$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json) Hash identifier: cP4FV043lB22w/eBx052FNaTxqIFo1gvdJHD1PgEb48= Subject key identifier: 2F:BE:7F:BC:C5:8B:C4:75:2F:B9:D1:73:D9:A0:FF:FD:51:74:3E:57 Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft Manifest number: 03EC Signing time: Thu 03 Jul 2025 00:52:07 +0000 Manifest this update: Thu 03 Jul 2025 00:52:07 +0000 Manifest next update: Thu 10 Jul 2025 00:52:07 +0000 Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: o/J6fP4us8bf7od7m13k1qDeuOsv+6UxUxNkd/Mb2QU=) 2: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: 6+2Lk4Xai3HUwAmjg8bW8UOOypYan1IgfWd2mzH9/MA=) 3: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: P2hgHU8XOvbHIrBabwcVzNSzMatmcwCF4tAzz5uDO10=) 4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 4y99R2661TzfOkabp7/pgfm0pWxC4+jDx6PFu0Fa6p8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Jul 3 00:52:07 2025 GMT Not After : Jul 10 00:52:07 2025 GMT Subject: CN=6865d437-ce2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2f:52:48:54:b6:dc:f3:98:34:44:88:7f:41: a2:97:cf:72:eb:94:e3:d7:33:51:fd:39:95:c6:4e: 72:21:fa:f7:37:6e:fb:c1:1f:41:0f:d0:55:d3:11: 15:64:66:ce:15:fd:9b:5c:7c:29:48:be:b9:db:65: 74:87:b1:a5:c9:f1:af:08:9b:00:5e:b6:6b:c5:2d: b9:f5:8d:71:6b:78:37:d3:4e:07:00:f8:11:1a:1a: 0e:64:6b:6a:1a:14:46:cb:8e:63:e7:bd:38:86:72: 4e:8f:bb:5e:83:e2:64:3a:54:d3:dc:2a:d7:29:15: 51:85:be:a7:62:cb:cb:a4:8b:14:a8:16:c1:b6:f3: b8:0b:3c:7a:2c:ae:6d:0d:49:04:b2:9a:45:59:0a: da:d9:fb:de:e6:ae:ad:1e:1f:85:57:9f:b4:7f:49: f6:16:f2:39:8f:51:b3:07:5f:51:e7:50:be:52:dd: f0:43:4e:48:df:09:2f:a5:e3:cf:fb:2a:20:00:70: b2:ad:7b:59:d6:72:e5:57:d3:63:2a:d1:41:e9:0d: 7f:d1:71:00:cc:cf:73:0b:5f:c2:18:74:7b:14:5a: bd:e1:40:f6:02:ad:40:45:cc:4f:39:69:98:4b:24: 55:35:ca:92:e8:1d:72:76:4e:04:01:08:9a:36:70: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BE:7F:BC:C5:8B:C4:75:2F:B9:D1:73:D9:A0:FF:FD:51:74:3E:57 X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:0c:85:b0:a8:51:fb:71:76:ef:13:61:42:0c:21:e2:2a:7f: f6:29:dc:a9:09:7e:ca:e9:01:39:fe:02:ea:6c:a2:30:ed:e6: c9:ae:ef:52:63:d3:9c:1b:f5:53:45:a9:06:4b:67:9a:01:4c: b0:14:ab:dd:e0:33:ed:55:a0:27:fa:93:fc:d0:3c:ca:32:80: 12:37:a3:a9:dd:db:69:f8:2c:fa:38:e7:e1:4f:6b:04:56:16: 43:d3:de:5f:53:a1:7f:22:b4:b4:6a:05:65:f3:ab:03:27:8a: 2c:a4:0a:6e:b1:4d:66:cc:1b:97:69:e5:38:d8:56:ce:99:cf: eb:ab:8a:b6:3d:d9:dd:d1:39:67:19:7e:6e:71:80:8c:8a:f9: e4:76:29:eb:36:59:1c:b9:4e:11:7f:dc:8f:76:42:a3:9e:9b: 3b:2b:92:15:2f:41:da:a3:67:59:02:0b:2e:30:ed:ad:e8:3b: 6c:dc:a3:03:33:3a:e8:45:49:c5:4d:d8:02:d2:ff:12:d3:97: 49:ea:f8:68:d7:0a:12:00:2f:f4:17:44:92:7f:4c:83:a0:d8: ca:c8:5b:10:de:ab:f8:4c:e0:f2:56:65:3b:9b:35:b9:1f:5b: aa:ee:e8:e1:5f:d3:bd:59:a3:13:e3:2e:38:64:17:f5:6b:a5: ce:72:d9:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjUwNzAzMDA1MjA3WhcNMjUwNzEwMDA1MjA3WjAYMRYwFAYD VQQDEw02ODY1ZDQzNy1jZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApS9SSFS23POYNESIf0Gil89y65Tj1zNR/TmVxk5yIfr3N277wR9BD9BV0xEV ZGbOFf2bXHwpSL6522V0h7GlyfGvCJsAXrZrxS259Y1xa3g3004HAPgRGhoOZGtq GhRGy45j5704hnJOj7teg+JkOlTT3CrXKRVRhb6nYsvLpIsUqBbBtvO4Czx6LK5t DUkEsppFWQra2fve5q6tHh+FV5+0f0n2FvI5j1GzB19R51C+Ut3wQ05I3wkvpePP +yogAHCyrXtZ1nLlV9NjKtFB6Q1/0XEAzM9zC1/CGHR7FFq94UD2Aq1ARcxPOWmY SyRVNcqS6B1ydk4EAQiaNnAlAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC++f7zF i8R1L7nRc9mg//1RdD5XMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldk NnVVQWVTNl85NDBBckxkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARDIWwqFH7cXbvE2FCDCHiKn/2KdypCX7K6QE5/gLqbKIw7ebJru9S Y9OcG/VTRakGS2eaAUywFKvd4DPtVaAn+pP80DzKMoASN6Op3dtp+Cz6OOfhT2sE VhZD095fU6F/IrS0agVl86sDJ4ospApusU1mzBuXaeU42FbOmc/rq4q2Pdnd0Tln GX5ucYCMivnkdinrNlkcuU4Rf9yPdkKjnps7K5IVL0Hao2dZAgsuMO2t6Dts3KMD MzroRUnFTdgC0v8S05dJ6vho1woSAC/0F0SSf0yDoNjKyFsQ3qv4TODyVmU7mzW5 H1uq7ujhX9O9WaMT4y44ZBf1a6XOctmF -----END CERTIFICATE-----Generated at Thu Jul 3 21:19:03 2025 by rpki-client