$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json) Hash identifier: tA/4KjyE9vXroB1jif8PV9a6SDpPMWl6OKC6GnirBUs= Subject key identifier: 02:08:BF:B3:9E:85:BE:62:6C:8C:15:39:E9:C6:56:5C:16:39:FD:22 Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft Manifest number: EE Signing time: Thu 15 May 2025 01:30:49 +0000 Manifest this update: Thu 15 May 2025 01:30:49 +0000 Manifest next update: Thu 22 May 2025 01:30:49 +0000 Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: 5rD/u8/hIv2gKsIsQ7bRDDO3Zpq33VXmJUvU7Rm58p8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Validity Not Before: May 15 01:30:49 2025 GMT Not After : May 22 01:30:49 2025 GMT Subject: CN=682543c9-ae77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:64:69:0b:77:8a:d8:95:76:1d:1e:90:c1: ba:3a:22:db:28:55:3b:e5:69:bc:74:45:49:6f:fb: c4:7c:29:87:67:19:8e:31:db:84:f1:3e:e6:98:44: ac:02:5f:87:79:bb:cb:8f:e3:91:96:69:0b:4c:9f: a0:2b:90:3d:a8:3a:c8:2b:c8:fb:cf:83:31:a4:e3: 58:e8:ba:e9:cb:99:50:c1:4f:33:63:da:f8:49:28: 48:51:a3:09:89:de:24:13:cd:9c:14:e0:f8:64:33: 3e:99:ad:c3:52:4f:47:0b:0b:a5:c2:ac:c3:8c:a9: 5a:53:7f:40:be:69:11:96:e0:76:49:f5:60:35:1c: 0d:20:3f:5a:5f:f7:88:40:72:10:53:0e:c0:9b:6c: 5d:4d:b9:ca:b5:30:f0:53:cd:6f:93:95:f0:06:fa: 84:f3:81:dd:d0:75:f8:f5:ef:2a:15:cd:61:20:8a: 0c:6a:5a:53:ed:12:95:3f:01:48:e7:26:37:33:b4: 76:6c:b9:2a:99:54:48:84:58:34:57:ef:91:65:bc: b0:d3:97:42:33:15:cf:15:4c:b2:b9:9f:9b:3e:89: bf:e5:e5:27:e4:f2:cc:bc:5e:f1:b4:9c:bf:28:10: 89:2d:10:26:10:1f:f5:6c:66:59:4d:b1:ad:66:95: 5c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:08:BF:B3:9E:85:BE:62:6C:8C:15:39:E9:C6:56:5C:16:39:FD:22 X509v3 Authority Key Identifier: keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:3b:24:c1:2a:0a:0f:b2:5e:3d:bd:28:e4:b0:5d:78:5d:3a: 32:73:7c:24:73:eb:eb:fb:9c:1c:9f:91:9f:7e:d3:7a:5a:c7: 85:70:a2:93:ac:7e:91:c5:1c:8e:8b:d2:7a:94:e9:97:3a:81: 80:47:42:84:9b:ae:46:37:91:ab:ff:e3:fe:8f:64:22:23:70: 3d:9d:18:6f:85:5f:de:06:08:ce:3f:af:cd:92:4a:bb:a4:d2: 2a:af:46:5a:13:b5:d1:7a:7e:01:c3:f5:15:2a:84:3a:21:7e: 85:54:f2:8b:1e:28:5d:55:17:c9:b8:ed:f3:5d:88:ef:9b:a2: aa:47:9f:41:51:00:1d:73:37:13:15:45:25:e9:ca:ec:72:12: c3:6e:11:4a:60:b2:3b:ce:b2:a5:a5:bc:54:48:34:b0:d3:7c: 67:03:ab:e1:2d:86:8d:6a:12:0b:f0:e1:e4:e9:38:e9:45:aa: 8d:22:01:1b:2b:6b:ab:45:be:92:c0:fd:25:e4:84:3a:0f:b0: 68:dc:a3:77:c5:70:5d:82:4e:13:f4:f2:7a:14:da:e6:27:fa: 25:24:87:40:ac:35:76:f7:94:2b:38:b6:e1:e1:07:cc:ff:f3: 16:3b:0d:aa:94:01:e1:62:d9:e0:a9:67:a4:5a:7d:ab:45:d0: 3a:28:71:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG OTREOURDMjkwHhcNMjUwNTE1MDEzMDQ5WhcNMjUwNTIyMDEzMDQ5WjAYMRYwFAYD VQQDEw02ODI1NDNjOS1hZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3hkaQt3itiVdh0ekMG6OiLbKFU75Wm8dEVJb/vEfCmHZxmOMduE8T7mmESs Al+HebvLj+ORlmkLTJ+gK5A9qDrIK8j7z4MxpONY6Lrpy5lQwU8zY9r4SShIUaMJ id4kE82cFOD4ZDM+ma3DUk9HCwulwqzDjKlaU39AvmkRluB2SfVgNRwNID9aX/eI QHIQUw7Am2xdTbnKtTDwU81vk5XwBvqE84Hd0HX49e8qFc1hIIoMalpT7RKVPwFI 5yY3M7R2bLkqmVRIhFg0V++RZbyw05dCMxXPFUyyuZ+bPom/5eUn5PLMvF7xtJy/ KBCJLRAmEB/1bGZZTbGtZpVcrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIIv7Oe hb5ibIwVOenGVlwWOf0iMB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2 MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6 ZUp0cTU4a2djcmY1VFozQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATOyTBKgoPsl49vSjksF14XToyc3wkc+vr+5wcn5GfftN6WseFcKKT rH6RxRyOi9J6lOmXOoGAR0KEm65GN5Gr/+P+j2QiI3A9nRhvhV/eBgjOP6/Nkkq7 pNIqr0ZaE7XRen4Bw/UVKoQ6IX6FVPKLHihdVRfJuO3zXYjvm6KqR59BUQAdczcT FUUl6crschLDbhFKYLI7zrKlpbxUSDSw03xnA6vhLYaNahIL8OHk6TjpRaqNIgEb K2urRb6SwP0l5IQ6D7Bo3KN3xXBdgk4T9PJ6FNrmJ/olJIdArDV295QrOLbh4QfM //MWOw2qlAHhYtngqWekWn2rRdA6KHEY -----END CERTIFICATE-----Generated at Fri May 16 09:36:55 2025 by rpki-client