$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft File: PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json) Hash identifier: Ee0GYhnyCwmmyXw8pO0D5hkEu3n+pGx4oqU8MmO9Hwg= Subject key identifier: F7:D3:0C:EC:EC:BD:EB:14:C9:73:9A:F6:F8:30:1D:9A:DD:C7:AF:4B Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F Certificate issuer: /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft Manifest number: 06D4 Signing time: Fri 22 Aug 2025 22:12:42 +0000 Manifest this update: Fri 22 Aug 2025 22:12:42 +0000 Manifest next update: Fri 29 Aug 2025 22:12:42 +0000 Files and hashes: 1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: OR9ujeYZADI+Omv0zUfLMERRbQ6vwoRLWAzRhOwKHDc=) 2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: QCHui8d37ydNx5pkaHoJoeho1nXwmP/z+o5jMR8k9Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Validity Not Before: Aug 22 22:12:42 2025 GMT Not After : Aug 29 22:12:42 2025 GMT Subject: CN=68a8eb5a-ee59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:b9:50:7a:5b:d1:5e:7d:d0:3a:b4:d4:c7: b7:78:f7:27:bb:f7:2b:06:de:bb:6e:57:79:16:1a: c0:d6:ae:8b:6a:ce:76:e7:7c:d8:fb:bc:ec:3b:05: d4:df:b0:67:b4:7b:54:cb:09:8b:f9:ac:0f:e2:78: 5c:1f:89:ff:34:f8:2d:64:42:87:0b:4e:e4:42:e0: dd:37:ef:9b:f7:36:26:60:24:4a:a7:4f:3e:cb:5d: 47:f4:7d:d9:7b:51:96:a5:f1:e1:91:4e:4c:3a:a0: 72:69:77:eb:cd:4a:d1:7f:23:8b:03:23:05:be:a6: 07:6d:c5:38:f8:81:d9:a5:64:80:cb:6a:64:90:1e: f5:83:5a:53:95:58:4b:9c:5a:d6:71:44:4a:9d:b5: 26:c1:ec:56:67:af:97:c8:75:6b:c7:9d:94:8b:ba: 95:da:a8:60:6f:7d:9f:8e:9c:a0:ed:b0:7f:39:bb: e9:e6:20:62:52:bd:5f:26:e2:8e:ea:e4:45:cb:c9: c8:02:30:85:9e:d7:b7:ae:1f:f8:22:32:69:9f:1d: e2:11:6f:c6:8a:d5:a2:2e:ce:f1:5e:63:91:55:16: 99:5d:b9:60:c9:77:31:f2:5c:ca:71:0b:ee:8e:64: 3d:6a:63:71:15:b0:98:b4:00:5d:a7:dd:71:23:5e: 75:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D3:0C:EC:EC:BD:EB:14:C9:73:9A:F6:F8:30:1D:9A:DD:C7:AF:4B X509v3 Authority Key Identifier: keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:5e:0f:d1:cd:2c:f1:e7:af:72:bd:9a:20:41:30:c9:1f:65: 8f:0b:f2:98:d0:20:1b:34:a3:54:53:48:92:c7:85:59:8b:22: 78:8f:ef:d1:8e:33:ca:83:ea:ab:aa:1e:7e:de:ff:5c:a2:f2: b5:99:b7:9e:8a:1b:82:d8:81:cf:c7:ff:fd:10:13:93:4b:b3: e1:55:3a:5c:c6:9b:e2:c4:c8:aa:4f:44:49:a2:66:98:9b:45: 17:40:7c:b0:ad:0b:f1:a6:92:ae:b9:6f:97:1a:3c:89:e7:c2: 4e:32:b9:2d:bb:7f:d4:d0:d3:0e:38:ba:55:c7:43:7b:95:a6: 85:1e:12:7f:81:6b:3b:f0:6a:97:83:ff:31:70:5e:00:11:ba: a7:0e:3a:49:27:fd:de:39:61:6e:31:33:36:78:a0:7f:d2:58: 6d:c6:29:ee:ea:8b:e0:6e:52:87:2c:c8:c7:05:c0:c9:6b:e2: 4a:ce:6f:dd:9c:a1:4c:b8:05:de:f5:44:e7:76:2a:bc:d0:71: 19:57:58:87:45:f6:cd:c9:90:9f:eb:31:d4:33:50:8e:a8:13: dc:88:29:28:e9:16:1d:fc:a7:91:f6:25:04:b0:65:fc:e3:e9: a3:51:38:c9:0a:ac:1c:a4:2e:cc:c8:30:ae:81:fd:20:3d:5e: 4b:87:93:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QzIxMTAvBgNVBAUTKDNFRTUyMjk3NjEzMDZCOTdCREE3RkJFMUYyNENCNEIw NEQ0OTI1OEYwHhcNMjUwODIyMjIxMjQyWhcNMjUwODI5MjIxMjQyWjAYMRYwFAYD VQQDEw02OGE4ZWI1YS1lZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviq5UHpb0V590Dq01Me3ePcnu/crBt67bld5FhrA1q6Las5253zY+7zsOwXU 37BntHtUywmL+awP4nhcH4n/NPgtZEKHC07kQuDdN++b9zYmYCRKp08+y11H9H3Z e1GWpfHhkU5MOqByaXfrzUrRfyOLAyMFvqYHbcU4+IHZpWSAy2pkkB71g1pTlVhL nFrWcURKnbUmwexWZ6+XyHVrx52Ui7qV2qhgb32fjpyg7bB/Obvp5iBiUr1fJuKO 6uRFy8nIAjCFnte3rh/4IjJpnx3iEW/GitWiLs7xXmORVRaZXblgyXcx8lzKcQvu jmQ9amNxFbCYtABdp91xI151GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfTDOzs vesUyXOa9vgwHZrdx69LMB8GA1UdIwQYMBaAFD7lIpdhMGuXvaf74fJMtLBNSSWP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhDMi9GNjlDM0JBQzY2 OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1ZTlwX3ZoOGt5MHNFMUpK WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1VWlsMkV3YTVlOXBfdmg4a3kwc0UxSkpZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhDMi9GNjlDM0JBQzY2OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1 ZTlwX3ZoOGt5MHNFMUpKWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1Xg/RzSzx569yvZogQTDJH2WPC/KY0CAbNKNUU0iSx4VZiyJ4j+/R jjPKg+qrqh5+3v9covK1mbeeihuC2IHPx//9EBOTS7PhVTpcxpvixMiqT0RJomaY m0UXQHywrQvxppKuuW+XGjyJ58JOMrktu3/U0NMOOLpVx0N7laaFHhJ/gWs78GqX g/8xcF4AEbqnDjpJJ/3eOWFuMTM2eKB/0lhtxinu6ovgblKHLMjHBcDJa+JKzm/d nKFMuAXe9UTndiq80HEZV1iHRfbNyZCf6zHUM1COqBPciCko6RYd/KeR9iUEsGX8 4+mjUTjJCqwcpC7MyDCugf0gPV5Lh5O0 -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:58 2025 by rpki-client