$ rpki-client -vvf rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft File: BL27YPamYNHS0BJzSQ_PCcw1m3M.mft (raw, json) Hash identifier: IEAyku+XTOFOYDljeTCn4Wgsbid0spQe8IzlQQ8p/HQ= Subject key identifier: 70:94:AC:91:B8:EB:EA:BF:28:20:84:5B:C7:C4:16:74:15:3C:F0:2C Authority key identifier: 04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73 Certificate issuer: /CN=A917C59F/serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73 Certificate serial: 08B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft Manifest number: 08AB Signing time: Fri 22 Aug 2025 20:39:44 +0000 Manifest this update: Fri 22 Aug 2025 20:39:43 +0000 Manifest next update: Fri 29 Aug 2025 20:39:43 +0000 Files and hashes: 1: BL27YPamYNHS0BJzSQ_PCcw1m3M.crl (hash: zmo2pyslEOG8aJqbSoXKFNcAlPZmN804hgLWZEYZlbY=) 2: 12482BA205A211ED81E44F6DC4F9AE02.roa (hash: XF3b1tsv84dWcHXBpSW6CLzdc6x4da3e9vI5g3fw1j4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C59F, serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73 Validity Not Before: Aug 22 20:39:43 2025 GMT Not After : Aug 29 20:39:43 2025 GMT Subject: CN=68a8d590-63ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:18:5c:b3:68:d1:5c:95:43:dd:a1:6a:2d: 46:67:28:4d:87:0c:b4:f1:b5:d7:07:23:1c:11:63: f6:a3:eb:ce:3a:71:55:23:6c:d0:56:97:31:04:fb: cd:a6:7b:9a:4a:02:e4:d0:d7:d0:1c:81:30:05:55: 83:d6:3a:9e:88:44:b4:f5:88:c4:03:14:2b:0d:03: 3a:3a:4b:94:d9:35:d4:13:1f:5a:9b:f8:a9:9d:33: 46:ff:8c:d7:1a:22:92:a3:3c:06:27:32:61:9e:4a: 7c:8d:b7:40:38:04:a3:7a:eb:a5:8e:47:30:85:16: 57:62:2a:e3:1c:ee:47:7d:8e:41:83:54:31:c7:e6: eb:bf:47:10:bb:3a:36:2c:c2:2b:e6:b9:18:b3:7c: d3:3b:ed:49:89:12:b8:b9:b0:69:b3:47:db:4f:ee: 16:10:ab:44:e1:1e:5b:35:2d:a1:0d:b8:79:c9:e8: 6e:2f:50:8a:3f:2d:e1:34:78:2c:2e:da:cc:6c:0f: da:00:c8:91:8c:7f:d0:1c:3d:f8:9a:5c:dd:5c:0d: 71:eb:a2:a7:6c:4a:ec:0d:28:34:4c:4e:87:7c:72: 74:12:48:3a:84:53:e2:a8:d1:55:fe:db:76:8c:9a: aa:1c:9d:d8:ce:cc:59:49:5b:d1:03:df:88:89:b9: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:94:AC:91:B8:EB:EA:BF:28:20:84:5B:C7:C4:16:74:15:3C:F0:2C X509v3 Authority Key Identifier: keyid:04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b3:2f:7e:ab:30:f8:b6:62:b7:43:00:38:86:eb:56:d8:90: ea:e2:03:e5:2d:d6:20:fb:65:fa:be:0f:d4:ef:00:23:60:90: 87:31:8c:44:ad:47:57:9c:36:f7:15:42:78:7d:fa:7e:2e:10: cf:87:5e:63:30:be:74:12:d7:f5:41:a8:0e:cf:d2:2d:66:f9: 2d:e9:bc:65:e5:dc:1f:c3:4f:ab:77:76:b4:c4:3e:a6:3b:40: a2:9a:52:ff:6c:57:f0:47:cf:a5:be:74:4e:13:ff:c4:d6:ae: bd:06:82:cd:ea:f8:ac:b1:74:60:a6:e5:1f:c4:65:10:81:c2: 9f:26:3f:d1:5c:c9:4f:a0:4d:28:23:b0:4c:a2:13:af:43:19: 78:e2:c5:f4:cd:ea:cf:e0:35:f4:e6:5c:45:45:88:ff:5b:5e: a4:6a:c2:07:4f:1f:40:39:82:4f:03:fc:8d:4f:21:2e:d4:4b: e7:4c:59:17:da:50:75:28:20:03:6b:61:a1:9f:c6:be:77:77: 03:9b:66:68:f7:93:68:f0:86:41:1b:0e:0a:fd:37:b1:ea:af: 22:3d:2a:fc:7d:87:de:a7:27:82:c1:01:7f:c2:9a:4b:fe:d0: a3:b4:dd:43:47:ed:cc:ec:f7:1d:85:52:04:9e:07:f8:f2:8e: 2d:e5:c2:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M1OUYxMTAvBgNVBAUTKDA0QkRCQjYwRjZBNjYwRDFEMkQwMTI3MzQ5MEZDRjA5 Q0MzNTlCNzMwHhcNMjUwODIyMjAzOTQzWhcNMjUwODI5MjAzOTQzWjAYMRYwFAYD VQQDEw02OGE4ZDU5MC02M2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzMYXLNo0VyVQ92hai1GZyhNhwy08bXXByMcEWP2o+vOOnFVI2zQVpcxBPvN pnuaSgLk0NfQHIEwBVWD1jqeiES09YjEAxQrDQM6OkuU2TXUEx9am/ipnTNG/4zX GiKSozwGJzJhnkp8jbdAOASjeuuljkcwhRZXYirjHO5HfY5Bg1Qxx+brv0cQuzo2 LMIr5rkYs3zTO+1JiRK4ubBps0fbT+4WEKtE4R5bNS2hDbh5yehuL1CKPy3hNHgs LtrMbA/aAMiRjH/QHD34mlzdXA1x66KnbErsDSg0TE6HfHJ0Ekg6hFPiqNFV/tt2 jJqqHJ3YzsxZSVvRA9+Iibl5TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCUrJG4 6+q/KCCEW8fEFnQVPPAsMB8GA1UdIwQYMBaAFAS9u2D2pmDR0tASc0kPzwnMNZtz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzU5Ri80MjVFODkwMkMx NDQxMUVBOTFGMDNBNkZDNEY5QUUwMi9CTDI3WVBhbVlOSFMwQkp6U1FfUENjdzFt M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JMMjdZUGFtWU5IUzBCSnpTUV9QQ2N3MW0zTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzU5Ri80MjVFODkwMkMxNDQxMUVBOTFGMDNBNkZDNEY5QUUwMi9CTDI3WVBhbVlO SFMwQkp6U1FfUENjdzFtM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYsy9+qzD4tmK3QwA4hutW2JDq4gPlLdYg+2X6vg/U7wAjYJCHMYxE rUdXnDb3FUJ4ffp+LhDPh15jML50Etf1QagOz9ItZvkt6bxl5dwfw0+rd3a0xD6m O0CimlL/bFfwR8+lvnROE//E1q69BoLN6vissXRgpuUfxGUQgcKfJj/RXMlPoE0o I7BMohOvQxl44sX0zerP4DX05lxFRYj/W16kasIHTx9AOYJPA/yNTyEu1EvnTFkX 2lB1KCADa2Ghn8a+d3cDm2Zo95No8IZBGw4K/Tex6q8iPSr8fYfepyeCwQF/wppL /tCjtN1DR+3M7PcdhVIEngf48o4t5cIS -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:02 2025 by rpki-client