$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft File: PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json) Hash identifier: ZgWoI50T5BUUT1dM4Z1UxzUo8AD5UjVunCWIlEQMIlA= Subject key identifier: FD:9D:7C:47:53:AC:4E:8B:6B:E3:5D:06:B0:DE:15:E4:37:01:12:58 Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F Certificate issuer: /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft Manifest number: 069C Signing time: Sun 04 May 2025 21:53:34 +0000 Manifest this update: Sun 04 May 2025 21:53:34 +0000 Manifest next update: Sun 11 May 2025 21:53:34 +0000 Files and hashes: 1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: oCt+h+v1envZaAuraCYNlu7bfQ1budOOVJDRF8GzsW8=) 2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: QCHui8d37ydNx5pkaHoJoeho1nXwmP/z+o5jMR8k9Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Validity Not Before: May 4 21:53:34 2025 GMT Not After : May 11 21:53:34 2025 GMT Subject: CN=6817e1de-6292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0b:a7:73:49:03:20:fe:65:d0:d2:2e:1f:ec: b8:51:17:33:a5:2b:6f:6f:9c:73:67:0b:a9:eb:c2: 9b:3b:b7:57:aa:65:1d:4a:90:9e:a1:65:6d:21:d4: cf:ef:e9:0b:c1:e9:a7:f6:d9:60:09:89:1f:79:1c: 0c:97:66:ae:2e:35:5d:cf:17:31:16:c0:70:d6:4c: 01:8f:37:5c:bc:47:a5:ff:79:d2:10:f8:08:bf:5e: 40:12:60:aa:ea:9f:fa:87:1f:5a:16:ab:f3:d1:bc: fb:c3:63:b2:19:e9:fc:f7:25:7d:ac:31:38:22:8a: 23:69:14:54:02:41:e6:e3:1c:b1:6a:f7:6e:21:0c: 9f:f7:4b:5b:fd:c1:e9:b2:23:e5:db:e8:53:32:47: 5e:a0:d0:63:b7:dc:62:1c:67:73:df:30:5d:b8:ba: ab:a5:7c:d2:ec:8b:07:b6:e9:c8:b1:0f:b0:34:94: a9:00:8c:db:2f:c5:ee:61:b9:e1:5f:d7:5f:b6:c2: 43:64:17:e6:50:96:37:d9:fe:8f:2c:99:85:05:2f: 4d:03:bd:b0:bc:6f:2b:79:8f:4c:42:fb:2c:24:23: dd:ae:e0:05:66:bd:c5:eb:07:29:fc:ab:c6:59:9d: f8:db:3b:cf:ab:64:8b:47:e6:be:98:9e:78:6e:59: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9D:7C:47:53:AC:4E:8B:6B:E3:5D:06:B0:DE:15:E4:37:01:12:58 X509v3 Authority Key Identifier: keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:91:26:0c:e2:0c:30:01:8b:6c:3a:64:03:32:36:77:a8:2d: 53:96:56:ec:eb:88:60:dc:2f:8d:37:02:1b:47:2d:b9:18:07: c9:ba:3a:54:af:aa:2a:05:c3:3e:a6:32:bd:8a:1e:08:9a:55: 4d:f7:47:04:5d:73:41:5c:d2:a5:d0:e6:23:66:39:ed:85:ff: 79:95:30:f1:27:c1:d7:00:bf:0c:b9:ca:ec:74:af:67:81:ca: c9:e6:64:c7:a2:29:28:d3:4f:83:45:49:1d:6e:84:c6:21:5b: 4b:43:97:75:01:90:2c:c3:3c:e5:29:76:ce:a1:5d:85:18:cd: 60:db:31:b5:78:7f:bd:4a:9d:15:83:a9:ae:af:c5:b3:e9:16: 59:c9:65:de:fa:4f:44:30:fa:86:29:e1:0b:7c:56:5f:db:c7: 43:44:4f:de:d5:98:75:4d:2e:c6:fc:62:1a:a6:51:a3:bf:fa: 27:ff:b7:50:95:63:63:ae:2b:9e:e1:a6:e9:72:32:30:cf:8f: 7e:bd:29:77:74:5c:62:e8:30:1e:c1:9e:e5:dc:b2:8b:92:9e: 0c:34:fe:18:e0:55:bd:40:9e:64:21:7b:6a:c9:4d:44:f7:ac: 1b:31:67:10:9b:48:ee:b7:71:3c:66:75:35:02:b9:b3:58:78: af:39:ba:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QzIxMTAvBgNVBAUTKDNFRTUyMjk3NjEzMDZCOTdCREE3RkJFMUYyNENCNEIw NEQ0OTI1OEYwHhcNMjUwNTA0MjE1MzM0WhcNMjUwNTExMjE1MzM0WjAYMRYwFAYD VQQDEw02ODE3ZTFkZS02MjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gunc0kDIP5l0NIuH+y4URczpStvb5xzZwup68KbO7dXqmUdSpCeoWVtIdTP 7+kLwemn9tlgCYkfeRwMl2auLjVdzxcxFsBw1kwBjzdcvEel/3nSEPgIv15AEmCq 6p/6hx9aFqvz0bz7w2OyGen89yV9rDE4IoojaRRUAkHm4xyxavduIQyf90tb/cHp siPl2+hTMkdeoNBjt9xiHGdz3zBduLqrpXzS7IsHtunIsQ+wNJSpAIzbL8XuYbnh X9dftsJDZBfmUJY32f6PLJmFBS9NA72wvG8reY9MQvssJCPdruAFZr3F6wcp/KvG WZ342zvPq2SLR+a+mJ54blkZTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2dfEdT rE6La+NdBrDeFeQ3ARJYMB8GA1UdIwQYMBaAFD7lIpdhMGuXvaf74fJMtLBNSSWP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhDMi9GNjlDM0JBQzY2 OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1ZTlwX3ZoOGt5MHNFMUpK WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1VWlsMkV3YTVlOXBfdmg4a3kwc0UxSkpZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhDMi9GNjlDM0JBQzY2OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1 ZTlwX3ZoOGt5MHNFMUpKWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0kSYM4gwwAYtsOmQDMjZ3qC1Tllbs64hg3C+NNwIbRy25GAfJujpU r6oqBcM+pjK9ih4ImlVN90cEXXNBXNKl0OYjZjnthf95lTDxJ8HXAL8MucrsdK9n gcrJ5mTHoiko00+DRUkdboTGIVtLQ5d1AZAswzzlKXbOoV2FGM1g2zG1eH+9Sp0V g6mur8Wz6RZZyWXe+k9EMPqGKeELfFZf28dDRE/e1Zh1TS7G/GIaplGjv/on/7dQ lWNjriue4abpcjIwz49+vSl3dFxi6DAewZ7l3LKLkp4MNP4Y4FW9QJ5kIXtqyU1E 96wbMWcQm0jut3E8ZnU1ArmzWHivObrt -----END CERTIFICATE-----Generated at Mon May 5 03:12:19 2025 by rpki-client