$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json) Hash identifier: 6pgfjQsEYpmayaz2IphACaLfLfIRQN/AkNH7HkaatZs= Subject key identifier: 64:9B:72:67:A1:96:2B:7E:8A:CA:9C:73:26:24:AE:BC:9A:CA:58:78 Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft Manifest number: 0160 Signing time: Thu 15 May 2025 03:22:29 +0000 Manifest this update: Thu 15 May 2025 03:22:29 +0000 Manifest next update: Thu 22 May 2025 03:22:29 +0000 Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: iHrDKfNPj6VcIT2FyOwNz1W8h+Lf0a8Ym+6i2rl8u7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Validity Not Before: May 15 03:22:29 2025 GMT Not After : May 22 03:22:29 2025 GMT Subject: CN=68255df5-14ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:6e:f4:37:bd:a9:91:3d:08:d3:fa:ae:9f: 58:45:eb:01:5f:fd:66:0e:81:d1:15:ac:2a:7a:cd: 8b:38:7d:80:d1:fd:96:3f:77:59:88:33:50:a0:a4: a3:14:41:fa:10:cd:45:65:c0:1a:b0:a5:c1:d0:5a: e8:a9:a0:e2:96:21:71:df:84:9d:28:1a:d2:3f:1d: 6e:67:82:1a:9a:de:46:e9:d4:41:d1:64:8e:ef:8e: 25:1e:b5:04:65:54:8a:d7:f8:ef:4f:f2:a5:3d:2a: 18:3e:46:ea:bb:ed:3e:73:0d:f9:1f:45:6d:dc:f1: 34:5e:16:58:78:3a:60:80:c0:c5:7c:ba:83:a0:cf: 06:04:55:6e:49:c7:da:50:5c:2e:47:8f:3a:6f:f0: 58:ef:f1:7c:38:24:81:bd:47:bd:dd:5c:b0:a9:b1: 06:90:11:9b:d4:f0:7a:a5:11:e2:9a:e4:89:9c:f3: 70:9d:83:bf:31:37:26:d6:cb:b7:6b:67:7f:08:4d: 85:d8:97:e7:7f:ca:a0:6c:c6:65:fa:9f:04:9b:ec: ac:2a:6b:77:fb:34:5f:c1:a9:d5:01:da:d9:5c:b5: 03:c3:56:db:82:01:d9:77:56:c8:6a:7b:f8:9d:2c: 75:f6:3c:09:ad:6e:77:2b:85:ea:3d:93:45:23:ab: 94:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9B:72:67:A1:96:2B:7E:8A:CA:9C:73:26:24:AE:BC:9A:CA:58:78 X509v3 Authority Key Identifier: keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b0:93:0f:30:1d:10:fa:0f:dc:6c:56:5e:68:db:79:c4:89: 34:60:34:4d:d2:39:5a:7f:d4:9f:77:4d:e0:7f:94:24:b1:9f: 70:48:e1:5d:8d:d3:b9:78:87:f6:fc:56:06:2c:38:88:95:3f: 58:8a:26:e5:15:58:e1:8e:7a:76:d0:93:96:f8:c0:5d:5f:37: 4a:76:b3:f7:ea:7d:77:89:bb:6a:62:dc:51:53:a6:69:6f:bc: ce:7b:aa:6c:a5:eb:24:a0:1b:0a:2c:53:10:2f:a2:0b:cf:e1: 22:70:9f:c5:19:86:52:ee:71:8b:71:04:19:1c:10:12:6c:22: a1:94:43:05:28:c0:79:db:6b:f4:7d:b3:23:fb:f5:5c:e7:33: 06:f6:9d:cf:1e:22:b0:f1:be:68:de:cc:2c:54:a7:51:06:fc: 94:04:d8:3f:bd:47:fb:84:09:44:03:3f:50:fa:db:84:5a:4d: be:bc:ff:71:3b:23:61:fe:d4:73:9e:5f:83:8f:44:44:31:07: 24:d9:d7:9a:ea:c0:25:07:f2:a4:1f:81:78:af:b4:ea:c4:ce: 15:bb:29:b0:f2:f4:1a:80:b1:c3:97:9d:4a:73:10:7a:3c:96: 86:a9:13:e6:a2:bc:82:7f:ce:b4:75:61:41:1c:69:52:8d:9f: 4b:d2:47:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENGM0QxMTAvBgNVBAUTKDQ1NDBBMkY5QkI4NjE5RjY0ODYyRDA5NkM4NEM5MzhF ODhBRjNDNkMwHhcNMjUwNTE1MDMyMjI5WhcNMjUwNTIyMDMyMjI5WjAYMRYwFAYD VQQDEw02ODI1NWRmNS0xNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Blu9De9qZE9CNP6rp9YResBX/1mDoHRFawqes2LOH2A0f2WP3dZiDNQoKSj FEH6EM1FZcAasKXB0FroqaDiliFx34SdKBrSPx1uZ4Iamt5G6dRB0WSO744lHrUE ZVSK1/jvT/KlPSoYPkbqu+0+cw35H0Vt3PE0XhZYeDpggMDFfLqDoM8GBFVuScfa UFwuR486b/BY7/F8OCSBvUe93VywqbEGkBGb1PB6pRHimuSJnPNwnYO/MTcm1su3 a2d/CE2F2Jfnf8qgbMZl+p8Em+ysKmt3+zRfwanVAdrZXLUDw1bbggHZd1bIanv4 nSx19jwJrW53K4XqPZNFI6uUBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSbcmeh lit+isqccyYkrryaylh4MB8GA1UdIwQYMBaAFEVAovm7hhn2SGLQlshMk46Irzxs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0YzRC9ERTI5RDUwQzEz RjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dmWklZdENXeUV5VGpvaXZQ R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JVQ2ktYnVHR2ZaSVl0Q1d5RXlUam9pdlBHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0YzRC9ERTI5RDUwQzEzRjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dm WklZdENXeUV5VGpvaXZQR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0sJMPMB0Q+g/cbFZeaNt5xIk0YDRN0jlaf9Sfd03gf5QksZ9wSOFd jdO5eIf2/FYGLDiIlT9YiiblFVjhjnp20JOW+MBdXzdKdrP36n13ibtqYtxRU6Zp b7zOe6pspeskoBsKLFMQL6ILz+EicJ/FGYZS7nGLcQQZHBASbCKhlEMFKMB522v0 fbMj+/Vc5zMG9p3PHiKw8b5o3swsVKdRBvyUBNg/vUf7hAlEAz9Q+tuEWk2+vP9x OyNh/tRznl+Dj0REMQck2dea6sAlB/KkH4F4r7TqxM4Vuymw8vQagLHDl51KcxB6 PJaGqRPmoryCf860dWFBHGlSjZ9L0kcX -----END CERTIFICATE-----Generated at Sat May 17 00:34:19 2025 by rpki-client