$ rpki-client -vvf rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft File: BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft (raw, json) Hash identifier: WC8CaZoTKlgBuLOhUfELyIIuZzwzS9/1LGzNIEsYeYw= Subject key identifier: 1E:E1:4B:D9:29:30:52:47:37:87:F5:C5:20:20:D4:F2:CC:DD:F9:17 Authority key identifier: 05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 Certificate issuer: /CN=A9184559/serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft Manifest number: 0207 Signing time: Fri 25 Apr 2025 01:46:58 +0000 Manifest this update: Fri 25 Apr 2025 01:46:57 +0000 Manifest next update: Fri 02 May 2025 01:46:57 +0000 Files and hashes: 1: BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl (hash: p2iFnjytYTfozvtM7zPwC0kIWSJNrw44Eq2CIvuZiIY=) 2: FEC28FDE329511EDBF29A211C4F9AE02.roa (hash: 3Nsuy1l5CDxfVHqXS1wMZ/Du4WneIJgwFtAnNJmX/bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184559, serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Validity Not Before: Apr 25 01:46:57 2025 GMT Not After : May 2 01:46:57 2025 GMT Subject: CN=680ae992-7449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:48:c2:42:9d:df:4d:f4:c1:83:b9:d3:c8:02: e5:29:65:19:41:88:aa:93:10:92:15:14:d1:0f:88: da:e1:e9:f0:c3:66:c8:5b:fe:91:d6:92:78:f9:49: e9:79:c0:48:41:1f:99:aa:67:c7:1e:f8:e4:70:47: d5:e5:13:e3:d1:bc:fd:a4:8f:9a:65:e9:d3:56:6c: 4d:4e:b3:05:fc:c7:86:37:df:fa:f7:24:7f:89:cc: b4:c6:e6:93:01:0a:02:c9:fd:4f:a8:43:e5:1c:e9: 47:a4:43:71:c9:6e:81:59:9f:30:2d:76:b8:fd:04: 4f:f5:83:09:f9:54:3f:7e:76:f7:68:b2:7f:98:ee: 73:fe:97:12:b8:e3:da:a2:e9:67:9a:00:b2:dd:e0: 91:0b:94:13:60:37:45:20:08:a2:93:ab:f9:8f:64: 63:87:0c:0a:52:f8:71:57:4c:76:78:8b:e0:45:98: 18:dd:5f:3b:bd:4f:cf:83:1b:61:43:d3:dd:49:80: f8:8d:f6:6b:89:b7:72:2f:c5:b7:b1:00:31:9c:fd: 52:ce:e4:94:3f:84:21:cf:6c:26:61:21:73:1f:08: 90:47:5b:a6:76:cb:d2:f8:fe:c3:8e:a5:7b:d4:b3: bc:2a:2e:41:e0:12:35:7b:9a:7e:46:bd:6b:ea:ff: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E1:4B:D9:29:30:52:47:37:87:F5:C5:20:20:D4:F2:CC:DD:F9:17 X509v3 Authority Key Identifier: keyid:05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:18:db:ef:8d:fd:11:8c:46:d7:08:5d:78:ff:c7:8f:4e:0c: 79:90:b9:1e:c2:e3:42:85:e1:44:ba:cd:bf:c6:4a:15:82:11: fe:ac:cb:9a:bb:95:a0:72:12:ef:3e:0b:ca:18:da:af:1e:3d: c1:44:9e:c7:67:00:77:b1:71:61:19:ac:46:24:07:e3:8d:e8: d4:d6:4d:1c:4c:d6:14:90:6a:88:10:95:27:55:eb:d6:1f:d7: c1:a8:8f:6d:aa:09:08:93:4a:88:33:2d:66:66:7e:86:68:14: 11:8f:6b:b4:08:13:7e:05:3f:a9:b4:66:fd:80:64:18:26:8a: f2:b8:79:32:a4:31:2d:b8:5b:46:b7:61:88:be:c3:2a:f3:b4: 87:ca:68:1c:d1:cf:ac:37:9f:4f:2d:c2:9d:d5:20:72:97:ec: 14:d7:36:a7:ca:6e:61:ef:f4:69:6e:1e:14:61:44:bb:57:9f: a0:6d:62:56:d0:e5:71:94:50:1a:18:8c:67:01:77:37:0f:aa: a3:c2:be:4b:a1:2c:6e:97:26:a6:bc:d5:59:b3:94:f7:42:88: df:ea:50:bc:e9:7f:b7:85:e3:92:23:a2:6e:0f:80:08:56:31: 29:4e:35:75:f4:85:c8:52:81:8e:55:a1:42:2c:db:fe:c4:c3: f6:2c:0d:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ1NTkxMTAvBgNVBAUTKDA1Q0M4M0NGNEI4QjFCMzc4OUZGRTRFQzQ0NjBBMTZE ODlFQTMyNzcwHhcNMjUwNDI1MDE0NjU3WhcNMjUwNTAyMDE0NjU3WjAYMRYwFAYD VQQDEw02ODBhZTk5Mi03NDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30jCQp3fTfTBg7nTyALlKWUZQYiqkxCSFRTRD4ja4enww2bIW/6R1pJ4+Unp ecBIQR+ZqmfHHvjkcEfV5RPj0bz9pI+aZenTVmxNTrMF/MeGN9/69yR/icy0xuaT AQoCyf1PqEPlHOlHpENxyW6BWZ8wLXa4/QRP9YMJ+VQ/fnb3aLJ/mO5z/pcSuOPa oulnmgCy3eCRC5QTYDdFIAiik6v5j2RjhwwKUvhxV0x2eIvgRZgY3V87vU/Pgxth Q9PdSYD4jfZribdyL8W3sQAxnP1SzuSUP4Qhz2wmYSFzHwiQR1umdsvS+P7DjqV7 1LO8Ki5B4BI1e5p+Rr1r6v+rzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7hS9kp MFJHN4f1xSAg1PLM3fkXMB8GA1UdIwQYMBaAFAXMg89Lixs3if/k7ERgoW2J6jJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU1OS83NzdBMzA0RTMy OTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6ZUpfLVRzUkdDaGJZbnFN bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjeUR6MHVMR3plSl8tVHNSR0NoYllucU1uYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDU1OS83NzdBMzA0RTMyOTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6 ZUpfLVRzUkdDaGJZbnFNbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLGNvvjf0RjEbXCF14/8ePTgx5kLkewuNCheFEus2/xkoVghH+rMua u5WgchLvPgvKGNqvHj3BRJ7HZwB3sXFhGaxGJAfjjejU1k0cTNYUkGqIEJUnVevW H9fBqI9tqgkIk0qIMy1mZn6GaBQRj2u0CBN+BT+ptGb9gGQYJoryuHkypDEtuFtG t2GIvsMq87SHymgc0c+sN59PLcKd1SByl+wU1zanym5h7/Rpbh4UYUS7V5+gbWJW 0OVxlFAaGIxnAXc3D6qjwr5LoSxulyamvNVZs5T3Qojf6lC86X+3heOSI6JuD4AI VjEpTjV19IXIUoGOVaFCLNv+xMP2LA3w -----END CERTIFICATE-----Generated at Sat Apr 26 04:04:53 2025 by rpki-client