$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json) Hash identifier: 2qRzt839J25X4cu/T7l2U6cRTitSEKQWi38CThFcBXo= Subject key identifier: D1:DF:43:59:86:CB:E2:27:3B:33:EC:54:ED:53:50:DA:28:34:54:44 Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft Manifest number: 0124 Signing time: Sat 23 Aug 2025 04:50:33 +0000 Manifest this update: Sat 23 Aug 2025 04:50:32 +0000 Manifest next update: Sat 30 Aug 2025 04:50:32 +0000 Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: ra1j+XgDaWcyV/HYtbI1/QqjGe/9Dh1GQeCRVtA0FfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Validity Not Before: Aug 23 04:50:32 2025 GMT Not After : Aug 30 04:50:32 2025 GMT Subject: CN=68a94898-7cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:9f:8d:a1:75:6c:18:31:78:b3:1a:55:d6: 15:d8:e5:0f:20:48:97:4f:8f:01:51:8b:b8:7f:1c: 04:d8:44:2c:5c:80:a2:e5:4b:8e:d6:81:e1:ec:29: 03:7f:8c:33:48:d8:f4:fa:9f:52:ed:1f:34:a0:2a: 9e:f8:a2:0b:96:76:72:fa:7c:6c:59:79:d4:6a:ef: d9:34:a8:24:11:ee:dd:e6:ce:7f:c0:dc:b0:fa:a9: 7d:e1:e7:07:ba:2b:6f:4c:a6:02:5b:4b:40:8a:8d: ef:dd:fe:2e:6e:39:9c:34:57:72:13:ed:ec:ba:81: 8c:81:8f:29:7b:ea:80:81:e0:7f:6b:30:9a:ec:27: e8:06:9f:7d:08:9c:80:07:aa:b5:d8:a2:99:55:d5: 1e:14:99:26:c2:57:8d:0d:a5:69:cb:e4:e8:de:5f: 86:53:50:ec:4c:fe:10:e7:41:5e:8b:9f:3f:d8:e3: b1:64:43:3d:b6:3f:ed:b9:f2:e0:51:05:ff:96:0e: ef:61:c0:4d:fb:28:da:6f:5d:63:4d:52:61:a0:6c: c9:ac:9a:b3:22:24:b6:7b:dd:b8:fb:18:20:f9:98: a9:24:9f:9b:bd:79:aa:3c:a4:27:54:ec:d0:ee:39: 00:77:59:47:5a:16:28:66:87:4a:40:4e:7e:34:a4: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DF:43:59:86:CB:E2:27:3B:33:EC:54:ED:53:50:DA:28:34:54:44 X509v3 Authority Key Identifier: keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cc:80:99:4d:96:f6:f0:88:d4:07:bc:13:59:8b:28:b9:95: ba:33:dd:ed:18:5b:49:20:c1:3d:c3:fc:31:79:12:1a:c9:93: 9f:c0:a9:c2:b5:d7:9b:12:05:bd:7b:14:8f:b9:d7:04:51:e4: 2d:36:ca:d9:24:4e:87:0a:96:b6:77:db:36:da:c4:20:d0:65: 3a:af:2f:40:ea:66:65:f3:55:4f:7a:e5:05:12:2c:ba:b1:51: 61:02:f2:62:6a:4c:ba:41:a5:50:22:d6:01:ff:a8:b1:13:25: 32:d2:50:85:8c:dd:d4:1e:92:7c:98:f1:d0:25:a4:e5:4d:1b: 17:1e:31:57:c9:19:97:68:9c:30:99:d6:f6:ef:96:e4:59:03: 20:34:08:06:a1:97:71:f8:5e:68:09:d9:db:67:6d:95:5c:0d: 87:74:53:bf:30:25:78:5d:cb:dd:cc:dc:e3:ac:60:ee:80:1b: bd:ff:46:d8:bd:8a:5f:37:c6:b9:21:44:20:8e:51:a0:36:65: a6:fc:a9:0f:b7:a7:af:f4:fd:2f:30:e6:4a:0e:6d:b1:a0:74: ce:72:01:1f:2a:df:e9:36:d7:c9:40:99:2b:46:bc:bc:58:79: 2a:a2:fa:43:93:95:b5:bf:e3:cc:a9:9a:61:fd:e9:ff:2e:b1: 70:35:88:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB MDE0QzY5MDkwHhcNMjUwODIzMDQ1MDMyWhcNMjUwODMwMDQ1MDMyWjAYMRYwFAYD VQQDEw02OGE5NDg5OC03Y2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XifjaF1bBgxeLMaVdYV2OUPIEiXT48BUYu4fxwE2EQsXICi5UuO1oHh7CkD f4wzSNj0+p9S7R80oCqe+KILlnZy+nxsWXnUau/ZNKgkEe7d5s5/wNyw+ql94ecH uitvTKYCW0tAio3v3f4ubjmcNFdyE+3suoGMgY8pe+qAgeB/azCa7CfoBp99CJyA B6q12KKZVdUeFJkmwleNDaVpy+To3l+GU1DsTP4Q50Fei58/2OOxZEM9tj/tufLg UQX/lg7vYcBN+yjab11jTVJhoGzJrJqzIiS2e924+xgg+ZipJJ+bvXmqPKQnVOzQ 7jkAd1lHWhYoZodKQE5+NKT2EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHfQ1mG y+InOzPsVO1TUNooNFREMB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z SGpMRE1JR05HMzJnRk1hUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMzICZTZb28IjUB7wTWYsouZW6M93tGFtJIME9w/wxeRIayZOfwKnC tdebEgW9exSPudcEUeQtNsrZJE6HCpa2d9s22sQg0GU6ry9A6mZl81VPeuUFEiy6 sVFhAvJiaky6QaVQItYB/6ixEyUy0lCFjN3UHpJ8mPHQJaTlTRsXHjFXyRmXaJww mdb275bkWQMgNAgGoZdx+F5oCdnbZ22VXA2HdFO/MCV4XcvdzNzjrGDugBu9/0bY vYpfN8a5IUQgjlGgNmWm/KkPt6ev9P0vMOZKDm2xoHTOcgEfKt/pNtfJQJkrRry8 WHkqovpDk5W1v+PMqZph/en/LrFwNYi7 -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:06 2025 by rpki-client