$ rpki-client -vvf rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft File: BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft (raw, json) Hash identifier: 8yQHAZCN2qqLJAzuB1HfnT0cXvuNY7WNwDXVw2k7cmM= Subject key identifier: 2B:8B:6E:85:7B:3E:66:32:8E:7C:2C:8F:47:F3:DC:97:0C:AC:45:A1 Authority key identifier: 05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 Certificate issuer: /CN=A9184559/serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft Manifest number: 0229 Signing time: Thu 03 Jul 2025 02:18:56 +0000 Manifest this update: Thu 03 Jul 2025 02:18:55 +0000 Manifest next update: Thu 10 Jul 2025 02:18:55 +0000 Files and hashes: 1: BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl (hash: Ak5NBfKernjTdkW841/LtcoxQ8MXwfpZi5hWAjprVfk=) 2: FEC28FDE329511EDBF29A211C4F9AE02.roa (hash: 3Nsuy1l5CDxfVHqXS1wMZ/Du4WneIJgwFtAnNJmX/bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184559, serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Validity Not Before: Jul 3 02:18:55 2025 GMT Not After : Jul 10 02:18:55 2025 GMT Subject: CN=6865e890-3cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ba:fc:68:67:65:60:60:25:d9:d9:41:a6:4a: 83:ef:34:2b:b6:e5:7b:70:4f:e1:90:07:fd:c0:f5: 87:de:c3:5d:5c:bd:83:7c:a7:47:1c:ca:1b:f6:75: af:59:10:3e:f5:99:8c:a8:ec:a2:90:2d:1f:78:da: 44:b4:41:8c:ea:a6:ae:c1:da:34:c6:6d:bd:a2:9c: 56:18:a9:fd:cf:64:90:eb:92:ad:74:38:6d:37:e5: 6a:14:f0:85:8c:b6:ea:58:f6:74:11:60:17:90:07: 49:0c:1f:f3:a2:58:7f:a9:69:b4:c1:4c:c0:e5:8e: 64:93:2f:80:51:0a:83:6f:c7:e0:31:63:c2:48:2d: f4:6a:ee:e4:23:dd:fa:a1:02:0d:b1:78:c3:9a:45: 7c:08:e9:45:60:44:21:54:73:33:82:be:50:a7:5a: ef:95:7b:a6:ab:64:04:e5:ad:b9:2c:72:85:4e:56: 0a:37:f7:99:db:64:cd:ed:5b:b5:25:55:19:1f:20: e5:b3:49:70:44:3f:ed:67:52:9b:94:5b:69:54:3e: 64:67:1f:28:28:41:27:89:bc:82:76:b8:22:b1:0b: a2:bb:7d:9a:11:aa:f8:56:a7:21:f5:af:77:cf:af: af:b3:a2:55:96:3a:e7:f1:28:c4:5f:42:fc:53:6c: 92:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8B:6E:85:7B:3E:66:32:8E:7C:2C:8F:47:F3:DC:97:0C:AC:45:A1 X509v3 Authority Key Identifier: keyid:05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:72:88:92:4e:dd:bb:28:65:a3:3c:c9:99:b7:ae:e4:37:a3: 4f:25:c4:2c:99:4f:72:89:88:62:0f:9b:14:97:44:4a:df:0c: 4d:dd:a2:7b:bc:8d:95:3b:c6:79:f0:44:d1:d9:fb:69:73:25: 5d:96:e1:03:d8:ba:10:15:6f:85:88:a3:c4:af:35:2c:0a:e0: b1:37:69:86:29:2b:cf:32:82:98:6e:14:96:8e:6d:6c:b8:2e: 5f:c2:2c:e7:75:88:b8:86:33:d3:b9:53:0c:42:86:8a:e1:cf: a8:d1:cc:4a:23:60:0b:46:8d:a4:98:9e:36:24:3a:c7:cc:2e: 34:bd:23:d7:46:bf:c8:54:8f:c8:66:b3:06:42:35:0d:b8:1d: bb:99:c8:5e:c2:80:91:58:23:30:e1:a8:51:72:90:c9:74:b0: eb:0a:8a:3e:db:26:9c:cc:38:36:25:e0:bc:14:a7:c9:44:6c: 2b:5d:2d:48:23:72:f8:f3:fe:59:52:30:e9:e8:b0:dd:ad:ec: aa:29:b4:50:dc:ed:1f:12:62:3e:82:b2:db:cb:9d:3e:87:7b: 9e:dc:43:b1:73:47:86:cb:89:92:97:e1:eb:ac:62:47:77:2c: 38:d0:34:31:fe:23:31:b8:c2:77:a8:bf:4a:22:0e:53:ec:26: bb:d0:94:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ1NTkxMTAvBgNVBAUTKDA1Q0M4M0NGNEI4QjFCMzc4OUZGRTRFQzQ0NjBBMTZE ODlFQTMyNzcwHhcNMjUwNzAzMDIxODU1WhcNMjUwNzEwMDIxODU1WjAYMRYwFAYD VQQDEw02ODY1ZTg5MC0zY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLr8aGdlYGAl2dlBpkqD7zQrtuV7cE/hkAf9wPWH3sNdXL2DfKdHHMob9nWv WRA+9ZmMqOyikC0feNpEtEGM6qauwdo0xm29opxWGKn9z2SQ65KtdDhtN+VqFPCF jLbqWPZ0EWAXkAdJDB/zolh/qWm0wUzA5Y5kky+AUQqDb8fgMWPCSC30au7kI936 oQINsXjDmkV8COlFYEQhVHMzgr5Qp1rvlXumq2QE5a25LHKFTlYKN/eZ22TN7Vu1 JVUZHyDls0lwRD/tZ1KblFtpVD5kZx8oKEEnibyCdrgisQuiu32aEar4Vqch9a93 z6+vs6JVljrn8SjEX0L8U2yS4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuLboV7 PmYyjnwsj0fz3JcMrEWhMB8GA1UdIwQYMBaAFAXMg89Lixs3if/k7ERgoW2J6jJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU1OS83NzdBMzA0RTMy OTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6ZUpfLVRzUkdDaGJZbnFN bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjeUR6MHVMR3plSl8tVHNSR0NoYllucU1uYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDU1OS83NzdBMzA0RTMyOTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6 ZUpfLVRzUkdDaGJZbnFNbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDcoiSTt27KGWjPMmZt67kN6NPJcQsmU9yiYhiD5sUl0RK3wxN3aJ7 vI2VO8Z58ETR2ftpcyVdluED2LoQFW+FiKPErzUsCuCxN2mGKSvPMoKYbhSWjm1s uC5fwizndYi4hjPTuVMMQoaK4c+o0cxKI2ALRo2kmJ42JDrHzC40vSPXRr/IVI/I ZrMGQjUNuB27mchewoCRWCMw4ahRcpDJdLDrCoo+2yaczDg2JeC8FKfJRGwrXS1I I3L48/5ZUjDp6LDdreyqKbRQ3O0fEmI+grLby50+h3ue3EOxc0eGy4mSl+HrrGJH dyw40DQx/iMxuMJ3qL9KIg5T7Ca70JTS -----END CERTIFICATE-----Generated at Thu Jul 3 11:19:47 2025 by rpki-client