$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft File: PudBKv6HPx1FurYUcUoyAeNilpE.mft (raw, json) Hash identifier: utucte0Zr9MpTRcHMKfhoe6YKTdXCkhf51YWS/Lo+h0= Subject key identifier: D0:AB:E8:29:3B:81:D4:FA:BD:03:69:F4:47:20:59:74:3E:70:BE:D6 Authority key identifier: 3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 Certificate issuer: /CN=A91E3680/serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft Manifest number: 05F2 Signing time: Thu 18 Sep 2025 23:15:26 +0000 Manifest this update: Thu 18 Sep 2025 23:15:25 +0000 Manifest next update: Thu 25 Sep 2025 23:15:25 +0000 Files and hashes: 1: PudBKv6HPx1FurYUcUoyAeNilpE.crl (hash: zA2xeSQefrWqJbetH5tLqgdSRq22dSvJSm9yeC+R/HY=) 2: B46FE2D0C5CA11EBB86D320BC4F9AE02.roa (hash: 3B4/3AAyZ28QeeGH+anThU9lLQ63dUv2fBzc3BmfNS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3680, serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Validity Not Before: Sep 18 23:15:25 2025 GMT Not After : Sep 25 23:15:25 2025 GMT Subject: CN=68cc928d-cbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f6:2b:7a:57:9b:8f:74:c9:c6:93:7d:90:38: a4:bd:6f:11:84:45:a3:01:a5:31:26:34:f8:bd:a3: 8c:ab:42:c4:d4:6f:13:4f:3c:88:dd:13:40:fb:1c: ac:2d:89:0e:4a:35:b7:f3:cc:3b:be:25:55:8d:b7: 9b:4e:67:80:fc:09:2d:e6:80:74:43:9c:82:42:55: 0f:fd:10:2f:f7:58:8a:4f:76:6e:01:25:3a:57:2a: f3:f6:e3:0a:d4:34:15:de:b6:6b:5c:40:0b:88:d4: eb:f5:cb:6c:37:6e:f8:76:7a:08:1f:30:5b:b0:12: 8d:81:ed:8e:d8:2e:4b:c5:97:93:4d:81:95:ed:f3: 67:56:f1:18:00:85:7a:34:98:16:f3:5f:07:9e:75: 57:ab:55:74:96:3c:39:be:75:5d:70:9a:fe:f3:f8: 5a:cb:64:06:2a:65:85:8b:87:69:e1:39:39:5f:31: 25:bf:16:b9:1b:42:fc:31:ec:c4:23:94:34:9c:fc: 0f:51:bc:1c:8b:42:a1:95:0e:23:ef:86:73:b2:73: 98:cf:74:3b:b9:26:cd:6c:12:2d:d7:23:d4:5d:be: 50:d6:ea:aa:ac:fc:a0:96:93:6f:c1:b3:2b:39:e0: 79:12:fa:bd:e7:34:07:36:4d:81:ed:1d:ff:1f:49: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AB:E8:29:3B:81:D4:FA:BD:03:69:F4:47:20:59:74:3E:70:BE:D6 X509v3 Authority Key Identifier: keyid:3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:fa:b9:f4:a5:83:d1:37:99:57:a5:98:7e:f9:77:4d:14:33: 71:96:e6:0c:99:82:1e:1e:65:0d:ed:f6:fd:63:bf:66:3e:21: 06:19:7b:99:65:da:29:b9:23:27:25:8b:63:3e:cf:8c:c8:51: 89:dc:2d:17:7b:45:ca:60:b0:8d:4d:79:6f:b7:e9:3d:fd:51: 7b:53:ec:4b:a1:b7:66:99:25:75:b0:d0:8c:67:e3:30:b4:59: 99:fa:cd:6f:c3:08:c5:49:19:1b:52:67:f0:50:dc:26:34:21: a6:40:0d:7f:83:ab:a3:66:f8:63:b6:2e:c2:6f:84:d3:48:bc: 24:ad:bd:4c:75:66:e2:39:00:8f:57:e4:64:12:c2:9b:aa:da: 48:78:21:16:91:66:a3:92:16:6b:5c:97:b7:0b:e1:54:de:78: a2:a7:90:15:92:7c:bb:54:4c:a5:27:01:ba:bd:7b:a9:dc:87: 8e:20:b8:99:96:c6:97:77:68:2d:5c:97:f5:6f:e0:8c:f3:8e: 13:54:a7:0b:15:24:9e:b7:ee:07:b3:04:24:4d:54:87:bd:df: dd:68:83:d1:72:30:72:93:c6:8a:f6:7f:38:26:4f:a7:c7:36: 9a:d9:26:0c:40:3f:74:9e:33:f8:ba:f6:4c:9c:8d:52:24:19: d1:73:cb:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM2ODAxMTAvBgNVBAUTKDNFRTc0MTJBRkU4NzNGMUQ0NUJBQjYxNDcxNEEzMjAx RTM2Mjk2OTEwHhcNMjUwOTE4MjMxNTI1WhcNMjUwOTI1MjMxNTI1WjAYMRYwFAYD VQQDEw02OGNjOTI4ZC1jYmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvYrelebj3TJxpN9kDikvW8RhEWjAaUxJjT4vaOMq0LE1G8TTzyI3RNA+xys LYkOSjW388w7viVVjbebTmeA/Akt5oB0Q5yCQlUP/RAv91iKT3ZuASU6Vyrz9uMK 1DQV3rZrXEALiNTr9ctsN274dnoIHzBbsBKNge2O2C5LxZeTTYGV7fNnVvEYAIV6 NJgW818HnnVXq1V0ljw5vnVdcJr+8/hay2QGKmWFi4dp4Tk5XzElvxa5G0L8MezE I5Q0nPwPUbwci0KhlQ4j74ZzsnOYz3Q7uSbNbBIt1yPUXb5Q1uqqrPyglpNvwbMr OeB5Evq95zQHNk2B7R3/H0kuBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCr6Ck7 gdT6vQNp9EcgWXQ+cL7WMB8GA1UdIwQYMBaAFD7nQSr+hz8dRbq2FHFKMgHjYpaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzY4MC9ENDk5MTg2MkM1 QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4MUZ1cllVY1VveUFlTmls cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1ZEJLdjZIUHgxRnVyWVVjVW95QWVOaWxwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzY4MC9ENDk5MTg2MkM1QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4 MUZ1cllVY1VveUFlTmlscEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1+rn0pYPRN5lXpZh++XdNFDNxluYMmYIeHmUN7fb9Y79mPiEGGXuZ ZdopuSMnJYtjPs+MyFGJ3C0Xe0XKYLCNTXlvt+k9/VF7U+xLobdmmSV1sNCMZ+Mw tFmZ+s1vwwjFSRkbUmfwUNwmNCGmQA1/g6ujZvhjti7Cb4TTSLwkrb1MdWbiOQCP V+RkEsKbqtpIeCEWkWajkhZrXJe3C+FU3niip5AVkny7VEylJwG6vXup3IeOILiZ lsaXd2gtXJf1b+CM844TVKcLFSSet+4HswQkTVSHvd/daIPRcjByk8aK9n84Jk+n xzaa2SYMQD90njP4uvZMnI1SJBnRc8sl -----END CERTIFICATE-----Generated at Fri Sep 19 05:36:39 2025 by rpki-client