$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json) Hash identifier: N0LXewYe/kVk171XhixtGCYgJs4iIckiC4yGR+9Erj4= Subject key identifier: DD:50:E2:DA:4C:1E:E9:58:BA:40:6E:99:67:7D:56:AB:90:90:13:14 Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft Manifest number: 0107 Signing time: Thu 03 Jul 2025 01:49:10 +0000 Manifest this update: Thu 03 Jul 2025 01:49:09 +0000 Manifest next update: Thu 10 Jul 2025 01:49:09 +0000 Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: ZKODEn+1vOc23iuAhSsYkYQYTdy1XeIJQoxeSQngsbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Validity Not Before: Jul 3 01:49:09 2025 GMT Not After : Jul 10 01:49:09 2025 GMT Subject: CN=6865e195-ea3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:41:1c:34:a3:8d:23:fb:c2:7b:c5:12:61: a7:91:59:35:1c:1b:23:d3:c1:93:83:a6:28:9c:f9: 7b:b0:96:15:35:df:18:62:78:2a:01:16:40:a0:bc: 0f:bd:cc:dd:f7:6f:4a:c9:63:02:d8:ca:0d:e5:f6: 51:8d:0d:40:36:ef:7b:d8:89:64:aa:28:33:63:c7: 73:f6:39:09:7b:bb:50:c3:94:09:36:b1:bf:22:4c: e9:a4:57:62:44:be:51:09:4b:6f:42:45:20:fa:aa: 8a:a3:24:34:57:68:c0:0c:37:7c:55:02:c7:be:d8: 24:fc:24:fa:89:ef:4c:ad:85:02:ec:c2:73:f7:b7: 52:87:3b:be:e0:bd:cd:47:75:8c:6b:b4:3a:ac:b9: 67:53:08:32:f2:7d:7c:bb:45:1e:b2:b1:15:66:00: 1e:ad:9d:cd:24:bd:6d:37:1a:83:a7:94:ab:e0:94: 99:fb:96:21:8b:5d:d9:f3:d1:da:0e:63:71:f7:1f: 88:14:73:ed:94:ff:97:bd:27:d7:90:bd:71:5b:35: aa:8f:8a:b9:f6:d4:5c:c0:f6:57:0e:24:8b:54:27: ef:d0:df:e6:14:1b:67:d7:3f:50:61:ad:fd:9a:18: 41:74:43:85:2b:db:53:cf:86:d6:8a:50:a0:26:42: 67:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:50:E2:DA:4C:1E:E9:58:BA:40:6E:99:67:7D:56:AB:90:90:13:14 X509v3 Authority Key Identifier: keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ed:ba:09:86:b9:27:de:a4:f7:3c:f1:98:68:44:23:22:cd: a8:18:9d:af:e8:c3:a7:a9:9b:e8:0e:84:b2:d6:b6:c3:0b:aa: f0:15:49:0e:dc:d1:3f:9b:42:03:69:f2:64:e5:49:50:ee:cf: 1e:5d:2c:a3:db:e2:73:d7:9d:fd:0c:b1:a6:4e:49:ef:70:c9: 1f:77:4b:31:09:f8:18:eb:ef:2b:01:62:f1:d3:84:3f:d7:e6: 0e:07:27:7f:c4:81:6c:c5:bb:1b:93:88:02:83:38:48:27:4e: 15:d0:f2:9b:86:fe:a6:e6:97:4f:bd:6d:e8:b6:5e:41:2d:43: 89:a5:7d:c6:53:e4:e5:ac:18:e5:cc:3e:89:31:0a:3d:fb:f1: 04:0f:6e:ec:27:04:3b:a7:fa:fc:93:a9:96:a8:b9:02:d4:bf: ec:b8:83:8a:3c:8c:7c:00:8e:9b:30:96:ac:11:bf:46:c3:5f: 8e:3a:8a:b9:70:57:df:26:7f:a9:84:5e:c8:18:fb:60:13:7b: 3b:c9:e9:74:8a:7c:53:71:89:51:2a:f1:47:4d:b2:e3:e4:09: da:ed:51:51:91:f3:6a:7e:bc:de:70:e2:bf:1a:8b:68:98:cb: a5:24:c0:b4:6d:76:89:52:96:45:26:0c:fb:e9:df:af:83:a0: 18:7f:37:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG OTREOURDMjkwHhcNMjUwNzAzMDE0OTA5WhcNMjUwNzEwMDE0OTA5WjAYMRYwFAYD VQQDEw02ODY1ZTE5NS1lYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT5BHDSjjSP7wnvFEmGnkVk1HBsj08GTg6YonPl7sJYVNd8YYngqARZAoLwP vczd929KyWMC2MoN5fZRjQ1ANu972IlkqigzY8dz9jkJe7tQw5QJNrG/IkzppFdi RL5RCUtvQkUg+qqKoyQ0V2jADDd8VQLHvtgk/CT6ie9MrYUC7MJz97dShzu+4L3N R3WMa7Q6rLlnUwgy8n18u0UesrEVZgAerZ3NJL1tNxqDp5Sr4JSZ+5Yhi13Z89Ha DmNx9x+IFHPtlP+XvSfXkL1xWzWqj4q59tRcwPZXDiSLVCfv0N/mFBtn1z9QYa39 mhhBdEOFK9tTz4bWilCgJkJncwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1Q4tpM HulYukBumWd9VquQkBMUMB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2 MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6 ZUp0cTU4a2djcmY1VFozQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq7boJhrkn3qT3PPGYaEQjIs2oGJ2v6MOnqZvoDoSy1rbDC6rwFUkO 3NE/m0IDafJk5UlQ7s8eXSyj2+Jz1539DLGmTknvcMkfd0sxCfgY6+8rAWLx04Q/ 1+YOByd/xIFsxbsbk4gCgzhIJ04V0PKbhv6m5pdPvW3otl5BLUOJpX3GU+TlrBjl zD6JMQo9+/EED27sJwQ7p/r8k6mWqLkC1L/suIOKPIx8AI6bMJasEb9Gw1+OOoq5 cFffJn+phF7IGPtgE3s7yel0inxTcYlRKvFHTbLj5Ana7VFRkfNqfrzecOK/Goto mMulJMC0bXaJUpZFJgz76d+vg6AYfzcn -----END CERTIFICATE-----Generated at Fri Jul 4 11:08:53 2025 by rpki-client