$ rpki-client -vvf rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft File: BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft (raw, json) Hash identifier: pmTXdSOaN9h147z/ukE5rL/S8eNnd+Iiy1XQEiLSzQs= Subject key identifier: 03:03:A9:82:8D:C1:5C:1B:42:E2:C3:74:81:EC:45:69:75:C0:AC:D6 Authority key identifier: 05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 Certificate issuer: /CN=A9184559/serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft Manifest number: 0245 Signing time: Sat 23 Aug 2025 02:04:26 +0000 Manifest this update: Sat 23 Aug 2025 02:04:26 +0000 Manifest next update: Sat 30 Aug 2025 02:04:26 +0000 Files and hashes: 1: BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl (hash: 5sNKruiUjfHkRtFf2c4/u7R2u01tIGdvC9qD1RRSnwM=) 2: FEC28FDE329511EDBF29A211C4F9AE02.roa (hash: 4iOjtjfmzJCE4u7zP+bXpU1mVBY2hhE9hkxu0cfVDLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184559, serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Validity Not Before: Aug 23 02:04:26 2025 GMT Not After : Aug 30 02:04:26 2025 GMT Subject: CN=68a921aa-d97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:86:1c:d3:41:78:b7:be:fb:d9:0b:c6:0b: c6:fa:46:ca:7d:a0:33:4e:a8:7e:a3:e8:f6:9e:55: 9b:99:8c:82:6a:85:38:07:e9:f6:c5:77:fb:71:ee: 14:3f:88:61:c9:90:70:01:ce:52:c5:e1:03:50:18: e9:28:5c:9c:b8:77:15:7b:3e:eb:25:af:35:42:c5: ea:78:72:93:19:45:a3:36:a6:04:5f:c5:fe:b6:04: bc:45:bf:aa:cb:1b:37:b0:c0:f3:8b:6e:29:dd:9d: b2:56:27:ef:43:36:7a:a0:5a:ee:4b:25:10:a7:9a: 11:e6:57:7f:45:1b:f5:34:c6:65:d6:9f:87:0f:23: 24:94:21:0a:19:8a:80:21:62:a6:12:94:5a:ff:7c: 36:db:27:3c:9d:0a:1f:26:9c:18:a7:11:8c:c0:3d: a1:c4:a0:a9:e2:36:98:2c:86:4c:0a:b5:4b:6e:e3: e3:85:5a:6a:76:92:ac:19:78:8b:59:40:a4:e1:e0: 46:d5:68:6a:9c:57:02:45:d0:8d:3b:9f:ca:3d:a8: 8f:af:9b:c7:be:b4:96:d2:a0:b6:e6:6b:71:11:99: c7:d0:3b:27:ad:84:2e:4d:42:03:43:8d:62:86:85: df:be:05:f4:23:66:7d:08:f0:e1:c1:91:d9:c0:d9: f8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:03:A9:82:8D:C1:5C:1B:42:E2:C3:74:81:EC:45:69:75:C0:AC:D6 X509v3 Authority Key Identifier: keyid:05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ef:5e:84:13:03:b3:bc:46:7e:ba:b6:a8:92:e1:e1:ac:77: 90:77:ac:85:25:2b:4a:ab:2f:e0:2a:66:7f:77:c5:f7:94:02: a5:22:c1:49:80:a9:e0:4b:c7:f1:c8:61:81:f2:b3:f1:f8:4d: 0d:cb:04:78:1d:8e:68:8d:0a:1f:cf:b8:8d:3c:bd:c4:13:a2: 15:7d:36:65:f3:7f:5c:cc:e2:c8:0a:42:68:92:e1:d5:b1:e5: 5d:e6:21:d3:34:28:37:40:d9:f2:34:24:26:79:57:85:1a:80: 16:37:90:5f:44:d3:2a:31:51:6f:53:f0:0c:e6:b7:06:97:ce: e9:cf:3a:c7:8c:1b:c9:d6:ff:3c:03:3a:f0:38:20:bc:97:23: 33:99:72:02:d8:6e:7f:b4:69:37:de:f2:03:75:ed:5e:3f:b8: 9a:e1:67:6d:dd:03:35:fa:e0:a0:7c:3f:75:70:be:e3:23:4b: c0:80:92:29:bc:87:f7:a7:9d:a1:c3:4b:8d:dc:ea:aa:ba:0c: d6:e9:4a:0e:8b:02:bc:ba:8b:3f:a8:c6:08:02:76:2a:a6:bf: 46:08:27:be:3a:64:5e:86:16:c6:17:3e:84:be:72:df:be:48: 62:18:8b:83:27:65:c8:6c:30:fa:41:2f:b3:74:38:89:2e:be: 6a:2f:2d:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ1NTkxMTAvBgNVBAUTKDA1Q0M4M0NGNEI4QjFCMzc4OUZGRTRFQzQ0NjBBMTZE ODlFQTMyNzcwHhcNMjUwODIzMDIwNDI2WhcNMjUwODMwMDIwNDI2WjAYMRYwFAYD VQQDEw02OGE5MjFhYS1kOTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypiGHNNBeLe++9kLxgvG+kbKfaAzTqh+o+j2nlWbmYyCaoU4B+n2xXf7ce4U P4hhyZBwAc5SxeEDUBjpKFycuHcVez7rJa81QsXqeHKTGUWjNqYEX8X+tgS8Rb+q yxs3sMDzi24p3Z2yVifvQzZ6oFruSyUQp5oR5ld/RRv1NMZl1p+HDyMklCEKGYqA IWKmEpRa/3w22yc8nQofJpwYpxGMwD2hxKCp4jaYLIZMCrVLbuPjhVpqdpKsGXiL WUCk4eBG1WhqnFcCRdCNO5/KPaiPr5vHvrSW0qC25mtxEZnH0DsnrYQuTUIDQ41i hoXfvgX0I2Z9CPDhwZHZwNn4EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMDqYKN wVwbQuLDdIHsRWl1wKzWMB8GA1UdIwQYMBaAFAXMg89Lixs3if/k7ERgoW2J6jJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU1OS83NzdBMzA0RTMy OTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6ZUpfLVRzUkdDaGJZbnFN bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjeUR6MHVMR3plSl8tVHNSR0NoYllucU1uYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDU1OS83NzdBMzA0RTMyOTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6 ZUpfLVRzUkdDaGJZbnFNbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO716EEwOzvEZ+uraokuHhrHeQd6yFJStKqy/gKmZ/d8X3lAKlIsFJ gKngS8fxyGGB8rPx+E0NywR4HY5ojQofz7iNPL3EE6IVfTZl839czOLICkJokuHV seVd5iHTNCg3QNnyNCQmeVeFGoAWN5BfRNMqMVFvU/AM5rcGl87pzzrHjBvJ1v88 AzrwOCC8lyMzmXIC2G5/tGk33vIDde1eP7ia4Wdt3QM1+uCgfD91cL7jI0vAgJIp vIf3p52hw0uN3OqqugzW6UoOiwK8uos/qMYIAnYqpr9GCCe+OmRehhbGFz6EvnLf vkhiGIuDJ2XIbDD6QS+zdDiJLr5qLy06 -----END CERTIFICATE-----Generated at Sat Aug 23 21:37:26 2025 by rpki-client