$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json) Hash identifier: j7n3CXBXRpQEaAG9jtY8SGbo3RZZvADLQVKsuFT2aT4= Subject key identifier: 69:B1:9E:A1:6F:6B:2C:CB:9D:D0:FB:B5:49:D8:8C:7F:3C:E9:99:EF Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Certificate serial: 1347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft Manifest number: 133C Signing time: Wed 14 May 2025 17:05:45 +0000 Manifest this update: Wed 14 May 2025 17:05:45 +0000 Manifest next update: Wed 21 May 2025 17:05:45 +0000 Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: RpXyLDhQFuPsceC3n3XxmoESrx7G+Af2YUIxTlT4b84=) 2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: cVw4oQcu4jILJ7GW153O1ZXHHSwLOkKZrLSzT1rC+6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4935 (0x1347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Validity Not Before: May 14 17:05:45 2025 GMT Not After : May 21 17:05:45 2025 GMT Subject: CN=6824cd69-ecb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:dc:3a:3b:6b:0e:29:89:9c:bb:99:ef:57: 5b:41:d3:58:c2:fa:c1:56:08:e1:a0:ee:56:b7:d1: 76:59:44:26:7a:96:47:1f:82:f7:20:4e:f9:eb:1d: 05:5c:e8:b7:38:55:d5:04:ed:83:64:53:43:2e:d6: af:74:93:1f:54:be:ea:ac:5d:ef:c7:5f:9b:23:bb: 76:05:43:dd:6e:5b:4b:6c:ae:10:f8:03:cf:0f:9a: 1e:a6:bf:8c:40:88:50:c4:ca:b4:8b:d6:35:07:cc: 8d:df:a0:ce:3d:7a:c6:8c:bf:8b:12:0b:06:c2:d6: e6:84:b5:33:ed:e5:1d:e3:38:f3:37:f0:e0:e5:97: 8a:76:4e:6f:31:7d:98:db:bc:9b:8c:ba:16:94:69: 2d:4a:fb:cc:35:4f:f6:72:76:42:a4:5e:49:ef:48: 40:b1:48:77:61:4a:5b:90:da:b4:b2:e7:96:4a:9e: d9:97:7f:0f:2f:e7:ba:14:dc:f6:9d:8b:8d:be:22: c9:12:5d:bf:7b:24:93:71:0a:2c:f7:2e:f6:ea:63: f8:1d:13:32:08:a9:cb:e9:da:e6:c1:3b:aa:4d:d3: e6:8c:aa:a2:cf:ee:6e:9c:51:4c:46:f0:2a:b3:dd: c8:f7:9c:2f:7d:33:d4:b4:31:b5:b1:47:5b:c6:8a: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B1:9E:A1:6F:6B:2C:CB:9D:D0:FB:B5:49:D8:8C:7F:3C:E9:99:EF X509v3 Authority Key Identifier: keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:dd:f9:e1:8d:ea:02:7e:dd:bf:1b:a9:aa:86:7a:66:ab:65: 5b:23:8b:e1:18:ea:55:71:f8:76:fe:ee:15:c5:21:0a:a2:74: f8:ed:c6:da:46:e1:77:90:88:e4:9d:16:83:64:d6:6f:ab:f5: b9:cb:8a:6a:4a:04:72:cc:42:87:2d:2d:46:00:6b:03:7d:2c: ab:fb:eb:5d:8c:7e:f4:5f:ee:bd:c5:ab:49:32:f1:ce:dc:d1: 8d:92:71:92:c5:7a:b3:0f:b4:f1:82:c8:92:69:ce:1e:83:d6: 89:60:52:ba:c7:ee:6b:f8:1f:f8:7a:f0:d1:ec:ff:44:49:5a: f5:90:90:0e:b8:1d:2b:91:38:b0:69:a5:4f:af:fc:3d:7c:37: 98:9c:db:0d:05:18:23:d4:e9:b2:b9:bc:91:da:b6:81:4b:fe: 44:d5:c2:24:d6:10:1c:d7:91:b8:3a:9a:a2:67:a3:b2:e8:3c: 13:db:3a:fa:37:bb:40:d2:57:02:bf:aa:d5:bf:de:7e:d9:f1: cd:f2:80:75:e7:ca:75:74:ef:17:eb:9c:92:11:ad:63:29:2a: c6:45:4c:a8:cd:9d:e9:c0:da:32:dd:f6:80:97:a7:76:0f:c6: e7:be:5d:55:9e:31:7f:8b:9a:bb:32:f4:7b:7f:5c:79:85:14: ce:4d:ad:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRkUxMTAvBgNVBAUTKDNENDNFREZFNjRGNjE0RTExMzA2QTg3RjFFRjI0RjI4 MkU3RTM3MTQwHhcNMjUwNTE0MTcwNTQ1WhcNMjUwNTIxMTcwNTQ1WjAYMRYwFAYD VQQDEw02ODI0Y2Q2OS1lY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs77cOjtrDimJnLuZ71dbQdNYwvrBVgjhoO5Wt9F2WUQmepZHH4L3IE756x0F XOi3OFXVBO2DZFNDLtavdJMfVL7qrF3vx1+bI7t2BUPdbltLbK4Q+APPD5oepr+M QIhQxMq0i9Y1B8yN36DOPXrGjL+LEgsGwtbmhLUz7eUd4zjzN/Dg5ZeKdk5vMX2Y 27ybjLoWlGktSvvMNU/2cnZCpF5J70hAsUh3YUpbkNq0sueWSp7Zl38PL+e6FNz2 nYuNviLJEl2/eySTcQos9y726mP4HRMyCKnL6drmwTuqTdPmjKqiz+5unFFMRvAq s93I95wvfTPUtDG1sUdbxop+pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmxnqFv ayzLndD7tUnYjH886ZnvMB8GA1UdIwQYMBaAFD1D7f5k9hThEwaofx7yTygufjcU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJGRS83MTgxN0Y2Q0E1 QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZPRVRCcWhfSHZKUEtDNS1O eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVUHRfbVQyRk9FVEJxaF9IdkpQS0M1LU54US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJGRS83MTgxN0Y2Q0E1QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZP RVRCcWhfSHZKUEtDNS1OeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD3fnhjeoCft2/G6mqhnpmq2VbI4vhGOpVcfh2/u4VxSEKonT47cba RuF3kIjknRaDZNZvq/W5y4pqSgRyzEKHLS1GAGsDfSyr++tdjH70X+69xatJMvHO 3NGNknGSxXqzD7TxgsiSac4eg9aJYFK6x+5r+B/4evDR7P9ESVr1kJAOuB0rkTiw aaVPr/w9fDeYnNsNBRgj1OmyubyR2raBS/5E1cIk1hAc15G4OpqiZ6Oy6DwT2zr6 N7tA0lcCv6rVv95+2fHN8oB158p1dO8X65ySEa1jKSrGRUyozZ3pwNoy3faAl6d2 D8bnvl1VnjF/i5q7MvR7f1x5hRTOTa3L -----END CERTIFICATE-----Generated at Fri May 16 13:07:17 2025 by rpki-client