$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft File: PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json) Hash identifier: Tmd7ZDRJmEYVvhTBN7I9Py4zQVoN1kRVXBuy2NWJz8s= Subject key identifier: 6A:24:FD:2A:04:C2:80:B6:BD:D3:14:BC:82:07:5B:B0:AE:2A:85:98 Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft Manifest number: 013B Signing time: Fri 25 Apr 2025 03:34:47 +0000 Manifest this update: Fri 25 Apr 2025 03:34:47 +0000 Manifest next update: Fri 02 May 2025 03:34:47 +0000 Files and hashes: 1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: ECSYSRNv3ZJBYzqRpYAV0j8hT8rgtiLBbf0FJbb7S1I=) 2: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: mRgAmQOm70v82zzEgYDnDn2brEuaNu5y2crpXyX3sdg=) 3: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: bbT6hxERjo8lnAEspIks/q29jjxdhXSux3U2mM5P3u0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Validity Not Before: Apr 25 03:34:47 2025 GMT Not After : May 2 03:34:47 2025 GMT Subject: CN=680b02d7-8f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:65:84:e1:89:0c:5e:71:6d:fa:75:72:b6: a7:31:83:28:e9:27:d6:eb:79:e7:93:5b:fe:d7:70: b2:73:50:d0:cd:6c:ce:d0:bd:08:a8:5e:26:27:01: 76:15:f0:82:9d:f7:3e:76:b9:32:37:73:59:07:6c: 09:44:42:07:5b:ca:94:b5:a6:54:fe:bb:50:0d:6d: 5b:5b:e5:bc:d4:f9:39:3e:c8:b3:cf:24:9b:42:24: d0:a3:c5:c8:c7:6e:d6:60:76:1c:2b:81:52:c9:c6: 06:97:f6:7a:a4:9e:ad:64:0c:b8:07:e1:77:2e:dd: 60:fd:b6:ef:3f:8b:59:7f:ee:56:62:90:5f:fa:bf: 77:c6:34:f8:d0:26:6d:bd:6b:fa:7f:4c:46:8b:67: e4:87:9b:87:2d:88:fb:11:79:ff:d6:6f:2f:98:f8: 41:49:91:25:4f:53:20:ff:d1:ef:2f:e2:88:f3:81: f8:32:e1:fa:2b:ce:99:81:78:72:c0:87:db:cf:ee: 99:f5:ef:51:f8:90:ed:fc:26:80:13:e5:84:4e:25: e4:1d:15:92:bb:04:45:5e:8c:6e:b1:c4:f7:09:91: 99:a0:78:f5:72:7a:64:2d:d6:4a:d8:6d:5a:f6:7c: 22:3a:c1:ef:8b:39:8f:36:92:10:f9:d1:8a:0d:8d: 07:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:24:FD:2A:04:C2:80:B6:BD:D3:14:BC:82:07:5B:B0:AE:2A:85:98 X509v3 Authority Key Identifier: keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:a5:bf:20:d8:bf:7a:8d:b9:19:df:fb:6d:30:0a:09:66:6b: a0:f9:68:15:70:85:af:95:d3:76:d7:94:64:38:fe:fb:d4:27: c7:3a:1d:b5:4c:29:a3:35:8d:35:2a:8a:7a:27:60:fc:3f:62: f3:03:75:6d:95:3a:9d:77:b1:d7:6a:02:67:34:ef:0d:50:3f: c0:b3:87:fd:f4:e5:46:25:0d:08:0d:2a:7e:35:eb:8b:e8:fa: 56:b3:b4:1e:6f:ab:97:2d:d5:ed:01:b5:7c:d3:c7:92:88:11: e5:0a:38:83:e0:62:cb:4a:18:63:9d:c8:05:99:b5:bf:a2:76: 9c:63:45:a1:e0:2d:3a:41:be:4f:87:83:cb:35:59:f1:f3:af: 0a:e5:df:8c:3f:10:53:41:6a:8a:b3:2b:17:46:08:83:63:3b: bb:48:f4:c7:d0:b7:c6:9b:48:ca:02:db:7e:ee:10:66:78:cc: 02:be:07:f2:d1:a8:0a:cd:d3:37:25:aa:24:bf:18:1f:9f:f5: 45:68:9a:d5:63:46:c8:02:58:75:b5:d8:23:c7:85:a5:a2:e1: b7:38:02:07:a2:fa:ea:a6:e9:00:db:94:1a:2e:2e:07:1e:f2: 41:82:e8:56:86:8a:67:2d:a8:f4:05:b7:0a:3e:e1:b2:36:d5: 08:12:61:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE1QzYxMTAvBgNVBAUTKDNENDdFNjY4N0JCNERGNDBDNTFCMDNBNDU1OUMxMENB MjJGNjc3MkYwHhcNMjUwNDI1MDMzNDQ3WhcNMjUwNTAyMDMzNDQ3WjAYMRYwFAYD VQQDEw02ODBiMDJkNy04Zjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyZlhOGJDF5xbfp1cranMYMo6SfW63nnk1v+13Cyc1DQzWzO0L0IqF4mJwF2 FfCCnfc+drkyN3NZB2wJREIHW8qUtaZU/rtQDW1bW+W81Pk5PsizzySbQiTQo8XI x27WYHYcK4FSycYGl/Z6pJ6tZAy4B+F3Lt1g/bbvP4tZf+5WYpBf+r93xjT40CZt vWv6f0xGi2fkh5uHLYj7EXn/1m8vmPhBSZElT1Mg/9HvL+KI84H4MuH6K86ZgXhy wIfbz+6Z9e9R+JDt/CaAE+WETiXkHRWSuwRFXoxuscT3CZGZoHj1cnpkLdZK2G1a 9nwiOsHvizmPNpIQ+dGKDY0HewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGok/SoE woC2vdMUvIIHW7CuKoWYMB8GA1UdIwQYMBaAFD1H5mh7tN9AxRsDpFWcEMoi9ncv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTVDNi9ENTU1MTlCNDRD MzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMwREZHd09rVlp3UXlpTDJk eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVZm1hSHUwMzBERkd3T2tWWndReWlMMmR5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTVDNi9ENTU1MTlCNDRDMzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMw REZHd09rVlp3UXlpTDJkeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDpb8g2L96jbkZ3/ttMAoJZmug+WgVcIWvldN215RkOP771CfHOh21 TCmjNY01Kop6J2D8P2LzA3VtlTqdd7HXagJnNO8NUD/As4f99OVGJQ0IDSp+NeuL 6PpWs7Qeb6uXLdXtAbV808eSiBHlCjiD4GLLShhjncgFmbW/onacY0Wh4C06Qb5P h4PLNVnx868K5d+MPxBTQWqKsysXRgiDYzu7SPTH0LfGm0jKAtt+7hBmeMwCvgfy 0agKzdM3Jaokvxgfn/VFaJrVY0bIAlh1tdgjx4WlouG3OAIHovrqpukA25QaLi4H HvJBguhWhopnLaj0BbcKPuGyNtUIEmET -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:21 2025 by rpki-client