$ rpki-client -vvf rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft File: BL27YPamYNHS0BJzSQ_PCcw1m3M.mft (raw, json) Hash identifier: oa+NsdHXVtJL0beWVLreKgU20cmmfmWj21M+nisTRIg= Subject key identifier: 94:10:DA:C3:EA:73:9E:83:D3:D4:56:D5:C8:BD:5F:7D:42:1E:46:47 Authority key identifier: 04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73 Certificate issuer: /CN=A917C59F/serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73 Certificate serial: 08D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft Manifest number: 08C8 Signing time: Sat 18 Oct 2025 21:35:08 +0000 Manifest this update: Sat 18 Oct 2025 21:35:08 +0000 Manifest next update: Sat 25 Oct 2025 21:35:08 +0000 Files and hashes: 1: BL27YPamYNHS0BJzSQ_PCcw1m3M.crl (hash: jl2qv5GA54h50ZsvVnmHg3qAwEzOhZGHwmdaB1/7mlw=) 2: 12482BA205A211ED81E44F6DC4F9AE02.roa (hash: XF3b1tsv84dWcHXBpSW6CLzdc6x4da3e9vI5g3fw1j4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C59F, serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73 Validity Not Before: Oct 18 21:35:08 2025 GMT Not After : Oct 25 21:35:08 2025 GMT Subject: CN=68f4080c-5a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:6e:cc:bc:26:6f:03:b6:67:9c:8a:f6:2d: af:d1:e0:fc:fb:59:bc:58:f9:f5:24:0a:fe:d1:22: 6a:b7:17:7b:54:b6:30:ed:98:8b:0c:71:d6:6f:f5: 69:12:d6:1f:f8:ea:07:11:67:3c:05:a8:5a:78:a5: 18:2e:d3:1a:87:ad:ea:d8:ba:ff:d7:1b:a6:f5:6d: 22:cd:de:44:7e:ee:f9:17:9a:32:a2:9a:c1:4b:cc: b8:97:1e:b8:95:d4:7e:f1:5c:e4:6b:fc:8c:10:b4: 5d:65:e2:c4:69:1a:34:13:53:d7:a1:9e:9b:40:7c: b9:33:cb:60:dd:79:dd:34:e9:39:3c:61:dd:dc:1a: 8e:77:2d:6f:19:e6:3d:7c:ca:71:5b:95:7d:e0:b2: 01:0a:d8:3e:a9:8e:fb:16:30:f0:a8:f0:cc:76:25: f5:9b:ad:b1:4f:6b:8d:c6:db:7f:7d:d4:e7:ce:fe: 4e:72:a9:6b:90:2e:f8:de:d9:5f:6d:5d:89:ad:1a: 99:60:a7:d9:ae:65:e6:79:c3:80:6d:eb:98:46:40: ad:52:4e:fb:67:32:82:21:3d:c4:8c:5b:ec:61:fb: e3:5b:d8:0d:e2:24:8a:fe:fe:8b:34:99:19:ec:ec: 6d:22:2d:e8:4e:76:94:d6:9a:94:87:a7:ef:5f:79: 8f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:10:DA:C3:EA:73:9E:83:D3:D4:56:D5:C8:BD:5F:7D:42:1E:46:47 X509v3 Authority Key Identifier: keyid:04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:1b:5e:3a:66:44:3c:4a:27:36:7c:dd:96:89:20:2f:1a:7a: e7:6b:1f:51:7f:25:c8:3d:45:84:47:53:28:ff:61:1f:bd:e5: 48:2b:6e:d9:5a:09:8e:3d:71:9d:3d:34:6b:46:c2:ed:80:41: e4:2e:72:2a:30:af:88:20:f3:b9:3b:25:07:16:12:05:c7:64: d9:4e:4a:a3:48:16:f6:69:9d:79:f1:23:02:cf:7c:23:77:c1: 43:87:e8:a3:7d:a9:07:fd:3b:38:3c:d1:ac:e1:1f:95:7c:be: a5:d5:e2:38:87:32:cb:cb:f3:11:40:14:16:b2:7f:ce:05:ff: dc:12:9e:a7:f7:ab:60:17:1c:9a:c0:05:7e:b1:19:bb:64:af: d8:bb:22:ff:f4:d5:6b:20:e0:47:9b:ee:46:09:e8:44:ff:14: 08:5c:f3:e2:87:51:10:96:3a:12:95:eb:d3:ee:c8:6b:ad:d8: 45:4e:cd:74:8b:de:d1:43:51:be:ae:60:4b:8c:9e:91:06:e0: 11:49:85:00:a0:8b:8c:bb:52:06:e8:98:a9:d2:25:29:6a:b3: c0:cb:f1:28:af:c5:03:db:04:9a:34:02:4c:bd:35:1e:60:06: eb:31:ef:66:69:5a:48:dd:a8:6c:1b:1e:b5:01:69:d5:e4:49: 72:d2:34:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M1OUYxMTAvBgNVBAUTKDA0QkRCQjYwRjZBNjYwRDFEMkQwMTI3MzQ5MEZDRjA5 Q0MzNTlCNzMwHhcNMjUxMDE4MjEzNTA4WhcNMjUxMDI1MjEzNTA4WjAYMRYwFAYD VQQDEw02OGY0MDgwYy01YTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaJuzLwmbwO2Z5yK9i2v0eD8+1m8WPn1JAr+0SJqtxd7VLYw7ZiLDHHWb/Vp EtYf+OoHEWc8BahaeKUYLtMah63q2Lr/1xum9W0izd5Efu75F5oyoprBS8y4lx64 ldR+8Vzka/yMELRdZeLEaRo0E1PXoZ6bQHy5M8tg3XndNOk5PGHd3BqOdy1vGeY9 fMpxW5V94LIBCtg+qY77FjDwqPDMdiX1m62xT2uNxtt/fdTnzv5OcqlrkC743tlf bV2JrRqZYKfZrmXmecOAbeuYRkCtUk77ZzKCIT3EjFvsYfvjW9gN4iSK/v6LNJkZ 7OxtIi3oTnaU1pqUh6fvX3mPzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQQ2sPq c56D09RW1ci9X31CHkZHMB8GA1UdIwQYMBaAFAS9u2D2pmDR0tASc0kPzwnMNZtz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzU5Ri80MjVFODkwMkMx NDQxMUVBOTFGMDNBNkZDNEY5QUUwMi9CTDI3WVBhbVlOSFMwQkp6U1FfUENjdzFt M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JMMjdZUGFtWU5IUzBCSnpTUV9QQ2N3MW0zTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzU5Ri80MjVFODkwMkMxNDQxMUVBOTFGMDNBNkZDNEY5QUUwMi9CTDI3WVBhbVlO SFMwQkp6U1FfUENjdzFtM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5G146ZkQ8Sic2fN2WiSAvGnrnax9RfyXIPUWER1Mo/2EfveVIK27Z WgmOPXGdPTRrRsLtgEHkLnIqMK+IIPO5OyUHFhIFx2TZTkqjSBb2aZ158SMCz3wj d8FDh+ijfakH/Ts4PNGs4R+VfL6l1eI4hzLLy/MRQBQWsn/OBf/cEp6n96tgFxya wAV+sRm7ZK/YuyL/9NVrIOBHm+5GCehE/xQIXPPih1EQljoSlevT7shrrdhFTs10 i97RQ1G+rmBLjJ6RBuARSYUAoIuMu1IG6Jip0iUparPAy/Eor8UD2wSaNAJMvTUe YAbrMe9maVpI3ahsGx61AWnV5Ely0jS+ -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:23 2025 by rpki-client