$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json) Hash identifier: fARROpy4Zpy6397WGbxqcAg5sUFXboSXWgDGBTe0z8g= Subject key identifier: A0:8B:D5:E4:9E:55:14:88:AF:60:C7:55:0E:6B:90:B0:B0:8A:02:60 Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft Manifest number: 0161 Signing time: Tue 01 Jul 2025 04:31:22 +0000 Manifest this update: Tue 01 Jul 2025 04:31:21 +0000 Manifest next update: Tue 08 Jul 2025 04:31:21 +0000 Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: E3kC6b+I7nfCGlM5uiwzjPub2186VAvHy/Ri/VOH00c=) 2: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: c3n7ErqEI7wUv0Zh/82IQ41rmFajxkaaakm4Lrf4zUE=) 3: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: OyzekySsh32QnXqLJ9xXpFy1GOqrIr4htNA7lulacc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Validity Not Before: Jul 1 04:31:21 2025 GMT Not After : Jul 8 04:31:21 2025 GMT Subject: CN=6863649a-4d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:22:dd:22:c9:7e:fb:01:7a:32:8a:fa:55: 79:5d:64:2f:09:c5:aa:3a:65:43:4d:9b:a8:7e:0e: 31:2e:21:92:3c:9b:30:ca:60:96:ae:c3:ce:63:7c: 8b:48:d2:97:aa:a2:67:74:59:ee:64:74:e1:03:ba: e6:7c:97:76:1d:85:f7:83:07:62:6b:d7:c5:39:0c: e1:3d:e8:72:d4:45:98:18:8a:eb:7c:50:55:e6:8d: 87:87:1e:a5:e4:a7:44:73:f6:28:2f:4e:d0:e7:48: 5c:53:af:28:f6:a1:00:7d:c0:9d:8b:c9:95:87:57: 1d:7a:62:b4:78:2f:9f:17:9c:7a:17:3a:d1:e5:77: a3:c6:a7:5d:66:b8:d5:ce:5a:67:e8:f7:be:73:c9: 8e:ed:bf:96:cf:df:17:0d:f3:56:23:55:32:6b:83: b7:11:66:10:2b:ec:88:68:ff:67:33:6e:9d:b6:34: 0d:7f:34:5f:83:2a:b9:43:6c:8b:c0:8a:40:c8:21: dc:31:83:50:1c:6a:7a:fa:74:06:e8:93:56:cc:67: a7:14:1c:4d:25:36:b7:7a:c9:80:4c:af:22:cc:91: dd:91:db:97:c7:8a:35:f0:0a:b1:95:c2:02:13:d7: f6:ae:4a:5b:90:b1:1a:08:59:0e:44:08:eb:16:5d: 65:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8B:D5:E4:9E:55:14:88:AF:60:C7:55:0E:6B:90:B0:B0:8A:02:60 X509v3 Authority Key Identifier: keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2b:42:cd:fb:90:a8:1f:39:1d:f9:5e:b7:86:6d:b5:01:14: 6c:76:f0:49:58:ca:41:48:5c:26:41:58:0b:59:8b:d6:31:30: e8:c0:e6:6f:bc:48:ef:86:1c:f7:6a:b7:d0:2e:c2:76:e0:1e: 77:70:b7:64:d4:87:e6:00:e8:e0:f1:06:4a:f3:87:74:32:c8: 36:4a:2f:0d:e8:e3:86:65:0c:3b:5b:56:ea:a2:84:f4:84:2a: 60:a7:eb:78:fd:f4:99:0f:f9:1c:b8:04:d3:15:b9:47:b2:09: f9:72:7f:5b:e8:11:a7:b5:08:34:35:ce:46:e0:73:f1:b8:bc: 03:a6:48:09:19:94:91:6e:1d:b2:be:85:a4:d0:3c:c9:61:91: 88:9f:6b:87:29:ea:60:7b:ac:c3:80:00:7e:fd:0f:8e:9a:8d: 99:ff:b9:fc:46:63:f8:4f:de:d3:04:03:34:1c:d1:0a:0b:1b: 66:95:bd:3c:14:7f:a0:e7:45:69:0d:1c:a9:24:a9:bd:89:1b: ca:86:99:69:eb:40:c7:ca:fe:58:6e:16:8a:10:45:1f:79:49: 0e:03:be:53:cc:b7:90:e7:b7:90:7f:87:11:a2:22:5f:d2:95: 53:d8:09:58:99:89:a1:33:65:89:7f:d8:bd:cf:be:42:a4:17: 59:23:f0:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG MTkyQjhBRjkwHhcNMjUwNzAxMDQzMTIxWhcNMjUwNzA4MDQzMTIxWjAYMRYwFAYD VQQDEw02ODYzNjQ5YS00ZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhwi3SLJfvsBejKK+lV5XWQvCcWqOmVDTZuofg4xLiGSPJswymCWrsPOY3yL SNKXqqJndFnuZHThA7rmfJd2HYX3gwdia9fFOQzhPehy1EWYGIrrfFBV5o2Hhx6l 5KdEc/YoL07Q50hcU68o9qEAfcCdi8mVh1cdemK0eC+fF5x6FzrR5XejxqddZrjV zlpn6Pe+c8mO7b+Wz98XDfNWI1Uya4O3EWYQK+yIaP9nM26dtjQNfzRfgyq5Q2yL wIpAyCHcMYNQHGp6+nQG6JNWzGenFBxNJTa3esmATK8izJHdkduXx4o18AqxlcIC E9f2rkpbkLEaCFkORAjrFl1l9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCL1eSe VRSIr2DHVQ5rkLCwigJgMB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2 M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3 Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcK0LN+5CoHzkd+V63hm21ARRsdvBJWMpBSFwmQVgLWYvWMTDowOZv vEjvhhz3arfQLsJ24B53cLdk1IfmAOjg8QZK84d0Msg2Si8N6OOGZQw7W1bqooT0 hCpgp+t4/fSZD/kcuATTFblHsgn5cn9b6BGntQg0Nc5G4HPxuLwDpkgJGZSRbh2y voWk0DzJYZGIn2uHKepge6zDgAB+/Q+Omo2Z/7n8RmP4T97TBAM0HNEKCxtmlb08 FH+g50VpDRypJKm9iRvKhplp60DHyv5YbhaKEEUfeUkOA75TzLeQ57eQf4cRoiJf 0pVT2AlYmYmhM2WJf9i9z75CpBdZI/BI -----END CERTIFICATE-----Generated at Thu Jul 3 02:59:19 2025 by rpki-client