$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft File: PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json) Hash identifier: lVPRo/UGiwhX9l5VPThs+gnATK2jyXHSC9y+n9XLSBI= Subject key identifier: E9:33:D3:4E:71:C4:4E:9F:BB:04:55:C8:8C:CC:5C:7C:1F:0D:C5:71 Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft Manifest number: 0156 Signing time: Thu 19 Jun 2025 03:34:57 +0000 Manifest this update: Thu 19 Jun 2025 03:34:56 +0000 Manifest next update: Thu 26 Jun 2025 03:34:56 +0000 Files and hashes: 1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: KjfnWq7xvKJqsDC/E5mtSgbB4PnogC+hnSBb3vuSn6Q=) 2: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: mRgAmQOm70v82zzEgYDnDn2brEuaNu5y2crpXyX3sdg=) 3: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: bbT6hxERjo8lnAEspIks/q29jjxdhXSux3U2mM5P3u0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Validity Not Before: Jun 19 03:34:56 2025 GMT Not After : Jun 26 03:34:56 2025 GMT Subject: CN=68538560-45c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5d:8b:1d:98:99:de:ce:e3:eb:d3:fd:7c:2f: b5:bd:16:15:56:fa:08:82:91:51:b0:95:dd:4a:03: d3:58:53:2d:c1:7b:d5:87:cf:d2:aa:a9:66:63:93: f7:3a:e3:10:cc:44:c1:bd:20:87:51:f2:35:f6:65: 02:03:45:e6:92:68:28:9f:02:2f:9b:64:f2:95:b9: 56:5c:61:9a:0b:6e:84:40:f7:80:94:56:fa:b4:e3: fd:8e:a1:35:09:83:f7:79:73:56:92:69:11:dc:4c: 52:50:77:ac:5d:1a:94:27:8e:92:70:aa:14:56:60: 34:e0:7d:e5:94:94:f1:4a:c4:2e:6e:41:4f:b6:57: 98:c0:df:0f:a2:32:9c:15:a0:7a:e4:b7:e5:b1:d9: 20:2a:97:4a:87:5e:70:4d:a9:0e:25:2e:b4:68:41: e7:69:0a:05:f1:5a:d1:b0:01:5d:25:71:20:ee:67: 41:b6:d7:c0:a8:e1:80:90:61:48:40:ee:e4:e0:f3: 49:67:93:db:24:9b:d2:bf:2c:e9:e7:3b:ea:fb:3b: c8:e4:7f:36:e7:ff:57:11:65:d0:95:3d:3d:89:84: f1:ca:3d:ce:2e:94:54:52:bd:73:c9:f9:cf:e3:bb: 5a:ac:37:04:03:17:25:dd:72:44:16:ee:08:14:20: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:33:D3:4E:71:C4:4E:9F:BB:04:55:C8:8C:CC:5C:7C:1F:0D:C5:71 X509v3 Authority Key Identifier: keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:77:c9:48:be:42:bb:26:2c:40:d0:dd:2d:6e:fa:7f:d5:60: d8:f0:68:24:45:d4:26:48:73:81:ea:37:da:c0:fd:47:6d:b6: 6a:94:c9:f5:a2:8e:5d:f1:82:a5:48:0f:9d:59:7f:ce:9c:b5: f9:5e:0e:cf:85:d7:39:1f:01:84:6e:33:df:b8:9c:fc:60:50: 84:b0:bd:f3:fe:ea:5d:43:d6:07:b9:ba:87:85:fa:d0:85:0a: 49:1e:ff:c3:19:a0:65:9f:f2:c9:3d:cd:61:73:84:be:79:bf: 23:98:26:4c:55:ef:ef:db:35:68:3d:7b:fe:6c:81:96:57:e0: 14:25:6e:8c:7e:e6:ac:6c:7e:99:b0:7d:72:65:1b:fb:fc:cf: f2:5d:1d:7c:65:de:a6:f4:74:a9:88:8c:87:c3:51:dd:31:e8: 66:77:1c:af:1d:b4:94:b8:80:b2:5a:53:68:30:29:52:c4:0f: 06:8b:74:76:89:6b:bd:be:fa:dd:90:b8:b5:31:46:3e:68:fa: 01:f0:4c:45:7e:1c:b8:15:e4:e5:c6:16:d6:3e:e5:bd:e6:d6: bd:6f:e1:54:d7:82:7c:ee:b8:08:6a:63:ec:1a:60:08:d3:1f: c3:3b:f4:eb:ce:a5:8e:47:e7:8e:c2:f6:01:8d:7c:a8:3b:2d: 9d:d8:6f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE1QzYxMTAvBgNVBAUTKDNENDdFNjY4N0JCNERGNDBDNTFCMDNBNDU1OUMxMENB MjJGNjc3MkYwHhcNMjUwNjE5MDMzNDU2WhcNMjUwNjI2MDMzNDU2WjAYMRYwFAYD VQQDEw02ODUzODU2MC00NWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA112LHZiZ3s7j69P9fC+1vRYVVvoIgpFRsJXdSgPTWFMtwXvVh8/SqqlmY5P3 OuMQzETBvSCHUfI19mUCA0XmkmgonwIvm2TylblWXGGaC26EQPeAlFb6tOP9jqE1 CYP3eXNWkmkR3ExSUHesXRqUJ46ScKoUVmA04H3llJTxSsQubkFPtleYwN8PojKc FaB65LflsdkgKpdKh15wTakOJS60aEHnaQoF8VrRsAFdJXEg7mdBttfAqOGAkGFI QO7k4PNJZ5PbJJvSvyzp5zvq+zvI5H825/9XEWXQlT09iYTxyj3OLpRUUr1zyfnP 47tarDcEAxcl3XJEFu4IFCAnKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkz005x xE6fuwRVyIzMXHwfDcVxMB8GA1UdIwQYMBaAFD1H5mh7tN9AxRsDpFWcEMoi9ncv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTVDNi9ENTU1MTlCNDRD MzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMwREZHd09rVlp3UXlpTDJk eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVZm1hSHUwMzBERkd3T2tWWndReWlMMmR5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTVDNi9ENTU1MTlCNDRDMzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMw REZHd09rVlp3UXlpTDJkeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSd8lIvkK7JixA0N0tbvp/1WDY8GgkRdQmSHOB6jfawP1HbbZqlMn1 oo5d8YKlSA+dWX/OnLX5Xg7Phdc5HwGEbjPfuJz8YFCEsL3z/updQ9YHubqHhfrQ hQpJHv/DGaBln/LJPc1hc4S+eb8jmCZMVe/v2zVoPXv+bIGWV+AUJW6MfuasbH6Z sH1yZRv7/M/yXR18Zd6m9HSpiIyHw1HdMehmdxyvHbSUuICyWlNoMClSxA8Gi3R2 iWu9vvrdkLi1MUY+aPoB8ExFfhy4FeTlxhbWPuW95ta9b+FU14J87rgIamPsGmAI 0x/DO/TrzqWOR+eOwvYBjXyoOy2d2G+A -----END CERTIFICATE-----Generated at Thu Jun 19 08:07:20 2025 by rpki-client