$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json) Hash identifier: TMTDDz0aZ0V2HRrYSo+trfjSqOOH4xupx9kn64PVWqs= Subject key identifier: 2D:68:56:05:4D:84:F7:82:9E:22:2E:A2:0B:55:BD:5F:7C:33:CD:2D Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft Manifest number: 040D Signing time: Fri 05 Sep 2025 00:43:18 +0000 Manifest this update: Fri 05 Sep 2025 00:43:17 +0000 Manifest next update: Fri 12 Sep 2025 00:43:17 +0000 Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: +4ALYg/6sNRuvXJYNw64xLrBagVgAW/zDnTrWVZEAM0=) 2: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: 6+2Lk4Xai3HUwAmjg8bW8UOOypYan1IgfWd2mzH9/MA=) 3: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: P2hgHU8XOvbHIrBabwcVzNSzMatmcwCF4tAzz5uDO10=) 4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 4y99R2661TzfOkabp7/pgfm0pWxC4+jDx6PFu0Fa6p8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Sep 5 00:43:17 2025 GMT Not After : Sep 12 00:43:17 2025 GMT Subject: CN=68ba3225-840c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:72:0a:38:96:08:e6:d5:cb:4d:0f:6f:4f:09: f1:27:1d:fc:48:ab:2a:65:f3:ee:7e:bc:2d:f4:57: d7:a1:f8:75:8b:30:89:5d:9d:15:74:c1:34:a5:cf: b5:95:87:bc:ce:57:d9:06:3b:6f:e4:9d:fb:72:06: f6:e4:54:78:a5:94:01:57:05:dc:91:b3:56:ba:db: 50:cd:4c:9e:3e:82:74:de:a8:e6:21:59:e7:7f:fe: 6a:62:25:19:75:dc:e7:03:85:bd:a1:48:19:a2:e8: 96:9a:4f:59:f4:c0:04:22:1f:10:96:ff:f5:48:b6: 0e:b0:9c:bb:a5:17:1a:c7:e6:47:59:34:d1:c2:ca: b6:4b:b5:23:23:96:6b:3c:9a:6f:76:d6:d7:fc:fe: 32:e1:d9:4f:58:5f:42:5a:a5:78:0b:a2:c1:f1:35: 7b:2f:cc:f5:fd:24:1d:2b:05:a8:bb:b0:0a:d3:8f: 3c:65:42:0d:66:db:e6:e9:15:61:94:f0:97:b4:cf: f2:ac:a2:86:16:9f:aa:14:57:5c:ed:7e:07:aa:d9: 0d:bb:25:a2:05:09:7a:58:66:a3:4f:3a:40:0d:76: 24:c8:4b:bc:c6:e4:42:6a:00:52:d7:10:35:b3:0c: b3:0f:2c:1e:d0:56:73:5b:9c:57:9c:2f:bb:3a:de: 8a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:68:56:05:4D:84:F7:82:9E:22:2E:A2:0B:55:BD:5F:7C:33:CD:2D X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:7c:83:1d:f5:8c:f2:4b:aa:7b:f5:bc:dd:aa:65:54:37:24: ec:76:b4:c9:5e:e0:32:49:23:62:3b:e2:21:39:7a:53:c1:05: 04:8e:2e:47:e9:21:85:3f:fa:68:46:03:74:0b:40:98:2d:a3: c2:a4:2c:43:30:37:8e:b1:eb:7c:2c:ee:b5:48:46:62:1b:f7: 44:9d:cd:5f:6b:aa:87:91:7f:45:7e:3a:2c:2d:cf:c7:3c:66: 93:64:57:30:8e:99:17:ee:d8:b4:83:91:c0:2c:ec:1f:c3:46: f4:0c:20:47:de:77:ed:10:bd:5c:59:c2:4f:16:fb:1b:6b:75: f5:aa:82:c2:c2:e7:f2:09:b8:ba:9b:14:fc:8b:6c:c2:6d:04: 35:0c:b1:18:06:28:e7:d3:7c:7b:71:93:f0:b2:7f:af:90:f5: 3e:6a:9e:44:5a:2c:f3:12:04:ea:ee:d6:3b:28:a5:76:fb:8f: 4e:6a:d2:15:57:22:19:bf:8a:b6:cb:27:8a:3d:3b:76:01:2d: b4:3e:e1:57:aa:ea:57:da:a3:85:53:08:9e:ba:96:b7:b6:fb: 5d:ce:cb:13:3a:80:bd:99:90:3b:c7:62:5c:03:cf:53:b5:44: f2:d6:7c:cd:53:91:a2:6f:77:eb:03:22:75:53:96:3d:23:bb: 2d:78:36:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjUwOTA1MDA0MzE3WhcNMjUwOTEyMDA0MzE3WjAYMRYwFAYD VQQDEw02OGJhMzIyNS04NDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nIKOJYI5tXLTQ9vTwnxJx38SKsqZfPufrwt9FfXofh1izCJXZ0VdME0pc+1 lYe8zlfZBjtv5J37cgb25FR4pZQBVwXckbNWuttQzUyePoJ03qjmIVnnf/5qYiUZ ddznA4W9oUgZouiWmk9Z9MAEIh8Qlv/1SLYOsJy7pRcax+ZHWTTRwsq2S7UjI5Zr PJpvdtbX/P4y4dlPWF9CWqV4C6LB8TV7L8z1/SQdKwWou7AK0488ZUINZtvm6RVh lPCXtM/yrKKGFp+qFFdc7X4HqtkNuyWiBQl6WGajTzpADXYkyEu8xuRCagBS1xA1 swyzDywe0FZzW5xXnC+7Ot6KMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1oVgVN hPeCniIuogtVvV98M80tMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldk NnVVQWVTNl85NDBBckxkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFfIMd9YzyS6p79bzdqmVUNyTsdrTJXuAySSNiO+IhOXpTwQUEji5H 6SGFP/poRgN0C0CYLaPCpCxDMDeOset8LO61SEZiG/dEnc1fa6qHkX9FfjosLc/H PGaTZFcwjpkX7ti0g5HALOwfw0b0DCBH3nftEL1cWcJPFvsba3X1qoLCwufyCbi6 mxT8i2zCbQQ1DLEYBijn03x7cZPwsn+vkPU+ap5EWizzEgTq7tY7KKV2+49OatIV VyIZv4q2yyeKPTt2AS20PuFXqupX2qOFUwieupa3tvtdzssTOoC9mZA7x2JcA89T tUTy1nzNU5Gib3frAyJ1U5Y9I7steDZX -----END CERTIFICATE-----Generated at Sat Sep 6 13:28:59 2025 by rpki-client