$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json) Hash identifier: 8ZqSQ5Kc4A/n3jQQRP2AIJpRe4mW7RFJIOdmP0YC/io= Subject key identifier: 75:C3:27:1A:30:E6:8E:E6:B8:A5:3F:E0:20:BA:54:DD:21:31:4F:BD Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft Manifest number: 0141 Signing time: Sun 19 Oct 2025 07:08:16 +0000 Manifest this update: Sun 19 Oct 2025 07:08:15 +0000 Manifest next update: Sun 26 Oct 2025 07:08:15 +0000 Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: ZE7eWzV25LIOlQQ98HnmLJQ+jNppIIikuq+0Iyi2c9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Validity Not Before: Oct 19 07:08:15 2025 GMT Not After : Oct 26 07:08:15 2025 GMT Subject: CN=68f48e60-22a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:17:74:20:04:53:d4:95:6b:62:d7:9d:30: 8e:8d:58:1d:53:89:28:3e:c3:d6:83:fe:40:f2:68: 08:22:d5:5a:32:9f:12:25:8d:2b:26:37:8d:83:c3: e8:9d:09:00:d1:12:4c:49:d9:a9:4c:a1:38:79:2e: 7e:de:14:2e:11:27:6e:3c:1a:34:0d:07:4f:f4:84: 8f:1b:55:f4:c9:54:1a:a5:d2:d4:53:c4:24:67:63: 48:0e:36:2e:eb:f9:57:b4:05:62:09:33:ae:1b:d7: 76:d9:54:6f:1e:4f:ad:c6:ea:ff:33:9b:56:33:1c: 2b:f7:33:59:82:51:16:2b:f2:22:b5:17:e3:08:8f: 4b:5a:4a:70:02:ad:62:f2:3e:c3:7a:25:12:5c:1d: 18:47:30:36:ce:7b:82:59:dd:33:31:1a:85:d0:b0: 18:4d:ef:a4:12:5b:b2:8e:47:ee:ce:d3:57:92:14: c3:af:45:f9:d1:c6:d0:64:c2:43:14:c1:09:21:86: e9:6a:bb:15:b9:e8:8f:c4:67:b2:d0:4f:10:7a:16: a7:92:7c:89:e1:3f:b1:b7:fe:b7:84:22:4f:2a:09: 36:38:70:17:5c:09:58:3e:98:54:fc:68:9d:d1:84: 95:c6:0b:61:58:71:e9:b7:43:ef:73:1e:87:5a:83: 59:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C3:27:1A:30:E6:8E:E6:B8:A5:3F:E0:20:BA:54:DD:21:31:4F:BD X509v3 Authority Key Identifier: keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:df:ce:15:88:ee:37:c4:42:13:03:74:bf:27:9f:0a:2c:2c: 61:d3:8b:91:9c:f8:5c:13:60:31:fd:c2:37:cb:b4:22:51:2d: 13:af:ce:63:e7:61:9d:0c:eb:6c:38:e5:69:0a:9a:40:b0:e8: a8:75:75:e0:75:69:56:6d:e2:43:c3:45:3e:bd:d7:da:98:d0: e4:b8:54:e9:69:7a:83:35:f1:0b:f4:a2:1c:af:a0:71:53:50: f7:7c:3f:7b:9c:b2:ca:5a:f1:bc:2f:c5:d5:4e:1a:8e:62:c3: 46:5c:65:43:c0:f4:15:c4:46:a7:01:e5:c3:de:3d:eb:c3:45: 67:16:a2:da:c8:27:dc:2e:50:91:87:f6:a1:64:8a:04:c2:87: be:62:45:b4:4c:7d:5f:be:40:96:33:5c:e7:fd:a2:c1:41:84: ba:cd:df:61:39:e0:72:51:70:56:b0:88:d5:34:f1:2d:61:4b: 77:0c:dd:0c:a1:23:cc:d1:da:b6:69:54:ee:dd:9f:de:b1:e1: 05:cd:b8:13:d3:cf:a2:7a:64:a5:30:76:ce:33:75:83:6f:20: 87:7b:a8:5b:7c:ec:46:65:df:e1:31:3c:06:c9:a5:62:08:d1: 11:5d:8b:b9:ff:81:ed:b9:2a:a2:43:fe:16:79:a4:eb:02:8c: 94:f5:f3:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB MDE0QzY5MDkwHhcNMjUxMDE5MDcwODE1WhcNMjUxMDI2MDcwODE1WjAYMRYwFAYD VQQDEw02OGY0OGU2MC0yMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX0XdCAEU9SVa2LXnTCOjVgdU4koPsPWg/5A8mgIItVaMp8SJY0rJjeNg8Po nQkA0RJMSdmpTKE4eS5+3hQuESduPBo0DQdP9ISPG1X0yVQapdLUU8QkZ2NIDjYu 6/lXtAViCTOuG9d22VRvHk+txur/M5tWMxwr9zNZglEWK/IitRfjCI9LWkpwAq1i 8j7DeiUSXB0YRzA2znuCWd0zMRqF0LAYTe+kEluyjkfuztNXkhTDr0X50cbQZMJD FMEJIYbparsVueiPxGey0E8QehanknyJ4T+xt/63hCJPKgk2OHAXXAlYPphU/Gid 0YSVxgthWHHpt0Pvcx6HWoNZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXDJxow 5o7muKU/4CC6VN0hMU+9MB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z SGpMRE1JR05HMzJnRk1hUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr384ViO43xEITA3S/J58KLCxh04uRnPhcE2Ax/cI3y7QiUS0Tr85j 52GdDOtsOOVpCppAsOiodXXgdWlWbeJDw0U+vdfamNDkuFTpaXqDNfEL9KIcr6Bx U1D3fD97nLLKWvG8L8XVThqOYsNGXGVDwPQVxEanAeXD3j3rw0VnFqLayCfcLlCR h/ahZIoEwoe+YkW0TH1fvkCWM1zn/aLBQYS6zd9hOeByUXBWsIjVNPEtYUt3DN0M oSPM0dq2aVTu3Z/eseEFzbgT08+iemSlMHbOM3WDbyCHe6hbfOxGZd/hMTwGyaVi CNERXYu5/4HtuSqiQ/4WeaTrAoyU9fMv -----END CERTIFICATE-----Generated at Mon Oct 20 16:15:33 2025 by rpki-client