$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json) Hash identifier: nblTGZzSPDUb1MRFWiWXQdVk0Ak4JPY1pQTG7EDuseg= Subject key identifier: 3E:A2:BC:A7:EE:FB:CF:1A:1E:71:A1:C5:4C:F8:3D:25:C6:DD:F7:3D Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft Manifest number: 0101 Signing time: Sun 15 Jun 2025 04:15:34 +0000 Manifest this update: Sun 15 Jun 2025 04:15:34 +0000 Manifest next update: Sun 22 Jun 2025 04:15:34 +0000 Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: oEOmxLhspeePw2SIYURZDu5XcGBxVgMPzxzodx2TzOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Validity Not Before: Jun 15 04:15:34 2025 GMT Not After : Jun 22 04:15:34 2025 GMT Subject: CN=684e48e6-6765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:14:a3:a1:71:5f:fe:49:25:ac:72:a9:30:59: 71:aa:5e:7f:e0:e3:3e:c4:9a:e6:d3:c1:7b:80:bb: 9f:ef:37:65:3b:d7:b2:6a:7e:93:50:78:50:57:14: 8a:e3:b5:92:6f:30:40:9f:81:9d:0d:7c:80:d4:c0: 15:b3:7d:20:85:47:35:0d:1f:76:a6:ec:41:f4:07: 0e:b0:e6:e4:f7:05:71:27:bb:01:f5:0e:29:5e:d9: 38:ec:4b:1d:6c:6f:80:14:7d:dd:4d:77:5a:01:41: 3b:9d:10:f7:4d:05:a4:a3:0e:4f:15:0e:1e:b5:1f: 91:6e:bd:fe:71:62:ef:53:9c:8e:c3:93:29:43:ab: 11:d0:7b:44:c3:63:1b:ae:60:49:88:f8:23:a2:66: c7:fe:d5:fe:88:0f:5d:24:f4:ef:63:50:6d:e8:0a: 1a:cf:ab:7a:67:db:fd:ee:e2:73:4e:96:a5:03:e8: 74:ed:2e:a4:84:7f:38:87:30:a3:9e:fb:58:d6:47: ec:b8:2b:c9:d1:22:ef:13:ca:e9:c9:48:8d:04:bd: 63:bc:04:22:22:88:d0:07:2c:12:4d:bc:36:03:eb: 0b:97:7c:54:1e:c0:77:0d:48:8e:b9:fd:3a:f6:b2: 9b:06:72:f3:ad:c2:ee:83:7f:07:c0:b3:39:75:24: 49:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A2:BC:A7:EE:FB:CF:1A:1E:71:A1:C5:4C:F8:3D:25:C6:DD:F7:3D X509v3 Authority Key Identifier: keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1a:84:c1:ba:cd:2b:51:bb:02:20:4b:66:0c:20:74:0c:65: f8:c9:d4:3a:43:65:d3:2d:08:03:05:0f:f0:ec:dd:f9:fe:9f: 10:da:ad:01:20:62:7c:b8:d0:33:4d:1b:97:c6:6d:a6:e2:b5: 0d:9b:27:93:9e:ad:ea:49:ea:d4:40:4d:5d:a1:f4:52:ea:8c: 1d:9a:b0:25:08:4e:f5:90:4f:dc:ac:92:3e:8f:ab:45:d7:5d: b3:f5:50:f7:05:a8:cf:eb:5e:56:fd:c9:64:a5:51:90:ba:8e: 9d:01:4a:5f:f4:45:55:6a:f1:38:9b:03:2e:2c:63:3b:75:2d: 97:14:3b:74:e8:3d:59:b0:c8:77:e6:b1:95:02:03:a5:24:0b: e9:28:66:86:4e:34:da:8e:4f:3d:ce:30:79:32:42:d1:cc:a7: 0d:e6:ed:37:a5:ba:38:9e:e5:ab:4b:2d:78:e7:57:fd:6a:7a: fb:6a:7a:72:45:f1:dd:c8:27:34:19:9f:ba:94:64:a0:e0:59: c2:fd:76:b3:76:98:c8:36:21:7f:8d:01:e2:51:a6:c5:c2:68: 40:12:4b:08:ec:af:8e:87:d5:20:27:76:12:9c:b6:b2:b9:ad: 42:85:0d:b4:70:87:ca:2d:b9:78:9b:bd:2e:d0:26:eb:fe:af: c4:b2:fd:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB MDE0QzY5MDkwHhcNMjUwNjE1MDQxNTM0WhcNMjUwNjIyMDQxNTM0WjAYMRYwFAYD VQQDEw02ODRlNDhlNi02NzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hSjoXFf/kklrHKpMFlxql5/4OM+xJrm08F7gLuf7zdlO9eyan6TUHhQVxSK 47WSbzBAn4GdDXyA1MAVs30ghUc1DR92puxB9AcOsObk9wVxJ7sB9Q4pXtk47Esd bG+AFH3dTXdaAUE7nRD3TQWkow5PFQ4etR+Rbr3+cWLvU5yOw5MpQ6sR0HtEw2Mb rmBJiPgjombH/tX+iA9dJPTvY1Bt6Aoaz6t6Z9v97uJzTpalA+h07S6khH84hzCj nvtY1kfsuCvJ0SLvE8rpyUiNBL1jvAQiIojQBywSTbw2A+sLl3xUHsB3DUiOuf06 9rKbBnLzrcLug38HwLM5dSRJswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6ivKfu +88aHnGhxUz4PSXG3fc9MB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z SGpMRE1JR05HMzJnRk1hUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLGoTBus0rUbsCIEtmDCB0DGX4ydQ6Q2XTLQgDBQ/w7N35/p8Q2q0B IGJ8uNAzTRuXxm2m4rUNmyeTnq3qSerUQE1dofRS6owdmrAlCE71kE/crJI+j6tF 112z9VD3BajP615W/clkpVGQuo6dAUpf9EVVavE4mwMuLGM7dS2XFDt06D1ZsMh3 5rGVAgOlJAvpKGaGTjTajk89zjB5MkLRzKcN5u03pbo4nuWrSy1451f9anr7anpy RfHdyCc0GZ+6lGSg4FnC/XazdpjINiF/jQHiUabFwmhAEksI7K+Oh9UgJ3YSnLay ua1ChQ20cIfKLbl4m70u0Cbr/q/Esv0e -----END CERTIFICATE-----Generated at Tue Jun 17 01:29:20 2025 by rpki-client