$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft File: PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json) Hash identifier: MhJ5Lj/m6MO8uk/qOt8PD/BWVxJtwUw+XXh4jZPjb7Q= Subject key identifier: 2E:42:26:F8:EC:AC:B3:16:C8:76:72:CB:21:8B:18:15:48:4F:FC:73 Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F Certificate issuer: /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Certificate serial: 06B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft Manifest number: 06B2 Signing time: Mon 16 Jun 2025 21:51:20 +0000 Manifest this update: Mon 16 Jun 2025 21:51:20 +0000 Manifest next update: Mon 23 Jun 2025 21:51:20 +0000 Files and hashes: 1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: ICgmhRB7GAfbqmBdA63BWafMoWiYbZwh6AStvz6ZDCk=) 2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: QCHui8d37ydNx5pkaHoJoeho1nXwmP/z+o5jMR8k9Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Validity Not Before: Jun 16 21:51:20 2025 GMT Not After : Jun 23 21:51:20 2025 GMT Subject: CN=685091d8-16db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:79:4a:3a:37:11:24:7c:19:09:2e:1c:df: 09:7d:57:74:cc:90:62:77:54:fa:fa:6e:1b:c7:cb: 6e:c9:c3:5b:e5:3d:c1:3a:25:21:b5:e0:ed:6a:60: 65:2e:0a:ec:ec:0f:a7:47:7c:fd:51:bd:51:30:82: 43:dd:56:d3:68:9f:77:5b:3c:64:8a:fb:e6:af:96: a6:e5:a3:70:53:fc:9e:eb:5f:ba:3d:1e:ae:c4:20: 0d:a2:e8:2d:3e:4f:3f:89:f8:da:9b:45:65:dc:0e: 05:39:19:ca:49:e1:6c:e6:93:14:06:4d:b9:2f:e4: 27:85:ac:ee:2c:74:b8:d4:b3:df:4e:ef:ea:23:b6: 64:bf:cd:31:c7:cd:00:32:d8:98:e6:2f:f9:56:b3: 74:2b:6d:dc:5f:48:c1:26:1c:8b:ad:e2:57:6f:a2: e7:6e:b9:cb:cb:1a:67:f0:f9:85:7e:96:c1:59:c0: f4:b3:b8:86:be:3e:a0:67:de:e3:7c:b1:16:e7:ca: 21:6e:d2:fb:36:1a:b6:bf:f9:62:4c:51:97:31:da: d7:c8:0a:d5:0b:1c:78:25:7b:a0:a8:de:85:ad:c7: ff:c3:fc:92:f3:52:5a:9b:4f:73:a1:31:26:dc:c0: 40:6d:44:18:c5:2d:22:e5:34:ee:a2:a2:64:3f:26: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:42:26:F8:EC:AC:B3:16:C8:76:72:CB:21:8B:18:15:48:4F:FC:73 X509v3 Authority Key Identifier: keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:76:94:c2:03:6c:73:3e:06:fb:c5:9b:20:0a:29:c3:cd:4b: fc:72:5b:fb:d0:86:e9:48:7a:54:e5:03:55:47:9a:7a:8c:5b: c9:4e:b2:70:38:50:4a:6c:1b:6e:6d:9e:3a:ce:9c:f5:ef:49: 36:95:fb:20:7e:08:98:65:15:ee:ca:c4:fa:5d:e1:3c:60:94: 34:ea:89:91:30:fb:37:6f:3d:2b:0b:e8:9c:54:af:1c:49:09: 8e:58:5e:fc:64:d7:ff:5e:7e:6d:b1:f8:54:e3:71:f8:18:2b: ce:91:fb:e8:db:22:80:7f:8b:ef:1a:5b:f6:38:67:32:04:82: 56:fa:17:c7:e9:54:22:fd:d0:fa:ca:c8:a5:0d:cf:55:31:2d: df:55:38:25:17:27:6c:75:b5:0c:53:34:15:07:ab:9b:7d:91: 07:b9:b9:f1:ea:4e:f0:51:e6:32:f0:ac:c7:a4:4a:62:76:33: 5b:12:d6:c0:ee:02:86:95:51:72:6e:0b:cb:c9:43:0a:5d:bd: 46:9a:90:29:85:6f:a4:ac:af:6b:57:59:f0:9f:b7:0e:ee:7a: a5:52:4e:07:41:e4:47:35:a3:7f:91:09:62:96:0d:9d:59:01: a2:b7:4b:03:80:ab:f5:0c:bc:b9:6d:39:ed:f2:9d:c6:06:2e: 59:2c:85:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QzIxMTAvBgNVBAUTKDNFRTUyMjk3NjEzMDZCOTdCREE3RkJFMUYyNENCNEIw NEQ0OTI1OEYwHhcNMjUwNjE2MjE1MTIwWhcNMjUwNjIzMjE1MTIwWjAYMRYwFAYD VQQDEw02ODUwOTFkOC0xNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqp5Sjo3ESR8GQkuHN8JfVd0zJBid1T6+m4bx8tuycNb5T3BOiUhteDtamBl Lgrs7A+nR3z9Ub1RMIJD3VbTaJ93Wzxkivvmr5am5aNwU/ye61+6PR6uxCANougt Pk8/ifjam0Vl3A4FORnKSeFs5pMUBk25L+QnhazuLHS41LPfTu/qI7Zkv80xx80A MtiY5i/5VrN0K23cX0jBJhyLreJXb6LnbrnLyxpn8PmFfpbBWcD0s7iGvj6gZ97j fLEW58ohbtL7Nhq2v/liTFGXMdrXyArVCxx4JXugqN6Frcf/w/yS81Jam09zoTEm 3MBAbUQYxS0i5TTuoqJkPyY3sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5CJvjs rLMWyHZyyyGLGBVIT/xzMB8GA1UdIwQYMBaAFD7lIpdhMGuXvaf74fJMtLBNSSWP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhDMi9GNjlDM0JBQzY2 OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1ZTlwX3ZoOGt5MHNFMUpK WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1VWlsMkV3YTVlOXBfdmg4a3kwc0UxSkpZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhDMi9GNjlDM0JBQzY2OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1 ZTlwX3ZoOGt5MHNFMUpKWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqdpTCA2xzPgb7xZsgCinDzUv8clv70IbpSHpU5QNVR5p6jFvJTrJw OFBKbBtubZ46zpz170k2lfsgfgiYZRXuysT6XeE8YJQ06omRMPs3bz0rC+icVK8c SQmOWF78ZNf/Xn5tsfhU43H4GCvOkfvo2yKAf4vvGlv2OGcyBIJW+hfH6VQi/dD6 ysilDc9VMS3fVTglFydsdbUMUzQVB6ubfZEHubnx6k7wUeYy8KzHpEpidjNbEtbA 7gKGlVFybgvLyUMKXb1GmpAphW+krK9rV1nwn7cO7nqlUk4HQeRHNaN/kQlilg2d WQGit0sDgKv1DLy5bTnt8p3GBi5ZLIUW -----END CERTIFICATE-----Generated at Tue Jun 17 15:03:53 2025 by rpki-client