$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json) Hash identifier: A6b6lrpzbF0fRB7/3Y6Xm5AL7sk5evBp03UpvvTi430= Subject key identifier: 41:59:D9:27:C3:BA:5B:49:E7:36:51:3F:A0:41:60:57:0A:D5:EB:C3 Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft Manifest number: 3E Signing time: Sat 23 Aug 2025 07:49:07 +0000 Manifest this update: Sat 23 Aug 2025 07:49:07 +0000 Manifest next update: Sat 30 Aug 2025 07:49:07 +0000 Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: pmpsE5gFoWqmffRqRhbm4G3MXwEDyVaTg+JSLLL0cLQ=) 2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: rpfBuY4xqKMYE45ZTaNcRBU8E1C/kMxDVjLVLcwIScU=) 3: 44E001183C5C11F095C6A259C4F9AE02.roa (hash: UIAwr+xolshjF2OO5cazsfh4ngJlaSJ3aa0HRbMpd70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Aug 23 07:49:07 2025 GMT Not After : Aug 30 07:49:07 2025 GMT Subject: CN=68a97273-ea92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:c5:18:20:26:fd:6d:ba:4d:90:3f:f6:f8: 90:3e:e5:07:48:7e:e8:e4:be:ee:ac:6f:fd:50:ea: dc:d7:dc:dc:7f:c3:69:76:1c:05:82:6b:38:ed:12: 9c:f2:f9:fa:d1:78:04:43:91:bf:e5:77:61:69:50: 9e:69:0b:47:1f:32:63:9a:0b:c0:0f:2d:42:b4:92: e0:30:1c:c7:96:99:6a:d7:0a:84:0b:0b:64:54:59: af:2f:2e:15:4e:af:64:1e:95:73:d0:31:93:3b:6d: 46:97:dc:22:e4:93:a1:00:0a:d8:51:ed:c0:1f:59: 04:0e:b3:15:f7:5f:54:b3:a8:78:71:db:fb:72:01: 38:6c:79:b7:6a:02:d3:59:cb:b0:bd:be:d0:b6:dc: d8:63:d3:2d:9b:3a:cb:1b:e9:77:9b:a7:41:f5:1e: b9:d4:3d:e4:82:01:16:87:53:6e:87:d0:cb:d6:ea: 4d:e1:4c:5e:bb:6b:31:bb:9b:c4:1c:bf:06:78:87: c0:e7:4d:4c:60:0d:8f:0d:5b:42:d9:50:80:34:4f: e1:fb:64:f2:15:57:38:02:44:e0:91:8d:5c:6e:19: 74:12:61:22:4f:c5:8a:31:30:0a:4f:db:9f:bf:c1: 7a:46:18:da:8a:5a:6e:f1:90:60:6b:17:67:49:cc: 54:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:59:D9:27:C3:BA:5B:49:E7:36:51:3F:A0:41:60:57:0A:D5:EB:C3 X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:63:d7:f3:63:07:1b:24:9c:d4:31:79:4c:dd:93:ff:f2:4b: a6:1c:dd:6c:27:9f:84:74:c3:b9:de:7d:c6:40:1d:7a:18:e8: 8d:4c:e4:02:56:3b:e5:7c:61:af:60:3e:7d:e6:d9:a7:d0:c0: a0:5e:a9:36:6e:ea:d3:eb:13:81:9a:6f:06:87:92:6b:58:3e: d4:dc:05:1e:cc:ca:8c:c1:39:a1:e5:ca:41:2f:2d:8b:e8:22: d3:40:25:20:57:74:59:05:19:8a:4d:01:67:94:6b:cb:98:f6: 0e:6a:04:c7:f1:4a:b1:d6:30:44:5d:11:60:e9:62:a2:e0:a6: 55:b3:b2:9e:69:b3:f1:84:3f:50:4c:9b:fa:78:7f:ad:bc:72: 62:83:ab:c2:20:97:7e:f0:ed:dd:79:89:a9:b5:21:88:6c:3f: 38:0a:74:35:64:58:4f:2a:38:6b:75:13:e2:63:e2:25:9a:60: 98:3c:1a:e8:0e:0a:a7:44:e4:72:5d:f4:da:e4:18:cf:81:21: 6e:88:fc:fb:68:fc:b4:ab:d8:f2:87:dd:9b:f7:53:f1:b7:15: 29:5b:4d:ac:3e:8c:e3:ab:54:d1:46:f8:fd:61:65:b3:6c:7e: 9c:8b:0a:12:eb:a0:79:8f:74:57:e2:40:01:c5:ea:1f:02:b4: 9c:9b:f3:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTA4MjMwNzQ5MDdaFw0yNTA4MzAwNzQ5MDdaMBgxFjAUBgNV BAMTDTY4YTk3MjczLWVhOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDqMUYICb9bbpNkD/2+JA+5QdIfujkvu6sb/1Q6tzX3Nx/w2l2HAWCazjtEpzy +frReARDkb/ld2FpUJ5pC0cfMmOaC8APLUK0kuAwHMeWmWrXCoQLC2RUWa8vLhVO r2QelXPQMZM7bUaX3CLkk6EACthR7cAfWQQOsxX3X1SzqHhx2/tyAThsebdqAtNZ y7C9vtC23Nhj0y2bOssb6Xebp0H1HrnUPeSCARaHU26H0MvW6k3hTF67azG7m8Qc vwZ4h8DnTUxgDY8NW0LZUIA0T+H7ZPIVVzgCROCRjVxuGXQSYSJPxYoxMApP25+/ wXpGGNqKWm7xkGBrF2dJzFThAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQVnZJ8O6 W0nnNlE/oEFgVwrV68MwHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjIxLzMzRUFBQzY4MkQwMzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlps a1lZZlFnZWZJOTVpRDRaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAlj1/NjBxsknNQxeUzdk//yS6Yc3Wwnn4R0w7nefcZAHXoY6I1M5AJW O+V8Ya9gPn3m2afQwKBeqTZu6tPrE4GabwaHkmtYPtTcBR7MyozBOaHlykEvLYvo ItNAJSBXdFkFGYpNAWeUa8uY9g5qBMfxSrHWMERdEWDpYqLgplWzsp5ps/GEP1BM m/p4f628cmKDq8Igl37w7d15iam1IYhsPzgKdDVkWE8qOGt1E+Jj4iWaYJg8GugO CqdE5HJd9NrkGM+BIW6I/Pto/LSr2PKH3Zv3U/G3FSlbTaw+jOOrVNFG+P1hZbNs fpyLChLroHmPdFfiQAHF6h8CtJyb85k= -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:55 2025 by rpki-client