$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft File: PudBKv6HPx1FurYUcUoyAeNilpE.mft (raw, json) Hash identifier: FTpwpojgN/2CqKxwZZI4YKdssLEt/WJyDvcv+OnCelw= Subject key identifier: 1A:0F:A6:4F:B3:45:46:58:67:EA:65:45:54:C0:6A:BD:42:E3:7A:B9 Authority key identifier: 3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 Certificate issuer: /CN=A91E3680/serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Certificate serial: 05CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft Manifest number: 05C8 Signing time: Wed 02 Jul 2025 23:22:25 +0000 Manifest this update: Wed 02 Jul 2025 23:22:25 +0000 Manifest next update: Wed 09 Jul 2025 23:22:25 +0000 Files and hashes: 1: PudBKv6HPx1FurYUcUoyAeNilpE.crl (hash: dV3Wo8AHJseA+YGNA8J+BzDreCI9ADssIdwCftibDxg=) 2: B46FE2D0C5CA11EBB86D320BC4F9AE02.roa (hash: akcQJOcqn6Cqm1e0k8wvVS6O2vanCte0Cwevg6oh+R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3680, serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Validity Not Before: Jul 2 23:22:25 2025 GMT Not After : Jul 9 23:22:25 2025 GMT Subject: CN=6865bf31-9259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:81:08:e0:8e:7e:5a:e0:a8:ab:cb:6e:dc: 12:05:ed:be:45:ed:f7:75:98:25:ce:24:23:fc:0d: e6:d2:05:55:52:85:07:30:61:91:c0:cc:f9:7f:2e: 29:93:00:06:df:bd:39:ab:8e:ec:29:a8:ad:da:50: 39:a2:01:8c:f2:62:5d:e9:f9:b1:64:f3:00:6b:3a: ba:33:44:4a:5d:ae:c8:e5:f3:fb:07:fd:6d:de:ee: 3c:65:5f:b4:21:57:05:c9:00:74:85:e5:6e:e2:b1: 9e:07:d3:80:26:f2:5a:df:c4:d1:d9:86:a8:63:8a: 5f:af:ff:b7:89:d7:66:e0:ab:c5:bb:72:34:ad:a1: 61:46:da:0d:22:0f:84:b1:e0:b9:ae:43:66:a3:68: 61:de:1a:90:40:41:6d:11:8d:6c:0b:a1:f0:8a:93: 5a:77:e7:63:5a:80:d3:d8:28:01:4e:65:b1:98:ea: 61:40:15:83:51:ce:4b:f3:7e:62:80:c9:fa:ae:01: 4d:af:a6:c3:5a:8a:fd:d1:fd:e7:39:85:ce:06:fb: b9:66:31:f6:f9:05:05:48:a4:98:cb:99:35:97:90: 28:71:60:4a:04:28:1a:d5:de:68:80:75:6b:88:e9: dc:5d:00:cb:56:88:7e:f7:35:99:15:e5:e8:90:af: 2f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0F:A6:4F:B3:45:46:58:67:EA:65:45:54:C0:6A:BD:42:E3:7A:B9 X509v3 Authority Key Identifier: keyid:3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:05:71:54:32:5d:6e:c7:8b:50:d6:49:8f:9f:2e:b9:aa:c3: 08:37:8a:f0:79:85:2b:d3:36:52:d9:93:d4:35:8e:6f:54:d2: 91:d0:a5:46:53:39:e7:1f:72:c6:3c:37:2a:53:c9:f9:5e:f8: 5f:da:5e:34:4a:1b:41:97:4e:29:22:aa:50:14:49:65:20:a7: 14:92:3f:2b:b0:28:1c:09:62:4b:14:11:95:10:83:02:24:60: 14:8f:dd:31:48:c3:65:7a:f9:9b:90:5b:c1:82:46:42:cf:49: 61:f2:e6:55:61:51:bd:24:d9:95:47:2a:4f:e2:39:85:3f:a7: b1:cf:4b:9a:eb:3d:88:b4:f6:65:17:0e:26:9d:cd:7f:f6:c6: 4a:43:8b:15:a8:73:76:80:cc:dc:02:46:ae:2c:44:fd:ba:37: a4:79:fa:fd:51:c0:ea:d3:87:42:4d:3f:1e:70:c9:2e:1d:14: eb:45:20:11:12:4b:eb:ee:c6:cc:3d:e7:c1:30:fd:c8:9d:56: 86:d6:3e:3b:8b:d0:db:75:16:69:0c:95:21:38:58:21:dc:88: 7f:7d:3e:16:24:f3:15:9b:a0:c9:4a:76:e5:31:62:3c:de:22: 45:51:f1:f0:cd:ee:2e:87:8b:64:76:58:ac:3d:d0:b8:5f:f5: d8:53:80:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM2ODAxMTAvBgNVBAUTKDNFRTc0MTJBRkU4NzNGMUQ0NUJBQjYxNDcxNEEzMjAx RTM2Mjk2OTEwHhcNMjUwNzAyMjMyMjI1WhcNMjUwNzA5MjMyMjI1WjAYMRYwFAYD VQQDEw02ODY1YmYzMS05MjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqriBCOCOflrgqKvLbtwSBe2+Re33dZglziQj/A3m0gVVUoUHMGGRwMz5fy4p kwAG3705q47sKait2lA5ogGM8mJd6fmxZPMAazq6M0RKXa7I5fP7B/1t3u48ZV+0 IVcFyQB0heVu4rGeB9OAJvJa38TR2YaoY4pfr/+3iddm4KvFu3I0raFhRtoNIg+E seC5rkNmo2hh3hqQQEFtEY1sC6HwipNad+djWoDT2CgBTmWxmOphQBWDUc5L835i gMn6rgFNr6bDWor90f3nOYXOBvu5ZjH2+QUFSKSYy5k1l5AocWBKBCga1d5ogHVr iOncXQDLVoh+9zWZFeXokK8vhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoPpk+z RUZYZ+plRVTAar1C43q5MB8GA1UdIwQYMBaAFD7nQSr+hz8dRbq2FHFKMgHjYpaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzY4MC9ENDk5MTg2MkM1 QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4MUZ1cllVY1VveUFlTmls cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1ZEJLdjZIUHgxRnVyWVVjVW95QWVOaWxwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzY4MC9ENDk5MTg2MkM1QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4 MUZ1cllVY1VveUFlTmlscEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaBXFUMl1ux4tQ1kmPny65qsMIN4rweYUr0zZS2ZPUNY5vVNKR0KVG UznnH3LGPDcqU8n5Xvhf2l40ShtBl04pIqpQFEllIKcUkj8rsCgcCWJLFBGVEIMC JGAUj90xSMNlevmbkFvBgkZCz0lh8uZVYVG9JNmVRypP4jmFP6exz0ua6z2ItPZl Fw4mnc1/9sZKQ4sVqHN2gMzcAkauLET9ujekefr9UcDq04dCTT8ecMkuHRTrRSAR Ekvr7sbMPefBMP3InVaG1j47i9DbdRZpDJUhOFgh3Ih/fT4WJPMVm6DJSnblMWI8 3iJFUfHwze4uh4tkdlisPdC4X/XYU4DK -----END CERTIFICATE-----Generated at Fri Jul 4 18:01:14 2025 by rpki-client