$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json) Hash identifier: 5/KpQUcJAEFjSc81XOdf0lEACCvXbZ0Y1HILOAUCRFQ= Subject key identifier: 36:55:6A:FF:F1:E0:15:B6:1A:90:FB:0A:AD:59:13:63:11:9F:B2:DD Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft Manifest number: 0156 Signing time: Fri 25 Apr 2025 03:12:02 +0000 Manifest this update: Fri 25 Apr 2025 03:12:02 +0000 Manifest next update: Fri 02 May 2025 03:12:02 +0000 Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: hNBYWDkn9t1UAIOYEoQ+OpfwqmokMMhNudVZFzjg5iM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Validity Not Before: Apr 25 03:12:02 2025 GMT Not After : May 2 03:12:02 2025 GMT Subject: CN=680afd82-2119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:d2:9b:a7:b1:9d:68:77:60:73:68:47:23: db:6c:45:75:7c:f0:cd:d9:d7:ac:f7:2e:d0:f8:ae: 6f:89:60:ca:53:dd:91:9b:d8:b9:cd:fd:be:d2:79: 91:4e:1b:e0:d2:17:68:1f:8f:08:5f:cb:81:e7:47: 2f:3d:58:c4:87:cd:ed:c0:cc:47:86:11:1e:d7:ce: a6:78:5e:c9:8c:36:88:da:08:cd:11:6a:43:0c:2a: 90:1c:02:84:6c:11:15:71:41:56:ac:e3:1b:f7:5c: 71:63:95:b5:64:65:8c:31:98:73:69:ff:d5:04:bb: 61:4b:af:6c:bc:6f:54:32:6f:63:6d:13:d0:28:a7: 75:81:95:89:cd:bd:69:25:5a:8e:67:63:e5:7a:35: ed:c4:84:12:8b:7c:3a:19:d8:6e:09:12:1f:ea:51: dc:cc:cf:62:6a:7e:87:40:bc:12:cd:22:58:1c:68: d5:32:e6:ae:1d:42:eb:1e:18:13:cd:2a:e9:de:d3: 2c:71:b1:ca:fa:8d:59:9d:d6:a3:31:13:73:cd:f6: 0f:1c:2a:4a:9f:16:8a:e7:4d:10:63:f8:15:d7:71: 88:d1:ad:6e:ca:bc:31:8a:ab:06:c0:56:69:e5:ac: 9c:9c:5b:4a:4e:93:74:2c:c8:b2:1d:34:96:58:b1: ad:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:55:6A:FF:F1:E0:15:B6:1A:90:FB:0A:AD:59:13:63:11:9F:B2:DD X509v3 Authority Key Identifier: keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:50:1a:42:c0:f9:fe:57:a6:4e:21:97:08:e6:d7:75:c5:00: 4e:79:df:43:15:7e:18:bf:02:fd:cb:21:a2:92:06:34:f0:ea: 93:4b:68:3c:1a:22:11:b5:02:6d:b1:0e:15:b8:74:e0:a8:fb: 45:d2:d8:1e:ff:6b:b4:29:05:46:3e:af:f2:cd:8f:9e:14:84: 33:dc:30:c8:e8:3c:05:7b:79:59:94:92:f5:52:34:2a:c3:8a: 5a:40:77:fa:e3:21:3b:c7:41:2e:07:af:98:37:19:71:f6:27: d0:9e:f3:2e:30:c7:5a:15:23:df:8f:be:26:0c:87:28:52:32: bf:e7:22:b8:3e:4b:4d:13:6e:71:c6:33:c7:b8:0a:cb:bf:3c: 7a:56:55:af:29:a3:75:d2:1f:c3:d2:ff:a0:1d:3f:91:3a:20: ee:89:18:64:bf:b9:5e:a6:a1:df:d2:59:6d:a4:1b:59:9a:73: 81:99:5a:94:2d:bd:f6:30:8c:c7:2e:d9:1d:6c:7a:de:62:4b: d0:a5:06:32:7a:d1:54:7e:e2:c1:cc:26:98:5c:f8:cd:38:98: 81:ee:4b:04:93:78:54:8e:8a:ae:00:9e:f0:a7:08:a8:4b:2c: d1:05:ca:f6:97:ef:c1:9b:21:cd:a0:ce:f9:f5:0a:85:7b:2f: ef:cd:0e:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENGM0QxMTAvBgNVBAUTKDQ1NDBBMkY5QkI4NjE5RjY0ODYyRDA5NkM4NEM5MzhF ODhBRjNDNkMwHhcNMjUwNDI1MDMxMjAyWhcNMjUwNTAyMDMxMjAyWjAYMRYwFAYD VQQDEw02ODBhZmQ4Mi0yMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6DSm6exnWh3YHNoRyPbbEV1fPDN2des9y7Q+K5viWDKU92Rm9i5zf2+0nmR Thvg0hdoH48IX8uB50cvPVjEh83twMxHhhEe186meF7JjDaI2gjNEWpDDCqQHAKE bBEVcUFWrOMb91xxY5W1ZGWMMZhzaf/VBLthS69svG9UMm9jbRPQKKd1gZWJzb1p JVqOZ2PlejXtxIQSi3w6GdhuCRIf6lHczM9ian6HQLwSzSJYHGjVMuauHULrHhgT zSrp3tMscbHK+o1ZndajMRNzzfYPHCpKnxaK500QY/gV13GI0a1uyrwxiqsGwFZp 5aycnFtKTpN0LMiyHTSWWLGtvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZVav/x 4BW2GpD7Cq1ZE2MRn7LdMB8GA1UdIwQYMBaAFEVAovm7hhn2SGLQlshMk46Irzxs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0YzRC9ERTI5RDUwQzEz RjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dmWklZdENXeUV5VGpvaXZQ R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JVQ2ktYnVHR2ZaSVl0Q1d5RXlUam9pdlBHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0YzRC9ERTI5RDUwQzEzRjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dm WklZdENXeUV5VGpvaXZQR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJUBpCwPn+V6ZOIZcI5td1xQBOed9DFX4YvwL9yyGikgY08OqTS2g8 GiIRtQJtsQ4VuHTgqPtF0tge/2u0KQVGPq/yzY+eFIQz3DDI6DwFe3lZlJL1UjQq w4paQHf64yE7x0EuB6+YNxlx9ifQnvMuMMdaFSPfj74mDIcoUjK/5yK4PktNE25x xjPHuArLvzx6VlWvKaN10h/D0v+gHT+ROiDuiRhkv7lepqHf0lltpBtZmnOBmVqU Lb32MIzHLtkdbHreYkvQpQYyetFUfuLBzCaYXPjNOJiB7ksEk3hUjoquAJ7wpwio SyzRBcr2l+/BmyHNoM759QqFey/vzQ6E -----END CERTIFICATE-----Generated at Sat Apr 26 05:29:25 2025 by rpki-client