$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: i4/9w8456z1OBtPcV8cz4BlCf0qOS0+srVDdRFguHcU= Subject key identifier: 25:F7:38:A4:9B:FC:33:A8:FB:1A:F3:C1:43:95:84:43:53:17:9A:0B Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 09D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 09C4 Signing time: Thu 18 Sep 2025 20:15:01 +0000 Manifest this update: Thu 18 Sep 2025 20:15:01 +0000 Manifest next update: Thu 25 Sep 2025 20:15:01 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: gdP6QMgaw+4MshNSY17KkA7PFpRD2KuE7q5oYVkg2WM=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2514 (0x9d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: Sep 18 20:15:01 2025 GMT Not After : Sep 25 20:15:01 2025 GMT Subject: CN=68cc6845-ca92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:61:c9:94:01:ad:a1:d2:c3:db:3e:1c:33:95: 20:e6:f2:5d:23:89:2d:90:f3:f9:25:0c:39:3d:ee: 85:48:f6:4d:12:03:3a:8c:35:d3:aa:e1:1f:08:a3: fa:27:95:6a:ab:c0:b9:22:f4:63:8c:96:aa:3f:f5: 9b:04:44:f8:fa:d1:8e:76:b4:34:15:da:88:dd:4c: 2b:9b:2e:19:0e:0e:6a:3c:ab:30:f9:49:49:ec:b2: 4f:62:98:d9:5d:53:35:59:96:6f:5e:31:a8:90:0a: 2f:81:f3:87:2f:0f:e2:b2:55:b3:97:24:de:42:01: 78:72:be:8f:cb:9a:d0:b3:4e:4f:b3:f7:aa:00:70: c1:f5:82:67:c3:de:78:07:a1:2f:a2:ba:98:fc:73: 12:98:cc:ad:38:8f:6b:4d:eb:76:68:ac:3e:da:23: 84:55:75:cb:df:72:83:e9:d0:a5:2a:76:18:95:d5: 5a:0f:a2:9a:a8:16:60:64:24:6d:03:c7:02:c6:d2: 4b:78:11:c9:f9:7a:77:cd:4f:c0:49:cd:a9:26:76: 38:25:bc:e0:51:9e:f1:3d:99:9f:28:d2:35:e4:5b: b3:f5:3f:cf:54:93:f0:55:97:47:f1:50:89:af:a4: 19:11:d3:e5:bd:e5:6c:61:55:16:b8:a9:33:8c:9b: 03:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F7:38:A4:9B:FC:33:A8:FB:1A:F3:C1:43:95:84:43:53:17:9A:0B X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:9c:4f:19:01:4f:12:90:ce:7b:89:08:5b:e9:7e:55:55:a3: 46:69:0f:a2:b1:fe:f6:94:01:23:cc:ca:4a:69:23:b8:85:d6: 34:49:db:06:45:65:5c:6d:8f:76:72:99:75:7a:ac:76:46:59: f1:5a:fa:19:61:fc:76:cc:c9:d0:9f:c0:00:7a:49:76:8a:bd: ce:a1:0b:5c:97:10:2e:06:b1:99:a4:f2:6f:bf:67:80:c6:26: c6:0d:01:1f:bf:04:f8:09:e4:ee:39:2f:44:2a:d5:5f:c9:17: c4:83:2b:9f:01:3e:ae:97:9f:dd:a6:b3:42:92:bb:f6:38:44: fd:83:6f:be:25:81:11:7f:07:25:73:8e:d0:f0:ff:0f:b7:6c: b6:50:a3:47:5d:b9:8f:75:89:4a:9b:15:a5:72:06:8a:06:b1: fa:9f:60:b0:a6:3f:1c:1e:9f:9b:8a:5d:63:19:85:a0:aa:30: 6a:0f:11:01:22:de:16:8b:d8:52:64:7c:5a:4a:a7:db:8e:b4: 1a:d3:02:63:34:ea:5a:dd:a0:c1:18:b7:3b:c8:05:39:eb:9b: 19:b5:b7:26:a8:05:b6:09:e5:a8:bc:df:24:d0:22:70:15:a1: 8f:eb:d1:75:42:31:b7:c9:1f:0b:f2:b3:36:c1:0a:f4:98:84: 5b:b0:1f:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjUwOTE4MjAxNTAxWhcNMjUwOTI1MjAxNTAxWjAYMRYwFAYD VQQDEw02OGNjNjg0NS1jYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WHJlAGtodLD2z4cM5Ug5vJdI4ktkPP5JQw5Pe6FSPZNEgM6jDXTquEfCKP6 J5Vqq8C5IvRjjJaqP/WbBET4+tGOdrQ0FdqI3Uwrmy4ZDg5qPKsw+UlJ7LJPYpjZ XVM1WZZvXjGokAovgfOHLw/islWzlyTeQgF4cr6Py5rQs05Ps/eqAHDB9YJnw954 B6EvorqY/HMSmMytOI9rTet2aKw+2iOEVXXL33KD6dClKnYYldVaD6KaqBZgZCRt A8cCxtJLeBHJ+Xp3zU/ASc2pJnY4JbzgUZ7xPZmfKNI15Fuz9T/PVJPwVZdH8VCJ r6QZEdPlveVsYVUWuKkzjJsDbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX3OKSb /DOo+xrzwUOVhENTF5oLMB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXnE8ZAU8SkM57iQhb6X5VVaNGaQ+isf72lAEjzMpKaSO4hdY0SdsG RWVcbY92cpl1eqx2RlnxWvoZYfx2zMnQn8AAekl2ir3OoQtclxAuBrGZpPJvv2eA xibGDQEfvwT4CeTuOS9EKtVfyRfEgyufAT6ul5/dprNCkrv2OET9g2++JYERfwcl c47Q8P8Pt2y2UKNHXbmPdYlKmxWlcgaKBrH6n2Cwpj8cHp+bil1jGYWgqjBqDxEB It4Wi9hSZHxaSqfbjrQa0wJjNOpa3aDBGLc7yAU565sZtbcmqAW2CeWovN8k0CJw FaGP69F1QjG3yR8L8rM2wQr0mIRbsB+U -----END CERTIFICATE-----Generated at Fri Sep 19 19:16:01 2025 by rpki-client