$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft File: PudBKv6HPx1FurYUcUoyAeNilpE.mft (raw, json) Hash identifier: npqOZBIPmeYgh6pK9e3YzTMIOLEXdJXhmerTeldctdI= Subject key identifier: 54:16:58:EC:31:57:83:43:9F:1E:3A:5A:30:8A:73:C2:6C:C2:D0:C0 Authority key identifier: 3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 Certificate issuer: /CN=A91E3680/serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Certificate serial: 05EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft Manifest number: 05E4 Signing time: Fri 22 Aug 2025 23:10:22 +0000 Manifest this update: Fri 22 Aug 2025 23:10:21 +0000 Manifest next update: Fri 29 Aug 2025 23:10:21 +0000 Files and hashes: 1: PudBKv6HPx1FurYUcUoyAeNilpE.crl (hash: DEn839psusvnLM2q2Y7SlNl8Tc/7TBH5ua63pJM0cZM=) 2: B46FE2D0C5CA11EBB86D320BC4F9AE02.roa (hash: 3B4/3AAyZ28QeeGH+anThU9lLQ63dUv2fBzc3BmfNS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3680, serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Validity Not Before: Aug 22 23:10:21 2025 GMT Not After : Aug 29 23:10:21 2025 GMT Subject: CN=68a8f8de-208b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4a:a9:9f:d8:e1:43:27:ba:6f:bf:78:c4:86: 69:de:44:6a:c8:eb:b4:76:99:d7:d6:29:eb:15:3f: 52:28:2e:9c:d5:be:e2:d0:2c:9c:39:27:ba:15:ba: f1:cf:60:cf:4f:b1:dd:d1:e0:aa:59:e6:dc:f3:89: ab:b0:e9:cb:32:85:6f:07:1a:45:c3:4c:9c:7c:c4: 13:52:8f:b5:21:bd:31:ec:22:0e:13:f1:51:70:55: ce:ba:a8:d3:81:f7:21:94:3f:1c:ab:0f:e4:13:b0: 8a:e1:02:6b:62:7b:81:3c:72:ac:52:29:67:0f:89: 09:d8:69:44:d8:a7:6b:72:cd:04:d0:99:40:4f:7b: a6:d7:63:82:12:fa:fd:68:ae:00:5e:46:c8:67:4b: 6b:f0:4a:37:02:09:2a:63:15:f0:16:1b:fa:ab:75: c3:ff:b4:eb:d4:ac:93:72:c9:b8:90:c1:e5:27:45: fd:d1:0a:3a:db:0b:2d:5e:82:b3:cd:65:8a:fc:dc: 22:9d:ae:36:d0:dc:f7:2b:96:db:37:26:7d:18:70: 12:c8:5e:18:a7:9f:9e:80:49:61:d4:85:96:9e:fc: 3c:f2:0a:49:9c:43:f2:7c:06:22:51:70:a0:0d:9b: 31:29:aa:2b:21:17:c9:8f:e3:14:06:15:60:62:45: b8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:16:58:EC:31:57:83:43:9F:1E:3A:5A:30:8A:73:C2:6C:C2:D0:C0 X509v3 Authority Key Identifier: keyid:3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ca:e2:70:ac:25:47:22:d3:5a:7a:29:d3:4f:9e:32:20:b8: 19:30:29:12:aa:4b:f7:4e:2e:0a:86:1a:a9:63:b1:32:c6:77: cd:5a:e0:26:03:4f:42:18:d5:4f:97:4e:8b:66:69:f9:00:13: 52:cd:77:f2:71:e7:9f:c0:a3:51:32:14:d5:c4:4e:42:1e:ad: 58:ba:12:ca:70:d4:93:d6:11:23:dc:a2:24:4f:51:69:a6:71: 33:47:28:f6:1c:b9:c7:d1:89:c2:f1:44:92:88:ce:bb:a3:d5: 33:c3:82:e3:a9:ad:28:a0:3e:19:1a:74:49:55:26:40:68:81: 74:96:9d:93:fd:2e:64:63:41:54:f8:72:20:03:2e:74:8c:df: cc:13:9d:0f:69:af:71:97:85:b4:70:20:e0:07:fa:5e:34:3b: b5:1d:a3:fd:7a:a5:13:75:ae:8b:31:31:51:b2:ed:eb:fc:dc: 9d:3e:40:82:bb:d4:97:2d:4f:6a:e5:66:dc:d8:d8:18:40:84: 37:46:00:b9:09:4d:c7:31:ee:29:22:67:de:c7:2f:e1:57:2d: 51:2e:73:95:1c:b4:22:d8:77:71:a2:61:91:8c:c5:4f:06:35: 9f:7c:fd:b8:aa:d1:a2:4b:e5:bb:fe:02:40:65:ec:9b:e5:3d: f3:ab:dd:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM2ODAxMTAvBgNVBAUTKDNFRTc0MTJBRkU4NzNGMUQ0NUJBQjYxNDcxNEEzMjAx RTM2Mjk2OTEwHhcNMjUwODIyMjMxMDIxWhcNMjUwODI5MjMxMDIxWjAYMRYwFAYD VQQDEw02OGE4ZjhkZS0yMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kqpn9jhQye6b794xIZp3kRqyOu0dpnX1inrFT9SKC6c1b7i0CycOSe6Fbrx z2DPT7Hd0eCqWebc84mrsOnLMoVvBxpFw0ycfMQTUo+1Ib0x7CIOE/FRcFXOuqjT gfchlD8cqw/kE7CK4QJrYnuBPHKsUilnD4kJ2GlE2Kdrcs0E0JlAT3um12OCEvr9 aK4AXkbIZ0tr8Eo3AgkqYxXwFhv6q3XD/7Tr1KyTcsm4kMHlJ0X90Qo62wstXoKz zWWK/Nwina420Nz3K5bbNyZ9GHASyF4Yp5+egElh1IWWnvw88gpJnEPyfAYiUXCg DZsxKaorIRfJj+MUBhVgYkW4DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQWWOwx V4NDnx46WjCKc8JswtDAMB8GA1UdIwQYMBaAFD7nQSr+hz8dRbq2FHFKMgHjYpaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzY4MC9ENDk5MTg2MkM1 QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4MUZ1cllVY1VveUFlTmls cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1ZEJLdjZIUHgxRnVyWVVjVW95QWVOaWxwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzY4MC9ENDk5MTg2MkM1QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4 MUZ1cllVY1VveUFlTmlscEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnyuJwrCVHItNaeinTT54yILgZMCkSqkv3Ti4KhhqpY7EyxnfNWuAm A09CGNVPl06LZmn5ABNSzXfyceefwKNRMhTVxE5CHq1YuhLKcNST1hEj3KIkT1Fp pnEzRyj2HLnH0YnC8USSiM67o9Uzw4Ljqa0ooD4ZGnRJVSZAaIF0lp2T/S5kY0FU +HIgAy50jN/ME50Paa9xl4W0cCDgB/peNDu1HaP9eqUTda6LMTFRsu3r/NydPkCC u9SXLU9q5Wbc2NgYQIQ3RgC5CU3HMe4pImfexy/hVy1RLnOVHLQi2HdxomGRjMVP BjWffP24qtGiS+W7/gJAZeyb5T3zq92C -----END CERTIFICATE-----Generated at Sun Aug 24 02:30:53 2025 by rpki-client