$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json) Hash identifier: yB4YycGNqgEDhsx17hYjpKGY3zUosD6R5uKigal3P+Q= Subject key identifier: 33:60:5D:1E:69:4E:51:5B:BD:F4:3B:A0:0B:DB:46:AC:5B:F1:EB:AD Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Certificate serial: 1399 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft Manifest number: 138E Signing time: Wed 22 Oct 2025 17:20:37 +0000 Manifest this update: Wed 22 Oct 2025 17:20:37 +0000 Manifest next update: Wed 29 Oct 2025 17:20:37 +0000 Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: 9Dl2o+rpP/xDqn96hHoL3NIPcfvOpB97vJG/hxxvjMw=) 2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: cVw4oQcu4jILJ7GW153O1ZXHHSwLOkKZrLSzT1rC+6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5017 (0x1399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Validity Not Before: Oct 22 17:20:37 2025 GMT Not After : Oct 29 17:20:37 2025 GMT Subject: CN=68f91265-1981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:59:d3:ba:9d:fc:bc:bf:c6:63:1d:11:18:f1: c5:30:88:46:37:ba:39:b9:42:12:be:3d:37:4b:1c: a3:a9:da:02:d0:6b:60:a7:0d:b4:53:0c:a9:4f:c9: 62:ea:bb:75:8d:4f:e3:7b:82:a5:a6:ed:5d:1b:99: b8:ca:f2:a6:a4:5c:52:c4:68:b0:1f:32:62:44:bd: c7:9b:78:65:9b:cf:01:b1:9e:1b:2b:c1:19:5b:87: ae:85:a9:21:cb:c5:c0:74:dd:06:c9:14:f0:78:78: 6e:c5:ca:ca:d0:10:c9:78:f8:3a:f8:d6:ba:2b:1c: 2d:32:44:8e:b9:a4:76:52:a3:da:f7:e1:4f:9f:a8: f0:1d:40:8d:86:bf:d1:46:7a:69:7a:02:f0:3f:d1: aa:60:7c:79:f7:44:aa:2e:ec:19:9a:19:83:a7:ef: e5:a5:56:bf:ca:67:c7:ae:5a:88:84:b3:0e:a0:b1: 2a:63:fe:42:6e:3d:b4:ba:d0:e6:cd:86:45:6b:21: a9:a7:6b:fc:c4:ce:b8:9d:c6:1d:01:de:4a:90:22: b2:63:5f:3f:99:cc:48:36:50:86:2a:cd:3f:51:d4: 0b:f3:77:e8:ac:91:5e:83:c4:b8:b7:2e:1f:a3:46: d9:fd:82:d7:e6:d2:c7:96:94:38:4c:73:18:88:c0: 6b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:60:5D:1E:69:4E:51:5B:BD:F4:3B:A0:0B:DB:46:AC:5B:F1:EB:AD X509v3 Authority Key Identifier: keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:50:50:91:0c:f6:0b:2e:23:40:26:93:8a:99:14:22:ac:7f: 91:60:6f:f3:eb:73:64:27:73:2b:14:37:35:22:e2:91:3c:de: a9:5a:3c:7c:3b:d9:e0:01:65:bf:5f:58:46:17:1a:2e:02:b1: 87:d4:e1:3b:f0:e8:09:51:d1:ea:62:74:fb:44:44:dc:de:75: 3e:54:7c:93:36:dc:6a:f0:e1:e4:ed:59:04:77:44:52:32:f0: 42:2a:9b:24:cb:4c:2b:34:ce:17:a8:69:31:95:aa:f1:b8:71: 25:ef:5c:ed:8e:7b:ca:8c:f6:72:75:92:93:11:4b:db:90:0f: ea:41:f3:66:3f:d6:9c:71:cd:63:a9:75:09:97:b6:da:8e:f6: 6e:73:18:de:92:c6:45:27:ea:e1:27:36:40:b4:c9:f8:b3:0f: a8:b0:80:26:c6:4f:b0:67:51:f9:b2:61:e3:1a:6c:39:f6:7f: 38:77:30:5b:a0:91:02:d8:44:e8:5c:56:27:3c:3f:0d:1b:dd: 6b:1a:93:a6:73:2b:8f:f0:89:c0:35:f9:5e:42:a0:cd:10:bd: 00:75:eb:fa:36:6b:31:91:54:fe:1a:f9:8c:01:6f:9d:3d:f1: 81:f9:10:63:0d:db:40:07:c7:d4:be:29:c1:a5:a4:7c:3e:3a: 49:3f:e4:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRkUxMTAvBgNVBAUTKDNENDNFREZFNjRGNjE0RTExMzA2QTg3RjFFRjI0RjI4 MkU3RTM3MTQwHhcNMjUxMDIyMTcyMDM3WhcNMjUxMDI5MTcyMDM3WjAYMRYwFAYD VQQDEw02OGY5MTI2NS0xOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51nTup38vL/GYx0RGPHFMIhGN7o5uUISvj03SxyjqdoC0Gtgpw20UwypT8li 6rt1jU/je4Klpu1dG5m4yvKmpFxSxGiwHzJiRL3Hm3hlm88BsZ4bK8EZW4euhakh y8XAdN0GyRTweHhuxcrK0BDJePg6+Na6KxwtMkSOuaR2UqPa9+FPn6jwHUCNhr/R RnppegLwP9GqYHx590SqLuwZmhmDp+/lpVa/ymfHrlqIhLMOoLEqY/5Cbj20utDm zYZFayGpp2v8xM64ncYdAd5KkCKyY18/mcxINlCGKs0/UdQL83forJFeg8S4ty4f o0bZ/YLX5tLHlpQ4THMYiMBrbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNgXR5p TlFbvfQ7oAvbRqxb8eutMB8GA1UdIwQYMBaAFD1D7f5k9hThEwaofx7yTygufjcU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJGRS83MTgxN0Y2Q0E1 QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZPRVRCcWhfSHZKUEtDNS1O eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVUHRfbVQyRk9FVEJxaF9IdkpQS0M1LU54US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJGRS83MTgxN0Y2Q0E1QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZP RVRCcWhfSHZKUEtDNS1OeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtUFCRDPYLLiNAJpOKmRQirH+RYG/z63NkJ3MrFDc1IuKRPN6pWjx8 O9ngAWW/X1hGFxouArGH1OE78OgJUdHqYnT7RETc3nU+VHyTNtxq8OHk7VkEd0RS MvBCKpsky0wrNM4XqGkxlarxuHEl71ztjnvKjPZydZKTEUvbkA/qQfNmP9accc1j qXUJl7bajvZucxjeksZFJ+rhJzZAtMn4sw+osIAmxk+wZ1H5smHjGmw59n84dzBb oJEC2EToXFYnPD8NG91rGpOmcyuP8InANfleQqDNEL0Adev6NmsxkVT+GvmMAW+d PfGB+RBjDdtAB8fUvinBpaR8PjpJP+Tg -----END CERTIFICATE-----Generated at Thu Oct 23 20:05:45 2025 by rpki-client