$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json) Hash identifier: N0HMUs7A3LFR6Ly6+6tnU2xY9i+iigQrU4W2t/YaCv0= Subject key identifier: 1C:09:B2:91:F8:1F:05:1F:06:18:A3:68:0B:DD:3A:DD:73:C0:BA:23 Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft Manifest number: 014C Signing time: Sat 05 Apr 2025 03:34:54 +0000 Manifest this update: Sat 05 Apr 2025 03:34:54 +0000 Manifest next update: Sat 12 Apr 2025 03:34:54 +0000 Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: 2EhskPYuL4FgCDYNuDoaZZ7/0Pyw4Tox8qSs+sqEpwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCF3D Validity Not Before: Apr 5 03:34:54 2025 GMT Not After : Apr 12 03:34:54 2025 GMT Subject: CN=67f0a4de-33fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:c0:be:be:2d:65:fa:49:b3:85:b4:b0:1d: ec:fb:83:c1:a0:92:c4:20:1a:fc:09:da:4f:bf:93: 6e:90:f5:f0:de:a4:91:73:23:a0:8d:40:5d:27:b2: d0:ff:33:c7:78:d5:eb:17:bd:6b:11:7e:f8:63:56: ef:c7:62:a5:57:0d:97:bf:82:8c:7f:2d:e9:ec:08: 7d:a3:25:9d:c8:24:e6:ec:b4:03:18:f6:e9:3e:b8: 30:96:7b:53:d6:5c:db:74:fe:54:b3:a5:3c:1b:58: e2:e2:f5:47:d6:2f:b6:3d:4d:ba:d0:da:d2:08:40: ac:6a:9a:5f:e3:73:ea:3a:9f:02:51:2a:a3:5e:44: ff:d8:38:0b:ec:96:67:62:1a:c8:b4:27:ba:bf:32: 5a:06:87:90:6f:1d:bc:1f:ac:07:d6:d6:10:eb:6d: 6c:be:31:ac:c2:51:37:4d:b7:d6:f2:3e:f6:7d:1c: 2c:9d:3b:6a:67:96:07:62:48:e9:eb:d5:3c:f9:61: ff:96:57:a4:af:b8:78:3a:d3:71:29:09:0b:07:ed: eb:06:c4:48:9a:c5:fd:74:49:20:dc:00:57:32:3e: ac:8b:48:30:38:77:35:7d:a4:6b:0e:7d:78:d9:2c: b0:29:c5:c4:1c:7c:e6:97:57:ff:e0:1e:7e:82:88: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:09:B2:91:F8:1F:05:1F:06:18:A3:68:0B:DD:3A:DD:73:C0:BA:23 X509v3 Authority Key Identifier: keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:84:94:ad:43:b8:1e:1e:52:e1:51:7a:40:ba:1c:1f:55:2d: 77:e7:1e:3f:2a:8f:83:93:0b:b1:7a:9d:e5:28:13:14:fb:08: 5e:69:c1:1a:2f:ff:f0:81:91:20:62:e3:7d:74:69:0b:46:a3: f6:8e:26:b0:aa:f1:9a:a0:a3:aa:77:e7:06:93:ae:0e:2f:a9: 84:0a:21:96:26:c9:72:cd:7e:03:08:34:81:9f:84:4d:e3:63: ae:e8:ac:f2:02:5a:68:22:8e:98:98:2a:4a:df:ed:df:dc:22: 9d:89:74:41:a7:30:fd:55:e1:53:4e:78:42:09:29:65:48:b3: bb:34:cc:1e:f7:45:5b:b0:94:11:e4:b8:c4:68:35:36:35:c8: 79:b7:a5:0f:ae:da:ca:c6:74:6c:c3:a5:77:7e:f9:87:85:1a: 45:b8:b5:8c:b5:23:e5:b2:cf:f8:86:f0:a7:53:c2:dd:78:82: 1c:06:0f:42:b1:c8:c5:37:58:ee:7a:03:75:04:8c:5f:f3:83: 36:92:a3:79:74:2a:db:61:6e:de:6b:4c:de:7b:0e:b6:ca:7f: 54:cd:96:96:cb:29:74:f4:41:69:5e:05:c2:40:ff:48:22:b8: 30:50:18:57:36:38:d9:eb:13:00:71:a2:c1:25:98:28:95:b6: d6:0f:dd:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENGM0QxMTAvBgNVBAUTKDQ1NDBBMkY5QkI4NjE5RjY0ODYyRDA5NkM4NEM5MzhF ODhBRjNDNkMwHhcNMjUwNDA1MDMzNDU0WhcNMjUwNDEyMDMzNDU0WjAYMRYwFAYD VQQDEw02N2YwYTRkZS0zM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2bAvr4tZfpJs4W0sB3s+4PBoJLEIBr8CdpPv5NukPXw3qSRcyOgjUBdJ7LQ /zPHeNXrF71rEX74Y1bvx2KlVw2Xv4KMfy3p7Ah9oyWdyCTm7LQDGPbpPrgwlntT 1lzbdP5Us6U8G1ji4vVH1i+2PU260NrSCECsappf43PqOp8CUSqjXkT/2DgL7JZn YhrItCe6vzJaBoeQbx28H6wH1tYQ621svjGswlE3TbfW8j72fRwsnTtqZ5YHYkjp 69U8+WH/llekr7h4OtNxKQkLB+3rBsRImsX9dEkg3ABXMj6si0gwOHc1faRrDn14 2SywKcXEHHzml1f/4B5+goh5lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwJspH4 HwUfBhijaAvdOt1zwLojMB8GA1UdIwQYMBaAFEVAovm7hhn2SGLQlshMk46Irzxs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0YzRC9ERTI5RDUwQzEz RjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dmWklZdENXeUV5VGpvaXZQ R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JVQ2ktYnVHR2ZaSVl0Q1d5RXlUam9pdlBHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0YzRC9ERTI5RDUwQzEzRjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dm WklZdENXeUV5VGpvaXZQR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAihJStQ7geHlLhUXpAuhwfVS135x4/Ko+Dkwuxep3lKBMU+wheacEa L//wgZEgYuN9dGkLRqP2jiawqvGaoKOqd+cGk64OL6mECiGWJslyzX4DCDSBn4RN 42Ou6KzyAlpoIo6YmCpK3+3f3CKdiXRBpzD9VeFTTnhCCSllSLO7NMwe90VbsJQR 5LjEaDU2Nch5t6UPrtrKxnRsw6V3fvmHhRpFuLWMtSPlss/4hvCnU8LdeIIcBg9C scjFN1juegN1BIxf84M2kqN5dCrbYW7ea0zeew62yn9UzZaWyyl09EFpXgXCQP9I IrgwUBhXNjjZ6xMAcaLBJZgolbbWD914 -----END CERTIFICATE-----Generated at Sun Apr 6 21:12:12 2025 by rpki-client