$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json) Hash identifier: xOBG8vkkqB3JV8Qi0Vh+yrNpPw7it7XsPXKgN/zaFKs= Subject key identifier: 7F:57:C2:A9:97:30:64:7E:29:E1:7E:9F:A1:55:4B:FA:C4:88:12:79 Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft Manifest number: 018D Signing time: Mon 11 Aug 2025 03:35:27 +0000 Manifest this update: Mon 11 Aug 2025 03:35:26 +0000 Manifest next update: Mon 18 Aug 2025 03:35:26 +0000 Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: +LTinxHFx9RLdra7RVg8mvxVAfz6i8LQ+uE9annWVFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Validity Not Before: Aug 11 03:35:26 2025 GMT Not After : Aug 18 03:35:26 2025 GMT Subject: CN=689964fe-04fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:09:ac:16:1a:60:91:ff:20:01:6e:05:29: 69:92:9e:64:75:69:7b:cc:04:ba:06:6b:51:a4:ff: 9e:0c:4a:52:d2:6b:61:57:5e:13:79:48:ca:d4:02: 92:dc:29:15:e4:5e:f3:e0:0a:ea:75:cb:59:8c:fe: 31:d3:1e:fb:b2:06:94:99:7f:54:9b:e7:2d:11:d5: c7:1c:f1:d8:9c:9a:86:04:51:e3:24:f1:83:1f:19: 02:7f:8f:b2:53:5c:02:0f:96:78:e8:6e:82:97:90: ff:08:9a:43:76:c9:50:a8:06:41:19:69:8a:b5:be: 82:cf:7b:f4:e8:c4:63:dc:16:6d:7c:55:ed:d2:94: 08:d4:17:6a:74:b9:57:c0:6f:85:dd:96:66:00:9f: 60:b2:00:f9:71:c0:22:20:c8:16:4a:78:b1:62:28: d6:f0:8e:ba:57:d7:cc:5c:71:3d:7e:8d:9f:21:88: 63:7d:ae:e2:72:5a:bd:23:58:97:95:93:2b:a4:4d: 4d:7d:9b:94:b1:92:26:4b:d4:ce:02:c4:95:c0:a3: ba:ff:16:56:f5:0c:23:48:5e:b7:db:be:1d:6a:94: 2e:29:d9:5d:8c:7d:8e:60:fb:84:95:57:17:f6:c0: ab:78:bb:95:c0:fc:0f:96:cb:18:2c:04:be:a4:a2: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:57:C2:A9:97:30:64:7E:29:E1:7E:9F:A1:55:4B:FA:C4:88:12:79 X509v3 Authority Key Identifier: keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f4:ea:e6:95:ad:16:36:88:c4:e4:56:de:2b:16:05:9c:5e: 8c:0e:73:ec:6e:f4:8d:a7:3f:4e:cc:25:67:42:1e:7a:14:0f: cd:76:ed:e8:8c:50:7e:2b:a1:de:da:3a:5f:ec:68:cd:c1:02: 80:96:a3:3e:f4:5b:17:ae:40:fd:29:e1:0e:b8:df:2c:78:2d: 3e:0f:59:7a:8f:2c:33:bc:49:13:5a:09:be:34:1b:34:78:20: c5:cd:48:ec:2a:ab:b7:21:c9:37:80:8c:ac:1c:ce:f6:9a:b1: 69:1a:20:46:21:b3:7d:9a:25:d9:41:5d:29:7c:01:eb:9e:ba: 18:21:e0:b4:18:b4:63:5b:54:d0:57:0f:74:a7:94:01:ef:58: d8:87:b5:16:29:2f:39:7e:8d:86:12:ac:5e:3b:13:d0:dd:a4: 71:82:77:82:c1:8e:f2:1d:57:9c:a7:86:f7:2f:bc:46:80:44: 6a:f5:0d:5b:c8:49:48:fa:c0:2e:f5:a0:8f:25:7c:86:c2:2a: da:30:0e:30:db:bb:0f:9a:1b:23:22:b4:23:02:f4:d8:7b:dd: 5d:6e:f5:cf:96:d4:da:dc:84:19:0c:7e:c2:8a:7b:b6:e0:c4: ff:bc:38:09:bc:fc:f3:42:4b:5a:2a:3f:34:b4:cf:68:7e:40: 25:d3:2f:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENGM0QxMTAvBgNVBAUTKDQ1NDBBMkY5QkI4NjE5RjY0ODYyRDA5NkM4NEM5MzhF ODhBRjNDNkMwHhcNMjUwODExMDMzNTI2WhcNMjUwODE4MDMzNTI2WjAYMRYwFAYD VQQDEw02ODk5NjRmZS0wNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJAJrBYaYJH/IAFuBSlpkp5kdWl7zAS6BmtRpP+eDEpS0mthV14TeUjK1AKS 3CkV5F7z4ArqdctZjP4x0x77sgaUmX9Um+ctEdXHHPHYnJqGBFHjJPGDHxkCf4+y U1wCD5Z46G6Cl5D/CJpDdslQqAZBGWmKtb6Cz3v06MRj3BZtfFXt0pQI1BdqdLlX wG+F3ZZmAJ9gsgD5ccAiIMgWSnixYijW8I66V9fMXHE9fo2fIYhjfa7iclq9I1iX lZMrpE1NfZuUsZImS9TOAsSVwKO6/xZW9QwjSF63274dapQuKdldjH2OYPuElVcX 9sCreLuVwPwPlssYLAS+pKIH0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9XwqmX MGR+KeF+n6FVS/rEiBJ5MB8GA1UdIwQYMBaAFEVAovm7hhn2SGLQlshMk46Irzxs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0YzRC9ERTI5RDUwQzEz RjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dmWklZdENXeUV5VGpvaXZQ R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JVQ2ktYnVHR2ZaSVl0Q1d5RXlUam9pdlBHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0YzRC9ERTI5RDUwQzEzRjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dm WklZdENXeUV5VGpvaXZQR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL9Ormla0WNojE5FbeKxYFnF6MDnPsbvSNpz9OzCVnQh56FA/Ndu3o jFB+K6He2jpf7GjNwQKAlqM+9FsXrkD9KeEOuN8seC0+D1l6jywzvEkTWgm+NBs0 eCDFzUjsKqu3Ick3gIysHM72mrFpGiBGIbN9miXZQV0pfAHrnroYIeC0GLRjW1TQ Vw90p5QB71jYh7UWKS85fo2GEqxeOxPQ3aRxgneCwY7yHVecp4b3L7xGgERq9Q1b yElI+sAu9aCPJXyGwiraMA4w27sPmhsjIrQjAvTYe91dbvXPltTa3IQZDH7Cinu2 4MT/vDgJvPzzQktaKj80tM9ofkAl0y9v -----END CERTIFICATE-----Generated at Tue Aug 12 14:44:38 2025 by rpki-client