$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json) Hash identifier: wVxKFh87kl8pS08zMieeDE0XoZwAuqkKypswujcFsLI= Subject key identifier: C4:CA:87:22:E9:4F:21:26:8F:D3:FE:BB:07:F6:0F:DD:1F:D5:1E:ED Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft Manifest number: 24 Signing time: Thu 03 Jul 2025 08:10:16 +0000 Manifest this update: Thu 03 Jul 2025 08:10:15 +0000 Manifest next update: Thu 10 Jul 2025 08:10:15 +0000 Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: nicMTWvBPY6oVxMf1XtumWfzFbCSn4+fOwU/kSay/1E=) 2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: rpfBuY4xqKMYE45ZTaNcRBU8E1C/kMxDVjLVLcwIScU=) 3: 44E001183C5C11F095C6A259C4F9AE02.roa (hash: UIAwr+xolshjF2OO5cazsfh4ngJlaSJ3aa0HRbMpd70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Jul 3 08:10:15 2025 GMT Not After : Jul 10 08:10:15 2025 GMT Subject: CN=68663ae7-5ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:f7:30:a6:33:e3:27:aa:fc:88:1e:2f:cc: 8b:4a:20:ab:52:bd:98:ec:b1:d0:e5:bf:c6:c1:ab: a4:75:ab:83:b2:86:3e:0a:10:da:6d:77:b2:13:a8: af:e3:3d:b9:c2:39:ee:35:82:57:8b:92:d9:93:39: b3:4b:00:cf:a0:eb:14:cb:37:22:78:f5:c3:78:9f: 4c:02:6c:81:3a:4f:23:6b:b9:3a:92:31:29:1b:28: 9f:b2:f9:8a:3c:f4:b3:cb:f0:84:2e:da:e8:6f:51: 2d:3f:67:20:52:9d:e8:16:7d:e8:61:06:88:f0:3c: 8a:64:7b:06:54:ef:e3:e3:16:6f:07:6f:22:b3:89: 84:74:5a:77:ae:7e:19:3a:9e:59:44:31:d8:f2:67: 4f:f8:ed:b8:3a:6e:84:a6:d8:53:c7:c4:ea:3f:a1: da:8e:82:e3:23:93:e0:5f:e8:cb:05:36:9d:18:c5: aa:1e:07:ba:1c:02:03:dd:8b:f9:ae:1e:86:d3:22: d0:ff:f6:91:c0:6a:dd:ae:60:37:c9:f0:46:d2:fc: 77:0c:8a:3c:9d:aa:d8:84:ac:f8:83:87:58:9e:50: bf:e8:20:46:cb:c1:66:6e:c3:6b:fe:c9:49:d7:6b: aa:ad:11:fe:8e:4c:87:b6:23:55:9c:95:91:dc:c9: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CA:87:22:E9:4F:21:26:8F:D3:FE:BB:07:F6:0F:DD:1F:D5:1E:ED X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:83:7d:55:be:00:28:31:bb:7d:fd:ba:c4:3c:2e:63:70:76: c1:45:41:1a:bd:fd:90:45:01:97:27:5d:c3:bd:70:6b:b8:83: c0:31:4a:c3:e4:40:ac:18:8a:31:60:d1:c1:e8:82:cc:a3:c0: 36:f8:15:9c:33:8f:87:4e:60:66:78:40:87:5a:73:cd:de:13: 39:ac:c5:e3:22:ee:71:f1:91:30:ac:c0:e4:ca:b0:77:f5:cb: 5a:ca:e7:c5:49:ed:24:e5:c2:d0:da:88:b9:74:9c:05:51:77: 7d:65:79:5c:fb:52:a5:ca:ea:32:a8:dc:40:24:ab:30:ad:38: 4b:86:1e:61:b0:56:d0:6d:02:f7:97:4b:04:80:0b:8a:b4:48: 3c:7b:a2:69:34:46:d1:de:4b:ee:f9:ea:78:9d:6d:68:f9:53: b5:d0:ee:1d:58:ec:7f:3b:e6:31:6f:2c:0e:52:19:bd:20:41: 38:69:db:74:8c:63:bb:58:53:01:91:9c:14:a7:4b:e3:6f:6b: b6:c1:78:c7:b1:a6:2e:99:c8:f7:84:5e:0d:a2:34:de:af:9c: 26:87:b0:86:b9:42:33:7c:8e:5d:fc:ae:fc:58:e4:97:b4:37: 43:8e:36:a4:12:b2:bd:78:57:eb:d5:18:c1:d2:02:a2:b6:ae: 62:aa:45:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTA3MDMwODEwMTVaFw0yNTA3MTAwODEwMTVaMBgxFjAUBgNV BAMTDTY4NjYzYWU3LTVhYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCPfcwpjPjJ6r8iB4vzItKIKtSvZjssdDlv8bBq6R1q4Oyhj4KENptd7ITqK/j PbnCOe41gleLktmTObNLAM+g6xTLNyJ49cN4n0wCbIE6TyNruTqSMSkbKJ+y+Yo8 9LPL8IQu2uhvUS0/ZyBSnegWfehhBojwPIpkewZU7+PjFm8HbyKziYR0Wneufhk6 nllEMdjyZ0/47bg6boSm2FPHxOo/odqOguMjk+Bf6MsFNp0YxaoeB7ocAgPdi/mu HobTItD/9pHAat2uYDfJ8EbS/HcMijydqtiErPiDh1ieUL/oIEbLwWZuw2v+yUnX a6qtEf6OTIe2I1WclZHcyd+7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxMqHIulP ISaP0/67B/YP3R/VHu0wHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjIxLzMzRUFBQzY4MkQwMzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlps a1lZZlFnZWZJOTVpRDRaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL2DfVW+ACgxu339usQ8LmNwdsFFQRq9/ZBFAZcnXcO9cGu4g8AxSsPk QKwYijFg0cHogsyjwDb4FZwzj4dOYGZ4QIdac83eEzmsxeMi7nHxkTCswOTKsHf1 y1rK58VJ7STlwtDaiLl0nAVRd31leVz7UqXK6jKo3EAkqzCtOEuGHmGwVtBtAveX SwSAC4q0SDx7omk0RtHeS+756nidbWj5U7XQ7h1Y7H875jFvLA5SGb0gQThp23SM Y7tYUwGRnBSnS+Nva7bBeMexpi6ZyPeEXg2iNN6vnCaHsIa5QjN8jl38rvxY5Je0 N0OONqQSsr14V+vVGMHSAqK2rmKqRTs= -----END CERTIFICATE-----Generated at Thu Jul 3 17:34:45 2025 by rpki-client