$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json) Hash identifier: 4V8KFY65vQBUSM6wNNQ+x8gN/IBDVthjWrU/k1L2Uck= Subject key identifier: 33:A1:89:AD:25:3F:54:68:D1:99:CA:05:CF:BD:66:06:41:19:07:1E Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft Manifest number: 2E Signing time: Wed 23 Jul 2025 08:08:25 +0000 Manifest this update: Wed 23 Jul 2025 08:08:25 +0000 Manifest next update: Wed 30 Jul 2025 08:08:25 +0000 Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: etIJML1/YNu1t1A/tR3Q7TLQCMRSwltYGnHlx9Ldt0s=) 2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: rpfBuY4xqKMYE45ZTaNcRBU8E1C/kMxDVjLVLcwIScU=) 3: 44E001183C5C11F095C6A259C4F9AE02.roa (hash: UIAwr+xolshjF2OO5cazsfh4ngJlaSJ3aa0HRbMpd70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 08:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Jul 23 08:08:25 2025 GMT Not After : Jul 30 08:08:25 2025 GMT Subject: CN=68809879-f809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:1b:ab:26:35:ea:d1:99:e8:65:37:43:b7: e3:63:af:b8:53:96:dc:01:8c:4b:3f:3a:e7:c2:38: 7c:a0:ad:bd:cc:c2:46:66:c1:d5:97:65:2d:05:89: a7:35:cf:aa:90:fe:20:ce:fa:42:ae:6b:f8:cb:e9: e2:55:54:25:bf:b0:e6:47:4a:97:72:81:4b:ae:1a: 21:8f:9e:94:ff:82:3a:e7:bf:1f:bc:5f:af:9d:c9: cd:c8:88:bd:eb:89:5d:25:fa:df:3b:a7:96:77:9c: 88:a1:31:ed:c9:7c:11:67:55:f8:97:b2:31:1b:00: 07:db:ba:37:03:f1:82:c9:14:57:21:c8:5b:84:59: a1:91:76:63:c1:c9:6a:cb:91:f1:78:a3:08:db:e6: c2:d6:2b:11:c9:5a:df:9f:33:6f:ac:aa:3b:11:69: cf:83:2d:3c:e2:cb:77:42:78:27:b0:77:78:52:fb: 79:78:85:86:64:ba:49:1f:5a:ee:1a:94:a2:f5:6c: 88:99:94:e4:af:80:29:20:14:ca:66:87:9b:ae:60: d7:7f:7e:d9:12:83:99:c9:9f:04:ba:e5:0b:6e:9a: 98:5d:3f:04:b9:b4:62:54:72:6d:d8:08:fc:86:5e: 67:d0:cf:30:0b:ec:27:a0:ce:33:95:a9:ea:42:d5: d9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A1:89:AD:25:3F:54:68:D1:99:CA:05:CF:BD:66:06:41:19:07:1E X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f0:9d:63:51:5d:31:d0:9d:52:19:90:3f:a8:4c:d0:57:21: 92:a2:4c:29:9c:6d:e4:7b:04:ca:08:26:c5:f5:64:34:e2:34: ca:03:18:a5:c7:ad:6d:4a:9c:51:bd:5a:c3:bb:8f:6c:45:ba: b6:08:e9:5f:18:f4:f3:5c:3e:03:71:dc:33:6a:eb:06:34:bb: 06:71:04:a0:29:ad:a3:50:33:2e:74:e4:c3:76:6c:bd:d8:1b: 9f:5d:a6:c2:51:bd:f7:f5:a6:ec:16:8f:23:9b:a1:fc:db:56: 31:1d:83:8f:71:12:7c:aa:64:c5:a0:f8:2e:50:8d:fe:6c:c1: f5:e8:d9:65:bd:cf:d6:5d:f3:1b:79:6e:78:ae:4b:19:9d:5b: bf:ff:aa:03:55:19:62:65:7d:b0:2b:fb:07:d5:43:eb:b2:1e: 29:81:16:80:02:35:ba:c9:b2:6b:c2:de:45:75:df:62:4a:ab: 00:a2:a8:04:09:d7:09:94:11:f6:ad:6e:63:ca:a4:aa:52:e1: 96:ce:ad:ff:c5:f8:43:47:d6:d3:b3:e2:c1:88:d6:d4:fe:b7: bc:4a:6d:1b:68:97:bf:e8:35:e7:56:16:c8:76:a8:68:60:98: 16:0a:54:95:3f:ca:c2:ce:f6:0d:86:16:ee:5d:28:d6:34:f5: 73:e9:a1:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTA3MjMwODA4MjVaFw0yNTA3MzAwODA4MjVaMBgxFjAUBgNV BAMTDTY4ODA5ODc5LWY4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1qBurJjXq0ZnoZTdDt+Njr7hTltwBjEs/OufCOHygrb3MwkZmwdWXZS0Fiac1 z6qQ/iDO+kKua/jL6eJVVCW/sOZHSpdygUuuGiGPnpT/gjrnvx+8X6+dyc3IiL3r iV0l+t87p5Z3nIihMe3JfBFnVfiXsjEbAAfbujcD8YLJFFchyFuEWaGRdmPByWrL kfF4owjb5sLWKxHJWt+fM2+sqjsRac+DLTziy3dCeCewd3hS+3l4hYZkukkfWu4a lKL1bIiZlOSvgCkgFMpmh5uuYNd/ftkSg5nJnwS65QtumphdPwS5tGJUcm3YCPyG XmfQzzAL7CegzjOVqepC1dkFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM6GJrSU/ VGjRmcoFz71mBkEZBx4wHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjIxLzMzRUFBQzY4MkQwMzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlps a1lZZlFnZWZJOTVpRDRaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHbwnWNRXTHQnVIZkD+oTNBXIZKiTCmcbeR7BMoIJsX1ZDTiNMoDGKXH rW1KnFG9WsO7j2xFurYI6V8Y9PNcPgNx3DNq6wY0uwZxBKApraNQMy505MN2bL3Y G59dpsJRvff1puwWjyObofzbVjEdg49xEnyqZMWg+C5Qjf5swfXo2WW9z9Zd8xt5 bniuSxmdW7//qgNVGWJlfbAr+wfVQ+uyHimBFoACNbrJsmvC3kV132JKqwCiqAQJ 1wmUEfatbmPKpKpS4ZbOrf/F+ENH1tOz4sGI1tT+t7xKbRtol7/oNedWFsh2qGhg mBYKVJU/ysLO9g2GFu5dKNY09XPpoaw= -----END CERTIFICATE-----Generated at Thu Jul 24 05:06:20 2025 by rpki-client