$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: 5SHGNM6qJEAO+ie4i90edfK4ciVK/e7VF6lKXjlOjxY= Subject key identifier: 60:DF:B0:C3:B1:3D:F3:D9:3B:54:5F:44:D9:34:61:C5:1B:5B:13:3D Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 09AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 099D Signing time: Fri 04 Jul 2025 20:27:59 +0000 Manifest this update: Fri 04 Jul 2025 20:27:59 +0000 Manifest next update: Fri 11 Jul 2025 20:27:59 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: TGwxxmqZK/vwzfBHPNhXreHY6kejfxrdJNbkwOQiibM=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: Jul 4 20:27:59 2025 GMT Not After : Jul 11 20:27:59 2025 GMT Subject: CN=6868394f-cb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a8:fb:8b:2d:c9:82:8a:c4:dd:67:ba:28:9f: e1:d0:0c:c8:23:86:23:14:7d:98:da:a0:de:77:e6: df:47:42:6f:98:80:41:95:aa:8d:96:78:9b:a2:2a: 04:71:7d:40:56:73:76:53:5a:c2:12:08:fa:0d:0c: 53:0e:f6:53:b7:38:69:0e:24:94:05:08:47:40:a6: 0a:c8:63:66:13:3e:2e:c9:11:a4:4e:dc:0d:cb:2f: 80:de:ab:1f:73:fd:01:37:6e:fb:4a:33:0d:84:90: b0:ee:ed:01:4d:ef:a0:57:d5:2b:f5:a0:ab:50:5a: 70:de:04:ac:50:30:eb:37:f2:5b:c2:2e:fa:83:15: 6d:37:39:b8:a5:c6:48:07:29:47:e8:ba:0b:65:ca: 62:f7:7b:10:f1:da:c1:dc:a6:9a:da:86:02:2a:d5: 46:23:35:f8:34:75:e1:ed:60:1e:57:e8:df:ec:dc: 76:1c:19:a2:75:64:ce:97:b3:7e:95:a9:2b:a0:ec: 5d:fa:71:f3:cd:e4:60:17:1f:93:98:5a:18:46:a0: c8:f1:f4:26:a7:4e:21:e7:1f:41:47:17:80:4a:c5: 55:cd:37:e4:e8:fe:86:63:61:13:51:fd:9d:e7:8d: d3:dd:dd:b3:98:7f:69:86:5b:5b:6f:28:f8:44:88: d5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DF:B0:C3:B1:3D:F3:D9:3B:54:5F:44:D9:34:61:C5:1B:5B:13:3D X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:71:36:66:27:0d:cf:01:31:70:8c:72:a9:2a:3c:36:8d:af: b1:77:88:89:9b:d5:f6:32:5c:3d:8a:3d:0a:1f:ee:85:ee:4b: 49:70:53:7c:4b:07:30:9a:b1:5d:81:81:e1:de:60:a2:12:54: 8e:d1:ff:9c:f4:94:52:a3:26:c7:cf:1e:de:04:ee:ab:de:ff: f8:f7:e0:b0:54:38:c5:6e:a1:0e:30:96:44:67:0d:44:ae:0a: 9e:40:bb:82:e2:d1:be:69:03:c1:fb:94:09:05:69:e1:00:cb: 4e:0a:ff:34:1e:10:0c:61:a9:1d:34:5b:f6:0e:75:41:cb:25: 88:12:fb:f1:12:61:6a:b2:8d:aa:8b:39:df:d1:42:f1:39:37: 2a:eb:a2:32:38:08:c9:75:1d:ca:8d:c6:d5:9d:1d:d4:4b:ff: cf:aa:28:78:ad:28:f5:85:bd:f7:36:c2:87:fb:c5:fa:48:c5: a6:9e:f3:e1:72:6d:d5:20:b1:26:d5:55:ea:f6:28:ee:2b:bf: 5f:d4:44:27:44:9e:50:e9:c0:61:96:ce:50:c5:6d:b6:bd:05: d9:e9:78:f4:c9:00:c2:b9:f3:98:5e:18:fa:f0:ef:83:8b:14: 57:00:c2:be:30:06:bb:51:3f:b0:48:f3:fb:f0:ef:b7:c4:3f: fa:2b:d9:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjUwNzA0MjAyNzU5WhcNMjUwNzExMjAyNzU5WjAYMRYwFAYD VQQDEw02ODY4Mzk0Zi1jYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06j7iy3JgorE3We6KJ/h0AzII4YjFH2Y2qDed+bfR0JvmIBBlaqNlniboioE cX1AVnN2U1rCEgj6DQxTDvZTtzhpDiSUBQhHQKYKyGNmEz4uyRGkTtwNyy+A3qsf c/0BN277SjMNhJCw7u0BTe+gV9Ur9aCrUFpw3gSsUDDrN/Jbwi76gxVtNzm4pcZI BylH6LoLZcpi93sQ8drB3Kaa2oYCKtVGIzX4NHXh7WAeV+jf7Nx2HBmidWTOl7N+ lakroOxd+nHzzeRgFx+TmFoYRqDI8fQmp04h5x9BRxeASsVVzTfk6P6GY2ETUf2d 543T3d2zmH9phltbbyj4RIjVwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDfsMOx PfPZO1RfRNk0YcUbWxM9MB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQcTZmJw3PATFwjHKpKjw2ja+xd4iJm9X2Mlw9ij0KH+6F7ktJcFN8 SwcwmrFdgYHh3mCiElSO0f+c9JRSoybHzx7eBO6r3v/49+CwVDjFbqEOMJZEZw1E rgqeQLuC4tG+aQPB+5QJBWnhAMtOCv80HhAMYakdNFv2DnVByyWIEvvxEmFqso2q iznf0ULxOTcq66IyOAjJdR3KjcbVnR3US//Pqih4rSj1hb33NsKH+8X6SMWmnvPh cm3VILEm1VXq9ijuK79f1EQnRJ5Q6cBhls5QxW22vQXZ6Xj0yQDCufOYXhj68O+D ixRXAMK+MAa7UT+wSPP78O+3xD/6K9lh -----END CERTIFICATE-----Generated at Sat Jul 5 02:35:19 2025 by rpki-client