$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json) Hash identifier: vbfeUeFijs3FPEf5l6KTw5J8Kacp3ees6+oiKyJuCpo= Subject key identifier: F3:7C:AC:B7:20:27:63:50:04:7B:C7:61:44:7C:81:73:11:E7:93:D5 Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft Manifest number: 011B Signing time: Tue 05 Aug 2025 05:14:51 +0000 Manifest this update: Tue 05 Aug 2025 05:14:51 +0000 Manifest next update: Tue 12 Aug 2025 05:14:51 +0000 Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: hSoTSMgyhpV3g9UjZwo5ph5ccQHQ98eX6QCfEoYQCjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Validity Not Before: Aug 5 05:14:51 2025 GMT Not After : Aug 12 05:14:51 2025 GMT Subject: CN=6891934b-1991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:be:be:0d:ee:0b:f8:fe:da:69:67:85:78: e9:7d:da:ce:83:43:09:59:1a:a3:ae:bb:3b:50:13: b0:aa:2b:0d:6e:7a:d5:f8:94:f2:b9:e3:eb:75:bd: 29:71:5c:c7:c8:5a:93:62:54:ce:09:fa:ac:ae:6c: bb:2e:d2:97:ce:44:69:43:1b:97:87:c9:51:2c:c1: 27:ab:90:71:cd:00:77:43:9e:80:4f:62:f1:0d:91: 4d:5b:ec:08:06:41:1c:84:64:9f:f6:8e:7f:b5:5d: 62:26:35:e2:78:02:50:55:21:e1:72:d4:b3:8e:9b: dc:4f:41:54:22:d9:59:2d:d0:93:86:a3:47:2a:aa: ac:c8:e0:24:6b:5b:35:22:b5:e2:35:a7:d5:cd:95: 9c:e4:87:2c:b0:09:54:32:97:b0:09:79:fd:e3:af: 9f:c3:78:af:43:ea:a9:1b:b6:4f:5a:81:e4:55:9a: 7c:f2:80:d0:00:cf:ad:81:a0:1a:07:18:a6:e8:e1: 8b:8d:9f:13:53:39:cc:1e:c3:0d:57:8b:b4:e4:96: c8:f3:61:72:f1:55:f6:ca:66:0f:d9:cc:0f:d8:89: cf:a5:b6:b2:4d:0d:44:1c:1e:2a:c1:76:39:ad:cd: 0b:f4:49:9c:61:4f:90:2b:8a:de:3b:89:a0:88:a2: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7C:AC:B7:20:27:63:50:04:7B:C7:61:44:7C:81:73:11:E7:93:D5 X509v3 Authority Key Identifier: keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:a0:d3:3c:c0:eb:ae:d2:31:12:1c:fb:c6:d4:cf:60:6e:d3: 01:07:96:e1:a3:1b:ff:b7:49:8e:35:38:fc:c5:5e:c3:ec:6e: 62:17:db:48:a6:b7:96:13:0b:54:1a:dd:c7:1a:56:81:9b:72: 28:1f:86:56:ca:8e:97:92:54:0b:19:79:44:e6:60:7d:61:08: 41:78:ca:0a:42:65:50:e0:85:fa:3b:ab:90:c9:ef:a9:e3:c2: 94:83:06:e1:b8:8c:94:1a:a5:43:c4:16:9e:98:5f:16:15:38: 07:a6:a5:99:61:73:27:af:ad:69:21:ca:5d:60:1f:8e:1e:01: 53:46:6d:3b:35:d7:09:33:db:ac:5d:73:1d:23:34:c1:8d:16: c6:92:d8:2a:81:14:11:63:4a:d4:86:18:d3:1b:fd:c7:be:a3: cf:62:2e:7d:8a:78:dc:86:a5:ef:1f:d6:8c:21:4a:dc:e7:40: ac:ae:0e:e1:6a:07:89:b4:09:2d:91:b1:d7:61:a3:a7:c9:77: ac:aa:2e:41:b5:e5:6e:07:7e:e8:92:ec:44:10:6c:9c:7c:e1: 16:b3:cf:57:f3:ad:5e:01:39:39:e3:d4:0e:ce:84:28:a9:79: f3:0f:50:4d:23:29:d6:c9:16:d2:c5:32:47:65:7a:09:77:00: c3:bc:10:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB MDE0QzY5MDkwHhcNMjUwODA1MDUxNDUxWhcNMjUwODEyMDUxNDUxWjAYMRYwFAYD VQQDEw02ODkxOTM0Yi0xOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv2+vg3uC/j+2mlnhXjpfdrOg0MJWRqjrrs7UBOwqisNbnrV+JTyuePrdb0p cVzHyFqTYlTOCfqsrmy7LtKXzkRpQxuXh8lRLMEnq5BxzQB3Q56AT2LxDZFNW+wI BkEchGSf9o5/tV1iJjXieAJQVSHhctSzjpvcT0FUItlZLdCThqNHKqqsyOAka1s1 IrXiNafVzZWc5IcssAlUMpewCXn946+fw3ivQ+qpG7ZPWoHkVZp88oDQAM+tgaAa Bxim6OGLjZ8TUznMHsMNV4u05JbI82Fy8VX2ymYP2cwP2InPpbayTQ1EHB4qwXY5 rc0L9EmcYU+QK4reO4mgiKK5VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPN8rLcg J2NQBHvHYUR8gXMR55PVMB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z SGpMRE1JR05HMzJnRk1hUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCoNM8wOuu0jESHPvG1M9gbtMBB5bhoxv/t0mONTj8xV7D7G5iF9tI preWEwtUGt3HGlaBm3IoH4ZWyo6XklQLGXlE5mB9YQhBeMoKQmVQ4IX6O6uQye+p 48KUgwbhuIyUGqVDxBaemF8WFTgHpqWZYXMnr61pIcpdYB+OHgFTRm07NdcJM9us XXMdIzTBjRbGktgqgRQRY0rUhhjTG/3HvqPPYi59injchqXvH9aMIUrc50Csrg7h ageJtAktkbHXYaOnyXesqi5BteVuB37okuxEEGycfOEWs89X861eATk549QOzoQo qXnzD1BNIynWyRbSxTJHZXoJdwDDvBCp -----END CERTIFICATE-----Generated at Thu Aug 7 05:14:35 2025 by rpki-client