$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json) Hash identifier: xthArLhaJKA3heu4xZQkZ9CYe72mceSqxPpIXqpNbdw= Subject key identifier: BD:8E:60:02:9B:E4:A7:51:C9:E8:86:DA:60:FD:9A:41:8D:75:E3:41 Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Certificate serial: 137B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft Manifest number: 1370 Signing time: Sun 24 Aug 2025 16:57:40 +0000 Manifest this update: Sun 24 Aug 2025 16:57:40 +0000 Manifest next update: Sun 31 Aug 2025 16:57:40 +0000 Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: m/XLhyEGGJiNeuXCkntgGynHRYlXa0i3t7UJNK5ECjE=) 2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: cVw4oQcu4jILJ7GW153O1ZXHHSwLOkKZrLSzT1rC+6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4987 (0x137b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Validity Not Before: Aug 24 16:57:40 2025 GMT Not After : Aug 31 16:57:40 2025 GMT Subject: CN=68ab4484-13ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:91:0b:0e:c4:34:2f:5b:91:06:aa:1e:2e: e3:2a:fe:7c:54:46:ed:ad:5b:a4:e6:ba:cc:75:d2: 14:61:87:74:11:bf:67:ba:6b:ed:60:c9:ba:04:7d: c5:25:84:d3:54:ce:9e:a2:2b:c6:14:81:41:99:d4: 4f:cd:c5:01:31:33:69:50:25:9d:49:02:82:77:76: 5e:dd:22:35:5f:15:f5:0f:db:2f:18:f0:71:b7:29: 1c:4d:79:72:3c:db:cf:ea:5f:7e:89:24:9c:a1:2d: f6:ad:8e:f8:7a:2c:03:6e:1e:05:de:72:13:b7:a5: c1:e3:fc:b9:07:89:8e:10:bb:1e:ea:32:eb:ac:aa: 9b:0b:db:67:ab:eb:c6:7d:4f:d9:5c:92:d5:f1:47: df:58:9f:03:6b:c2:6a:5b:5e:af:b3:fa:24:5c:ed: da:77:7b:dc:30:21:8b:52:bb:d4:8c:af:6a:cb:07: d0:b8:04:2f:51:40:e6:c7:c8:2b:9a:6f:b4:11:65: 84:b4:45:47:27:fc:c0:87:12:8e:f6:b5:6e:a1:93: 92:41:f0:a5:1f:2d:26:44:05:a6:c2:a5:09:56:ba: 92:0f:9e:50:2f:bd:49:70:36:18:7f:b1:62:78:3b: 1b:e9:c2:90:70:fe:2f:f6:91:5c:db:fa:85:9a:04: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8E:60:02:9B:E4:A7:51:C9:E8:86:DA:60:FD:9A:41:8D:75:E3:41 X509v3 Authority Key Identifier: keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:21:59:91:2b:55:da:8e:b0:0d:3b:6b:ae:73:59:8f:20:71: 87:e9:0c:f7:c1:5a:8e:cf:7f:04:03:e2:5c:21:41:69:ea:ff: f0:e8:da:8a:a9:8c:45:b4:b2:d2:d1:d8:7d:58:1f:b7:97:d8: 54:76:bb:8c:fb:39:84:7d:09:b7:5d:b9:df:10:1e:6b:52:ab: 1e:9c:8f:4b:ae:26:d6:08:16:7a:96:de:08:21:3a:29:48:4f: e2:43:da:48:4a:d0:8e:8c:d1:73:b0:90:21:57:57:60:6e:cf: f8:a1:76:0a:5b:a3:aa:f4:93:97:a6:4c:5f:f9:91:29:c8:80: 0b:75:d4:57:0e:7d:d2:a5:fb:8b:36:30:56:9e:a6:b5:25:41: 25:bc:a4:11:54:7f:7f:5f:b6:83:98:37:d2:d1:3f:9d:15:00: 68:d9:7f:d2:47:ff:9b:8b:58:fd:4a:ce:ea:a3:ed:d0:6e:22: d4:ef:bb:75:e8:34:0d:db:00:9e:00:91:f6:84:0d:24:e4:55: f0:6b:25:24:52:c3:df:36:af:40:b5:66:9f:99:65:28:73:58: e1:bc:41:0e:92:58:76:87:c9:83:1e:ab:99:eb:52:99:eb:e6: 06:6e:95:66:03:e1:cc:10:57:72:b2:c6:19:55:9d:90:28:cf: 30:a0:1b:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRkUxMTAvBgNVBAUTKDNENDNFREZFNjRGNjE0RTExMzA2QTg3RjFFRjI0RjI4 MkU3RTM3MTQwHhcNMjUwODI0MTY1NzQwWhcNMjUwODMxMTY1NzQwWjAYMRYwFAYD VQQDEw02OGFiNDQ4NC0xM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FGRCw7ENC9bkQaqHi7jKv58VEbtrVuk5rrMddIUYYd0Eb9numvtYMm6BH3F JYTTVM6eoivGFIFBmdRPzcUBMTNpUCWdSQKCd3Ze3SI1XxX1D9svGPBxtykcTXly PNvP6l9+iSScoS32rY74eiwDbh4F3nITt6XB4/y5B4mOELse6jLrrKqbC9tnq+vG fU/ZXJLV8UffWJ8Da8JqW16vs/okXO3ad3vcMCGLUrvUjK9qywfQuAQvUUDmx8gr mm+0EWWEtEVHJ/zAhxKO9rVuoZOSQfClHy0mRAWmwqUJVrqSD55QL71JcDYYf7Fi eDsb6cKQcP4v9pFc2/qFmgSUjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2OYAKb 5KdRyeiG2mD9mkGNdeNBMB8GA1UdIwQYMBaAFD1D7f5k9hThEwaofx7yTygufjcU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJGRS83MTgxN0Y2Q0E1 QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZPRVRCcWhfSHZKUEtDNS1O eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVUHRfbVQyRk9FVEJxaF9IdkpQS0M1LU54US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJGRS83MTgxN0Y2Q0E1QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZP RVRCcWhfSHZKUEtDNS1OeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBIVmRK1XajrANO2uuc1mPIHGH6Qz3wVqOz38EA+JcIUFp6v/w6NqK qYxFtLLS0dh9WB+3l9hUdruM+zmEfQm3XbnfEB5rUqsenI9LribWCBZ6lt4IITop SE/iQ9pIStCOjNFzsJAhV1dgbs/4oXYKW6Oq9JOXpkxf+ZEpyIALddRXDn3SpfuL NjBWnqa1JUElvKQRVH9/X7aDmDfS0T+dFQBo2X/SR/+bi1j9Ss7qo+3QbiLU77t1 6DQN2wCeAJH2hA0k5FXwayUkUsPfNq9AtWafmWUoc1jhvEEOklh2h8mDHquZ61KZ 6+YGbpVmA+HMEFdyssYZVZ2QKM8woBs1 -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:29 2025 by rpki-client