$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft File: BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json) Hash identifier: it5tGZq5jFtTuF24RNvZB07Vmcxo4xyOefbscgjfZUg= Subject key identifier: A9:3A:2B:56:CF:C5:DA:4D:6B:B2:13:8E:60:FD:63:BA:61:D5:26:F7 Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Certificate serial: 1154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft Manifest number: 1149 Signing time: Sat 18 Oct 2025 17:48:00 +0000 Manifest this update: Sat 18 Oct 2025 17:47:59 +0000 Manifest next update: Sat 25 Oct 2025 17:47:59 +0000 Files and hashes: 1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: 7o8MMiqDAPrB2cMeSEfGtnrhynlCO0m5rCwZqcxOlkA=) 2: 2B2B06B2401E11EBB0588F5FC4F9AE02.roa (hash: njXqnLM6vnU07txVMRRTX8IPNMY9z1UdckP2aMY3pBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4436 (0x1154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Validity Not Before: Oct 18 17:47:59 2025 GMT Not After : Oct 25 17:47:59 2025 GMT Subject: CN=68f3d2d0-7ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3f:48:4f:38:91:c8:31:0d:3a:4d:62:f3:41: 56:2c:cb:a3:5a:fc:76:a9:4d:fe:b4:5a:09:29:72: e4:a6:9d:95:28:2b:d5:58:0a:62:e0:8e:f9:af:10: 52:24:4a:f4:a2:25:9f:fa:fb:db:42:0a:38:c2:6d: 61:3e:2a:57:3f:7e:7e:c6:a2:c5:62:a8:1e:56:13: 59:15:f4:7e:d2:76:c4:6d:aa:9c:ef:d7:28:7f:a0: 33:0f:c4:d7:24:30:a9:75:a9:f0:c1:ec:e8:e5:4c: cb:80:ed:d3:08:db:2c:91:94:5e:32:8a:3a:2c:00: 0a:e3:b0:48:ca:83:02:64:f9:45:b6:51:db:98:e3: 55:9f:d6:5e:2f:a5:d5:a0:06:0c:23:cb:27:fd:82: 3d:98:cc:5a:10:e5:6c:84:e3:a2:95:d0:67:65:cb: 5f:cf:a4:5b:bc:f1:25:4e:eb:7b:8e:6e:9a:99:b1: ba:c9:91:b7:b6:d6:81:03:7a:6c:85:b7:58:58:29: 9a:96:0f:00:42:4c:b3:39:68:3e:4d:51:a9:a8:5e: 84:56:d4:98:97:ec:16:6a:f2:96:33:22:ff:9d:e8: 6e:98:59:61:ec:62:d3:9b:76:fb:4f:6c:16:20:a8: 1e:02:8a:73:c0:9b:eb:e7:89:c6:4d:a8:63:21:22: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3A:2B:56:CF:C5:DA:4D:6B:B2:13:8E:60:FD:63:BA:61:D5:26:F7 X509v3 Authority Key Identifier: keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c1:e1:5f:8c:ab:83:44:81:2f:be:e1:06:dc:15:9e:b0:09: 91:68:66:9f:be:05:72:e5:c0:0f:03:86:30:d3:a3:55:10:35: fc:6d:36:e4:98:aa:7e:00:b2:e6:d9:36:e0:a4:52:c2:7a:29: 0e:b3:f4:4d:85:4d:a5:12:94:a0:bd:38:60:69:b2:dc:71:f2: 6a:7c:42:0d:bf:b7:d5:e9:5e:52:ff:45:eb:2c:5f:02:ab:9c: 53:8c:ea:ae:a3:85:60:ba:ff:15:bf:02:89:a2:da:d6:3b:bd: 6b:3e:9d:49:cc:da:a7:f5:11:db:70:17:a4:51:25:55:6e:8a: fd:ca:24:6d:53:34:d1:0a:86:04:fe:b8:52:b4:c9:18:e1:59: 5c:ef:a3:ce:56:eb:1d:70:b9:43:ea:93:6c:c0:e2:25:4a:50: 24:ec:bd:5e:2a:21:5e:2c:22:f7:fb:5c:d9:47:e1:b4:ff:0e: 03:ba:38:5f:59:97:03:b8:cc:f1:ee:99:f0:6a:d2:89:3f:27: a5:47:14:01:f3:28:8c:70:76:8f:36:01:fe:ca:3e:dd:7d:04: 76:f7:cf:fc:2a:2f:e1:97:d5:5f:88:d9:3d:c5:1f:87:67:fc: 3d:01:e8:59:64:ce:bf:e1:8e:69:23:8f:c6:83:b1:2d:5e:06: b6:57:a6:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1NjMxMTAvBgNVBAUTKDA0QTAyNzVGNUIyQjVDMTgwRTdFMEQxMjk2RUVENjBC QzBDRjYzNDcwHhcNMjUxMDE4MTc0NzU5WhcNMjUxMDI1MTc0NzU5WjAYMRYwFAYD VQQDEw02OGYzZDJkMC03YWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmD9ITziRyDENOk1i80FWLMujWvx2qU3+tFoJKXLkpp2VKCvVWApi4I75rxBS JEr0oiWf+vvbQgo4wm1hPipXP35+xqLFYqgeVhNZFfR+0nbEbaqc79cof6AzD8TX JDCpdanwwezo5UzLgO3TCNsskZReMoo6LAAK47BIyoMCZPlFtlHbmONVn9ZeL6XV oAYMI8sn/YI9mMxaEOVshOOildBnZctfz6RbvPElTut7jm6ambG6yZG3ttaBA3ps hbdYWCmalg8AQkyzOWg+TVGpqF6EVtSYl+wWavKWMyL/nehumFlh7GLTm3b7T2wW IKgeAopzwJvr54nGTahjISI2DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKk6K1bP xdpNa7ITjmD9Y7ph1Sb3MB8GA1UdIwQYMBaAFASgJ19bK1wYDn4NEpbu1gvAz2NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzU2My8xMUI2MzM2NDE3 QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhCZ09mZzBTbHU3V0M4RFBZ MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLQW5YMXNyWEJnT2ZnMFNsdTdXQzhEUFkwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzU2My8xMUI2MzM2NDE3QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhC Z09mZzBTbHU3V0M4RFBZMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcweFfjKuDRIEvvuEG3BWesAmRaGafvgVy5cAPA4Yw06NVEDX8bTbk mKp+ALLm2TbgpFLCeikOs/RNhU2lEpSgvThgabLccfJqfEINv7fV6V5S/0XrLF8C q5xTjOquo4Vguv8VvwKJotrWO71rPp1JzNqn9RHbcBekUSVVbor9yiRtUzTRCoYE /rhStMkY4Vlc76POVusdcLlD6pNswOIlSlAk7L1eKiFeLCL3+1zZR+G0/w4Dujhf WZcDuMzx7pnwatKJPyelRxQB8yiMcHaPNgH+yj7dfQR298/8Ki/hl9VfiNk9xR+H Z/w9AehZZM6/4Y5pI4/Gg7EtXga2V6bg -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:40 2025 by rpki-client