$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft File: PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json) Hash identifier: Gp50sfVKsmI1UuwU+77ZHw+LgXhzHNyAkl0mH0HrcMA= Subject key identifier: DB:CB:59:9D:C1:AC:FF:D1:A0:53:48:5A:EF:3A:86:80:00:86:66:3F Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F Certificate issuer: /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Certificate serial: 0701 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft Manifest number: 06FA Signing time: Sun 02 Nov 2025 21:55:22 +0000 Manifest this update: Sun 02 Nov 2025 21:55:22 +0000 Manifest next update: Sun 09 Nov 2025 21:55:22 +0000 Files and hashes: 1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: pg7aMK6x/s2BxTo/eMqwZ6i5sdURsLVKmb/4iGpONd8=) 2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: PSEZLzwnpVP0bMdPm9ss1klBUjjhwDdtS6Etm70E9UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Validity Not Before: Nov 2 21:55:22 2025 GMT Not After : Nov 9 21:55:22 2025 GMT Subject: CN=6907d34a-f002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9c:73:94:42:c8:a0:d2:23:9a:3d:64:68:57: 1d:d9:d2:f4:86:71:f1:e4:3d:cf:fe:23:55:1b:62: d7:ef:35:8f:56:03:3e:b9:dc:c1:fe:40:8b:67:e7: cb:53:9a:e4:62:b0:4a:58:9a:23:23:0f:41:13:d5: 32:2d:98:43:cc:5a:2e:7f:a2:35:da:c3:1a:dc:a0: d2:0a:0a:eb:65:d9:9d:da:50:42:8f:21:10:1c:68: 82:0b:2c:27:50:86:11:02:38:25:29:66:18:14:e6: f9:9c:e0:a9:6e:63:72:5f:46:5a:db:67:75:ce:94: 22:e9:68:cb:10:07:9d:92:3b:7e:6c:5c:49:e3:9a: 47:6a:7c:1f:f0:2b:dc:fd:da:cd:38:c7:df:2b:49: e6:14:fa:03:8f:cf:0c:e6:0b:4e:df:d3:bd:6c:f8: 87:e5:38:1b:ff:df:e2:64:a2:d5:8b:08:84:cf:0d: 57:91:3b:f9:6d:d5:ee:7f:65:48:36:17:5f:8a:da: 3f:53:b4:c4:db:d1:a9:ea:98:c7:10:3a:9c:d2:16: cc:8d:ce:52:21:d3:9f:a7:e1:42:c7:42:9c:d8:28: d2:33:20:70:ee:b1:35:22:a4:8e:4a:6a:d7:15:5e: 78:63:08:36:80:27:18:20:40:4c:53:52:71:ce:13: b8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CB:59:9D:C1:AC:FF:D1:A0:53:48:5A:EF:3A:86:80:00:86:66:3F X509v3 Authority Key Identifier: keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:fd:41:be:b0:b3:0a:24:25:c2:37:ab:22:92:3c:34:40:a1: bf:00:29:1b:f5:28:a5:74:c5:70:7c:0d:39:1e:67:ff:2b:46: 48:7c:d9:9d:8b:73:78:e8:03:f8:77:3d:6e:4e:95:fa:ff:e8: a9:41:71:d0:c8:2c:e4:53:81:2c:e8:e7:5d:f0:8f:37:68:ce: 42:32:9a:fd:c7:94:77:02:b7:89:42:02:d9:94:59:49:4e:f3: 84:77:af:df:6c:60:37:3f:23:bb:a6:b3:8f:20:7c:cc:d8:38: a3:3b:d6:92:a1:d4:64:f0:41:59:11:5d:41:8b:cf:56:da:fd: c9:d3:d4:30:88:f8:c8:10:95:8e:ea:6f:13:2f:cc:5b:68:d8: 58:2d:ed:8a:46:a8:b8:86:32:a8:64:43:90:96:ed:ef:c4:9e: 56:39:2c:0a:1e:51:43:05:e4:51:3d:3c:38:c2:ca:75:b0:34: 15:1e:ab:e2:68:43:9a:3a:e9:32:79:7f:e0:f8:2e:79:e1:25: 31:91:80:da:81:48:b5:f4:68:f3:72:3e:b5:85:9c:84:67:c3: 14:83:18:e0:52:c3:7d:66:97:26:99:ab:94:a4:83:2b:fa:50: 87:49:cc:ea:52:a5:da:88:59:07:1c:89:59:19:d5:33:7e:82: 93:87:10:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QzIxMTAvBgNVBAUTKDNFRTUyMjk3NjEzMDZCOTdCREE3RkJFMUYyNENCNEIw NEQ0OTI1OEYwHhcNMjUxMTAyMjE1NTIyWhcNMjUxMTA5MjE1NTIyWjAYMRYwFAYD VQQDEw02OTA3ZDM0YS1mMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JxzlELIoNIjmj1kaFcd2dL0hnHx5D3P/iNVG2LX7zWPVgM+udzB/kCLZ+fL U5rkYrBKWJojIw9BE9UyLZhDzFouf6I12sMa3KDSCgrrZdmd2lBCjyEQHGiCCywn UIYRAjglKWYYFOb5nOCpbmNyX0Za22d1zpQi6WjLEAedkjt+bFxJ45pHanwf8Cvc /drNOMffK0nmFPoDj88M5gtO39O9bPiH5Tgb/9/iZKLViwiEzw1XkTv5bdXuf2VI Nhdfito/U7TE29Gp6pjHEDqc0hbMjc5SIdOfp+FCx0Kc2CjSMyBw7rE1IqSOSmrX FV54Ywg2gCcYIEBMU1JxzhO4ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvLWZ3B rP/RoFNIWu86hoAAhmY/MB8GA1UdIwQYMBaAFD7lIpdhMGuXvaf74fJMtLBNSSWP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhDMi9GNjlDM0JBQzY2 OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1ZTlwX3ZoOGt5MHNFMUpK WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1VWlsMkV3YTVlOXBfdmg4a3kwc0UxSkpZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhDMi9GNjlDM0JBQzY2OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1 ZTlwX3ZoOGt5MHNFMUpKWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn/UG+sLMKJCXCN6sikjw0QKG/ACkb9SildMVwfA05Hmf/K0ZIfNmd i3N46AP4dz1uTpX6/+ipQXHQyCzkU4Es6Odd8I83aM5CMpr9x5R3AreJQgLZlFlJ TvOEd6/fbGA3PyO7prOPIHzM2DijO9aSodRk8EFZEV1Bi89W2v3J09QwiPjIEJWO 6m8TL8xbaNhYLe2KRqi4hjKoZEOQlu3vxJ5WOSwKHlFDBeRRPTw4wsp1sDQVHqvi aEOaOukyeX/g+C554SUxkYDagUi19Gjzcj61hZyEZ8MUgxjgUsN9ZpcmmauUpIMr +lCHSczqUqXaiFkHHIlZGdUzfoKThxA6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:21 2025 by rpki-client