$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft File: PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json) Hash identifier: VEQLUyE0RJeXu9Ctt5HqO7SkwDuIkKBO3Sbnh2TpQQw= Subject key identifier: 31:3D:D5:6F:FD:33:F4:AE:09:46:A0:C9:03:65:63:43:CB:E8:48:80 Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft Manifest number: 0170 Signing time: Sat 09 Aug 2025 04:15:21 +0000 Manifest this update: Sat 09 Aug 2025 04:15:21 +0000 Manifest next update: Sat 16 Aug 2025 04:15:21 +0000 Files and hashes: 1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: HPgf7MQalBrar6PkZtaxs15mbD7ZS0lu86qZk4g1Du4=) 2: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: mRgAmQOm70v82zzEgYDnDn2brEuaNu5y2crpXyX3sdg=) 3: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: bbT6hxERjo8lnAEspIks/q29jjxdhXSux3U2mM5P3u0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Validity Not Before: Aug 9 04:15:21 2025 GMT Not After : Aug 16 04:15:21 2025 GMT Subject: CN=6896cb59-059e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f6:e2:9f:e4:5f:62:c8:8c:6e:8c:16:51:fc: ab:99:80:2c:ab:0d:3c:3b:d2:20:1c:72:bc:fe:91: 35:07:fb:38:92:0a:e2:11:12:29:67:ab:05:f4:22: e7:40:75:0c:76:a7:9f:e3:d7:01:3d:bc:29:53:db: 7d:85:b9:34:64:f3:81:71:ae:b9:c4:80:15:5c:94: 06:16:4d:e6:f5:88:42:31:5b:20:c6:4e:57:e1:f6: c9:33:d7:56:e3:90:62:3b:e9:cb:f9:77:0b:6b:32: 01:6e:ae:44:ff:f3:57:bd:c1:5d:1b:50:42:d0:e6: eb:1d:e9:e5:4f:bb:c3:10:ee:b5:c2:8b:4d:76:7f: 0c:fc:00:ff:d1:e6:5a:bd:4f:33:fb:3f:41:9f:0e: e6:9e:73:b1:c9:df:6e:4a:da:3a:f7:ec:5f:01:16: 59:ae:12:36:ee:15:b2:e9:0f:10:18:aa:5a:34:93: eb:7c:ba:17:bb:0d:19:df:20:ed:5b:77:e0:24:e3: 6a:89:77:44:9b:1e:fb:74:96:2d:7c:75:3c:82:31: 1f:99:94:d3:53:62:de:07:37:12:39:be:9b:32:0a: 06:54:7d:f3:81:e1:ac:24:e4:c9:af:04:d1:5e:6a: fd:f7:45:03:e8:8c:07:c3:ad:ab:ec:cd:e2:95:cd: 76:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3D:D5:6F:FD:33:F4:AE:09:46:A0:C9:03:65:63:43:CB:E8:48:80 X509v3 Authority Key Identifier: keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5d:bf:45:61:0e:54:27:16:7e:f6:c2:6b:a0:06:46:96:2f: b3:e8:80:51:cd:0d:81:cd:a0:d7:61:6c:f4:89:72:6e:c1:9a: 2b:26:a6:1d:7e:53:7b:32:2c:b7:ea:f2:b0:a4:51:1a:f4:97: 24:92:c2:0b:ed:f5:28:ba:f1:b3:76:54:5c:59:c2:fe:b4:01: 4c:4f:11:93:83:2a:67:f2:8f:61:a7:4d:4e:ac:a9:2d:f3:a4: fd:84:81:1e:6a:28:26:5f:25:44:9d:46:4c:90:7e:a4:1b:9e: 88:11:3d:96:d0:22:11:16:0b:80:4e:42:c8:07:41:8d:ce:b1: a2:32:bb:43:b0:cd:b2:b3:ff:21:32:78:7f:7b:ac:75:f4:3e: 51:38:ed:3b:12:78:c5:0f:96:a8:f7:d1:28:c9:bf:9e:a3:83: 7b:8f:fc:4d:7d:e3:d0:a9:05:3c:b3:82:f7:56:41:ce:d4:4a: 9c:1a:79:fa:40:36:03:05:99:d2:95:10:24:51:a2:42:60:14: 9d:ee:3d:c1:43:9d:5b:99:54:d2:af:93:79:20:f7:80:b8:92: 37:bc:7b:91:5c:ae:87:89:b2:a0:47:94:f9:7a:cb:df:c4:b6: fd:16:37:28:0e:2c:8e:f0:e2:7c:6e:58:95:9f:94:c2:0f:5d: db:59:07:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE1QzYxMTAvBgNVBAUTKDNENDdFNjY4N0JCNERGNDBDNTFCMDNBNDU1OUMxMENB MjJGNjc3MkYwHhcNMjUwODA5MDQxNTIxWhcNMjUwODE2MDQxNTIxWjAYMRYwFAYD VQQDEw02ODk2Y2I1OS0wNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/bin+RfYsiMbowWUfyrmYAsqw08O9IgHHK8/pE1B/s4kgriERIpZ6sF9CLn QHUMdqef49cBPbwpU9t9hbk0ZPOBca65xIAVXJQGFk3m9YhCMVsgxk5X4fbJM9dW 45BiO+nL+XcLazIBbq5E//NXvcFdG1BC0ObrHenlT7vDEO61wotNdn8M/AD/0eZa vU8z+z9Bnw7mnnOxyd9uSto69+xfARZZrhI27hWy6Q8QGKpaNJPrfLoXuw0Z3yDt W3fgJONqiXdEmx77dJYtfHU8gjEfmZTTU2LeBzcSOb6bMgoGVH3zgeGsJOTJrwTR Xmr990UD6IwHw62r7M3ilc12vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE91W/9 M/SuCUagyQNlY0PL6EiAMB8GA1UdIwQYMBaAFD1H5mh7tN9AxRsDpFWcEMoi9ncv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTVDNi9ENTU1MTlCNDRD MzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMwREZHd09rVlp3UXlpTDJk eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVZm1hSHUwMzBERkd3T2tWWndReWlMMmR5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTVDNi9ENTU1MTlCNDRDMzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMw REZHd09rVlp3UXlpTDJkeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJXb9FYQ5UJxZ+9sJroAZGli+z6IBRzQ2BzaDXYWz0iXJuwZorJqYd flN7Miy36vKwpFEa9JckksIL7fUouvGzdlRcWcL+tAFMTxGTgypn8o9hp01OrKkt 86T9hIEeaigmXyVEnUZMkH6kG56IET2W0CIRFguATkLIB0GNzrGiMrtDsM2ys/8h Mnh/e6x19D5ROO07EnjFD5ao99Eoyb+eo4N7j/xNfePQqQU8s4L3VkHO1EqcGnn6 QDYDBZnSlRAkUaJCYBSd7j3BQ51bmVTSr5N5IPeAuJI3vHuRXK6HibKgR5T5esvf xLb9FjcoDiyO8OJ8bliVn5TCD13bWQeq -----END CERTIFICATE-----Generated at Sat Aug 9 14:32:38 2025 by rpki-client