$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json) Hash identifier: PIjyOgyvF2QX2Xjpa1jBHGtxyOyR0+rdNJi2qzLLhls= Subject key identifier: 5F:52:37:3F:F0:53:DE:77:90:C8:17:CC:9E:A6:24:BF:89:E9:A1:0F Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft Manifest number: 78 Signing time: Tue 09 Sep 2025 06:55:27 +0000 Manifest this update: Tue 09 Sep 2025 06:55:26 +0000 Manifest next update: Tue 16 Sep 2025 06:55:26 +0000 Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: 9KjeabVHYT8yA0GXwTBm3uCtuAok4gA8bS00VeC65AI=) 2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: 4d4Ou4cSb0acdXH9Bn2waQ4IMkbvtakYfcIPMGQdXao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Validity Not Before: Sep 9 06:55:26 2025 GMT Not After : Sep 16 06:55:26 2025 GMT Subject: CN=68bfcf5f-b600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e3:0c:ff:0a:30:04:c6:7e:f8:73:46:32:3e: d1:7b:e9:21:41:8a:3a:35:b9:56:93:f7:d2:cf:ad: 5a:5f:88:8d:61:51:f6:a9:d2:6f:72:a3:3e:99:4c: 1e:92:f8:15:6e:48:cf:8e:43:bb:7c:89:c2:d4:0e: 39:6b:bc:3f:23:99:c4:a7:ef:db:a1:e3:ba:fe:9d: 27:50:de:d5:7d:15:43:1d:94:22:1d:9e:41:78:91: e8:0e:b8:09:f8:f6:8f:51:67:0a:25:bb:2f:3a:08: 2d:2f:28:7e:00:5a:a6:49:1b:37:f2:03:f7:d4:49: fa:78:01:07:44:b4:e0:bc:a4:fb:9b:37:b0:e9:fe: d7:68:5b:62:50:fe:bb:35:61:f2:4f:57:c7:0e:cd: 5d:a1:10:e7:0a:e0:be:cf:ee:22:ec:a8:f4:60:76: 04:e4:d1:5a:e0:31:77:c8:cb:7a:39:4a:11:8e:8a: c6:4e:94:27:70:6c:8c:d1:7c:c1:8b:19:11:4d:e6: 76:d4:3a:56:8e:4a:a4:25:9f:71:54:14:62:9e:16: db:23:d1:0d:87:f5:2f:26:a0:2f:34:bb:4c:02:b7: 0c:e6:f5:c0:19:0a:f4:40:76:d2:e2:56:73:32:cb: b5:94:ee:0b:7d:36:d4:ac:5d:6b:48:49:1b:98:3e: 2c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:52:37:3F:F0:53:DE:77:90:C8:17:CC:9E:A6:24:BF:89:E9:A1:0F X509v3 Authority Key Identifier: keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:64:3f:f4:5b:65:57:46:7a:13:1e:03:e1:25:66:12:07:8d: d4:67:a6:a2:63:42:0f:cb:e7:98:40:6c:c5:ae:1f:25:55:fd: 27:64:be:62:8a:49:75:57:22:a3:46:62:a8:5b:b9:a5:97:f0: c7:15:e1:ec:7d:b2:69:a3:2d:d3:16:70:e8:e0:6d:16:b0:66: 19:58:8c:57:e5:67:9d:3a:e6:56:06:ae:ec:b6:5b:d4:87:4a: 2d:d0:86:84:00:b2:e5:09:bf:4b:d8:ec:bd:b1:0f:ec:72:b5: 62:54:e5:2d:74:36:ee:85:5b:c3:f6:75:c9:91:62:5d:d0:8b: c7:02:39:41:55:62:77:9b:d9:d8:07:eb:f2:d2:bc:f4:99:fb: c4:a9:a7:79:aa:f0:56:1d:0a:e2:65:38:e2:44:33:29:12:ee: d6:fd:a3:80:ec:e4:2b:1f:2a:f5:3b:12:9f:9c:82:d9:7b:b5: 43:2c:80:d9:f5:16:7a:2a:68:79:b9:0f:c0:d9:81:19:a6:8a: dd:8a:f7:c8:ba:d0:f0:1d:6a:19:eb:f6:d5:3f:3a:a0:70:9d: 54:e0:98:51:5c:1e:93:ea:36:a8:df:c4:6c:92:3d:16:6e:bb: 87:0c:f7:2f:ee:dd:2d:40:b5:e2:b9:71:1e:99:c8:af:3a:ad: ee:2e:8d:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjA2MzExMC8GA1UEBRMoNkNCMzgyMERBNUE0QTg0QjJEOTQwOUJERjA3RjI1NDVG RTZEMEIxMTAeFw0yNTA5MDkwNjU1MjZaFw0yNTA5MTYwNjU1MjZaMBgxFjAUBgNV BAMTDTY4YmZjZjVmLWI2MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU4wz/CjAExn74c0YyPtF76SFBijo1uVaT99LPrVpfiI1hUfap0m9yoz6ZTB6S +BVuSM+OQ7t8icLUDjlrvD8jmcSn79uh47r+nSdQ3tV9FUMdlCIdnkF4kegOuAn4 9o9RZwoluy86CC0vKH4AWqZJGzfyA/fUSfp4AQdEtOC8pPubN7Dp/tdoW2JQ/rs1 YfJPV8cOzV2hEOcK4L7P7iLsqPRgdgTk0VrgMXfIy3o5ShGOisZOlCdwbIzRfMGL GRFN5nbUOlaOSqQln3FUFGKeFtsj0Q2H9S8moC80u0wCtwzm9cAZCvRAdtLiVnMy y7WU7gt9NtSsXWtISRuYPiz3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX1I3P/BT 3neQyBfMnqYkv4npoQ8wHwYDVR0jBBgwFoAUbLOCDaWkqEstlAm98H8lRf5tCxEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMDYzLzZDMEY5NjEwRDZF RDExRUY5RDlCRjM2QUM0RjlBRTAyL2JMT0NEYVdrcUVzdGxBbTk4SDhsUmY1dEN4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkxPQ0RhV2txRXN0bEFtOThIOGxSZjV0Q3hFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC MDYzLzZDMEY5NjEwRDZFRDExRUY5RDlCRjM2QUM0RjlBRTAyL2JMT0NEYVdrcUVz dGxBbTk4SDhsUmY1dEN4RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ1kP/RbZVdGehMeA+ElZhIHjdRnpqJjQg/L55hAbMWuHyVV/SdkvmKK SXVXIqNGYqhbuaWX8McV4ex9smmjLdMWcOjgbRawZhlYjFflZ5065lYGruy2W9SH Si3QhoQAsuUJv0vY7L2xD+xytWJU5S10Nu6FW8P2dcmRYl3Qi8cCOUFVYneb2dgH 6/LSvPSZ+8Spp3mq8FYdCuJlOOJEMykS7tb9o4Ds5CsfKvU7Ep+cgtl7tUMsgNn1 FnoqaHm5D8DZgRmmit2K98i60PAdahnr9tU/OqBwnVTgmFFcHpPqNqjfxGySPRZu u4cM9y/u3S1AteK5cR6ZyK86re4ujYI= -----END CERTIFICATE-----Generated at Tue Sep 9 13:19:46 2025 by rpki-client