$ rpki-client -vvf rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft File: BL27YPamYNHS0BJzSQ_PCcw1m3M.mft (raw, json) Hash identifier: DkipxIPoqFBsW48PU1Wp528wCTxgNtHk3V6NmEcleoM= Subject key identifier: 6A:17:04:31:FF:0D:E3:30:CE:09:6C:BD:E8:57:90:AD:08:25:60:7F Authority key identifier: 04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73 Certificate issuer: /CN=A917C59F/serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73 Certificate serial: 087E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft Manifest number: 0876 Signing time: Mon 12 May 2025 20:28:47 +0000 Manifest this update: Mon 12 May 2025 20:28:46 +0000 Manifest next update: Mon 19 May 2025 20:28:46 +0000 Files and hashes: 1: BL27YPamYNHS0BJzSQ_PCcw1m3M.crl (hash: CAcDGUcDR9EI0WbsaBRTn5++zaur/MiKZXsrou3xnVE=) 2: 12482BA205A211ED81E44F6DC4F9AE02.roa (hash: fYbzp1Oz4KIx83cDiZ+b+olfYLWh9zVxHoKcBuS5W0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2174 (0x87e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C59F, serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73 Validity Not Before: May 12 20:28:46 2025 GMT Not After : May 19 20:28:46 2025 GMT Subject: CN=682259fe-12d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:16:d8:9c:a7:f8:0c:b6:a2:cf:fb:a1:1e: b2:6f:f2:7b:58:57:99:57:01:8b:2a:f8:19:0e:11: c1:e9:8d:73:d6:60:26:09:76:46:36:be:6d:08:5d: c4:a4:bd:87:ca:29:93:c5:5f:bf:a1:8f:5f:db:ef: 4b:ff:d5:12:91:b2:b9:12:1a:e8:f5:05:e4:0b:75: 3d:5e:cc:bd:fd:bf:3b:a6:da:f0:cc:77:be:5f:a3: 25:d0:9a:6f:20:83:73:b0:a0:a5:2d:49:37:81:e3: 8c:f1:45:7b:3a:e5:c8:eb:7c:8f:58:b2:36:a9:5c: 00:a3:7a:12:62:4e:9e:1d:11:73:b6:4f:e6:20:d6: af:0e:c6:9b:93:2f:f6:11:1a:11:ec:25:be:7d:a3: 1c:bf:33:e7:dc:53:aa:37:98:cb:38:03:d8:aa:cc: 99:b8:7e:00:04:ca:85:2e:aa:a9:6e:d8:c3:25:bb: eb:1b:06:db:8b:3e:e6:71:6a:3b:03:3e:d5:92:53: ea:04:f3:ae:c8:3b:fa:fb:d6:7f:19:93:f8:f8:3f: 31:9d:cd:54:8c:e5:5b:8f:88:d9:36:a6:72:fb:a9: 41:07:e7:80:43:3a:4e:5e:ca:16:87:04:f9:00:70: dd:3f:3b:18:c4:c1:a4:ba:23:8d:c6:09:ee:ca:a3: 76:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:17:04:31:FF:0D:E3:30:CE:09:6C:BD:E8:57:90:AD:08:25:60:7F X509v3 Authority Key Identifier: keyid:04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a5:e7:2f:ea:8f:de:0a:75:44:c5:ff:79:18:74:ee:00:35: 69:d9:e3:8f:95:33:6d:13:8b:af:37:38:e8:69:8c:4d:09:55: e5:b2:ae:6f:02:bc:7a:fc:42:52:83:77:f4:c5:af:2f:d3:0d: 92:cb:40:5e:b3:da:ad:81:03:95:f7:49:a4:74:7c:8b:1a:a5: 19:ee:fb:94:c6:03:e3:a6:0f:2a:8a:db:27:82:92:86:24:3c: 33:81:69:44:8b:33:bb:f1:7f:8d:2d:9c:c7:fb:05:a3:1f:d9: ad:78:fd:42:19:57:71:31:92:cf:a9:4a:e5:38:d9:6f:fb:8b: 67:e6:74:1c:d1:b6:ee:69:1e:5b:01:2a:5f:1b:16:6d:24:f1: 50:e1:81:23:b5:8e:38:d0:03:51:b5:8b:d4:f1:8f:2b:f8:d8: b2:6a:b1:07:ed:e2:48:d1:61:35:da:63:55:a5:55:f4:5f:d2: bf:10:cd:24:47:56:49:6c:1f:69:66:24:69:52:2b:60:5c:4a: 26:82:f0:10:46:db:4a:27:9b:e7:a6:8a:be:0a:a1:33:df:86: 33:91:da:21:6b:2c:f7:94:b9:f5:8e:29:7a:91:d9:d5:08:fb: 31:d4:40:91:7d:3e:71:de:3b:84:01:5d:3c:aa:05:7c:be:cd: ba:35:8c:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M1OUYxMTAvBgNVBAUTKDA0QkRCQjYwRjZBNjYwRDFEMkQwMTI3MzQ5MEZDRjA5 Q0MzNTlCNzMwHhcNMjUwNTEyMjAyODQ2WhcNMjUwNTE5MjAyODQ2WjAYMRYwFAYD VQQDEw02ODIyNTlmZS0xMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraAW2Jyn+Ay2os/7oR6yb/J7WFeZVwGLKvgZDhHB6Y1z1mAmCXZGNr5tCF3E pL2HyimTxV+/oY9f2+9L/9USkbK5Ehro9QXkC3U9Xsy9/b87ptrwzHe+X6Ml0Jpv IINzsKClLUk3geOM8UV7OuXI63yPWLI2qVwAo3oSYk6eHRFztk/mINavDsabky/2 ERoR7CW+faMcvzPn3FOqN5jLOAPYqsyZuH4ABMqFLqqpbtjDJbvrGwbbiz7mcWo7 Az7VklPqBPOuyDv6+9Z/GZP4+D8xnc1UjOVbj4jZNqZy+6lBB+eAQzpOXsoWhwT5 AHDdPzsYxMGkuiONxgnuyqN2YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoXBDH/ DeMwzglsvehXkK0IJWB/MB8GA1UdIwQYMBaAFAS9u2D2pmDR0tASc0kPzwnMNZtz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzU5Ri80MjVFODkwMkMx NDQxMUVBOTFGMDNBNkZDNEY5QUUwMi9CTDI3WVBhbVlOSFMwQkp6U1FfUENjdzFt M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JMMjdZUGFtWU5IUzBCSnpTUV9QQ2N3MW0zTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzU5Ri80MjVFODkwMkMxNDQxMUVBOTFGMDNBNkZDNEY5QUUwMi9CTDI3WVBhbVlO SFMwQkp6U1FfUENjdzFtM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzpecv6o/eCnVExf95GHTuADVp2eOPlTNtE4uvNzjoaYxNCVXlsq5v Arx6/EJSg3f0xa8v0w2Sy0Bes9qtgQOV90mkdHyLGqUZ7vuUxgPjpg8qitsngpKG JDwzgWlEizO78X+NLZzH+wWjH9mteP1CGVdxMZLPqUrlONlv+4tn5nQc0bbuaR5b ASpfGxZtJPFQ4YEjtY440ANRtYvU8Y8r+NiyarEH7eJI0WE12mNVpVX0X9K/EM0k R1ZJbB9pZiRpUitgXEomgvAQRttKJ5vnpoq+CqEz34Yzkdohayz3lLn1jil6kdnV CPsx1ECRfT5x3juEAV08qgV8vs26NYxA -----END CERTIFICATE-----Generated at Tue May 13 14:50:24 2025 by rpki-client