$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json) Hash identifier: faleZ2YnVTZx+sqKcY21ESsWf8WhAc6f2GveKYBj9Cw= Subject key identifier: C4:15:C4:52:3B:99:12:CE:B9:0F:96:A3:7A:D9:B2:17:4E:7A:B0:A7 Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft Manifest number: 1D Signing time: Thu 19 Jun 2025 07:21:08 +0000 Manifest this update: Thu 19 Jun 2025 07:21:08 +0000 Manifest next update: Thu 26 Jun 2025 07:21:08 +0000 Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: EpolrA8WK1V2Vh5x7NCQ/0y1jyGVIE2LHA9b+WxE/VA=) 2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: rpfBuY4xqKMYE45ZTaNcRBU8E1C/kMxDVjLVLcwIScU=) 3: 44E001183C5C11F095C6A259C4F9AE02.roa (hash: UIAwr+xolshjF2OO5cazsfh4ngJlaSJ3aa0HRbMpd70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Jun 19 07:21:08 2025 GMT Not After : Jun 26 07:21:08 2025 GMT Subject: CN=6853ba64-57b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:4c:6d:f2:d7:09:3d:0b:8f:60:4a:1f:ce: ee:ec:af:33:76:ea:09:f5:b2:0a:c2:d1:30:55:e8: 82:3c:ee:20:0f:e7:71:8e:4b:04:61:24:96:52:58: f8:ba:9e:0a:74:75:08:34:95:72:78:43:fc:70:d3: c8:1e:94:b1:58:d1:80:47:a5:4e:4d:02:45:f4:5e: ab:e6:80:0a:28:14:14:5b:60:dd:fb:9a:7d:72:c9: 89:ac:2b:02:26:d0:5d:6c:11:2b:32:60:fe:4e:90: c2:50:e9:46:7f:77:e8:17:23:84:3b:b3:d1:f1:bd: a7:d1:12:03:f0:e9:dd:12:67:d4:58:d5:f0:e5:c3: 60:7e:ac:43:79:66:b2:73:34:65:87:b9:b7:23:f8: ac:d4:b1:b9:5d:b9:a8:8c:1b:4a:bc:b0:ae:99:e4: 5c:30:a4:9b:b6:5a:63:0d:a9:7b:39:ee:07:05:6e: 9d:5e:56:96:b3:c3:8c:a9:8d:b1:7e:10:5f:0f:24: 25:d6:71:da:c6:8d:45:10:98:93:13:bb:5d:a8:74: 30:28:bb:ec:e0:c2:5c:a4:e0:6d:6d:56:63:d2:d2: f9:bc:92:86:2b:15:36:fe:85:37:e6:0c:91:33:c6: b7:5c:b8:00:ae:1b:b6:83:ae:e8:d4:f4:72:a3:b6: ed:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:15:C4:52:3B:99:12:CE:B9:0F:96:A3:7A:D9:B2:17:4E:7A:B0:A7 X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d0:df:16:d9:12:0c:9e:3a:be:63:c1:a1:08:03:9e:31:cc: 75:43:52:1e:4c:a0:c5:10:18:ac:f5:2a:cb:c8:4c:b5:d6:fe: 69:c3:90:c5:6e:44:fd:e3:e7:48:f0:d3:4c:ea:33:c4:ad:8c: ac:6c:1c:57:78:d4:d0:24:2c:3a:1f:ec:56:64:b4:2d:8f:6e: ee:e3:f4:fc:31:77:de:b8:8b:13:e2:42:a9:b3:82:c6:36:f8: cb:42:f9:36:22:3e:65:57:de:d4:f4:7f:ef:68:86:3e:ac:07: 8b:10:d2:8d:94:12:6a:ad:90:70:9f:87:b4:7a:d5:32:d5:b8: e5:3a:c1:f2:85:49:0c:a9:d5:d6:15:1e:75:c8:0d:c0:c0:05: ba:b5:f2:47:f1:2d:08:b4:84:fc:c4:0c:b2:cd:4f:5c:33:9e: e8:1d:ec:a7:39:0d:7f:c2:9e:87:c0:41:36:41:54:0b:b9:52: c5:85:5a:97:a5:65:13:58:57:03:76:c0:13:43:f9:15:67:ef: 8c:fa:f4:ff:29:f4:cd:0b:82:83:8f:f1:fd:62:de:8f:3e:e0: fb:4e:ff:3f:69:ac:9e:11:6a:6a:39:41:ab:f5:3e:ea:8b:04: 0b:25:1b:18:9c:66:e8:e8:1d:37:b4:06:78:47:6b:aa:f8:5c: ca:98:bb:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTA2MTkwNzIxMDhaFw0yNTA2MjYwNzIxMDhaMBgxFjAUBgNV BAMTDTY4NTNiYTY0LTU3YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+sUxt8tcJPQuPYEofzu7srzN26gn1sgrC0TBV6II87iAP53GOSwRhJJZSWPi6 ngp0dQg0lXJ4Q/xw08gelLFY0YBHpU5NAkX0XqvmgAooFBRbYN37mn1yyYmsKwIm 0F1sESsyYP5OkMJQ6UZ/d+gXI4Q7s9HxvafREgPw6d0SZ9RY1fDlw2B+rEN5ZrJz NGWHubcj+KzUsblduaiMG0q8sK6Z5FwwpJu2WmMNqXs57gcFbp1eVpazw4ypjbF+ EF8PJCXWcdrGjUUQmJMTu12odDAou+zgwlyk4G1tVmPS0vm8koYrFTb+hTfmDJEz xrdcuACuG7aDrujU9HKjtu1pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxBXEUjuZ Es65D5ajetmyF056sKcwHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjIxLzMzRUFBQzY4MkQwMzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlps a1lZZlFnZWZJOTVpRDRaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA/Q3xbZEgyeOr5jwaEIA54xzHVDUh5MoMUQGKz1KsvITLXW/mnDkMVu RP3j50jw00zqM8StjKxsHFd41NAkLDof7FZktC2Pbu7j9Pwxd964ixPiQqmzgsY2 +MtC+TYiPmVX3tT0f+9ohj6sB4sQ0o2UEmqtkHCfh7R61TLVuOU6wfKFSQyp1dYV HnXIDcDABbq18kfxLQi0hPzEDLLNT1wznugd7Kc5DX/CnofAQTZBVAu5UsWFWpel ZRNYVwN2wBND+RVn74z69P8p9M0LgoOP8f1i3o8+4PtO/z9prJ4Ramo5Qav1PuqL BAslGxicZujoHTe0BnhHa6r4XMqYu1Y= -----END CERTIFICATE-----Generated at Fri Jun 20 18:57:47 2025 by rpki-client