$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: 02N0vy6+oubaX0RIVFSdbZ04Av2oakk5Bkdutmn/Sh8= Subject key identifier: F5:EE:3B:CD:11:D2:91:53:72:72:46:48:4C:5F:9F:AB:C0:6C:AF:0F Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 09B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 09A6 Signing time: Tue 22 Jul 2025 20:19:22 +0000 Manifest this update: Tue 22 Jul 2025 20:19:22 +0000 Manifest next update: Tue 29 Jul 2025 20:19:22 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: VV4/Coi5y1phiSDTUxXHfUpuUKJ2EHX9n3EBKzxgTyU=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2484 (0x9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: Jul 22 20:19:22 2025 GMT Not After : Jul 29 20:19:22 2025 GMT Subject: CN=687ff24a-4c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:00:af:a9:6c:27:5d:84:e1:ae:29:16:c8:ee: a7:0b:9a:a9:40:77:eb:01:48:fa:44:80:88:27:74: 21:ca:04:62:8d:79:aa:af:60:2d:33:d0:35:cc:8f: cf:bc:4b:b6:73:7a:3d:65:26:4d:d4:a3:ca:19:5b: 9e:c5:a8:80:4b:e1:cd:b7:63:9f:0b:c3:16:d4:51: 4a:f7:85:34:5f:9d:15:52:4d:72:38:f9:ba:41:24: f7:45:1a:20:98:32:af:7c:8b:e9:89:a7:ae:2f:45: 1a:79:8d:bb:6b:44:54:90:cf:bf:62:ec:c3:9c:76: 0b:79:30:ff:67:a6:94:10:4a:98:ca:4f:aa:d5:0a: d3:43:d8:03:f7:93:cb:48:ea:55:5a:24:fc:a8:95: 92:c3:ea:0f:a8:0c:28:10:0a:48:75:de:29:10:30: 54:0c:e7:ad:37:5c:6c:b6:20:9e:b2:7b:e5:c1:97: 98:45:86:bd:20:ba:42:e2:ce:7f:ac:3f:df:0c:9a: 68:6e:74:13:b4:20:fa:14:19:52:6e:cb:cb:90:ef: 6c:be:26:cd:f2:b6:d3:18:6c:89:5a:d2:82:97:89: 30:24:73:3a:9c:d8:a1:5d:54:a6:55:09:5d:ed:00: f1:b3:23:1c:c0:2c:a1:55:70:8d:e8:90:4c:09:9d: dd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EE:3B:CD:11:D2:91:53:72:72:46:48:4C:5F:9F:AB:C0:6C:AF:0F X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d1:c4:d9:ca:27:ae:8c:68:0b:e0:66:30:66:c6:ec:f6:7e: 70:24:b7:d2:a1:47:02:da:6d:66:d2:70:90:f0:dc:54:be:87: 50:f3:9c:7e:51:ca:f9:05:b0:fb:e4:e8:dc:cb:e8:70:59:a7: fd:6c:4b:2e:00:a4:df:46:df:a4:80:5e:36:23:5a:2a:29:17: 70:fe:85:01:db:1f:a5:f4:f3:5a:80:f5:19:31:67:90:b1:44: fc:d9:0a:01:b8:5d:10:7c:d6:9f:12:08:06:b2:73:00:95:a3: 21:21:b8:3e:d4:97:f7:76:2f:8f:52:3d:f8:c1:91:a5:5a:c1: f1:aa:ec:07:23:a9:70:53:a3:92:b5:50:9f:a7:11:3a:59:4c: 00:6e:99:80:41:09:4d:38:36:7a:2a:e6:7c:e2:5f:91:06:fa: 23:2c:5e:01:c4:4d:b7:59:27:e1:7a:7d:4f:b7:90:be:2e:52: e9:23:f4:f4:91:fb:ea:72:7d:48:84:5d:32:7f:d9:db:4b:a7: bf:7b:c8:3a:6f:0d:4a:ea:33:71:f5:64:cc:d6:dc:e3:2b:bf: ea:08:d2:93:c3:96:74:5a:31:b7:cb:8f:c2:0f:9a:83:97:05: 48:1f:f7:b8:92:c0:de:a2:64:c8:67:45:77:c1:54:18:e5:71: 1c:ac:3f:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjUwNzIyMjAxOTIyWhcNMjUwNzI5MjAxOTIyWjAYMRYwFAYD VQQDEw02ODdmZjI0YS00YzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ACvqWwnXYThrikWyO6nC5qpQHfrAUj6RICIJ3QhygRijXmqr2AtM9A1zI/P vEu2c3o9ZSZN1KPKGVuexaiAS+HNt2OfC8MW1FFK94U0X50VUk1yOPm6QST3RRog mDKvfIvpiaeuL0UaeY27a0RUkM+/YuzDnHYLeTD/Z6aUEEqYyk+q1QrTQ9gD95PL SOpVWiT8qJWSw+oPqAwoEApIdd4pEDBUDOetN1xstiCesnvlwZeYRYa9ILpC4s5/ rD/fDJpobnQTtCD6FBlSbsvLkO9svibN8rbTGGyJWtKCl4kwJHM6nNihXVSmVQld 7QDxsyMcwCyhVXCN6JBMCZ3d+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXuO80R 0pFTcnJGSExfn6vAbK8PMB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi0cTZyieujGgL4GYwZsbs9n5wJLfSoUcC2m1m0nCQ8NxUvodQ85x+ Ucr5BbD75Ojcy+hwWaf9bEsuAKTfRt+kgF42I1oqKRdw/oUB2x+l9PNagPUZMWeQ sUT82QoBuF0QfNafEggGsnMAlaMhIbg+1Jf3di+PUj34wZGlWsHxquwHI6lwU6OS tVCfpxE6WUwAbpmAQQlNODZ6KuZ84l+RBvojLF4BxE23WSfhen1Pt5C+LlLpI/T0 kfvqcn1IhF0yf9nbS6e/e8g6bw1K6jNx9WTM1tzjK7/qCNKTw5Z0WjG3y4/CD5qD lwVIH/e4ksDeomTIZ0V3wVQY5XEcrD+q -----END CERTIFICATE-----Generated at Wed Jul 23 09:11:29 2025 by rpki-client