$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json) Hash identifier: WFu2thYk6tDnzoGSbXHc1b34L/aWbcFhxteTb0MxnXs= Subject key identifier: 19:00:AA:6C:AE:60:CE:CC:71:3D:BB:6D:33:DA:B3:62:4C:4C:23:68 Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft Manifest number: 0121 Signing time: Sat 23 Aug 2025 01:35:45 +0000 Manifest this update: Sat 23 Aug 2025 01:35:45 +0000 Manifest next update: Sat 30 Aug 2025 01:35:45 +0000 Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: k5XLCvqifPrk/J44pQLRO4wvoAlwj3jkRZLHSbZI4gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Validity Not Before: Aug 23 01:35:45 2025 GMT Not After : Aug 30 01:35:45 2025 GMT Subject: CN=68a91af1-7f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:16:34:3e:b6:f5:9d:90:cf:6b:c0:a5:42: 55:c3:d8:0a:e2:b1:30:45:e1:cf:9a:f3:c2:89:07: b8:23:13:54:8b:e9:5c:ef:f7:7c:53:1a:c5:12:94: fc:0f:b9:11:ee:bb:9a:09:30:64:84:c7:6b:cf:af: cd:1e:d9:cf:73:cf:af:3b:4c:0c:1f:1c:3e:38:87: de:99:79:c7:a3:ad:ae:d2:58:f6:25:a8:95:b4:62: 5e:0f:5e:e6:a1:a0:e6:52:79:48:9b:97:5d:1c:2f: 22:b4:5d:2c:79:1c:5a:23:1d:ac:33:c5:45:6e:61: 1b:13:a4:48:0c:f3:88:49:d3:96:85:a2:d7:f4:9b: f9:a3:17:bb:cc:c9:fe:c5:a2:86:36:48:ab:b7:23: 5b:e7:ce:e9:f6:35:16:94:80:a3:83:81:ca:0e:6b: 45:b0:e5:66:8c:ce:53:b5:24:cc:6e:15:61:52:c5: f0:13:41:d4:3c:7e:5f:fa:3c:30:ab:54:5f:1f:a0: 02:6e:ee:01:e8:b9:81:f3:b5:13:75:6e:6a:74:0f: 98:fe:b9:13:43:3a:43:34:c8:6f:c4:80:bb:5a:43: 35:11:56:50:be:04:11:e1:0f:9a:cf:91:8b:49:8f: d7:da:42:64:0c:0e:68:e2:0c:5f:8c:24:1c:cd:16: 13:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:00:AA:6C:AE:60:CE:CC:71:3D:BB:6D:33:DA:B3:62:4C:4C:23:68 X509v3 Authority Key Identifier: keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:6c:74:e6:c6:36:08:07:45:aa:5e:c2:f4:d5:d7:7a:34:8c: 2a:6a:49:bf:c0:18:59:53:c9:ae:b3:4b:14:b8:4b:20:78:87: b0:64:01:ca:c7:02:f0:e2:e8:b1:2d:d9:aa:98:8a:27:28:cd: 7d:0f:ec:b1:81:36:ae:db:46:52:5b:ba:b5:80:23:23:a4:b2: f5:a2:ef:0b:38:b9:fd:77:f9:c6:cc:b9:85:3c:e9:2f:47:df: 8e:ff:72:87:9a:e3:e6:fc:2e:15:43:9d:6e:d5:e3:d9:7d:23: 5e:c0:9c:b7:c3:1d:b3:48:86:5f:58:a5:a6:89:11:8c:fe:a3: 96:04:7c:67:fa:68:43:28:38:c9:d6:00:ff:2c:c2:b8:09:01: 6f:0f:04:d5:76:bc:66:c8:72:61:64:3b:1a:b0:33:a2:1f:5d: 5a:85:6f:c7:75:85:95:17:4f:a9:8c:74:ff:98:ed:c5:35:1a: 00:3d:04:52:a4:b9:47:ac:57:14:a0:0d:b8:56:fd:32:c4:20: 1e:4d:4e:c2:5f:ff:b4:b7:ff:0b:7d:eb:71:bc:1b:22:45:89: 20:89:8c:80:99:b6:8a:22:cf:5d:33:47:9c:1b:c7:d7:af:f1: b6:f0:81:7d:37:53:29:f3:df:73:5f:f9:6e:80:41:42:56:19: 69:90:bd:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG OTREOURDMjkwHhcNMjUwODIzMDEzNTQ1WhcNMjUwODMwMDEzNTQ1WjAYMRYwFAYD VQQDEw02OGE5MWFmMS03ZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHEWND629Z2Qz2vApUJVw9gK4rEwReHPmvPCiQe4IxNUi+lc7/d8UxrFEpT8 D7kR7ruaCTBkhMdrz6/NHtnPc8+vO0wMHxw+OIfemXnHo62u0lj2JaiVtGJeD17m oaDmUnlIm5ddHC8itF0seRxaIx2sM8VFbmEbE6RIDPOISdOWhaLX9Jv5oxe7zMn+ xaKGNkirtyNb587p9jUWlICjg4HKDmtFsOVmjM5TtSTMbhVhUsXwE0HUPH5f+jww q1RfH6ACbu4B6LmB87UTdW5qdA+Y/rkTQzpDNMhvxIC7WkM1EVZQvgQR4Q+az5GL SY/X2kJkDA5o4gxfjCQczRYTEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkAqmyu YM7McT27bTPas2JMTCNoMB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2 MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6 ZUp0cTU4a2djcmY1VFozQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkbHTmxjYIB0WqXsL01dd6NIwqakm/wBhZU8mus0sUuEsgeIewZAHK xwLw4uixLdmqmIonKM19D+yxgTau20ZSW7q1gCMjpLL1ou8LOLn9d/nGzLmFPOkv R9+O/3KHmuPm/C4VQ51u1ePZfSNewJy3wx2zSIZfWKWmiRGM/qOWBHxn+mhDKDjJ 1gD/LMK4CQFvDwTVdrxmyHJhZDsasDOiH11ahW/HdYWVF0+pjHT/mO3FNRoAPQRS pLlHrFcUoA24Vv0yxCAeTU7CX/+0t/8LfetxvBsiRYkgiYyAmbaKIs9dM0ecG8fX r/G28IF9N1Mp899zX/lugEFCVhlpkL2R -----END CERTIFICATE-----Generated at Sat Aug 23 12:50:18 2025 by rpki-client