$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json) Hash identifier: qeMeGlB9qTuAQG4x5A+wrjsX/ukhwUaSXhSK48Lthjw= Subject key identifier: D8:AD:D8:7E:2C:5B:BC:AA:28:ED:78:7B:E6:C7:88:6A:A4:CD:4B:66 Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft Manifest number: 2D Signing time: Mon 21 Jul 2025 07:58:58 +0000 Manifest this update: Mon 21 Jul 2025 07:58:57 +0000 Manifest next update: Mon 28 Jul 2025 07:58:57 +0000 Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: q9F6ua13YDNfKL63gBHfOv8s2A8VchLQ+mO513MFtKI=) 2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: rpfBuY4xqKMYE45ZTaNcRBU8E1C/kMxDVjLVLcwIScU=) 3: 44E001183C5C11F095C6A259C4F9AE02.roa (hash: UIAwr+xolshjF2OO5cazsfh4ngJlaSJ3aa0HRbMpd70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Jul 21 07:58:57 2025 GMT Not After : Jul 28 07:58:57 2025 GMT Subject: CN=687df342-8886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:03:be:0c:da:f6:30:c9:be:7f:be:12:c8: 0c:98:55:6b:92:c7:88:d8:fb:13:8c:d7:97:9e:d7: 3c:3e:c6:73:af:55:81:f7:c2:0c:6e:82:14:e6:bf: 58:cd:f9:1c:bc:82:e5:2c:77:9c:d6:5e:f5:e9:ef: b1:46:5f:2e:11:0e:b6:a4:c7:5e:9f:10:6c:72:77: 4d:60:5a:ca:f0:9c:e6:b9:ea:ce:47:39:00:19:87: f4:55:68:29:be:ea:37:c0:53:aa:74:3d:26:29:d1: b2:0e:dc:85:a9:84:8f:5a:ed:36:6c:a8:77:e0:38: 97:73:2e:9f:93:3f:e9:95:c6:be:41:f3:af:32:1f: 2b:84:2e:e1:92:13:08:94:aa:91:24:41:e2:bb:cd: 1e:de:a9:c2:7d:78:08:98:96:b5:27:29:38:4a:6a: b7:60:cf:c7:c1:0f:55:4a:d1:72:9e:b7:fd:71:e6: 1b:49:5b:9d:bd:69:6c:76:d7:dc:18:63:1b:90:e4: 07:75:df:f9:88:a7:f6:b0:67:28:50:f8:53:41:67: ea:15:94:59:47:95:e0:0f:9b:06:ba:09:c9:6e:0b: b3:6c:0e:26:c6:28:6b:01:d3:1d:fc:ad:7f:7d:1d: 76:46:39:8f:6b:50:6a:94:ef:1b:8b:46:39:69:2a: 0c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AD:D8:7E:2C:5B:BC:AA:28:ED:78:7B:E6:C7:88:6A:A4:CD:4B:66 X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:b2:50:2b:ab:64:16:4e:1f:cf:68:3c:f3:84:aa:d9:54:df: 50:2a:e5:99:51:7a:ef:3b:a8:4f:2a:f7:67:47:1d:9e:d8:b7: c6:ec:15:96:b2:f6:28:29:0b:2f:75:e2:42:ea:dd:3c:f6:a9: 0d:45:6a:aa:22:f1:a3:ee:f4:20:3d:11:49:8e:e4:cb:94:3e: 15:b1:b6:84:ce:59:88:c3:b0:e0:73:4c:cd:e7:ec:64:b1:e9: 19:af:aa:7e:08:cd:f3:5d:22:48:1d:61:c9:10:e2:ce:6c:d6: f9:c5:e6:f2:6d:5a:97:f7:7e:0c:f7:a8:21:9a:9c:f2:8c:ac: a3:27:ee:f7:a5:ed:f2:37:f3:2c:39:59:6b:9a:9c:9a:72:d1: 41:10:9d:f4:ce:06:d8:59:68:27:a8:a9:34:9c:38:55:74:56: e4:8a:91:b9:3a:19:53:8b:b8:dc:bb:94:10:bd:2c:5e:fa:f2: 02:59:51:97:c0:6b:b1:74:68:b5:11:e0:c4:7d:10:d0:fe:b0: de:19:c8:af:2a:6f:f5:c9:b7:ba:3f:b1:13:1d:4b:86:78:37: 89:35:ee:a9:c0:e4:fe:32:f7:8f:3e:a0:a3:46:aa:c5:12:8f: d9:45:08:68:66:d5:26:25:6c:c0:a6:3b:26:10:b1:4e:04:8f: 9b:bc:fa:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTA3MjEwNzU4NTdaFw0yNTA3MjgwNzU4NTdaMBgxFjAUBgNV BAMTDTY4N2RmMzQyLTg4ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3dQO+DNr2MMm+f74SyAyYVWuSx4jY+xOM15ee1zw+xnOvVYH3wgxughTmv1jN +Ry8guUsd5zWXvXp77FGXy4RDrakx16fEGxyd01gWsrwnOa56s5HOQAZh/RVaCm+ 6jfAU6p0PSYp0bIO3IWphI9a7TZsqHfgOJdzLp+TP+mVxr5B868yHyuELuGSEwiU qpEkQeK7zR7eqcJ9eAiYlrUnKThKardgz8fBD1VK0XKet/1x5htJW529aWx219wY YxuQ5Ad13/mIp/awZyhQ+FNBZ+oVlFlHleAPmwa6CcluC7NsDibGKGsB0x38rX99 HXZGOY9rUGqU7xuLRjlpKgw9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2K3Yfixb vKoo7Xh75seIaqTNS2YwHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjIxLzMzRUFBQzY4MkQwMzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlps a1lZZlFnZWZJOTVpRDRaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANWyUCurZBZOH89oPPOEqtlU31Aq5ZlReu87qE8q92dHHZ7Yt8bsFZay 9igpCy914kLq3Tz2qQ1Faqoi8aPu9CA9EUmO5MuUPhWxtoTOWYjDsOBzTM3n7GSx 6Rmvqn4IzfNdIkgdYckQ4s5s1vnF5vJtWpf3fgz3qCGanPKMrKMn7vel7fI38yw5 WWuanJpy0UEQnfTOBthZaCeoqTScOFV0VuSKkbk6GVOLuNy7lBC9LF768gJZUZfA a7F0aLUR4MR9END+sN4ZyK8qb/XJt7o/sRMdS4Z4N4k17qnA5P4y948+oKNGqsUS j9lFCGhm1SYlbMCmOyYQsU4Ej5u8+jc= -----END CERTIFICATE-----Generated at Tue Jul 22 12:30:46 2025 by rpki-client