$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json) Hash identifier: YBY68VeNfmER4bgbeEOnEGBZOx64tJfhqwPyGjrcI7I= Subject key identifier: 85:E8:49:61:AF:4E:3B:B2:67:0A:BC:89:0C:7B:3F:24:FA:68:21:7E Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft Manifest number: 0192 Signing time: Thu 21 Aug 2025 03:31:14 +0000 Manifest this update: Thu 21 Aug 2025 03:31:14 +0000 Manifest next update: Thu 28 Aug 2025 03:31:14 +0000 Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: DzRdN25QFF1b6UbHUkLWm6cNR0ZRuKu4VWYLIcIf4UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Validity Not Before: Aug 21 03:31:14 2025 GMT Not After : Aug 28 03:31:14 2025 GMT Subject: CN=68a69302-d624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:f2:80:40:80:3b:6a:00:7e:de:0c:a5:ed: ba:6b:0f:33:18:91:8a:86:ca:91:c6:7d:d0:4d:71: a0:e2:44:5f:7e:f1:1e:d7:fb:19:b8:93:96:f2:e8: df:84:50:4f:db:17:49:7b:b1:3a:c3:ca:3f:6e:db: 1f:47:d3:9d:78:22:55:b9:76:b0:ae:84:0d:37:ed: f3:4d:bd:c6:5f:af:44:4b:8c:b1:ee:8d:1d:42:7f: f9:2e:c3:0e:b1:c4:e3:c3:47:04:76:98:7f:6d:34: 3c:7a:bc:d6:c4:61:4d:e5:23:95:b3:f0:0d:2a:0e: 4f:64:26:bf:6f:1c:64:51:d8:c4:5e:bc:5b:95:ea: c4:08:b7:1f:55:f1:d8:d5:ab:ce:a3:d4:e8:68:cf: 9a:2b:34:96:b7:90:12:a9:ba:73:ec:fa:78:e9:fa: 26:bb:af:fd:48:a2:03:2b:a2:b9:89:34:84:e7:0c: 6e:0d:16:77:91:21:b5:b8:d2:54:eb:7c:af:71:ab: 9c:c2:1f:9d:53:e2:cf:9a:ad:1b:db:ce:70:00:f9: ec:8d:eb:48:c1:ca:4b:10:2b:0c:08:b1:0a:ea:48: e6:84:15:8b:58:cb:f2:a9:fe:c0:92:b6:e5:35:b8: 20:2b:d5:0a:de:28:d6:e4:d8:74:f2:e7:21:f7:af: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E8:49:61:AF:4E:3B:B2:67:0A:BC:89:0C:7B:3F:24:FA:68:21:7E X509v3 Authority Key Identifier: keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:fe:9c:25:07:da:d1:ca:8d:73:a5:dd:20:7f:cf:52:b3:11: 3c:48:97:cb:cb:a1:19:9b:d4:40:60:9f:d4:d4:a3:68:6a:96: 19:b9:5b:9e:72:2b:cf:42:f4:ba:20:ae:f4:35:f4:82:21:5e: 42:ba:ac:c5:03:1e:7c:7f:af:04:8b:c4:07:a0:cb:59:37:53: 17:0a:5f:ae:69:6a:df:02:b0:20:c3:a1:91:c7:66:21:a8:ee: 2d:e5:3c:9f:6d:9d:53:20:e6:90:3d:d2:7e:84:2c:d7:e6:1d: ee:c8:41:5d:b9:50:54:0e:29:37:21:86:6c:c6:1f:a6:1a:5c: 0e:21:5c:54:f1:26:f2:21:15:04:40:f7:e8:de:72:f1:42:99: 07:94:84:d2:01:e7:22:40:bb:f5:d0:79:23:d2:d0:4a:ac:29: 39:88:88:82:11:cf:0a:0d:be:a5:e1:5e:c5:4a:83:2b:8c:6a: b5:5a:fb:ff:a4:8d:42:e4:0b:f2:8a:e3:7c:12:b2:71:70:9c: 5e:c0:9f:91:75:05:24:19:ea:9e:b0:e7:35:38:34:05:e1:90: bf:8a:0b:df:3d:87:66:fa:5c:53:a1:6c:2d:5f:cf:af:4c:c8: df:43:a3:2e:e9:bf:71:91:06:39:8c:6d:73:79:36:01:17:13: 82:90:d6:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENGM0QxMTAvBgNVBAUTKDQ1NDBBMkY5QkI4NjE5RjY0ODYyRDA5NkM4NEM5MzhF ODhBRjNDNkMwHhcNMjUwODIxMDMzMTE0WhcNMjUwODI4MDMzMTE0WjAYMRYwFAYD VQQDEw02OGE2OTMwMi1kNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2vygECAO2oAft4Mpe26aw8zGJGKhsqRxn3QTXGg4kRffvEe1/sZuJOW8ujf hFBP2xdJe7E6w8o/btsfR9OdeCJVuXawroQNN+3zTb3GX69ES4yx7o0dQn/5LsMO scTjw0cEdph/bTQ8erzWxGFN5SOVs/ANKg5PZCa/bxxkUdjEXrxblerECLcfVfHY 1avOo9ToaM+aKzSWt5ASqbpz7Pp46fomu6/9SKIDK6K5iTSE5wxuDRZ3kSG1uNJU 63yvcaucwh+dU+LPmq0b285wAPnsjetIwcpLECsMCLEK6kjmhBWLWMvyqf7Akrbl NbggK9UK3ijW5Nh08uch968VTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXoSWGv TjuyZwq8iQx7PyT6aCF+MB8GA1UdIwQYMBaAFEVAovm7hhn2SGLQlshMk46Irzxs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0YzRC9ERTI5RDUwQzEz RjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dmWklZdENXeUV5VGpvaXZQ R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JVQ2ktYnVHR2ZaSVl0Q1d5RXlUam9pdlBHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0YzRC9ERTI5RDUwQzEzRjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dm WklZdENXeUV5VGpvaXZQR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH/pwlB9rRyo1zpd0gf89SsxE8SJfLy6EZm9RAYJ/U1KNoapYZuVue civPQvS6IK70NfSCIV5CuqzFAx58f68Ei8QHoMtZN1MXCl+uaWrfArAgw6GRx2Yh qO4t5TyfbZ1TIOaQPdJ+hCzX5h3uyEFduVBUDik3IYZsxh+mGlwOIVxU8SbyIRUE QPfo3nLxQpkHlITSAeciQLv10Hkj0tBKrCk5iIiCEc8KDb6l4V7FSoMrjGq1Wvv/ pI1C5AvyiuN8ErJxcJxewJ+RdQUkGeqesOc1ODQF4ZC/igvfPYdm+lxToWwtX8+v TMjfQ6Mu6b9xkQY5jG1zeTYBFxOCkNbc -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:38 2025 by rpki-client