$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: x6hEnIBheU5aBkpcgu+scQy58/j7kRxQzIy1SxQwLFI= Subject key identifier: 6E:E9:9E:E0:E4:D7:30:78:3F:C0:CB:85:68:9B:4A:23:3B:AD:F1:79 Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 09C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 09B6 Signing time: Fri 22 Aug 2025 20:10:34 +0000 Manifest this update: Fri 22 Aug 2025 20:10:33 +0000 Manifest next update: Fri 29 Aug 2025 20:10:33 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: mpDvBMgmhNL7fEm4G936FuebnMQVZuSv7KG82mO3lcs=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2500 (0x9c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: Aug 22 20:10:33 2025 GMT Not After : Aug 29 20:10:33 2025 GMT Subject: CN=68a8ceba-e1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:b6:95:42:d3:3d:ed:f7:c9:72:6a:bb:ad: b2:8e:3f:82:b6:49:ed:5e:b3:1a:7f:07:20:f2:67: 4b:35:ff:e4:9e:ad:f7:32:eb:43:24:fe:48:5a:25: ab:e8:c2:39:e3:10:22:98:58:94:81:0d:a7:d6:96: c1:10:ef:da:2e:51:88:66:85:61:ad:88:bb:33:bc: cf:9f:ec:b1:ce:74:d6:49:1b:ae:ae:c7:e8:42:13: eb:32:0d:be:6a:c9:5e:ca:d5:6f:c2:22:e0:8c:6b: 09:a1:f9:1e:7a:f1:0e:7d:9a:70:34:3b:e4:e1:e8: a2:49:e8:60:00:11:9d:52:b4:c0:87:ee:33:4a:d1: a6:b4:13:de:76:a1:5a:13:0c:98:b9:34:8c:10:db: 95:0e:34:3e:e5:73:d2:d2:e2:d1:8e:6b:ab:63:b8: fb:56:cd:d5:e3:03:54:e7:23:0f:7a:a2:88:d2:03: 71:5e:d5:17:37:2e:0c:f5:d8:d0:25:6f:52:e9:9c: 4b:f8:fc:4c:60:35:7f:14:25:32:7f:87:f0:02:ba: 07:28:d4:d4:dc:90:36:16:81:12:cb:32:50:ae:5e: 4f:0a:47:fd:55:cd:65:60:dc:fc:15:76:c9:ae:26: b0:23:15:c2:57:22:1b:10:e8:e7:48:6c:4b:39:d2: 3e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E9:9E:E0:E4:D7:30:78:3F:C0:CB:85:68:9B:4A:23:3B:AD:F1:79 X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:33:fc:4a:4e:9e:dc:b1:c2:b4:7d:d9:a4:09:a5:80:13:7e: cc:d0:f9:e4:38:c9:ad:db:9a:1a:a8:13:99:44:ed:ce:ce:f7: ad:7b:4a:91:48:68:1d:f8:84:17:7e:2d:fa:f0:55:41:2e:29: 37:36:d9:f0:ee:8c:9b:21:ad:ec:85:7f:9a:1c:23:21:7b:b9: d9:54:0c:e1:2a:ae:63:1e:05:6c:12:75:ff:a5:75:80:cb:54: b3:fb:89:d1:db:4a:b9:fa:5e:fd:06:1e:61:c1:91:c9:18:94: db:20:a3:ec:bc:aa:6e:55:2a:8f:ec:73:72:02:2f:24:d5:5f: 30:e9:1d:96:e8:6f:ed:7b:16:25:a7:53:fc:23:27:36:84:72: aa:36:f3:54:e8:1b:59:27:e6:bb:ea:f1:c8:36:81:fc:2a:95: 4d:86:8a:ea:9c:ac:16:c3:06:5e:4d:89:82:5a:dd:6a:49:69: 52:ee:24:db:d5:d1:64:18:80:e6:37:57:63:bd:ef:bb:17:17: b7:ea:bf:50:d1:67:fa:04:6f:65:c6:ee:47:74:33:ca:70:40: dc:de:00:14:85:7f:23:ae:2e:51:99:ff:88:b1:f7:25:83:65: 31:07:b3:4e:97:34:6b:e4:3f:db:ab:34:75:aa:1e:18:6f:f7: ef:57:a8:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjUwODIyMjAxMDMzWhcNMjUwODI5MjAxMDMzWjAYMRYwFAYD VQQDEw02OGE4Y2ViYS1lMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtz22lULTPe33yXJqu62yjj+CtkntXrMafwcg8mdLNf/knq33MutDJP5IWiWr 6MI54xAimFiUgQ2n1pbBEO/aLlGIZoVhrYi7M7zPn+yxznTWSRuursfoQhPrMg2+ asleytVvwiLgjGsJofkeevEOfZpwNDvk4eiiSehgABGdUrTAh+4zStGmtBPedqFa EwyYuTSMENuVDjQ+5XPS0uLRjmurY7j7Vs3V4wNU5yMPeqKI0gNxXtUXNy4M9djQ JW9S6ZxL+PxMYDV/FCUyf4fwAroHKNTU3JA2FoESyzJQrl5PCkf9Vc1lYNz8FXbJ riawIxXCVyIbEOjnSGxLOdI+MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7pnuDk 1zB4P8DLhWibSiM7rfF5MB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmM/xKTp7cscK0fdmkCaWAE37M0PnkOMmt25oaqBOZRO3Ozvete0qR SGgd+IQXfi368FVBLik3Ntnw7oybIa3shX+aHCMhe7nZVAzhKq5jHgVsEnX/pXWA y1Sz+4nR20q5+l79Bh5hwZHJGJTbIKPsvKpuVSqP7HNyAi8k1V8w6R2W6G/texYl p1P8Iyc2hHKqNvNU6BtZJ+a76vHINoH8KpVNhorqnKwWwwZeTYmCWt1qSWlS7iTb 1dFkGIDmN1djve+7Fxe36r9Q0Wf6BG9lxu5HdDPKcEDc3gAUhX8jri5Rmf+Isfcl g2UxB7NOlzRr5D/bqzR1qh4Yb/fvV6j3 -----END CERTIFICATE-----Generated at Sat Aug 23 20:25:28 2025 by rpki-client