$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json) Hash identifier: Hnq/dYWJvVi8d3es3qiSh6+PreKBE9CgMnkyatVnMd0= Subject key identifier: A5:60:A8:A7:B3:1D:EE:5D:0E:A0:D2:F4:FC:DB:4B:2E:17:45:6F:D0 Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 03EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft Manifest number: 03DC Signing time: Sun 01 Jun 2025 00:46:57 +0000 Manifest this update: Sun 01 Jun 2025 00:46:56 +0000 Manifest next update: Sun 08 Jun 2025 00:46:56 +0000 Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: ediC02+bfqqEHQwBm+ZNHof6acYjBp0k1Ztr/ojNEvs=) 2: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: 6+2Lk4Xai3HUwAmjg8bW8UOOypYan1IgfWd2mzH9/MA=) 3: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: P2hgHU8XOvbHIrBabwcVzNSzMatmcwCF4tAzz5uDO10=) 4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 4y99R2661TzfOkabp7/pgfm0pWxC4+jDx6PFu0Fa6p8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Jun 1 00:46:56 2025 GMT Not After : Jun 8 00:46:56 2025 GMT Subject: CN=683ba301-0c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:73:ca:0e:8f:61:8d:fe:20:ad:62:cd:52: 83:00:8d:9d:af:b4:cf:3e:9f:2d:be:10:64:29:f1: 61:bf:bb:db:b1:fa:f9:52:68:22:18:8b:f9:5f:01: 58:e3:40:51:5b:b9:5b:6f:05:4f:e9:f9:ae:d5:b9: 78:62:96:28:2a:5c:36:cf:13:19:41:e6:7b:0c:00: be:0c:bf:c2:e2:c3:d4:aa:37:8a:1d:80:fe:98:15: 37:62:df:aa:dd:63:7f:18:d1:90:db:a4:4d:b9:89: 57:ef:f8:60:33:67:66:6c:75:d5:e7:00:00:59:10: fc:72:d2:c3:44:33:36:90:6b:71:ad:78:f3:2e:1f: ee:62:3a:48:83:c3:7e:b1:79:36:32:0b:b8:2a:cc: bb:0c:6f:56:fc:b1:86:ac:62:77:25:c4:98:e1:c0: 33:2f:6f:9f:07:61:d3:0a:b0:f8:a2:06:86:60:5e: 17:10:2d:3e:f6:6d:91:9a:37:87:08:66:da:bb:fa: 3c:6c:74:bb:02:f8:78:bf:1d:68:43:e9:54:d7:9e: 8b:c3:0c:e7:70:35:9d:8f:a1:cc:12:51:a9:58:1e: c9:b7:98:9e:10:5e:65:34:02:5e:ef:7a:77:9c:dc: ce:58:22:50:7a:ae:d7:c0:37:7a:17:68:a7:83:8b: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:60:A8:A7:B3:1D:EE:5D:0E:A0:D2:F4:FC:DB:4B:2E:17:45:6F:D0 X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:60:82:f4:03:c1:6d:88:b6:c9:2e:b3:a6:1f:e0:0c:ec:5e: a9:88:a2:ec:78:b1:1c:bf:ad:af:67:1f:fd:d4:c1:95:5d:f4: 86:e8:6e:90:79:1a:c3:01:18:9a:52:0b:1d:f2:c7:d9:a6:05: 48:07:12:70:a4:83:73:7c:c2:bf:23:aa:af:a2:a8:f4:1f:08: e4:cf:cc:88:05:e9:4c:13:13:99:01:ad:90:a9:72:ac:ce:a8: 07:bd:bd:5f:36:ff:fa:79:f9:b1:ae:66:b9:7f:25:b3:41:bd: 63:c3:9d:87:c0:8b:60:90:64:66:b3:38:c9:7f:eb:1b:7a:a7: 87:f7:f2:6d:8f:b1:0e:9b:f3:fc:c0:f4:8e:4d:07:db:8d:2b: da:0e:b8:29:57:89:7e:a5:a5:32:29:a6:7c:01:6d:97:ba:0e: 2c:9a:f5:ef:79:5a:62:a5:a1:cb:91:06:3b:7a:fc:a9:49:b0: f2:74:42:6d:6e:4e:5d:a4:d3:be:1c:13:62:0c:f6:6e:d2:be: a6:a3:18:58:eb:cf:e8:d4:35:1f:0d:0c:06:be:07:29:fc:d2: c9:3d:bf:e9:d0:0b:72:4b:3f:d2:1c:2f:9b:ba:05:68:f6:c9: 47:be:7f:7c:05:eb:a8:33:e5:9f:c9:4e:87:d1:1b:43:fd:a1: 82:b9:64:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjUwNjAxMDA0NjU2WhcNMjUwNjA4MDA0NjU2WjAYMRYwFAYD VQQDEw02ODNiYTMwMS0wYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/Vzyg6PYY3+IK1izVKDAI2dr7TPPp8tvhBkKfFhv7vbsfr5UmgiGIv5XwFY 40BRW7lbbwVP6fmu1bl4YpYoKlw2zxMZQeZ7DAC+DL/C4sPUqjeKHYD+mBU3Yt+q 3WN/GNGQ26RNuYlX7/hgM2dmbHXV5wAAWRD8ctLDRDM2kGtxrXjzLh/uYjpIg8N+ sXk2Mgu4Ksy7DG9W/LGGrGJ3JcSY4cAzL2+fB2HTCrD4ogaGYF4XEC0+9m2RmjeH CGbau/o8bHS7Avh4vx1oQ+lU156LwwzncDWdj6HMElGpWB7Jt5ieEF5lNAJe73p3 nNzOWCJQeq7XwDd6F2ing4u+ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVgqKez He5dDqDS9PzbSy4XRW/QMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldk NnVVQWVTNl85NDBBckxkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+YIL0A8FtiLbJLrOmH+AM7F6piKLseLEcv62vZx/91MGVXfSG6G6Q eRrDARiaUgsd8sfZpgVIBxJwpINzfMK/I6qvoqj0Hwjkz8yIBelMExOZAa2QqXKs zqgHvb1fNv/6efmxrma5fyWzQb1jw52HwItgkGRmszjJf+sbeqeH9/Jtj7EOm/P8 wPSOTQfbjSvaDrgpV4l+paUyKaZ8AW2Xug4smvXveVpipaHLkQY7evypSbDydEJt bk5dpNO+HBNiDPZu0r6moxhY68/o1DUfDQwGvgcp/NLJPb/p0AtySz/SHC+bugVo 9slHvn98BeuoM+WfyU6H0RtD/aGCuWRr -----END CERTIFICATE-----Generated at Mon Jun 2 20:59:53 2025 by rpki-client