$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json) Hash identifier: lT5YJ9KCuWF8y70UeTBMhHZyzl1LZbs+E/8fg3FLLu4= Subject key identifier: D7:CE:FA:95:8E:B2:C9:2A:9A:22:C6:8C:10:97:A1:15:D5:A7:60:E6 Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft Manifest number: 37 Signing time: Sat 09 Aug 2025 08:10:40 +0000 Manifest this update: Sat 09 Aug 2025 08:10:40 +0000 Manifest next update: Sat 16 Aug 2025 08:10:39 +0000 Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: 0Pxiyq6DCVvQIkQlEFolrTkBYvPcIQ6vejYEQfP6cNs=) 2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: rpfBuY4xqKMYE45ZTaNcRBU8E1C/kMxDVjLVLcwIScU=) 3: 44E001183C5C11F095C6A259C4F9AE02.roa (hash: UIAwr+xolshjF2OO5cazsfh4ngJlaSJ3aa0HRbMpd70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Aug 9 08:10:40 2025 GMT Not After : Aug 16 08:10:39 2025 GMT Subject: CN=68970280-1583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:ea:73:34:83:13:23:91:bf:7a:06:75:8a: 33:10:b0:fb:d4:a2:f9:92:15:76:55:60:3b:58:f3: 6d:62:53:36:10:90:1c:af:97:45:2c:6f:81:ca:83: b8:14:5a:45:cd:b0:c5:51:34:d0:8b:d0:27:a1:4d: 6f:32:a4:4a:c5:e1:50:fd:76:5c:b7:f0:51:66:30: af:4c:39:93:d4:f7:7c:d4:c7:af:6b:d5:1f:b2:6d: 6d:c9:fd:51:bb:21:56:6c:b0:d4:f9:65:73:85:b7: 88:8c:0c:71:50:e6:09:4f:51:12:c5:6f:30:ce:25: be:2a:bc:9f:0e:6f:40:df:1a:61:97:46:a4:14:ff: 13:9e:12:ce:a1:0c:b8:f3:73:38:48:d8:17:b8:b1: 14:c2:9d:4e:bb:43:e4:1d:b5:2e:98:cd:8f:cf:a1: e3:11:92:af:5f:6b:fa:5e:de:03:f9:16:e1:28:26: 55:ac:1c:91:17:45:4d:47:82:c3:1d:c4:36:b2:65: 63:5a:8f:30:9c:8e:e8:59:7b:6e:3d:d7:06:c4:b5: 0d:2f:2e:4d:30:d6:11:16:3c:9f:1c:fa:15:a8:73: 16:01:2f:a1:ce:e8:45:b0:21:36:3a:a6:94:b1:0e: 10:b3:af:de:70:2c:93:46:e9:8e:bb:46:4d:f8:c2: 87:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CE:FA:95:8E:B2:C9:2A:9A:22:C6:8C:10:97:A1:15:D5:A7:60:E6 X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:f7:2c:53:14:4b:80:ba:2b:91:66:5e:55:fd:1f:2b:fd:59: dd:8d:ae:21:81:60:ca:b0:82:2c:85:1d:62:0b:81:5b:62:18: ca:56:17:cf:31:ad:27:19:5d:7f:a4:68:4f:c5:20:9b:09:25: 8f:df:76:d7:ba:61:eb:e3:13:b9:b0:e4:c8:70:39:c8:56:bb: dc:b0:37:6e:80:77:e2:37:89:b0:5b:0a:51:b8:18:cf:3d:28: 2a:eb:7e:63:14:e5:e3:e8:db:1f:45:ba:51:28:8a:90:3c:c0: c4:71:7b:0d:37:9b:a1:0f:46:a8:c8:5b:4a:33:83:a5:84:6e: fb:6c:5f:b9:72:d3:bf:a5:81:bf:53:00:50:59:35:b3:04:48: 3d:4e:d7:20:74:06:db:01:10:94:53:1f:a5:d0:cd:1b:03:82: 7a:f6:df:e9:8d:1e:2b:f2:bd:57:88:1a:62:45:6a:d7:dd:06: 63:e4:16:d6:b3:49:d7:52:7a:50:5a:0c:83:a6:75:ee:11:a8: 5b:5e:fd:43:16:cb:19:58:de:cc:18:fb:fd:e9:0b:62:a2:4d: d9:0c:68:0b:dd:4e:08:1f:12:42:28:2a:04:c8:d2:c7:c8:17: a5:42:ba:09:5c:4c:a5:58:9d:b9:53:81:eb:51:98:e8:d2:be: 14:2f:0b:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTA4MDkwODEwNDBaFw0yNTA4MTYwODEwMzlaMBgxFjAUBgNV BAMTDTY4OTcwMjgwLTE1ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEJupzNIMTI5G/egZ1ijMQsPvUovmSFXZVYDtY821iUzYQkByvl0Usb4HKg7gU WkXNsMVRNNCL0CehTW8ypErF4VD9dly38FFmMK9MOZPU93zUx69r1R+ybW3J/VG7 IVZssNT5ZXOFt4iMDHFQ5glPURLFbzDOJb4qvJ8Ob0DfGmGXRqQU/xOeEs6hDLjz czhI2Be4sRTCnU67Q+QdtS6YzY/PoeMRkq9fa/pe3gP5FuEoJlWsHJEXRU1HgsMd xDayZWNajzCcjuhZe2491wbEtQ0vLk0w1hEWPJ8c+hWocxYBL6HO6EWwITY6ppSx DhCzr95wLJNG6Y67Rk34wodFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1876lY6y ySqaIsaMEJehFdWnYOYwHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjIxLzMzRUFBQzY4MkQwMzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlps a1lZZlFnZWZJOTVpRDRaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM73LFMUS4C6K5FmXlX9Hyv9Wd2NriGBYMqwgiyFHWILgVtiGMpWF88x rScZXX+kaE/FIJsJJY/fdte6YevjE7mw5MhwOchWu9ywN26Ad+I3ibBbClG4GM89 KCrrfmMU5ePo2x9FulEoipA8wMRxew03m6EPRqjIW0ozg6WEbvtsX7ly07+lgb9T AFBZNbMESD1O1yB0BtsBEJRTH6XQzRsDgnr23+mNHivyvVeIGmJFatfdBmPkFtaz SddSelBaDIOmde4RqFte/UMWyxlY3swY+/3pC2KiTdkMaAvdTggfEkIoKgTI0sfI F6VCuglcTKVYnblTgetRmOjSvhQvC6Q= -----END CERTIFICATE-----Generated at Mon Aug 11 04:19:00 2025 by rpki-client