$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: kvlryn7YXrKVnhXJJpnJKAgczhgjhJ5RVWMsft+m4zs= Subject key identifier: CC:6B:B1:47:F7:9C:33:8E:C8:5A:8E:DA:6D:BF:49:06:8F:50:16:D2 Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 09BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 09AF Signing time: Fri 08 Aug 2025 20:22:46 +0000 Manifest this update: Fri 08 Aug 2025 20:22:46 +0000 Manifest next update: Fri 15 Aug 2025 20:22:46 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: nEl/pQTLVC2/4gWYjGtMVCbPTlTmXKAB2rqj4zsOYpI=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2493 (0x9bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: Aug 8 20:22:46 2025 GMT Not After : Aug 15 20:22:46 2025 GMT Subject: CN=68965c96-3268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:13:31:c1:d8:41:21:be:a9:64:de:62:26: f6:33:45:e5:1a:da:09:4f:27:88:15:56:6a:a8:19: 42:2b:0b:12:e9:ed:2d:3f:d1:9c:03:c7:ce:cf:87: a1:d6:b3:84:9b:07:92:a9:f9:35:63:07:a2:c1:37: a9:48:b0:30:cf:f4:37:b6:99:4a:3e:2d:cc:fc:a4: ac:86:c3:18:72:83:c9:8d:82:85:cb:d9:a8:90:c7: 9c:43:cb:02:d6:05:77:39:c5:18:a9:80:26:db:99: 99:22:53:f5:7a:b6:d1:3a:1a:d1:d9:e4:55:d9:22: a1:6c:f0:1f:0f:f6:5b:da:18:8c:c4:ae:29:b7:29: 20:1b:d5:a9:6f:c2:04:26:12:39:79:0e:66:43:fa: b8:de:13:fe:66:94:8a:ae:2a:21:d8:ea:9a:c7:e6: f4:02:61:bb:26:73:62:e1:0c:9e:fc:c0:b3:de:10: 05:d4:ca:1d:dc:8c:09:8e:c1:6e:13:f9:df:47:4a: 81:6b:ab:0b:1e:1e:10:f7:8f:56:6e:bb:e0:a8:4c: 12:08:30:d3:f3:b9:10:14:9e:1c:97:05:40:4d:7c: 03:ad:17:b4:0d:1c:52:57:50:5f:b3:c4:37:9d:21: 25:fe:01:c3:2d:f0:77:b8:39:fd:80:4c:28:f4:76: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6B:B1:47:F7:9C:33:8E:C8:5A:8E:DA:6D:BF:49:06:8F:50:16:D2 X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:5b:01:1c:c1:57:5a:c0:01:35:52:b6:02:74:37:c2:4c:80: 59:ce:8c:e6:a8:9d:91:fd:9f:27:13:29:98:16:4b:b3:90:16: b6:e1:fb:39:d5:86:32:6d:31:6c:a4:53:4b:86:0c:25:2c:d7: bd:ea:4f:2f:33:af:f7:aa:5b:e3:c1:5e:c9:78:3a:65:df:05: 1a:d5:29:ae:e2:3d:52:15:ae:03:44:d2:c2:9e:2f:59:71:99: a7:da:f7:e2:30:13:1d:eb:d3:d2:c4:04:02:47:dd:33:67:c8: e0:bd:47:b6:52:e2:d9:a9:8d:dd:58:5b:36:48:12:6a:d1:25: 3b:9e:f3:4b:68:26:dc:3c:f7:75:77:9f:b6:ce:d4:f2:ae:0b: e9:e0:44:52:f3:28:cf:64:82:96:48:73:ea:33:a1:24:93:ba: b8:a3:8b:f1:8b:9e:10:cf:b9:41:c2:0c:92:0a:24:7e:6f:52: b6:78:9e:39:14:03:ac:d9:87:3e:16:f8:72:a9:d7:4f:ab:db: 75:03:42:d7:4f:1e:8b:27:e2:88:c5:80:30:53:8d:f2:21:e4: 43:30:5f:25:12:11:9c:7e:8f:42:8e:eb:a7:f5:6c:a5:97:c5: 84:3a:bd:59:78:21:63:3d:0e:aa:b4:ce:64:46:a2:9e:98:7a: 36:ef:0d:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjUwODA4MjAyMjQ2WhcNMjUwODE1MjAyMjQ2WjAYMRYwFAYD VQQDEw02ODk2NWM5Ni0zMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsloTMcHYQSG+qWTeYib2M0XlGtoJTyeIFVZqqBlCKwsS6e0tP9GcA8fOz4eh 1rOEmweSqfk1YweiwTepSLAwz/Q3tplKPi3M/KSshsMYcoPJjYKFy9mokMecQ8sC 1gV3OcUYqYAm25mZIlP1erbROhrR2eRV2SKhbPAfD/Zb2hiMxK4ptykgG9Wpb8IE JhI5eQ5mQ/q43hP+ZpSKrioh2Oqax+b0AmG7JnNi4Qye/MCz3hAF1Mod3IwJjsFu E/nfR0qBa6sLHh4Q949WbrvgqEwSCDDT87kQFJ4clwVATXwDrRe0DRxSV1Bfs8Q3 nSEl/gHDLfB3uDn9gEwo9HYsMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxrsUf3 nDOOyFqO2m2/SQaPUBbSMB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPWwEcwVdawAE1UrYCdDfCTIBZzozmqJ2R/Z8nEymYFkuzkBa24fs5 1YYybTFspFNLhgwlLNe96k8vM6/3qlvjwV7JeDpl3wUa1Smu4j1SFa4DRNLCni9Z cZmn2vfiMBMd69PSxAQCR90zZ8jgvUe2UuLZqY3dWFs2SBJq0SU7nvNLaCbcPPd1 d5+2ztTyrgvp4ERS8yjPZIKWSHPqM6Ekk7q4o4vxi54Qz7lBwgySCiR+b1K2eJ45 FAOs2Yc+FvhyqddPq9t1A0LXTx6LJ+KIxYAwU43yIeRDMF8lEhGcfo9Cjuun9Wyl l8WEOr1ZeCFjPQ6qtM5kRqKemHo27w2g -----END CERTIFICATE-----Generated at Sun Aug 10 21:10:35 2025 by rpki-client