$ rpki-client -vvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft File: PUXFozv53U06Htp-0mQGWOH4Mf8.mft (raw, json) Hash identifier: CjivYiSmeqFLI7/vxOc4UGQ163ItmeB2DprcnBWbeEo= Subject key identifier: 83:AD:46:77:6B:CB:D3:07:FB:4D:C3:C3:69:5C:9B:05:19:D9:25:BA Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF Certificate issuer: /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF Certificate serial: 0BDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft Manifest number: 0BD3 Signing time: Thu 18 Sep 2025 19:06:16 +0000 Manifest this update: Thu 18 Sep 2025 19:06:16 +0000 Manifest next update: Thu 25 Sep 2025 19:06:16 +0000 Files and hashes: 1: PUXFozv53U06Htp-0mQGWOH4Mf8.crl (hash: pN0wDEXecZQJ37U9vWEHMxoWM3kRPMhyMp4xwhqbBqU=) 2: A11D7694261F11EAA88CE128C4F9AE02.roa (hash: UABSLYRv5F+q/4e5iQCmZDPY3VJdi+9iaRXz535SqfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3034 (0xbda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166F0E, serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF Validity Not Before: Sep 18 19:06:16 2025 GMT Not After : Sep 25 19:06:16 2025 GMT Subject: CN=68cc5828-d16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:0f:c9:e6:54:fd:ff:e9:40:9a:e4:69:68: bd:1a:09:3d:76:bd:77:43:48:b5:4b:ee:65:69:00: 60:86:37:3d:00:fa:00:a2:ce:68:2a:f5:d1:bc:96: da:6d:0c:ea:7d:72:b2:3b:d4:b0:fb:b5:7d:1c:b3: 40:6f:e7:00:fa:25:0e:fd:05:96:67:7d:79:ba:42: 6c:9e:7c:c1:51:a7:88:cb:34:d8:7e:bf:78:fa:fa: 39:5f:60:c1:85:9d:e1:12:ba:39:6b:3e:63:f7:ea: ab:8d:b3:d3:a9:9c:2b:bf:07:6b:9d:d7:ee:04:58: 18:b5:42:c3:7e:88:4e:d0:06:2c:a7:10:f2:a6:f3: bb:17:73:4d:e8:0e:eb:6f:88:e2:98:4b:4d:f1:2a: 37:c2:fe:3a:e1:db:21:80:e8:cb:b7:75:f4:ed:c8: 1c:42:2e:34:2e:17:2b:17:bd:fe:b2:e1:19:aa:a6: 95:72:a2:07:ed:ee:4a:f8:1f:31:5c:ea:75:ab:d3: 17:96:67:37:ad:27:06:ce:78:83:c2:65:be:52:7b: c3:9d:44:e8:49:45:fc:f0:aa:e8:f1:76:76:94:4a: 05:f6:d4:8b:81:d8:1c:a5:1a:3b:39:d5:80:4e:2d: c6:26:09:0e:ef:4a:50:b8:c2:46:cc:df:b6:55:03: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AD:46:77:6B:CB:D3:07:FB:4D:C3:C3:69:5C:9B:05:19:D9:25:BA X509v3 Authority Key Identifier: keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:73:19:6f:66:12:61:d8:f8:48:24:90:be:c4:b3:cd:0c:00: bc:73:94:eb:b1:be:13:24:66:42:d0:4a:f5:d5:3a:fd:32:14: 46:80:e1:d1:41:ab:e8:05:65:60:dd:d1:0c:2f:4a:e0:1a:45: f7:31:d7:a1:cb:a0:f2:db:9f:0d:aa:3d:56:2c:72:dd:89:cd: dd:9e:e5:90:cb:b1:a0:e1:8d:2b:08:41:aa:37:f9:d5:61:f8: c4:7d:1d:17:bd:b5:f8:e7:da:56:83:6b:6b:da:21:6e:06:ac: cc:8e:a2:c4:03:d7:f9:ff:c7:28:f1:9c:52:3f:ca:c9:03:11: 21:de:71:7a:30:71:c4:de:4c:c0:11:1b:d3:f7:f9:7a:e6:cd: 28:75:74:27:38:17:e4:a2:a7:3d:60:84:0e:dd:3e:d6:14:62: 8c:55:ec:87:15:eb:c6:0a:a1:dc:22:f0:07:5a:25:ce:ff:af: da:b2:1f:fe:63:bc:38:3d:8f:ee:eb:bf:73:98:21:21:4b:15: 34:a2:51:48:f3:34:30:f9:1a:1d:4e:8a:41:bd:16:b2:ae:ef: a8:5f:ab:9f:2d:a5:93:f1:a9:b2:76:6b:6d:18:7b:91:41:bb: e1:24:c8:41:27:b2:fe:1a:36:1b:62:07:65:dd:83:dc:74:51: 6e:d0:77:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZGMEUxMTAvBgNVBAUTKDNENDVDNUEzM0JGOURENEQzQTFFREE3RUQyNjQwNjU4 RTFGODMxRkYwHhcNMjUwOTE4MTkwNjE2WhcNMjUwOTI1MTkwNjE2WjAYMRYwFAYD VQQDEw02OGNjNTgyOC1kMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/MPyeZU/f/pQJrkaWi9Ggk9dr13Q0i1S+5laQBghjc9APoAos5oKvXRvJba bQzqfXKyO9Sw+7V9HLNAb+cA+iUO/QWWZ315ukJsnnzBUaeIyzTYfr94+vo5X2DB hZ3hEro5az5j9+qrjbPTqZwrvwdrndfuBFgYtULDfohO0AYspxDypvO7F3NN6A7r b4jimEtN8So3wv464dshgOjLt3X07cgcQi40LhcrF73+suEZqqaVcqIH7e5K+B8x XOp1q9MXlmc3rScGzniDwmW+UnvDnUToSUX88Kro8XZ2lEoF9tSLgdgcpRo7OdWA Ti3GJgkO70pQuMJGzN+2VQMt4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOtRndr y9MH+03Dw2lcmwUZ2SW6MB8GA1UdIwQYMBaAFD1FxaM7+d1NOh7aftJkBljh+DH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkYwRS8xQTc1OEIwRTI2 MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNVMDZIdHAtMG1RR1dPSDRN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVWEZvenY1M1UwNkh0cC0wbVFHV09INE1mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkYwRS8xQTc1OEIwRTI2MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNV MDZIdHAtMG1RR1dPSDRNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBcxlvZhJh2PhIJJC+xLPNDAC8c5Trsb4TJGZC0Er11Tr9MhRGgOHR QavoBWVg3dEML0rgGkX3Mdehy6Dy258Nqj1WLHLdic3dnuWQy7Gg4Y0rCEGqN/nV YfjEfR0XvbX459pWg2tr2iFuBqzMjqLEA9f5/8co8ZxSP8rJAxEh3nF6MHHE3kzA ERvT9/l65s0odXQnOBfkoqc9YIQO3T7WFGKMVeyHFevGCqHcIvAHWiXO/6/ash/+ Y7w4PY/u679zmCEhSxU0olFI8zQw+RodTopBvRayru+oX6ufLaWT8amydmttGHuR QbvhJMhBJ7L+GjYbYgdl3YPcdFFu0Hd1 -----END CERTIFICATE-----Generated at Thu Sep 18 23:49:55 2025 by rpki-client