$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: s9fA+r2EWWQkXdfKC8L1qdJs0klJ9mJftA8ahNB2aLk= Subject key identifier: CC:5D:B0:2F:6C:CA:8E:0D:01:84:3D:CD:2C:36:0E:C1:28:49:5F:69 Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 09DC Signing time: Tue 04 Nov 2025 20:02:43 +0000 Manifest this update: Tue 04 Nov 2025 20:02:42 +0000 Manifest next update: Tue 11 Nov 2025 20:02:42 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: OmquaOLQB8iLZve9yHIkgTtsBBNUUKqXnWZTDNxnFIc=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: Nov 4 20:02:42 2025 GMT Not After : Nov 11 20:02:42 2025 GMT Subject: CN=690a5be2-10a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:80:b4:cf:bf:ab:85:53:c2:84:92:69:1d: 34:90:d4:98:7c:c2:29:8d:94:4e:c6:e9:3d:34:45: 85:9d:87:10:60:f7:ae:6b:69:7a:34:3a:78:09:27: 31:70:14:ad:ba:7f:b9:25:89:9b:65:1d:aa:09:2a: d7:d3:6f:82:88:30:f8:56:2b:5c:38:9a:bb:3a:d5: b1:d7:3c:70:11:06:87:f3:d1:53:7f:a8:08:f0:64: 9d:46:ba:40:25:04:bf:33:7e:90:d7:5b:77:b2:13: 0b:e1:64:c7:95:25:70:f8:82:24:ce:23:37:3e:4d: 34:03:0e:c1:a9:cb:31:dd:2c:49:f6:11:c6:38:53: 6f:47:ba:c8:3b:84:8d:01:ed:6d:64:99:32:8f:ed: 3f:ca:30:7e:c1:46:4a:ce:e8:ac:34:ff:1f:a7:43: f1:ca:4c:30:e1:8f:2d:0e:b5:55:5e:a8:8b:c7:08: 84:d2:be:f4:29:d8:2b:53:20:e7:30:97:0a:66:20: c7:32:cc:ec:2f:79:ef:a4:a4:02:14:40:13:79:ea: f0:91:c6:5d:95:c7:9f:5c:08:61:7d:45:cb:7e:b0: 52:d8:fe:40:ee:81:2e:90:db:03:b5:33:8f:b2:c0: e4:7f:4e:e1:32:37:c5:db:05:79:05:a1:35:54:a4: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5D:B0:2F:6C:CA:8E:0D:01:84:3D:CD:2C:36:0E:C1:28:49:5F:69 X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:ca:68:a3:32:e0:5c:80:11:77:3c:e8:76:bc:af:96:87:50: 23:f2:df:c3:f9:36:f0:cb:9f:7f:a9:08:1c:3d:a5:bf:1c:6b: 98:f5:48:4c:ce:b1:5c:0f:9f:4a:e2:a9:4b:c5:62:56:99:6e: 12:de:4b:7f:82:fd:4d:d0:90:78:19:5b:ae:56:de:21:f3:5b: 90:4a:ff:4f:ec:f0:0e:3d:8e:60:50:a4:65:e6:53:2d:cb:c6: 0e:86:50:58:eb:4d:74:68:c6:02:49:99:52:98:97:ba:43:1a: ea:ef:a1:01:29:21:8a:64:b0:bc:d6:7c:0c:fa:20:ea:23:63: 26:65:e5:71:a2:a9:fd:a4:e2:c4:30:c0:15:08:cd:f6:c0:5d: 07:67:11:e0:b4:7d:a6:f3:5c:b2:6d:89:f9:6e:7b:b5:d7:03: 35:ce:03:07:99:5f:14:12:09:ee:84:46:eb:f5:0a:93:d2:07: 70:49:58:70:b7:87:09:fd:03:77:69:ab:80:cd:38:f0:ea:9b: 1a:eb:1b:8b:9a:ce:99:63:69:81:c2:9b:a0:02:ea:12:64:fd: 36:a4:7d:aa:04:64:61:29:4a:fd:36:c6:dc:d5:ef:67:78:78: 4d:fc:8d:38:af:34:e3:f1:e8:88:7f:34:71:51:d0:a5:74:fc: f7:11:14:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjUxMTA0MjAwMjQyWhcNMjUxMTExMjAwMjQyWjAYMRYwFAYD VQQDEw02OTBhNWJlMi0xMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6aAtM+/q4VTwoSSaR00kNSYfMIpjZROxuk9NEWFnYcQYPeua2l6NDp4CScx cBStun+5JYmbZR2qCSrX02+CiDD4VitcOJq7OtWx1zxwEQaH89FTf6gI8GSdRrpA JQS/M36Q11t3shML4WTHlSVw+IIkziM3Pk00Aw7Bqcsx3SxJ9hHGOFNvR7rIO4SN Ae1tZJkyj+0/yjB+wUZKzuisNP8fp0Pxykww4Y8tDrVVXqiLxwiE0r70KdgrUyDn MJcKZiDHMszsL3nvpKQCFEATeerwkcZdlcefXAhhfUXLfrBS2P5A7oEukNsDtTOP ssDkf07hMjfF2wV5BaE1VKRh3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxdsC9s yo4NAYQ9zSw2DsEoSV9pMB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPymijMuBcgBF3POh2vK+Wh1Aj8t/D+Tbwy59/qQgcPaW/HGuY9UhM zrFcD59K4qlLxWJWmW4S3kt/gv1N0JB4GVuuVt4h81uQSv9P7PAOPY5gUKRl5lMt y8YOhlBY6010aMYCSZlSmJe6Qxrq76EBKSGKZLC81nwM+iDqI2MmZeVxoqn9pOLE MMAVCM32wF0HZxHgtH2m81yybYn5bnu11wM1zgMHmV8UEgnuhEbr9QqT0gdwSVhw t4cJ/QN3aauAzTjw6psa6xuLms6ZY2mBwpugAuoSZP02pH2qBGRhKUr9Nsbc1e9n eHhN/I04rzTj8eiIfzRxUdCldPz3ERRA -----END CERTIFICATE-----Generated at Wed Nov 5 21:16:35 2025 by rpki-client