$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft File: PudBKv6HPx1FurYUcUoyAeNilpE.mft (raw, json) Hash identifier: UJWEaTKoNrxnNBfJjrup5dMh+WIkC7UzJ8fMPC6/ODM= Subject key identifier: 23:06:06:1A:F7:B4:DA:F3:30:52:8D:F8:A7:3E:CE:48:B8:7E:B5:68 Authority key identifier: 3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 Certificate issuer: /CN=A91E3680/serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Certificate serial: 05BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft Manifest number: 05B7 Signing time: Fri 30 May 2025 23:19:41 +0000 Manifest this update: Fri 30 May 2025 23:19:41 +0000 Manifest next update: Fri 06 Jun 2025 23:19:41 +0000 Files and hashes: 1: PudBKv6HPx1FurYUcUoyAeNilpE.crl (hash: Dam69tur0u1Ws5bdKTf3X1A1KdJjQj+6fRaYW4YCH6c=) 2: B46FE2D0C5CA11EBB86D320BC4F9AE02.roa (hash: akcQJOcqn6Cqm1e0k8wvVS6O2vanCte0Cwevg6oh+R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3680, serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Validity Not Before: May 30 23:19:41 2025 GMT Not After : Jun 6 23:19:41 2025 GMT Subject: CN=683a3d0d-bd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:46:10:4e:64:d7:32:12:84:3c:cb:ad:0a:4e: 04:68:d7:e7:e6:71:00:20:59:45:a1:9d:fb:53:97: cd:e3:e9:c8:c8:a4:f4:86:f8:58:a8:ea:7f:10:78: b6:16:ed:89:ab:cb:ed:1c:13:07:62:b1:bf:39:52: 9b:05:a3:df:4e:7a:da:2c:31:bf:22:bc:07:8b:93: 9c:0b:a9:93:d0:ae:31:ea:de:84:83:27:22:c2:6d: f9:b6:63:dd:3c:b5:57:ca:06:34:98:de:48:43:fb: 99:7e:63:ce:5f:2c:82:ca:85:d4:b1:59:38:cf:ad: 1d:75:59:34:93:b0:9b:2b:12:8e:e9:12:72:3f:10: 8c:a3:d8:30:77:c8:78:8a:a7:58:64:2e:62:86:23: 43:b3:9a:39:a9:7d:af:b6:e0:35:fd:a2:9b:10:d6: 6b:48:b4:2d:a9:47:c2:c9:65:af:49:d3:5a:3a:3f: be:0d:8a:d8:6c:10:5c:58:2a:fa:e1:8a:8c:57:d9: f6:d1:bf:6b:35:b5:39:cf:89:c8:61:aa:50:4e:ea: f2:ad:19:cb:02:88:ea:5b:81:68:97:05:6d:0a:1a: 90:0f:4e:c6:db:69:56:c9:52:40:d4:a6:e5:87:be: 0d:75:9e:2f:32:c3:9e:08:8a:fc:9a:89:68:f8:d8: c6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:06:06:1A:F7:B4:DA:F3:30:52:8D:F8:A7:3E:CE:48:B8:7E:B5:68 X509v3 Authority Key Identifier: keyid:3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:73:e8:2e:7f:84:ea:f4:eb:1c:62:c3:c1:09:20:f1:07:67: 43:eb:29:ca:f6:2c:f9:ab:b6:89:7d:e7:8e:b6:1f:0d:fb:d9: 71:42:da:ae:04:47:e7:ea:33:91:46:1f:eb:01:8a:83:cb:e5: 80:3e:d4:e6:85:c0:05:2d:b7:6f:f5:02:70:f4:87:67:79:57: cb:96:f7:1e:c0:e6:0b:8e:8a:02:88:a4:40:bd:74:30:ff:53: ac:e5:08:3d:e2:71:d6:6b:49:69:02:d4:51:e9:1e:8c:fb:33: b0:b7:c8:6f:d1:45:2b:8b:8e:99:d1:6c:dd:60:54:16:1f:b3: 74:40:ea:a9:cd:16:37:1d:49:1b:52:40:e8:d5:d2:8a:15:4f: b3:a9:76:00:37:fb:72:2d:31:81:0b:29:72:e1:50:be:bd:1c: 07:21:29:03:e9:2d:a9:a1:79:1a:59:6c:3c:f8:bc:3f:a8:c5: a1:6b:f2:16:40:ee:72:e8:40:74:3d:97:fd:52:43:fc:c5:8b: 52:c2:45:df:77:f8:94:a2:2f:cc:8b:66:f4:03:4a:25:53:51: 2c:95:1e:19:eb:87:a6:9e:7e:1f:27:37:c5:74:d4:ba:32:b9: d7:2e:73:a2:0e:12:f2:05:2f:75:de:b4:ac:fc:77:44:2b:fc: 38:47:00:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM2ODAxMTAvBgNVBAUTKDNFRTc0MTJBRkU4NzNGMUQ0NUJBQjYxNDcxNEEzMjAx RTM2Mjk2OTEwHhcNMjUwNTMwMjMxOTQxWhcNMjUwNjA2MjMxOTQxWjAYMRYwFAYD VQQDEw02ODNhM2QwZC1iZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEYQTmTXMhKEPMutCk4EaNfn5nEAIFlFoZ37U5fN4+nIyKT0hvhYqOp/EHi2 Fu2Jq8vtHBMHYrG/OVKbBaPfTnraLDG/IrwHi5OcC6mT0K4x6t6Egyciwm35tmPd PLVXygY0mN5IQ/uZfmPOXyyCyoXUsVk4z60ddVk0k7CbKxKO6RJyPxCMo9gwd8h4 iqdYZC5ihiNDs5o5qX2vtuA1/aKbENZrSLQtqUfCyWWvSdNaOj++DYrYbBBcWCr6 4YqMV9n20b9rNbU5z4nIYapQTuryrRnLAojqW4FolwVtChqQD07G22lWyVJA1Kbl h74NdZ4vMsOeCIr8molo+NjGDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMGBhr3 tNrzMFKN+Kc+zki4frVoMB8GA1UdIwQYMBaAFD7nQSr+hz8dRbq2FHFKMgHjYpaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzY4MC9ENDk5MTg2MkM1 QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4MUZ1cllVY1VveUFlTmls cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1ZEJLdjZIUHgxRnVyWVVjVW95QWVOaWxwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzY4MC9ENDk5MTg2MkM1QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4 MUZ1cllVY1VveUFlTmlscEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNc+guf4Tq9OscYsPBCSDxB2dD6ynK9iz5q7aJfeeOth8N+9lxQtqu BEfn6jORRh/rAYqDy+WAPtTmhcAFLbdv9QJw9IdneVfLlvcewOYLjooCiKRAvXQw /1Os5Qg94nHWa0lpAtRR6R6M+zOwt8hv0UUri46Z0WzdYFQWH7N0QOqpzRY3HUkb UkDo1dKKFU+zqXYAN/tyLTGBCyly4VC+vRwHISkD6S2poXkaWWw8+Lw/qMWha/IW QO5y6EB0PZf9UkP8xYtSwkXfd/iUoi/Mi2b0A0olU1EslR4Z64emnn4fJzfFdNS6 MrnXLnOiDhLyBS913rSs/HdEK/w4RwCX -----END CERTIFICATE-----Generated at Sat May 31 16:52:12 2025 by rpki-client