$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json) Hash identifier: EytNhbBQ3RfPwM2pdOeDR0KtGeRw6f3SqoO4lJoIW9c= Subject key identifier: 37:B0:38:DB:0E:92:93:A5:38:A7:C0:9A:06:53:F9:06:18:5E:62:0C Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft Manifest number: 0170 Signing time: Thu 31 Jul 2025 04:16:24 +0000 Manifest this update: Thu 31 Jul 2025 04:16:23 +0000 Manifest next update: Thu 07 Aug 2025 04:16:23 +0000 Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: DadrsmC5WOcw2QsvqDqiYV/X6DZsmgm+yDqRPU44sLc=) 2: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: c3n7ErqEI7wUv0Zh/82IQ41rmFajxkaaakm4Lrf4zUE=) 3: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: OyzekySsh32QnXqLJ9xXpFy1GOqrIr4htNA7lulacc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 04:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Validity Not Before: Jul 31 04:16:23 2025 GMT Not After : Aug 7 04:16:23 2025 GMT Subject: CN=688aee18-7330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:a3:d1:6a:fa:fe:40:ba:53:50:29:6a:7a: dd:d4:d1:55:6d:8f:ad:0e:5b:53:cb:bb:8f:7a:e3: 10:67:11:d1:f4:76:bc:95:d7:5c:db:65:4c:7d:4b: 9b:2b:c3:44:1b:29:2c:36:9e:b1:95:5b:b7:d2:c3: b5:60:8c:ed:5a:75:49:84:29:9c:b0:06:a1:23:5d: 84:9e:9a:0f:40:b3:41:a3:49:96:3c:8a:19:b6:89: 59:35:67:23:69:11:75:72:37:b8:a1:46:43:67:e1: bb:1e:28:a3:92:32:94:a7:7a:1d:46:bd:ef:d0:3a: 04:b8:08:e6:ec:95:f1:6b:d2:3b:9a:11:82:78:43: 7e:c6:5f:8b:62:3d:4e:dd:47:ac:2d:89:62:52:b5: 35:26:65:25:47:d3:4d:25:70:15:f4:ac:6d:dc:37: d6:75:82:42:a9:ac:a0:c1:b8:a6:b2:a7:3b:61:83: 8e:9e:4c:59:48:be:58:7d:89:20:5b:c1:1b:06:c0: de:ec:ff:7c:34:d5:be:3b:49:bd:92:5f:82:47:db: 49:17:ae:ef:66:74:f6:6e:cd:cf:25:80:8c:f2:c6: bd:fd:9d:70:c3:a4:29:3b:67:78:f5:84:3b:95:c9: 0d:d4:ba:60:cc:24:da:56:2b:ba:ee:14:c0:fc:c9: 78:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B0:38:DB:0E:92:93:A5:38:A7:C0:9A:06:53:F9:06:18:5E:62:0C X509v3 Authority Key Identifier: keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:10:0f:31:52:cd:1a:6b:6a:c5:f3:e2:b3:96:0f:b7:62:84: e3:ca:e3:09:17:44:aa:5b:24:bb:db:b3:83:11:23:b0:5c:d6: 90:7c:bd:68:d7:c9:b2:83:8d:12:0e:84:dd:b5:07:da:52:85: 2a:45:87:ea:69:f8:7c:56:0e:37:c6:bc:c3:29:39:68:93:bd: 84:72:c6:85:c7:d5:ea:5f:59:ba:af:23:cc:30:ed:d4:a6:8b: 73:13:56:41:5c:4e:65:54:30:51:df:71:20:7d:24:db:4d:43: 6e:d3:da:23:b9:d3:08:e9:8b:48:de:f5:96:8e:34:8e:df:75: fd:4a:18:cf:71:d2:5d:e2:fe:bd:0e:eb:d9:cd:62:c6:d8:49: dc:a8:dc:49:fd:79:f7:c5:34:08:57:91:cc:ce:7e:99:40:be: 8a:1c:27:1d:b1:84:22:b6:ff:af:da:40:b9:72:76:61:5b:03: 7e:e4:7c:85:da:fe:d4:0c:1a:1b:ec:79:a0:a7:ca:f6:b9:3f: 57:0a:89:32:21:c9:ad:bd:dd:ff:08:9d:36:e4:b4:10:0e:d5: e9:93:1b:a2:f5:14:0c:dc:f6:55:d4:5f:8f:51:ff:15:5b:ab: 6c:b0:9a:72:ef:d6:d4:d9:82:43:43:d5:96:a6:dd:a0:19:80: a3:32:ec:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG MTkyQjhBRjkwHhcNMjUwNzMxMDQxNjIzWhcNMjUwODA3MDQxNjIzWjAYMRYwFAYD VQQDEw02ODhhZWUxOC03MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVuj0Wr6/kC6U1Apanrd1NFVbY+tDltTy7uPeuMQZxHR9Ha8lddc22VMfUub K8NEGyksNp6xlVu30sO1YIztWnVJhCmcsAahI12EnpoPQLNBo0mWPIoZtolZNWcj aRF1cje4oUZDZ+G7HiijkjKUp3odRr3v0DoEuAjm7JXxa9I7mhGCeEN+xl+LYj1O 3UesLYliUrU1JmUlR9NNJXAV9Kxt3DfWdYJCqaygwbimsqc7YYOOnkxZSL5YfYkg W8EbBsDe7P98NNW+O0m9kl+CR9tJF67vZnT2bs3PJYCM8sa9/Z1ww6QpO2d49YQ7 lckN1LpgzCTaViu67hTA/Ml49wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDewONsO kpOlOKfAmgZT+QYYXmIMMB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2 M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3 Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvEA8xUs0aa2rF8+Kzlg+3YoTjyuMJF0SqWyS727ODESOwXNaQfL1o 18myg40SDoTdtQfaUoUqRYfqafh8Vg43xrzDKTlok72EcsaFx9XqX1m6ryPMMO3U potzE1ZBXE5lVDBR33EgfSTbTUNu09ojudMI6YtI3vWWjjSO33X9ShjPcdJd4v69 DuvZzWLG2EncqNxJ/Xn3xTQIV5HMzn6ZQL6KHCcdsYQitv+v2kC5cnZhWwN+5HyF 2v7UDBob7Hmgp8r2uT9XCokyIcmtvd3/CJ025LQQDtXpkxui9RQM3PZV1F+PUf8V W6tssJpy79bU2YJDQ9WWpt2gGYCjMuye -----END CERTIFICATE-----Generated at Thu Jul 31 18:11:28 2025 by rpki-client