$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json) Hash identifier: BaJiS4VLxmH63mlV/lx0wXKiPEPR6xU35uMU0Ob/uno= Subject key identifier: 2C:21:5D:5D:14:FD:55:8D:EF:2E:8C:2F:F3:EE:8D:C7:CC:E0:A3:83 Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft Manifest number: 0109 Signing time: Tue 01 Jul 2025 05:31:32 +0000 Manifest this update: Tue 01 Jul 2025 05:31:31 +0000 Manifest next update: Tue 08 Jul 2025 05:31:31 +0000 Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: gIylQwYPNCZ0a4GksqTKi7bW0TclrxYnYjyAjzUdJjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Validity Not Before: Jul 1 05:31:31 2025 GMT Not After : Jul 8 05:31:31 2025 GMT Subject: CN=686372b4-f92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:95:af:4b:3c:ff:8a:39:0f:9e:c5:84:74: 76:5f:f6:b5:2d:e8:41:2f:ce:74:0b:23:e1:ea:8f: 70:98:2f:0d:0b:67:1f:5a:10:26:74:cd:fd:a6:e3: 4c:cd:15:69:35:d9:6a:bf:1a:7e:af:e8:42:5e:2f: 22:81:cd:92:8f:2a:f5:77:c1:3d:ca:88:73:54:3a: 48:1e:c3:2f:a6:aa:8d:26:1e:85:66:06:df:30:6c: 9c:9a:06:31:c6:e9:f2:8f:48:e2:01:ed:72:f6:17: cd:95:c9:ee:e1:c1:b9:32:40:4c:30:bd:20:d3:12: a4:55:2d:09:29:a2:3b:0f:42:bd:66:36:28:33:23: a2:da:47:c8:7a:11:ff:8b:12:4a:e3:c1:6d:06:32: 65:86:e6:3d:2d:77:16:1e:95:c5:ea:56:5b:76:bc: 33:95:8c:11:61:cc:5d:c3:3d:ce:7d:39:56:81:e2: de:13:ad:a9:e8:2d:3b:2f:e6:36:56:8f:40:a6:f7: 72:43:c0:60:73:8b:2f:0a:44:cf:96:86:08:4f:49: 51:ff:4e:70:07:2a:6c:a6:86:02:14:14:88:fe:7e: 62:87:5f:cf:32:5d:36:dd:8d:5e:95:dd:74:00:e5: 9e:39:75:e3:49:a7:a1:b8:25:45:2c:9a:f9:b6:07: b4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:21:5D:5D:14:FD:55:8D:EF:2E:8C:2F:F3:EE:8D:C7:CC:E0:A3:83 X509v3 Authority Key Identifier: keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ce:0e:c3:d3:a7:89:be:7e:ed:8f:52:fc:43:09:92:3f:31: ff:d6:90:6e:5e:50:dd:e0:d6:fe:c3:d7:39:a0:9a:a9:c9:18: 32:6c:a9:25:22:44:e8:c1:31:71:15:e2:55:32:f5:aa:fc:18: d4:92:2e:c0:6e:54:f8:8d:e3:66:17:b3:b3:b7:54:4a:bd:17: b2:e2:57:76:ae:ec:f1:d1:e7:e2:6b:2c:21:df:02:6a:1e:b6: c1:aa:7c:71:df:ca:f2:9b:85:12:2a:2e:78:61:46:09:db:2d: 2d:13:51:3b:4b:67:df:8e:f0:93:6f:ec:6e:98:cf:10:a2:38: be:25:65:6b:1f:7e:46:d4:bf:cd:8f:9b:8a:6f:fc:dc:12:5c: 4a:ce:46:86:30:77:aa:e0:e8:8b:5b:de:6f:05:3e:5e:86:59: 32:9e:69:c5:4d:e4:8a:6d:9f:4f:53:94:cb:5b:62:b5:7b:c2: 74:80:ca:12:a7:91:5b:8a:22:2c:39:09:f7:65:0a:37:ff:4f: 80:f8:f0:aa:e7:86:e1:f8:74:16:c7:42:d4:41:9e:ee:cc:56: 50:8d:9c:5e:28:54:a7:17:32:ea:9b:5d:8e:43:ea:b0:9b:9f: d3:6b:a8:f8:2a:28:00:81:79:a2:4d:f4:31:7e:9b:a9:73:38: c4:c3:75:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB MDE0QzY5MDkwHhcNMjUwNzAxMDUzMTMxWhcNMjUwNzA4MDUzMTMxWjAYMRYwFAYD VQQDEw02ODYzNzJiNC1mOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8uVr0s8/4o5D57FhHR2X/a1LehBL850CyPh6o9wmC8NC2cfWhAmdM39puNM zRVpNdlqvxp+r+hCXi8igc2Sjyr1d8E9yohzVDpIHsMvpqqNJh6FZgbfMGycmgYx xunyj0jiAe1y9hfNlcnu4cG5MkBMML0g0xKkVS0JKaI7D0K9ZjYoMyOi2kfIehH/ ixJK48FtBjJlhuY9LXcWHpXF6lZbdrwzlYwRYcxdwz3OfTlWgeLeE62p6C07L+Y2 Vo9ApvdyQ8Bgc4svCkTPloYIT0lR/05wBypspoYCFBSI/n5ih1/PMl023Y1eld10 AOWeOXXjSaehuCVFLJr5tge0+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwhXV0U /VWN7y6ML/PujcfM4KODMB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z SGpMRE1JR05HMzJnRk1hUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUzg7D06eJvn7tj1L8QwmSPzH/1pBuXlDd4Nb+w9c5oJqpyRgybKkl IkTowTFxFeJVMvWq/BjUki7AblT4jeNmF7Ozt1RKvRey4ld2ruzx0efiaywh3wJq HrbBqnxx38rym4USKi54YUYJ2y0tE1E7S2ffjvCTb+xumM8Qoji+JWVrH35G1L/N j5uKb/zcElxKzkaGMHeq4OiLW95vBT5ehlkynmnFTeSKbZ9PU5TLW2K1e8J0gMoS p5FbiiIsOQn3ZQo3/0+A+PCq54bh+HQWx0LUQZ7uzFZQjZxeKFSnFzLqm12OQ+qw m5/Ta6j4KigAgXmiTfQxfpupczjEw3Wd -----END CERTIFICATE-----Generated at Wed Jul 2 05:48:14 2025 by rpki-client