$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft File: PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json) Hash identifier: nbDGg46o/9NCN4ZM5YVySL6fe+uXOsFXq73c5puKVMI= Subject key identifier: FC:26:69:C6:8F:99:DC:50:BF:DB:B1:7A:C7:A7:1C:B2:FA:BD:74:3B Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft Manifest number: 02AE Signing time: Thu 19 Jun 2025 01:24:44 +0000 Manifest this update: Thu 19 Jun 2025 01:24:43 +0000 Manifest next update: Thu 26 Jun 2025 01:24:43 +0000 Files and hashes: 1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: EMnPoi/e/Rte7zkC+ArbCdowYfvskEne3321HTTDKW0=) 2: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: jD7jiIEoA0zrb6YHgdu7nodN7r96+edv/r/epjKwp04=) 3: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: HdD/+ld1Uf50ShMo2E2ANBSVseJYDOqUpaCHNPJZLUs=) 4: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 499SL3b2qo6tqtvUtTvrd1ycmIPTXzG0Kk7YhvDP3Mk=) 5: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: qyVadK6PowhxT5dTxZ86nSTovFJ2RAqG5nfVtu7+2Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Validity Not Before: Jun 19 01:24:43 2025 GMT Not After : Jun 26 01:24:43 2025 GMT Subject: CN=685366dc-b910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fd:1f:6e:e3:34:b4:38:b5:ac:dd:21:8f:7c: 6e:39:9d:24:06:ea:8b:1e:10:3b:71:db:31:54:00: a2:6a:b9:41:17:cb:f6:55:20:eb:2a:f3:83:0b:1a: 00:31:ba:83:b8:86:c5:63:db:d9:63:d6:0e:66:bd: 12:4a:bb:65:a4:53:75:01:7f:29:58:26:7b:52:64: 1a:82:44:95:23:be:8a:49:de:97:18:d7:5a:ba:8f: 86:dd:5e:3a:93:b1:4f:46:32:e7:54:85:25:db:96: 4c:c3:40:8c:19:c2:42:68:62:84:a6:5d:9b:c8:b6: e3:f0:34:4d:3f:41:58:35:51:e9:4c:9f:e0:cd:71: f9:f5:56:cb:e9:6f:3f:62:1b:02:01:22:bb:c0:5b: bd:57:90:ac:73:72:f0:08:94:48:78:f2:15:f1:c9: 3c:d8:a5:03:5e:10:4d:ad:71:9f:55:3d:20:91:d7: 26:45:c3:12:f0:87:54:ed:c1:4e:f3:53:dd:a5:0b: 66:38:ff:e8:bb:b2:ef:e7:59:ae:b9:45:34:b2:a2: d6:66:67:30:9e:3f:ed:f0:bc:1d:00:ae:1f:37:c6: 95:3f:ac:7d:a2:d4:16:4c:2d:d0:8c:2b:6a:27:74: 4d:0f:52:b6:fd:2b:ac:e5:e2:c5:f3:1c:52:65:d9: 16:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:26:69:C6:8F:99:DC:50:BF:DB:B1:7A:C7:A7:1C:B2:FA:BD:74:3B X509v3 Authority Key Identifier: keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:19:ee:a1:09:1c:e4:ba:d1:42:9b:bc:35:b5:a1:40:c4:fa: e0:48:de:93:7c:28:8c:f6:37:5a:d2:bf:3c:b4:92:7b:f3:91: 81:a8:f3:ae:41:2f:b4:93:30:d4:2b:73:e0:4c:20:84:34:c1: 1e:5f:2f:3c:06:cf:19:d3:40:6d:29:43:dc:6a:8e:4b:30:d1: 95:10:93:ab:37:fc:6b:e0:19:87:1c:ae:7d:54:f7:51:e5:fb: d0:8a:bd:aa:f1:e9:74:cc:1d:0a:ad:c8:6f:3c:f3:25:b8:22: ff:2b:d8:7d:f5:20:ca:74:00:51:de:43:f5:a0:69:6d:f6:25: b6:ed:30:09:61:fb:54:9c:af:03:c1:ac:46:24:4b:2e:1d:86: 63:e7:23:8e:14:2e:98:11:9f:c3:dd:4b:fe:e5:e9:78:20:c3: b5:8a:9a:53:31:fe:23:b1:8c:18:48:74:3d:4b:9c:38:f4:55: 84:f5:f4:31:de:32:ae:f0:04:b9:b8:f3:b7:05:7f:6e:08:aa: bb:e5:c5:05:be:d3:b1:d8:cf:9d:ad:fd:15:6b:4f:19:e8:0a: f7:51:c3:e8:44:9f:2a:f9:aa:e2:f3:17:b4:44:03:d0:1e:fc: 59:2c:7e:67:df:dc:61:69:da:b2:0f:eb:f1:59:c5:07:56:9b: dd:83:58:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODREMTE5NUI1MzI2 RjkyNDlGQkQwHhcNMjUwNjE5MDEyNDQzWhcNMjUwNjI2MDEyNDQzWjAYMRYwFAYD VQQDEw02ODUzNjZkYy1iOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAof0fbuM0tDi1rN0hj3xuOZ0kBuqLHhA7cdsxVACiarlBF8v2VSDrKvODCxoA MbqDuIbFY9vZY9YOZr0SSrtlpFN1AX8pWCZ7UmQagkSVI76KSd6XGNdauo+G3V46 k7FPRjLnVIUl25ZMw0CMGcJCaGKEpl2byLbj8DRNP0FYNVHpTJ/gzXH59VbL6W8/ YhsCASK7wFu9V5Csc3LwCJRIePIV8ck82KUDXhBNrXGfVT0gkdcmRcMS8IdU7cFO 81PdpQtmOP/ou7Lv51muuUU0sqLWZmcwnj/t8LwdAK4fN8aVP6x9otQWTC3QjCtq J3RND1K2/Sus5eLF8xxSZdkWEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwmacaP mdxQv9uxesenHLL6vXQ7MB8GA1UdIwQYMBaAFDz5FggiaBnD6dqE0RlbUyb5JJ+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9FNUQ2RDBBQzA2 NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0djUHAyb1RSR1Z0VEp2a2tu NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQa1dDQ0pvR2NQcDJvVFJHVnRUSnZra243MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFFNC9FNUQ2RDBBQzA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0dj UHAyb1RSR1Z0VEp2a2tuNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvGe6hCRzkutFCm7w1taFAxPrgSN6TfCiM9jda0r88tJJ785GBqPOu QS+0kzDUK3PgTCCENMEeXy88Bs8Z00BtKUPcao5LMNGVEJOrN/xr4BmHHK59VPdR 5fvQir2q8el0zB0KrchvPPMluCL/K9h99SDKdABR3kP1oGlt9iW27TAJYftUnK8D waxGJEsuHYZj5yOOFC6YEZ/D3Uv+5el4IMO1ippTMf4jsYwYSHQ9S5w49FWE9fQx 3jKu8AS5uPO3BX9uCKq75cUFvtOx2M+drf0Va08Z6Ar3UcPoRJ8q+ari8xe0RAPQ HvxZLH5n39xhadqyD+vxWcUHVpvdg1i8 -----END CERTIFICATE-----Generated at Thu Jun 19 20:13:36 2025 by rpki-client