$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: M5S9ohXN9vtpaMpYuPeKmgr3C1RFxuzOgPztX2VV+3M= Subject key identifier: D0:AF:0A:23:99:AA:38:F8:7C:69:F7:AE:A8:1C:C7:23:29:FE:CA:9B Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 09E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 09D3 Signing time: Sat 18 Oct 2025 21:00:36 +0000 Manifest this update: Sat 18 Oct 2025 21:00:36 +0000 Manifest next update: Sat 25 Oct 2025 21:00:36 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: VohINVcg+RHHCBr2G+jOhaGNlC+wyLPZ2+faWyp+Is8=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2529 (0x9e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: Oct 18 21:00:36 2025 GMT Not After : Oct 25 21:00:36 2025 GMT Subject: CN=68f3fff4-9106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:f2:ba:63:20:62:63:54:da:55:2c:44:28: f9:83:ed:2f:06:6c:31:39:bc:2a:6f:90:f4:53:1f: 7f:17:bd:aa:9e:89:ed:63:08:01:01:e6:b8:32:a5: fa:73:53:85:ce:49:a5:a9:00:5e:19:f0:36:29:b3: dd:12:50:ff:c1:70:a7:18:11:87:24:85:e9:09:37: 42:16:a3:92:b5:90:98:0d:97:bd:14:3f:16:9f:47: b1:ec:e7:0d:55:6a:21:91:34:30:e4:ac:9a:d6:e0: e3:00:cf:d9:2e:8a:be:6f:05:54:13:58:b2:a6:ed: 05:a3:6b:1a:62:d6:59:6e:a3:4d:90:5b:eb:0e:3a: c3:de:3b:f5:11:91:53:38:6e:89:0b:98:f2:43:38: e7:e0:49:8f:6c:9e:09:5b:27:89:c4:25:2b:b3:36: e7:14:ee:fb:3d:1d:16:4b:a8:48:5e:a0:18:8f:2e: a9:65:e7:bc:dc:b2:f5:ab:dd:fa:fa:1c:0c:a6:d2: 7b:8c:73:44:72:fe:ce:b1:d9:d9:34:a4:f9:ff:93: d2:1c:4f:70:81:10:c3:00:87:c4:7f:28:cf:ef:07: 80:c1:3e:30:a5:d3:55:ee:d6:eb:8e:32:60:9e:ac: bc:11:68:79:e9:11:6c:51:5b:51:3f:d2:c4:9b:c5: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AF:0A:23:99:AA:38:F8:7C:69:F7:AE:A8:1C:C7:23:29:FE:CA:9B X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:63:eb:34:0a:da:5b:f0:62:1f:cf:63:8e:73:d1:ab:cf:69: 7d:89:bc:f5:1c:61:b9:bb:ad:c9:09:89:4c:0b:38:35:ac:b3: 28:ae:da:78:fa:a0:63:44:3d:e6:ec:2b:f7:40:6f:58:dc:6a: 84:20:53:8e:0e:d9:d1:1c:38:d4:ef:dd:19:10:ff:c3:4c:04: fd:40:f2:02:d6:c6:5f:06:ca:61:19:21:ba:cc:4e:d7:ab:ef: 37:05:ae:63:30:11:67:c9:ec:40:db:a2:b3:a5:ef:39:a5:db: c6:8e:9f:b4:c8:be:50:27:fd:e6:b5:0a:9b:f9:e3:23:41:e7: 8b:f2:e8:bc:d7:fd:e2:5c:31:6b:67:7e:53:8e:ad:4f:36:75: 1c:54:47:33:27:e6:cc:95:c5:0c:16:da:4f:d4:db:5b:89:4e: 57:5f:15:80:68:2d:ed:28:ac:87:86:f3:b6:fa:f0:dc:bf:7c: 3d:1f:9e:37:bb:e9:e5:67:9b:ba:91:68:2e:d1:68:45:12:1a: 39:4f:6e:48:83:7a:6d:0b:a2:b4:a1:58:97:0c:d9:7c:e3:f4: 88:11:d2:1f:3b:ef:58:93:b3:11:a4:d5:08:a9:48:20:66:5f: 09:f4:94:33:3b:ce:be:54:e0:2b:81:78:e6:72:cc:97:50:ad: 7b:0b:2f:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjUxMDE4MjEwMDM2WhcNMjUxMDI1MjEwMDM2WjAYMRYwFAYD VQQDEw02OGYzZmZmNC05MTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTHyumMgYmNU2lUsRCj5g+0vBmwxObwqb5D0Ux9/F72qnontYwgBAea4MqX6 c1OFzkmlqQBeGfA2KbPdElD/wXCnGBGHJIXpCTdCFqOStZCYDZe9FD8Wn0ex7OcN VWohkTQw5Kya1uDjAM/ZLoq+bwVUE1iypu0Fo2saYtZZbqNNkFvrDjrD3jv1EZFT OG6JC5jyQzjn4EmPbJ4JWyeJxCUrszbnFO77PR0WS6hIXqAYjy6pZee83LL1q936 +hwMptJ7jHNEcv7OsdnZNKT5/5PSHE9wgRDDAIfEfyjP7weAwT4wpdNV7tbrjjJg nqy8EWh56RFsUVtRP9LEm8Xl6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCvCiOZ qjj4fGn3rqgcxyMp/sqbMB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFY+s0Ctpb8GIfz2OOc9Grz2l9ibz1HGG5u63JCYlMCzg1rLMortp4 +qBjRD3m7Cv3QG9Y3GqEIFOODtnRHDjU790ZEP/DTAT9QPIC1sZfBsphGSG6zE7X q+83Ba5jMBFnyexA26Kzpe85pdvGjp+0yL5QJ/3mtQqb+eMjQeeL8ui81/3iXDFr Z35Tjq1PNnUcVEczJ+bMlcUMFtpP1NtbiU5XXxWAaC3tKKyHhvO2+vDcv3w9H543 u+nlZ5u6kWgu0WhFEho5T25Ig3ptC6K0oViXDNl84/SIEdIfO+9Yk7MRpNUIqUgg Zl8J9JQzO86+VOArgXjmcsyXUK17Cy+n -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:03 2025 by rpki-client