$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: wIRT5Ll6DVu9AVU/1RXEPPhU4qXEFKPBzPrsEqaXqcI= Subject key identifier: 0D:DC:6D:92:F4:F5:6E:FC:2A:2C:49:E4:98:D2:AE:DF:C2:9E:3F:FE Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 0999 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 098B Signing time: Fri 30 May 2025 20:19:58 +0000 Manifest this update: Fri 30 May 2025 20:19:58 +0000 Manifest next update: Fri 06 Jun 2025 20:19:58 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: Dblw4MhyS6S2yE0FR7u8W0JWq4dgURjFzv9g963lo88=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2457 (0x999) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: May 30 20:19:58 2025 GMT Not After : Jun 6 20:19:58 2025 GMT Subject: CN=683a12ee-9c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:92:60:d3:e5:75:4b:a7:8c:d7:62:bc:a3: 81:ca:f0:84:5d:8c:04:6e:da:f8:57:41:10:58:35: fb:c5:b9:ce:9c:67:e7:db:2c:13:ae:25:8c:f2:c1: bd:4c:e9:e7:17:77:33:9f:2d:df:0d:d3:6e:fb:cf: 5a:56:6c:da:20:1b:71:0f:cb:b2:14:b6:f3:98:66: 60:76:4b:9a:2c:84:d9:9c:a7:fd:23:38:03:d1:55: 29:6f:f4:12:38:5f:fb:95:35:8d:21:e4:70:02:3a: a6:75:e4:19:53:d4:aa:b7:96:ca:d6:e5:36:2a:e7: 3b:34:86:98:ea:23:5a:fd:5d:f8:39:59:2e:07:31: 22:e9:a8:1f:d4:1c:4c:83:d8:ec:ac:22:48:de:ee: 3e:49:6f:54:a7:f5:74:a2:d8:f5:9c:91:32:b9:39: d3:34:2c:1d:e9:38:3c:e2:f2:49:a3:80:86:d3:d8: ff:34:72:0e:45:56:2b:34:d0:fb:22:7c:e1:80:58: c2:84:2a:b6:67:3c:2b:05:1f:20:42:0c:7b:9b:4f: d9:e6:a3:7d:aa:78:0c:27:22:c3:7e:13:ff:40:2e: 07:6d:a8:b7:ed:1c:23:41:e7:77:9e:9b:ac:c6:01: 6d:b6:38:8c:ba:12:d9:77:98:a4:27:36:7d:10:2a: 21:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DC:6D:92:F4:F5:6E:FC:2A:2C:49:E4:98:D2:AE:DF:C2:9E:3F:FE X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c0:0a:ac:4d:b8:c7:2a:ba:63:b0:f4:28:54:c6:a4:03:8e: 70:12:a1:3d:5c:60:6c:25:a2:33:f6:92:9c:ab:7a:79:fb:f3: 6c:47:73:93:49:f4:34:d8:21:24:83:70:9a:57:4f:6b:76:34: 58:00:41:46:fa:2b:65:92:d3:7c:92:a5:18:d6:aa:d4:19:68: 02:0c:6a:d4:cc:97:e6:0a:ca:25:f3:38:97:4d:0a:2d:3e:08: 03:b3:c5:a7:95:78:9b:01:9a:6d:a3:ee:5d:5b:8a:44:23:fb: 3a:e7:0e:ad:de:2a:62:75:c8:d6:07:2f:5d:5b:b2:31:6e:ef: ac:9a:62:57:ed:5c:99:b9:19:6f:97:ac:d2:f4:76:75:61:fd: 91:a8:3c:0e:3f:a2:37:bc:e3:cd:20:05:9a:3f:2a:e3:4f:b9: 23:7b:ef:5e:3a:6e:02:29:4d:40:71:22:5d:92:c0:05:72:ea: 6f:c8:78:7b:bd:91:4e:79:ba:ef:56:9f:e3:26:ef:50:5c:99: f0:57:d8:4b:35:77:a9:18:ff:ad:ab:0a:d9:8c:68:c8:a8:4f: 8b:f0:18:21:89:84:6d:00:90:e6:57:4c:83:ab:4c:03:a2:84: 23:ca:af:91:b2:75:a8:62:6f:98:e8:b1:eb:84:f2:5c:1b:21: a5:55:d1:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjUwNTMwMjAxOTU4WhcNMjUwNjA2MjAxOTU4WjAYMRYwFAYD VQQDEw02ODNhMTJlZS05YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr2SYNPldUunjNdivKOByvCEXYwEbtr4V0EQWDX7xbnOnGfn2ywTriWM8sG9 TOnnF3czny3fDdNu+89aVmzaIBtxD8uyFLbzmGZgdkuaLITZnKf9IzgD0VUpb/QS OF/7lTWNIeRwAjqmdeQZU9Sqt5bK1uU2Kuc7NIaY6iNa/V34OVkuBzEi6agf1BxM g9jsrCJI3u4+SW9Up/V0otj1nJEyuTnTNCwd6Tg84vJJo4CG09j/NHIORVYrNND7 InzhgFjChCq2ZzwrBR8gQgx7m0/Z5qN9qngMJyLDfhP/QC4Hbai37RwjQed3npus xgFttjiMuhLZd5ikJzZ9ECoh7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3cbZL0 9W78KixJ5JjSrt/Cnj/+MB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDwAqsTbjHKrpjsPQoVMakA45wEqE9XGBsJaIz9pKcq3p5+/NsR3OT SfQ02CEkg3CaV09rdjRYAEFG+itlktN8kqUY1qrUGWgCDGrUzJfmCsol8ziXTQot PggDs8WnlXibAZpto+5dW4pEI/s65w6t3ipidcjWBy9dW7Ixbu+smmJX7VyZuRlv l6zS9HZ1Yf2RqDwOP6I3vOPNIAWaPyrjT7kje+9eOm4CKU1AcSJdksAFcupvyHh7 vZFOebrvVp/jJu9QXJnwV9hLNXepGP+tqwrZjGjIqE+L8BghiYRtAJDmV0yDq0wD ooQjyq+RsnWoYm+Y6LHrhPJcGyGlVdFF -----END CERTIFICATE-----Generated at Sat May 31 17:41:01 2025 by rpki-client