$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json) Hash identifier: KS3rMjNTB/EKaESp7uUYdtOsupYpsunYq2J1KvmSdto= Subject key identifier: DC:07:48:4A:47:15:75:AF:7F:A3:64:26:B4:D0:3B:0F:C4:7E:90:D3 Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Certificate serial: 1397 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft Manifest number: 138C Signing time: Sat 18 Oct 2025 17:27:47 +0000 Manifest this update: Sat 18 Oct 2025 17:27:46 +0000 Manifest next update: Sat 25 Oct 2025 17:27:46 +0000 Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: v79EifRo+5H/w/KQvtGh47i/bgvOtbHzU0S3CJL8HmQ=) 2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: cVw4oQcu4jILJ7GW153O1ZXHHSwLOkKZrLSzT1rC+6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5015 (0x1397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Validity Not Before: Oct 18 17:27:46 2025 GMT Not After : Oct 25 17:27:46 2025 GMT Subject: CN=68f3ce13-8903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:fc:df:25:43:7f:5b:df:6b:75:ab:e8:31: 62:ea:22:1f:4a:9e:b2:22:d2:7a:af:65:49:3d:41: a0:3c:3d:2d:f2:4f:ee:8a:10:0f:ee:c1:e8:a1:47: 22:4c:ee:9c:cf:bc:3a:5f:20:81:47:3a:f9:a7:a9: e1:38:74:b5:8a:60:52:2b:cd:c5:1c:ab:c5:de:3b: b6:4a:22:fb:78:bd:68:13:ba:3f:20:24:5e:82:c1: 11:53:b0:73:18:fb:7c:28:09:dc:1b:05:f2:e7:c8: cb:d0:4f:69:ae:69:fe:0f:83:4d:48:3c:1f:31:53: a8:4c:89:7e:45:69:21:91:3b:8a:15:fa:4b:18:04: 49:8b:44:0a:52:0b:b1:e5:73:4a:96:d4:56:10:a4: 4b:4f:2d:22:a7:ef:5a:9c:2a:4d:b9:bc:cd:d6:e1: 64:2b:e3:86:93:86:87:0c:1c:a3:c8:2c:29:3f:37: 7b:5d:8b:61:c5:3e:e5:c7:4a:df:43:39:e6:37:96: 5c:61:45:6c:e3:56:98:98:6e:8d:96:60:f3:9e:b6: 66:03:83:7c:bf:32:4e:c1:9a:b4:75:b1:e4:71:0a: 0e:cd:2a:01:4f:6c:de:c6:dd:1c:95:63:f4:ca:05: de:7a:06:e2:6f:2d:ff:8c:e3:db:5c:95:4c:f9:13: ca:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:07:48:4A:47:15:75:AF:7F:A3:64:26:B4:D0:3B:0F:C4:7E:90:D3 X509v3 Authority Key Identifier: keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:23:85:8f:f1:84:d5:94:1b:5f:b9:ba:ba:85:76:d9:ea:73: f7:9d:9c:fb:34:8e:65:af:e1:72:e1:ed:40:83:76:31:ec:a9: a7:07:a0:2f:ad:ab:aa:da:98:d9:52:94:ec:e4:2f:b6:09:64: 19:2f:0f:39:91:06:d4:0f:ac:f0:4a:b5:6b:15:5d:0e:48:e6: 99:da:03:aa:a4:ee:06:3a:20:ef:59:38:16:b6:42:b1:fe:c2: b6:7d:63:f4:88:83:f3:a9:84:76:55:9d:08:ab:83:6f:1b:5e: 62:7d:b6:a8:02:fd:60:ae:95:ae:49:3d:1c:a2:fd:f2:de:c9: a4:78:84:90:06:05:1d:c4:9a:62:49:d8:5f:5c:59:67:fe:9c: c2:db:b5:0a:c7:14:76:7f:bf:48:a3:94:6c:d5:96:68:ba:7f: f9:61:1e:94:e8:d7:47:95:7e:92:ff:25:20:52:ae:7b:ff:8f: 8d:c2:9d:17:eb:f9:df:d2:47:d2:07:32:60:a4:93:ec:67:8b: a9:6e:5d:1f:8e:b2:3e:c6:38:29:35:89:ac:54:90:d5:e3:b7: 0f:bb:66:10:8d:00:2e:94:21:ee:f7:b5:78:07:18:c6:33:17: f2:99:30:64:f9:4e:a1:46:dc:9f:8f:f4:f5:98:60:91:cf:1e: 60:e4:d4:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRkUxMTAvBgNVBAUTKDNENDNFREZFNjRGNjE0RTExMzA2QTg3RjFFRjI0RjI4 MkU3RTM3MTQwHhcNMjUxMDE4MTcyNzQ2WhcNMjUxMDI1MTcyNzQ2WjAYMRYwFAYD VQQDEw02OGYzY2UxMy04OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxz83yVDf1vfa3Wr6DFi6iIfSp6yItJ6r2VJPUGgPD0t8k/uihAP7sHooUci TO6cz7w6XyCBRzr5p6nhOHS1imBSK83FHKvF3ju2SiL7eL1oE7o/ICRegsERU7Bz GPt8KAncGwXy58jL0E9prmn+D4NNSDwfMVOoTIl+RWkhkTuKFfpLGARJi0QKUgux 5XNKltRWEKRLTy0ip+9anCpNubzN1uFkK+OGk4aHDByjyCwpPzd7XYthxT7lx0rf QznmN5ZcYUVs41aYmG6NlmDznrZmA4N8vzJOwZq0dbHkcQoOzSoBT2zext0clWP0 ygXeegbiby3/jOPbXJVM+RPKZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwHSEpH FXWvf6NkJrTQOw/EfpDTMB8GA1UdIwQYMBaAFD1D7f5k9hThEwaofx7yTygufjcU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJGRS83MTgxN0Y2Q0E1 QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZPRVRCcWhfSHZKUEtDNS1O eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVUHRfbVQyRk9FVEJxaF9IdkpQS0M1LU54US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJGRS83MTgxN0Y2Q0E1QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZP RVRCcWhfSHZKUEtDNS1OeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZI4WP8YTVlBtfubq6hXbZ6nP3nZz7NI5lr+Fy4e1Ag3Yx7KmnB6Av rauq2pjZUpTs5C+2CWQZLw85kQbUD6zwSrVrFV0OSOaZ2gOqpO4GOiDvWTgWtkKx /sK2fWP0iIPzqYR2VZ0Iq4NvG15ifbaoAv1grpWuST0cov3y3smkeISQBgUdxJpi SdhfXFln/pzC27UKxxR2f79Io5Rs1ZZoun/5YR6U6NdHlX6S/yUgUq57/4+Nwp0X 6/nf0kfSBzJgpJPsZ4upbl0fjrI+xjgpNYmsVJDV47cPu2YQjQAulCHu97V4BxjG MxfymTBk+U6hRtyfj/T1mGCRzx5g5NQn -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:59 2025 by rpki-client