$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json) Hash identifier: OqI+LxdEoU3LGzp2A74jVFUsf9p4WSjDTIypO8BjkDM= Subject key identifier: 79:14:09:BE:27:5C:6E:BB:6F:86:E7:C6:8E:29:98:15:D9:92:0F:58 Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft Manifest number: 05 Signing time: Thu 15 May 2025 07:29:08 +0000 Manifest this update: Thu 15 May 2025 07:29:08 +0000 Manifest next update: Thu 22 May 2025 07:29:08 +0000 Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: rjSbRsomMCR23QJydGQRvQKX7Id8UoFIdXmFSSDmDIk=) 2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: rpfBuY4xqKMYE45ZTaNcRBU8E1C/kMxDVjLVLcwIScU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: May 15 07:29:08 2025 GMT Not After : May 22 07:29:08 2025 GMT Subject: CN=682597c4-c115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:4e:e4:e6:54:a6:0c:4e:0b:cd:5c:73:96: f7:f5:f6:9a:44:48:1f:09:0a:4a:81:92:2e:b8:0c: d5:8b:3a:13:3d:68:d5:ed:f1:df:6d:67:61:07:d3: 1a:86:0a:43:9b:64:3f:d9:80:ed:e1:20:15:6b:0f: 0e:a8:88:18:22:d5:8c:18:3d:3c:d8:47:52:41:05: 9f:b7:c2:7b:dc:20:a1:18:51:c2:fe:98:5f:7a:b3: 7f:af:e4:9b:d3:e0:38:ab:d5:e7:3d:8d:43:1c:56: cd:23:de:44:ef:56:01:3f:5e:da:b4:89:01:be:5d: ad:7f:50:0c:48:91:79:63:ea:2b:f3:c7:65:10:c1: 59:07:fc:9b:f2:05:5c:5c:35:2d:c1:99:99:74:60: e2:8f:84:88:44:8d:2b:b9:22:62:5f:a2:55:77:63: b9:24:71:a2:dc:09:4d:19:67:73:3d:7f:3d:96:e9: 8d:54:8a:8f:bc:06:57:30:4b:92:d6:27:68:63:b5: e8:55:31:cb:87:9a:d7:60:88:d9:56:8a:10:4f:f9: c9:ac:ae:ca:77:07:c3:37:40:1e:14:1f:7a:fd:aa: f9:7b:aa:20:33:22:69:a3:3c:00:f3:d6:02:a2:ef: 7c:79:f5:1f:eb:1d:74:41:b0:cd:c0:5a:42:46:f2: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:14:09:BE:27:5C:6E:BB:6F:86:E7:C6:8E:29:98:15:D9:92:0F:58 X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ce:62:04:e1:f0:e2:c2:9f:c2:93:5f:5a:76:48:2a:a8:da: d9:98:5f:5d:eb:a8:cc:40:bb:21:96:d2:79:64:db:f8:f3:7f: 9e:f5:88:0d:88:5d:cc:a5:c5:f0:8a:e0:6e:a2:0a:9d:ea:5c: e5:e3:56:1b:ea:1d:1e:9b:0c:b7:e5:3c:78:cd:e3:e2:ad:a7: 07:0b:4c:12:a7:71:bf:1b:1a:4b:52:94:26:7e:f6:f7:1f:36: 1e:c5:4f:15:5d:bf:21:b1:f3:67:7b:cb:43:f9:7c:f5:a3:99: b8:77:19:7c:91:a2:f3:e9:ac:5c:24:f3:32:c5:a3:69:2f:29: 10:dd:6e:c2:f0:e0:46:0a:d8:a7:09:39:18:56:b0:1f:79:92: 08:77:70:5a:91:2a:b6:7c:0e:87:52:e6:79:97:00:c3:13:07: e6:65:54:f7:7f:fc:cf:7d:33:cb:18:b2:c3:5b:8c:fe:d5:a6: 67:0d:3b:05:29:c9:54:1f:1a:b9:01:a5:17:dc:b3:89:99:4d: 4d:cd:23:34:4a:ba:80:1c:fd:cd:c2:ab:49:2a:08:2c:64:41: ab:df:eb:a6:f9:0c:7d:c4:91:ea:bc:98:4e:a1:e5:e0:74:e9: 11:20:7a:77:f2:59:03:09:e8:27:32:3f:ab:c0:d5:e6:aa:1d: 86:ac:09:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTA1MTUwNzI5MDhaFw0yNTA1MjIwNzI5MDhaMBgxFjAUBgNV BAMTDTY4MjU5N2M0LWMxMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrSk7k5lSmDE4LzVxzlvf19ppESB8JCkqBki64DNWLOhM9aNXt8d9tZ2EH0xqG CkObZD/ZgO3hIBVrDw6oiBgi1YwYPTzYR1JBBZ+3wnvcIKEYUcL+mF96s3+v5JvT 4Dir1ec9jUMcVs0j3kTvVgE/Xtq0iQG+Xa1/UAxIkXlj6ivzx2UQwVkH/JvyBVxc NS3BmZl0YOKPhIhEjSu5ImJfolV3Y7kkcaLcCU0ZZ3M9fz2W6Y1Uio+8BlcwS5LW J2hjtehVMcuHmtdgiNlWihBP+cmsrsp3B8M3QB4UH3r9qvl7qiAzImmjPADz1gKi 73x59R/rHXRBsM3AWkJG8oWNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeRQJvidc brtvhufGjimYFdmSD1gwHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjIxLzMzRUFBQzY4MkQwMzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlps a1lZZlFnZWZJOTVpRDRaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEHOYgTh8OLCn8KTX1p2SCqo2tmYX13rqMxAuyGW0nlk2/jzf571iA2I XcylxfCK4G6iCp3qXOXjVhvqHR6bDLflPHjN4+KtpwcLTBKncb8bGktSlCZ+9vcf Nh7FTxVdvyGx82d7y0P5fPWjmbh3GXyRovPprFwk8zLFo2kvKRDdbsLw4EYK2KcJ ORhWsB95kgh3cFqRKrZ8DodS5nmXAMMTB+ZlVPd//M99M8sYssNbjP7VpmcNOwUp yVQfGrkBpRfcs4mZTU3NIzRKuoAc/c3Cq0kqCCxkQavf66b5DH3Ekeq8mE6h5eB0 6REgenfyWQMJ6CcyP6vA1eaqHYasCUQ= -----END CERTIFICATE-----Generated at Fri May 16 09:20:26 2025 by rpki-client