$ rpki-client -vvf rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft File: BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft (raw, json) Hash identifier: hJNuLLVDvcSEFVpZ1QUroeejSRe3Xx9BwOKu/+a6QLo= Subject key identifier: 16:7E:18:09:5F:74:B1:A8:ED:C1:EF:5F:1C:8D:03:81:CE:93:58:02 Authority key identifier: 05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 Certificate issuer: /CN=A9184559/serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft Manifest number: 0252 Signing time: Wed 17 Sep 2025 02:17:54 +0000 Manifest this update: Wed 17 Sep 2025 02:17:53 +0000 Manifest next update: Wed 24 Sep 2025 02:17:53 +0000 Files and hashes: 1: BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl (hash: E57dgZbKToPd9npjcjeS9pz+ynmP/hKydGYGPw/fOlc=) 2: FEC28FDE329511EDBF29A211C4F9AE02.roa (hash: 4iOjtjfmzJCE4u7zP+bXpU1mVBY2hhE9hkxu0cfVDLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184559, serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Validity Not Before: Sep 17 02:17:53 2025 GMT Not After : Sep 24 02:17:53 2025 GMT Subject: CN=68ca1a51-2b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:4e:b3:e4:bb:18:e7:00:3e:9a:d5:6a:37: 9b:46:4e:d1:99:35:85:58:10:df:5e:bd:99:af:31: 55:e6:e5:82:67:ee:dc:86:62:7e:36:c4:9f:ff:dc: 7f:25:7b:da:e8:ea:7a:53:52:b9:e4:cc:dd:1f:3d: 3f:1f:9b:b2:12:aa:e8:12:8d:f8:0f:f0:e9:d9:0e: 43:73:83:95:4f:e6:75:5d:a7:ee:aa:64:2d:10:51: 92:fc:57:99:93:97:ad:07:39:9f:43:bd:5f:a9:e1: 70:c7:e2:b4:b5:ef:41:50:81:f0:25:79:f4:34:7b: c0:e4:d5:20:40:b8:1a:e7:5d:00:3f:f3:93:17:80: d0:65:ea:00:ab:91:82:4d:67:61:59:b5:35:bd:9e: 06:65:d8:f2:c4:8b:65:73:25:82:32:94:ec:2c:cc: 70:55:9d:0d:a4:c9:f4:d9:06:84:5c:a8:bb:20:9f: 8f:72:51:f9:6a:ea:c4:af:f9:8b:e6:14:a4:f7:a7: f5:5f:9e:45:b8:f5:6f:46:fb:d3:6a:00:1d:51:d9: a7:14:70:b2:70:05:ae:1e:49:1e:56:d7:39:14:92: e2:d6:28:4e:ca:4d:dd:5d:12:91:d1:7c:81:fa:34: ed:38:38:a4:de:39:05:79:98:52:bd:64:ab:6d:70: b2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7E:18:09:5F:74:B1:A8:ED:C1:EF:5F:1C:8D:03:81:CE:93:58:02 X509v3 Authority Key Identifier: keyid:05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:90:bc:62:8b:15:3e:c6:2e:10:80:47:55:04:44:d4:7c:ba: 93:48:48:8f:db:91:7e:f9:17:cd:72:b4:56:05:27:e8:29:4d: 6f:a4:c2:f5:12:a6:c4:eb:8a:15:74:b5:90:08:74:db:52:3e: 7d:5c:b5:69:c9:62:ef:44:35:96:8d:4e:56:ce:f8:b5:d9:2d: 48:5d:b1:66:78:32:29:88:50:a2:1d:34:0c:94:f2:6c:b1:f7: 09:fe:2c:e4:04:96:79:cc:9a:8c:24:53:bd:b4:8d:ac:2a:b2: c9:29:4a:1f:3f:8c:bc:1b:8b:ca:17:ec:3d:f8:ae:74:92:07: 43:41:ef:25:76:d9:bb:52:98:e4:eb:6a:db:77:01:39:26:b4: cf:ca:4c:00:1c:23:83:66:4c:73:ef:55:a5:8f:de:4e:13:5a: 07:24:b2:45:7e:b7:08:b1:c4:19:ca:7c:3d:f3:db:c8:a7:33: fd:66:2f:cd:79:6e:5b:e2:16:ea:c6:ec:2e:a5:60:25:bb:34: 57:fd:18:d1:f6:a3:c2:94:d6:ca:d5:30:69:bf:86:4a:05:f0: e5:fe:15:ec:39:79:e8:1b:be:73:4d:f4:98:23:2a:c8:3c:0f: a3:d1:35:d2:8d:5e:3a:64:62:88:6f:14:19:11:bb:09:1b:05: bb:bb:dc:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ1NTkxMTAvBgNVBAUTKDA1Q0M4M0NGNEI4QjFCMzc4OUZGRTRFQzQ0NjBBMTZE ODlFQTMyNzcwHhcNMjUwOTE3MDIxNzUzWhcNMjUwOTI0MDIxNzUzWjAYMRYwFAYD VQQDEw02OGNhMWE1MS0yYjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPtOs+S7GOcAPprVajebRk7RmTWFWBDfXr2ZrzFV5uWCZ+7chmJ+NsSf/9x/ JXva6Op6U1K55MzdHz0/H5uyEqroEo34D/Dp2Q5Dc4OVT+Z1XafuqmQtEFGS/FeZ k5etBzmfQ71fqeFwx+K0te9BUIHwJXn0NHvA5NUgQLga510AP/OTF4DQZeoAq5GC TWdhWbU1vZ4GZdjyxItlcyWCMpTsLMxwVZ0NpMn02QaEXKi7IJ+PclH5aurEr/mL 5hSk96f1X55FuPVvRvvTagAdUdmnFHCycAWuHkkeVtc5FJLi1ihOyk3dXRKR0XyB +jTtODik3jkFeZhSvWSrbXCyhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZ+GAlf dLGo7cHvXxyNA4HOk1gCMB8GA1UdIwQYMBaAFAXMg89Lixs3if/k7ERgoW2J6jJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU1OS83NzdBMzA0RTMy OTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6ZUpfLVRzUkdDaGJZbnFN bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjeUR6MHVMR3plSl8tVHNSR0NoYllucU1uYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDU1OS83NzdBMzA0RTMyOTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6 ZUpfLVRzUkdDaGJZbnFNbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBskLxiixU+xi4QgEdVBETUfLqTSEiP25F++RfNcrRWBSfoKU1vpML1 EqbE64oVdLWQCHTbUj59XLVpyWLvRDWWjU5Wzvi12S1IXbFmeDIpiFCiHTQMlPJs sfcJ/izkBJZ5zJqMJFO9tI2sKrLJKUofP4y8G4vKF+w9+K50kgdDQe8ldtm7Upjk 62rbdwE5JrTPykwAHCODZkxz71Wlj95OE1oHJLJFfrcIscQZynw989vIpzP9Zi/N eW5b4hbqxuwupWAluzRX/RjR9qPClNbK1TBpv4ZKBfDl/hXsOXnoG75zTfSYIyrI PA+j0TXSjV46ZGKIbxQZEbsJGwW7u9wd -----END CERTIFICATE-----Generated at Thu Sep 18 23:12:44 2025 by rpki-client