$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft File: PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json) Hash identifier: A2xg1r9KOhQAfIVb3zjtpa3o/CSTuj0r7JpOlA+wy0Q= Subject key identifier: 89:2F:B0:A2:E3:C5:0B:42:53:FE:83:17:D4:F5:83:DB:3B:D0:C0:77 Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F Certificate issuer: /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft Manifest number: 06CD Signing time: Fri 08 Aug 2025 22:28:27 +0000 Manifest this update: Fri 08 Aug 2025 22:28:27 +0000 Manifest next update: Fri 15 Aug 2025 22:28:27 +0000 Files and hashes: 1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: fcJb54o9x+QghFMN0DHDbvX60Vro1MzeW0L35zXe1iM=) 2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: QCHui8d37ydNx5pkaHoJoeho1nXwmP/z+o5jMR8k9Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Validity Not Before: Aug 8 22:28:27 2025 GMT Not After : Aug 15 22:28:27 2025 GMT Subject: CN=68967a0b-c713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:39:36:47:05:a6:2a:92:3a:ce:13:1f:9c: 2a:0e:3e:d6:5a:c9:98:e7:87:f4:2b:a5:03:93:09: 83:6a:1e:bd:7d:54:3c:84:eb:e1:45:50:35:c7:1a: fe:9d:c1:bf:91:07:82:46:ae:6f:a0:5b:30:45:e1: 8c:a1:6e:d9:cc:df:ba:a5:e9:0a:1d:aa:d3:96:5f: c7:e6:77:12:f9:df:a7:ab:3f:d0:e5:c7:93:5e:e1: 66:ec:29:df:61:44:ed:e9:46:dc:1d:83:05:4a:c9: 30:7e:66:92:61:12:c4:f3:a7:63:2b:06:4a:34:da: 97:f4:ea:1c:68:ec:ea:fb:82:4f:de:69:c4:b4:98: 92:b9:6c:e2:3a:fe:00:45:ec:11:12:5b:e0:ec:dd: 42:f5:aa:5b:9a:b2:a5:84:05:ae:c1:49:a0:11:b5: 39:af:97:6d:31:bb:19:64:a2:38:ab:e1:d8:a9:ba: 19:46:43:84:86:cd:91:99:b9:60:e9:b6:fa:86:09: 32:f4:0c:58:ff:19:1d:e4:f8:d9:aa:ef:de:a6:e7: 3c:5a:ec:de:db:35:36:6a:48:33:d5:da:1a:cb:86: 81:70:3d:85:94:d7:0f:91:18:58:6f:eb:44:ca:1f: 13:92:45:80:6a:b4:6d:f1:5b:0d:4d:ee:7f:9d:9d: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2F:B0:A2:E3:C5:0B:42:53:FE:83:17:D4:F5:83:DB:3B:D0:C0:77 X509v3 Authority Key Identifier: keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:76:f9:9d:07:be:6e:41:89:9c:2e:6b:a4:c0:b0:ef:93:71: c7:1e:b5:5b:f7:0b:55:77:4d:09:d5:56:2b:f2:38:2b:38:ff: 31:13:33:53:db:43:62:1d:89:d2:c5:a9:d0:f8:43:ed:9c:29: d1:ac:ca:a1:80:e6:db:04:f5:70:67:fb:f7:31:44:f0:58:8a: af:05:0e:42:b9:d8:ef:1f:89:e1:51:e4:37:1c:c8:27:a4:e2: 3a:ee:3f:bc:7d:e3:c0:82:45:18:48:53:d4:f2:bf:59:4e:e3: 29:d7:3e:09:3d:48:59:be:c6:60:ae:49:36:c4:90:ba:60:c2: aa:7e:77:14:cb:ac:48:ac:be:f5:bd:2e:b2:b0:01:1c:f5:70: a0:d1:2a:21:86:56:86:70:b5:33:4c:aa:0f:a4:60:90:8b:1c: d0:41:4c:bb:06:b7:63:e8:03:dd:fa:a5:fa:e9:25:4a:e8:7a: 95:c7:82:8f:3b:b5:37:f7:a3:70:10:54:7e:77:52:85:7b:cc: 4d:d5:95:fc:80:29:6c:0a:6c:5c:20:9c:b0:cd:7a:15:2b:d2: 23:63:15:9a:bf:5c:1d:fc:63:51:30:4e:88:ef:22:9d:90:6f: 39:b0:9a:94:e4:34:bb:9f:f6:72:15:37:6c:46:4a:c2:04:3f: e8:0b:1e:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QzIxMTAvBgNVBAUTKDNFRTUyMjk3NjEzMDZCOTdCREE3RkJFMUYyNENCNEIw NEQ0OTI1OEYwHhcNMjUwODA4MjIyODI3WhcNMjUwODE1MjIyODI3WjAYMRYwFAYD VQQDEw02ODk2N2EwYi1jNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7w5NkcFpiqSOs4TH5wqDj7WWsmY54f0K6UDkwmDah69fVQ8hOvhRVA1xxr+ ncG/kQeCRq5voFswReGMoW7ZzN+6pekKHarTll/H5ncS+d+nqz/Q5ceTXuFm7Cnf YUTt6UbcHYMFSskwfmaSYRLE86djKwZKNNqX9OocaOzq+4JP3mnEtJiSuWziOv4A RewRElvg7N1C9apbmrKlhAWuwUmgEbU5r5dtMbsZZKI4q+HYqboZRkOEhs2Rmblg 6bb6hgky9AxY/xkd5PjZqu/epuc8Wuze2zU2akgz1doay4aBcD2FlNcPkRhYb+tE yh8TkkWAarRt8VsNTe5/nZ2hkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkvsKLj xQtCU/6DF9T1g9s70MB3MB8GA1UdIwQYMBaAFD7lIpdhMGuXvaf74fJMtLBNSSWP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhDMi9GNjlDM0JBQzY2 OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1ZTlwX3ZoOGt5MHNFMUpK WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1VWlsMkV3YTVlOXBfdmg4a3kwc0UxSkpZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhDMi9GNjlDM0JBQzY2OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1 ZTlwX3ZoOGt5MHNFMUpKWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACdvmdB75uQYmcLmukwLDvk3HHHrVb9wtVd00J1VYr8jgrOP8xEzNT 20NiHYnSxanQ+EPtnCnRrMqhgObbBPVwZ/v3MUTwWIqvBQ5CudjvH4nhUeQ3HMgn pOI67j+8fePAgkUYSFPU8r9ZTuMp1z4JPUhZvsZgrkk2xJC6YMKqfncUy6xIrL71 vS6ysAEc9XCg0SohhlaGcLUzTKoPpGCQixzQQUy7Brdj6APd+qX66SVK6HqVx4KP O7U396NwEFR+d1KFe8xN1ZX8gClsCmxcIJywzXoVK9IjYxWav1wd/GNRME6I7yKd kG85sJqU5DS7n/ZyFTdsRkrCBD/oCx74 -----END CERTIFICATE-----Generated at Sun Aug 10 05:33:19 2025 by rpki-client