$ rpki-client -vvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft File: PUXFozv53U06Htp-0mQGWOH4Mf8.mft (raw, json) Hash identifier: 8bJypvPXwvZpGSBS6Jbn33xg+QEMvGwkgvlDba8zKfM= Subject key identifier: 77:17:8A:89:34:1C:AB:35:57:7F:B1:AC:39:47:5B:42:41:85:26:19 Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF Certificate issuer: /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF Certificate serial: 0B9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft Manifest number: 0B98 Signing time: Fri 30 May 2025 19:11:49 +0000 Manifest this update: Fri 30 May 2025 19:11:49 +0000 Manifest next update: Fri 06 Jun 2025 19:11:49 +0000 Files and hashes: 1: PUXFozv53U06Htp-0mQGWOH4Mf8.crl (hash: RNQg0206LDzuY2PTBpCTxrGtU1Ll2BkzYf2bTCokncI=) 2: A11D7694261F11EAA88CE128C4F9AE02.roa (hash: hoqO9FG6w4Km8eSvitEm9i1d1kTzMCDiWm1RhII3OZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2974 (0xb9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166F0E, serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF Validity Not Before: May 30 19:11:49 2025 GMT Not After : Jun 6 19:11:49 2025 GMT Subject: CN=683a02f5-880b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1c:5b:89:4e:e8:62:74:b9:a6:73:75:54:ed: 98:44:26:ad:23:12:3d:a0:48:b1:92:00:1f:42:9a: 3b:63:35:01:8d:3d:b4:ae:3e:89:8a:8a:c9:89:82: 0a:25:b9:ce:c2:7b:9e:47:39:59:05:f0:62:70:14: 8d:10:d9:0a:b0:1b:0d:b2:07:22:79:9c:65:2f:dc: 70:ba:da:27:2a:63:c3:45:26:59:d8:6d:51:7a:62: 0e:d5:17:db:f9:40:83:43:2d:72:12:06:28:36:55: 63:f5:18:7f:9b:39:57:1a:f3:de:ed:83:e8:bf:4b: 15:1d:7a:93:65:93:a5:51:f5:69:4c:95:f3:23:34: b6:4b:f7:3b:5d:d6:6f:e2:36:9e:38:18:62:d2:55: e5:87:7e:cf:25:50:b6:20:8b:ea:c5:ec:02:85:ea: b5:eb:54:3b:cd:a6:3b:6b:39:81:a4:02:83:d8:7c: 26:f7:a0:0c:49:dd:68:40:0a:06:80:ee:3a:d7:6a: 33:ea:51:e4:22:09:a3:d6:55:b2:cc:27:51:8c:0d: 05:34:4b:f3:b0:9a:c6:6c:36:53:62:d6:9a:03:32: 67:30:fb:2c:8c:08:3c:dd:65:d8:57:61:4b:41:32: ab:34:90:ed:c5:e9:7b:86:fb:77:f3:4a:e9:c5:d3: 4d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:17:8A:89:34:1C:AB:35:57:7F:B1:AC:39:47:5B:42:41:85:26:19 X509v3 Authority Key Identifier: keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:3f:6d:c0:49:a3:79:af:95:fc:2d:c9:92:b2:86:26:d6:2d: 9c:b9:e6:3e:58:72:d8:6d:1d:34:5b:29:c8:b2:e7:05:da:ca: 37:a8:42:da:d8:7e:41:92:95:15:f6:0d:c4:a6:32:dc:4d:99: a1:b5:b8:cd:99:e9:39:ed:b8:c1:b1:81:22:d6:3b:63:e3:b7: 61:f3:07:c0:8c:0f:8b:c1:b7:8c:b7:f0:22:ac:84:5a:b4:c6: ac:a4:c3:ab:08:19:98:a9:e3:81:7d:ba:00:be:dc:34:e1:0c: fd:e6:82:b7:04:0b:9d:b5:53:29:dc:66:9b:ee:94:3e:a9:12: e8:75:7d:91:03:cb:17:c6:7b:9b:a0:ef:8e:1e:7c:93:1d:1b: 08:4d:65:d2:24:ae:e7:a1:6d:bf:d1:0e:13:09:71:e5:9e:5f: e0:b8:b3:79:ec:ff:6b:76:af:0f:c6:ed:85:5e:c1:af:f4:4d: 83:51:d9:0c:01:20:3a:c9:9e:a6:bf:5a:a8:fd:83:cb:6f:7d: 92:ae:62:ca:e5:ab:35:33:0d:14:a2:74:f2:cf:08:0c:80:8b: 36:37:97:af:ae:ba:e8:53:ec:09:f4:cd:6a:fa:6d:c7:6d:a5: fd:4c:44:1d:21:1b:1c:9c:ee:e9:6b:23:eb:1f:ce:0d:91:76: 85:5e:64:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZGMEUxMTAvBgNVBAUTKDNENDVDNUEzM0JGOURENEQzQTFFREE3RUQyNjQwNjU4 RTFGODMxRkYwHhcNMjUwNTMwMTkxMTQ5WhcNMjUwNjA2MTkxMTQ5WjAYMRYwFAYD VQQDEw02ODNhMDJmNS04ODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RxbiU7oYnS5pnN1VO2YRCatIxI9oEixkgAfQpo7YzUBjT20rj6JiorJiYIK JbnOwnueRzlZBfBicBSNENkKsBsNsgcieZxlL9xwutonKmPDRSZZ2G1RemIO1Rfb +UCDQy1yEgYoNlVj9Rh/mzlXGvPe7YPov0sVHXqTZZOlUfVpTJXzIzS2S/c7XdZv 4jaeOBhi0lXlh37PJVC2IIvqxewCheq161Q7zaY7azmBpAKD2Hwm96AMSd1oQAoG gO4612oz6lHkIgmj1lWyzCdRjA0FNEvzsJrGbDZTYtaaAzJnMPssjAg83WXYV2FL QTKrNJDtxel7hvt380rpxdNNVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcXiok0 HKs1V3+xrDlHW0JBhSYZMB8GA1UdIwQYMBaAFD1FxaM7+d1NOh7aftJkBljh+DH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkYwRS8xQTc1OEIwRTI2 MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNVMDZIdHAtMG1RR1dPSDRN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVWEZvenY1M1UwNkh0cC0wbVFHV09INE1mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkYwRS8xQTc1OEIwRTI2MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNV MDZIdHAtMG1RR1dPSDRNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3P23ASaN5r5X8LcmSsoYm1i2cueY+WHLYbR00WynIsucF2so3qELa 2H5BkpUV9g3EpjLcTZmhtbjNmek57bjBsYEi1jtj47dh8wfAjA+LwbeMt/AirIRa tMaspMOrCBmYqeOBfboAvtw04Qz95oK3BAudtVMp3Gab7pQ+qRLodX2RA8sXxnub oO+OHnyTHRsITWXSJK7noW2/0Q4TCXHlnl/guLN57P9rdq8Pxu2FXsGv9E2DUdkM ASA6yZ6mv1qo/YPLb32SrmLK5as1Mw0UonTyzwgMgIs2N5evrrroU+wJ9M1q+m3H baX9TEQdIRscnO7payPrH84NkXaFXmRj -----END CERTIFICATE-----Generated at Sat May 31 17:37:45 2025 by rpki-client