$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json) Hash identifier: X5cuQtDsnfraZESFqycNDjJ7XUfw+h3EJkG/BekahJQ= Subject key identifier: 2E:06:09:99:07:2B:D2:18:74:D6:4D:FC:06:EA:E4:4F:C0:5F:23:90 Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft Manifest number: 67 Signing time: Wed 05 Nov 2025 07:19:04 +0000 Manifest this update: Wed 05 Nov 2025 07:19:04 +0000 Manifest next update: Wed 12 Nov 2025 07:19:04 +0000 Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: QguzKP0g8QqfdocAKQrte5TKKOWWbqoaS+Ps0TCQuVI=) 2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: TjQlu0F+YIffgV7FQsn/LMUGbUdqPRgHuxAxeA1KSRY=) 3: 44E001183C5C11F095C6A259C4F9AE02.roa (hash: +MuiZcKVfagn/EUscOGtM+jo03HbljVKVbfVcrdmvSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Nov 5 07:19:04 2025 GMT Not After : Nov 12 07:19:04 2025 GMT Subject: CN=690afa68-7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:b4:e6:44:ed:b8:a5:e5:c4:3f:06:0d:0e: 59:76:b5:d9:14:48:84:e2:59:12:04:3c:7c:9b:94: ab:ff:20:55:42:f2:e9:f2:a4:0c:3e:13:35:a2:7d: fb:c7:7a:e4:8d:10:7f:bb:d6:d9:a8:4f:32:7c:f4: 48:3d:93:ae:1f:51:cc:03:3f:f0:b6:df:d9:7b:c3: 0f:f1:19:d2:83:be:47:6c:09:ea:64:44:a5:15:37: 37:5d:a9:76:31:20:68:18:00:e0:30:67:a8:41:08: 1d:18:07:3f:47:ac:94:08:06:d0:ac:6f:ba:1a:d7: 43:79:6c:2f:09:05:54:42:df:e6:e7:aa:2b:74:75: 00:b6:d4:03:dc:30:f6:1e:9d:e6:1b:30:1f:4b:ba: 7a:69:5e:8e:73:d9:44:75:e9:27:d2:9d:16:73:70: 24:27:ac:7b:83:f6:3b:c9:35:16:91:b7:05:65:f6: a9:9c:cb:3b:c0:d4:2a:0c:3e:42:81:9d:82:c4:0e: 78:4d:2f:30:66:41:93:47:6b:89:7d:3e:4e:3b:46: 79:87:17:b2:e4:20:bc:58:05:2d:e0:d5:4b:84:45: 08:4e:bb:d3:22:9d:46:fb:b3:7c:48:d6:9c:02:97: 49:21:1d:a7:16:bb:11:a3:fb:b5:8c:3c:54:26:73: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:06:09:99:07:2B:D2:18:74:D6:4D:FC:06:EA:E4:4F:C0:5F:23:90 X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b9:d1:a8:31:46:5d:41:40:e6:24:18:09:07:df:60:59:84: 28:ee:32:f3:09:4e:86:9b:29:26:f4:be:4b:fc:ee:5f:32:af: ad:75:37:ce:57:d6:06:f0:4c:f1:e9:20:4a:fe:8e:fa:48:0e: d5:65:28:f9:49:e1:aa:50:07:cf:0a:8f:50:f9:d6:99:b8:ad: 09:57:39:bf:53:b1:44:c6:e4:31:2e:4a:e6:a4:b1:b0:c7:92: 34:da:51:70:d5:9e:fa:54:64:e1:41:65:fc:55:7f:f4:d6:13: 6f:21:b1:60:70:16:53:f9:56:fe:85:f4:22:bc:e4:ce:c6:a4: 22:e2:d0:ab:1a:c6:25:f4:21:7a:11:b2:e4:ab:ed:ee:db:65: fc:13:a1:24:8c:c5:4c:cd:90:37:31:a5:c5:f6:ce:e6:a3:13: 96:39:7c:4d:6c:b0:46:3b:0b:be:77:b1:88:78:85:2f:aa:3a: c9:98:d5:c3:b9:e2:cc:20:01:7b:f4:c9:2b:ce:b2:c2:d3:e9: bc:8a:80:6a:b3:63:b1:f8:ac:11:e9:52:b6:1c:22:ee:72:50: 4b:93:a5:43:07:b8:1d:2d:b9:db:45:dc:cf:80:cf:1c:4e:3c: 71:58:5a:60:f1:f8:26:f3:82:a3:c0:72:aa:77:e9:e3:2c:c9: 90:10:12:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTExMDUwNzE5MDRaFw0yNTExMTIwNzE5MDRaMBgxFjAUBgNV BAMTDTY5MGFmYTY4LTdiMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK47TmRO24peXEPwYNDll2tdkUSITiWRIEPHyblKv/IFVC8unypAw+EzWiffvH euSNEH+71tmoTzJ89Eg9k64fUcwDP/C239l7ww/xGdKDvkdsCepkRKUVNzddqXYx IGgYAOAwZ6hBCB0YBz9HrJQIBtCsb7oa10N5bC8JBVRC3+bnqit0dQC21APcMPYe neYbMB9LunppXo5z2UR16SfSnRZzcCQnrHuD9jvJNRaRtwVl9qmcyzvA1CoMPkKB nYLEDnhNLzBmQZNHa4l9Pk47RnmHF7LkILxYBS3g1UuERQhOu9MinUb7s3xI1pwC l0khHacWuxGj+7WMPFQmc0pPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULgYJmQcr 0hh01k38BurkT8BfI5AwHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjIxLzMzRUFBQzY4MkQwMzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlps a1lZZlFnZWZJOTVpRDRaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFu50agxRl1BQOYkGAkH32BZhCjuMvMJToabKSb0vkv87l8yr611N85X 1gbwTPHpIEr+jvpIDtVlKPlJ4apQB88Kj1D51pm4rQlXOb9TsUTG5DEuSuaksbDH kjTaUXDVnvpUZOFBZfxVf/TWE28hsWBwFlP5Vv6F9CK85M7GpCLi0KsaxiX0IXoR suSr7e7bZfwToSSMxUzNkDcxpcX2zuajE5Y5fE1ssEY7C753sYh4hS+qOsmY1cO5 4swgAXv0ySvOssLT6byKgGqzY7H4rBHpUrYcIu5yUEuTpUMHuB0tudtF3M+AzxxO PHFYWmDx+CbzgqPAcqp36eMsyZAQEiM= -----END CERTIFICATE-----Generated at Wed Nov 5 19:29:42 2025 by rpki-client