52:fc:c8:7f:ce:fe: 74:58:bd:90:af:8b:67:af:35:2d:fe:87:6b:5e:7f: 92:2b:f0:5a:6f:62:6b:a2:e5:6a:8a:62:fb:37:ee: af:3c:3d:cd:9b:dd:df:f4:69:8a:d2:df:ae:83:17: 72:22:32:f6:9a:e9:02:4b:c2:95:f8:53:b4:17:cd: 62:4d:64:47:e6:51:c4:ff:73:fe:be:be:7e:ab:6e: 21:40:21:07:86:37:f4:58:f1:50:2f:8b:ed:49:37: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A1:86:B5:45:C1:22:0C:4D:5E:41:53:F9:6F:B5:E0:79:F1:E4:D0 X509v3 Authority Key Identifier: keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:23:42:6c:b4:db:39:24:26:6a:11:5a:17:1f:31:5d:90:12: 5f:4c:f8:a5:71:d5:11:88:26:47:d6:39:e2:90:2c:2b:24:3a: 17:92:c3:8a:28:df:fc:d4:f3:a8:df:c9:71:90:8c:af:9b:eb: 72:bb:05:d8:6f:61:d7:aa:7e:b3:5b:f4:93:97:57:0e:a5:b6: 08:4a:8a:a3:2b:5f:20:ac:d0:87:51:f2:18:5b:4b:df:ea:57: df:ab:a4:d9:09:8b:78:d8:c9:1d:f3:1e:52:b6:c9:34:16:cf: a5:e7:75:73:79:28:87:43:62:50:2f:f4:96:38:c4:c7:2a:5f: 16:33:86:f9:53:bc:db:f8:12:db:55:0c:58:43:76:a3:e4:65: 8a:1d:07:3e:01:b5:92:91:8a:0c:d4:df:5f:a3:f5:a3:1e:5a: ad:3e:b8:8d:cf:65:1a:e3:7e:b3:c7:da:21:b6:5c:cc:9c:e5: ad:f2:99:f0:31:8d:07:dd:74:82:d4:06:7d:12:53:82:72:5a: 73:11:04:68:05:8b:6e:f6:0c:72:67:85:2b:60:90:e2:ea:53: 67:76:6c:07:3b:05:04:e6:3d:df:dc:b6:87:ac:f4:1a:0c:b4: cf:25:3d:6c:d0:aa:40:d7:3e:19:5e:50:47:5d:f2:85:e7:54: c1:62:d2:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4 RjY3MTQ3QjAwHhcNMjUwNjEyMjEwMDA2WhcNMjUwNjE5MjEwMDA2WjAYMRYwFAYD VQQDEw02ODRiM2ZkNi0wNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PZ6R0xRM9EtKUWtnV5IpoZzccPYGYCxghC5QVjePk0UjpDLpyKMqGY74yFn umgVhuN67Q2QryQJmFskVj9rmfNDMx9xCgJu2IjZjt/0NIvCxBFubB314SieU5D9 pgkIU4Hz0b4UAO1bWy3BiniftPKtPLeXBLWw4kDn25Ot3KGH/xmR3vVI3vaJ7UXP 10uqwSya/BXKQT8CCgqBQ+5S/Mh/zv50WL2Qr4tnrzUt/odrXn+SK/Bab2JrouVq imL7N+6vPD3Nm93f9GmK0t+ugxdyIjL2mukCS8KV+FO0F81iTWRH5lHE/3P+vr5+ q24hQCEHhjf0WPFQL4vtSTdDxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyhhrVF wSIMTV5BU/lvteB58eTQMB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4 NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ4OS9DNkE0QTVFMjA4NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtu RmVRVGJwdW9Wcm1QWnhSN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFI0JstNs5JCZqEVoXHzFdkBJfTPilcdURiCZH1jnikCwrJDoXksOK KN/81POo38lxkIyvm+tyuwXYb2HXqn6zW/STl1cOpbYISoqjK18grNCHUfIYW0vf 6lffq6TZCYt42Mkd8x5Stsk0Fs+l53VzeSiHQ2JQL/SWOMTHKl8WM4b5U7zb+BLb VQxYQ3aj5GWKHQc+AbWSkYoM1N9fo/WjHlqtPriNz2Ua436zx9ohtlzMnOWt8pnw MY0H3XSC1AZ9ElOCclpzEQRoBYtu9gxyZ4UrYJDi6lNndmwHOwUE5j3f3LaHrPQa DLTPJT1s0KpA1z4ZXlBHXfKF51TBYtJk -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:06 2025 by rpki-client