$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json) Hash identifier: HUj9hfZsptbSwiRpVCMflYfkbSRQfTj5J1ULZAd4IIg= Subject key identifier: 2A:7B:57:6D:A0:7C:2C:01:31:29:86:13:04:A5:DF:DA:26:4F:E1:FC Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Certificate serial: 1357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft Manifest number: 134C Signing time: Sat 14 Jun 2025 16:57:16 +0000 Manifest this update: Sat 14 Jun 2025 16:57:15 +0000 Manifest next update: Sat 21 Jun 2025 16:57:15 +0000 Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: I2w5Mqo9irxlHXOxv8uHTUFrG0wbabJkFWWC7SRPDiY=) 2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: cVw4oQcu4jILJ7GW153O1ZXHHSwLOkKZrLSzT1rC+6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4951 (0x1357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Validity Not Before: Jun 14 16:57:15 2025 GMT Not After : Jun 21 16:57:15 2025 GMT Subject: CN=684da9eb-e51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:9c:d8:cb:45:a2:9f:b5:e5:89:e7:cf:cf: 79:d7:6b:eb:fa:31:e1:04:64:87:80:dc:f6:aa:21: b3:ca:18:d0:ef:44:0e:f9:5b:0f:4a:ab:77:ca:ae: 44:db:23:09:5b:4e:cd:91:e7:c4:ab:20:f1:91:64: c9:2b:de:d8:e1:f6:ba:0a:42:26:6f:b7:2f:97:97: f3:3f:16:bf:5f:32:10:a0:31:aa:7d:40:95:81:87: 65:ff:59:b4:af:b4:ee:e9:43:24:f7:8b:ea:9c:4b: ef:1a:a3:ba:b2:bf:b7:ae:ff:10:77:55:c9:44:73: 60:46:cb:d5:35:56:c3:51:33:64:e8:95:59:b9:45: ea:69:c5:2f:41:a3:0e:eb:0a:fd:2c:cb:97:0a:f0: 56:ea:2f:08:23:f3:42:d5:e7:ed:d8:b2:69:28:6a: 43:02:c2:99:6d:77:ca:ad:cc:ed:ba:fd:cb:dc:50: 03:e3:42:e5:6b:fb:00:03:cd:43:07:9d:06:fe:85: 34:9a:a0:c6:cd:0a:5a:10:cf:eb:75:e8:54:00:0b: f0:1a:1a:54:9e:8e:76:2e:25:ae:dc:86:a8:38:ef: 9e:b8:4e:d6:f5:00:b4:e8:9e:db:1d:f4:bd:ac:d2: 23:e5:a6:86:8d:fd:2d:7b:41:51:c8:80:84:7d:19: 83:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7B:57:6D:A0:7C:2C:01:31:29:86:13:04:A5:DF:DA:26:4F:E1:FC X509v3 Authority Key Identifier: keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:e0:b5:b4:ca:c2:2b:27:91:c1:c9:c9:7b:77:dc:1d:73:45: 6c:ec:80:e6:00:cd:56:c6:e7:52:f1:fb:63:46:c7:4d:80:d3: 20:0d:7d:7d:87:6e:eb:67:17:b1:2d:1c:a9:bc:fe:09:94:c2: 6c:ac:38:04:dc:a3:65:e5:09:42:d2:e1:3a:c3:95:42:27:e6: 92:02:ab:c4:bd:71:2f:3c:0e:ad:1e:01:5d:bc:7a:89:c0:bb: 90:83:88:18:83:0c:73:19:6f:d8:dc:6a:08:03:37:91:91:c7: 5b:8e:f9:28:87:e3:49:0a:c5:27:97:ba:94:dd:af:b2:ed:ad: f8:02:f1:dc:dc:79:2c:5e:92:dd:50:cb:3d:88:70:62:97:f3: b3:16:20:a5:92:ef:f0:0b:86:43:61:d0:31:cc:a0:e8:90:e8: b3:6f:02:a0:d9:96:4b:29:d9:55:76:e5:fe:d6:4d:62:9a:05: 7a:e7:c5:a7:95:57:57:12:13:7b:09:61:8d:18:9a:d9:56:85: 80:80:93:94:9e:d2:98:24:be:c0:86:f1:b0:2d:e5:ca:61:fb: 64:8d:61:4a:03:fb:2c:df:af:67:9a:50:ce:ed:ef:0e:43:8c: 16:f4:04:12:19:9e:d6:f6:fe:c5:e1:c5:9f:8c:d6:8c:80:be: 75:12:fc:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRkUxMTAvBgNVBAUTKDNENDNFREZFNjRGNjE0RTExMzA2QTg3RjFFRjI0RjI4 MkU3RTM3MTQwHhcNMjUwNjE0MTY1NzE1WhcNMjUwNjIxMTY1NzE1WjAYMRYwFAYD VQQDEw02ODRkYTllYi1lNTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmC6c2MtFop+15Ynnz89512vr+jHhBGSHgNz2qiGzyhjQ70QO+VsPSqt3yq5E 2yMJW07NkefEqyDxkWTJK97Y4fa6CkImb7cvl5fzPxa/XzIQoDGqfUCVgYdl/1m0 r7Tu6UMk94vqnEvvGqO6sr+3rv8Qd1XJRHNgRsvVNVbDUTNk6JVZuUXqacUvQaMO 6wr9LMuXCvBW6i8II/NC1eft2LJpKGpDAsKZbXfKrcztuv3L3FAD40Lla/sAA81D B50G/oU0mqDGzQpaEM/rdehUAAvwGhpUno52LiWu3IaoOO+euE7W9QC06J7bHfS9 rNIj5aaGjf0te0FRyICEfRmDeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCp7V22g fCwBMSmGEwSl39omT+H8MB8GA1UdIwQYMBaAFD1D7f5k9hThEwaofx7yTygufjcU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJGRS83MTgxN0Y2Q0E1 QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZPRVRCcWhfSHZKUEtDNS1O eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVUHRfbVQyRk9FVEJxaF9IdkpQS0M1LU54US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJGRS83MTgxN0Y2Q0E1QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZP RVRCcWhfSHZKUEtDNS1OeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv4LW0ysIrJ5HBycl7d9wdc0Vs7IDmAM1WxudS8ftjRsdNgNMgDX19 h27rZxexLRypvP4JlMJsrDgE3KNl5QlC0uE6w5VCJ+aSAqvEvXEvPA6tHgFdvHqJ wLuQg4gYgwxzGW/Y3GoIAzeRkcdbjvkoh+NJCsUnl7qU3a+y7a34AvHc3HksXpLd UMs9iHBil/OzFiClku/wC4ZDYdAxzKDokOizbwKg2ZZLKdlVduX+1k1imgV658Wn lVdXEhN7CWGNGJrZVoWAgJOUntKYJL7AhvGwLeXKYftkjWFKA/ss369nmlDO7e8O Q4wW9AQSGZ7W9v7F4cWfjNaMgL51Evyz -----END CERTIFICATE-----Generated at Sun Jun 15 10:25:29 2025 by rpki-client