$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft File: BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json) Hash identifier: Mo8IwVsDvLKTBHBnIFUL8fOpiZMbHQzOG/BjBOLrq4w= Subject key identifier: 89:E3:6C:6A:D5:4D:6A:E2:62:97:F4:45:A8:47:E1:A4:A6:91:49:2B Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Certificate serial: 1137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft Manifest number: 112C Signing time: Fri 22 Aug 2025 17:24:00 +0000 Manifest this update: Fri 22 Aug 2025 17:24:00 +0000 Manifest next update: Fri 29 Aug 2025 17:24:00 +0000 Files and hashes: 1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: BNMAfISItdda+lyrFajO9k8AbpMLhwTbQ4RyNb/E5ro=) 2: 2B2B06B2401E11EBB0588F5FC4F9AE02.roa (hash: njXqnLM6vnU07txVMRRTX8IPNMY9z1UdckP2aMY3pBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4407 (0x1137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Validity Not Before: Aug 22 17:24:00 2025 GMT Not After : Aug 29 17:24:00 2025 GMT Subject: CN=68a8a7b0-756d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:9e:57:c2:5a:a8:92:65:95:c2:cc:0c:e7: 77:78:2d:2f:4f:17:f9:f8:e6:66:31:3f:3c:1a:0a: a7:2d:75:b0:40:c5:9f:97:88:af:e5:eb:83:ec:08: ea:b8:c5:ff:d1:07:c8:46:9f:e9:63:4b:03:3b:76: 02:72:43:1c:f8:44:94:ca:8c:78:6f:8c:c6:d5:c6: af:6e:2f:7f:70:78:87:d5:77:f4:96:b6:99:3d:92: bd:7b:77:e0:33:13:f3:fd:34:48:0a:31:23:c5:b2: 9b:f2:41:c0:f1:a5:9e:92:08:76:be:7e:47:a1:eb: 9e:00:c0:09:72:b9:f2:0c:04:d5:0e:69:c4:30:0d: a1:2e:cb:5b:b1:e7:28:2d:ca:de:95:e4:b0:c8:7c: bb:d0:d2:e5:32:dd:ce:13:a8:86:6a:a7:45:85:06: 8f:46:1d:d4:9a:aa:1e:30:f6:61:c5:a7:3f:dc:5c: 62:76:48:31:c1:d4:24:16:77:37:30:c6:1e:62:f1: 84:69:2e:c6:6a:be:1f:95:ea:af:8d:33:6f:fe:5e: 4a:59:1b:64:8d:18:4d:21:cf:3c:5f:d2:61:98:21: be:fc:7a:6d:ed:f3:a2:c4:b3:76:9f:b9:bf:1d:6d: fb:02:8d:51:29:54:b9:e8:23:1b:6d:f9:6f:46:45: a9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E3:6C:6A:D5:4D:6A:E2:62:97:F4:45:A8:47:E1:A4:A6:91:49:2B X509v3 Authority Key Identifier: keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c2:80:11:67:7b:7b:41:a5:6e:ee:79:fc:68:14:7c:6b:d3: 39:f2:d7:de:89:7b:3c:82:14:96:78:19:17:4f:63:81:94:01: 30:16:bb:b5:40:1a:7c:22:44:27:b7:d1:ce:c2:00:e5:26:1f: 6f:6c:41:45:a7:4a:da:cc:2a:7e:d4:be:eb:0c:df:a0:89:13: 75:d7:bf:aa:fd:45:47:8f:10:6b:85:c8:54:5b:12:ba:bb:93: 0f:ca:1c:81:8b:8c:4b:29:72:40:0a:cc:52:42:1c:3f:0c:73: 07:12:33:7d:1b:87:01:27:1f:0a:fe:7f:b8:2c:51:bc:d2:6f: fa:81:fb:dc:fa:2d:ae:68:59:f8:68:61:b5:86:ce:a5:30:84: 91:d8:43:0e:69:fd:b8:ad:c6:f4:c0:fd:5c:ba:9a:ba:15:e3: 22:6d:3a:64:6b:8c:5e:89:a0:c4:53:32:d4:e0:d3:e9:d8:88: 82:8a:05:f3:0e:24:55:d7:73:94:8a:db:05:b1:f0:8f:9e:ec: 73:b0:79:32:6a:50:cb:49:9d:31:4f:1d:08:dc:bb:fa:16:c6: 64:91:d0:79:ab:7b:91:c5:ee:b9:ff:d3:5a:9b:2b:c3:01:04: ee:1a:e9:7e:55:05:d4:96:f1:37:1f:31:4e:83:e3:ea:9e:5f: c7:2d:b1:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1NjMxMTAvBgNVBAUTKDA0QTAyNzVGNUIyQjVDMTgwRTdFMEQxMjk2RUVENjBC QzBDRjYzNDcwHhcNMjUwODIyMTcyNDAwWhcNMjUwODI5MTcyNDAwWjAYMRYwFAYD VQQDEw02OGE4YTdiMC03NTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnO+eV8JaqJJllcLMDOd3eC0vTxf5+OZmMT88GgqnLXWwQMWfl4iv5euD7Ajq uMX/0QfIRp/pY0sDO3YCckMc+ESUyox4b4zG1cavbi9/cHiH1Xf0lraZPZK9e3fg MxPz/TRICjEjxbKb8kHA8aWekgh2vn5HoeueAMAJcrnyDATVDmnEMA2hLstbseco LcreleSwyHy70NLlMt3OE6iGaqdFhQaPRh3UmqoeMPZhxac/3FxidkgxwdQkFnc3 MMYeYvGEaS7Gar4fleqvjTNv/l5KWRtkjRhNIc88X9JhmCG+/Hpt7fOixLN2n7m/ HW37Ao1RKVS56CMbbflvRkWpzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInjbGrV TWriYpf0RahH4aSmkUkrMB8GA1UdIwQYMBaAFASgJ19bK1wYDn4NEpbu1gvAz2NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzU2My8xMUI2MzM2NDE3 QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhCZ09mZzBTbHU3V0M4RFBZ MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLQW5YMXNyWEJnT2ZnMFNsdTdXQzhEUFkwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzU2My8xMUI2MzM2NDE3QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhC Z09mZzBTbHU3V0M4RFBZMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHwoARZ3t7QaVu7nn8aBR8a9M58tfeiXs8ghSWeBkXT2OBlAEwFru1 QBp8IkQnt9HOwgDlJh9vbEFFp0razCp+1L7rDN+giRN117+q/UVHjxBrhchUWxK6 u5MPyhyBi4xLKXJACsxSQhw/DHMHEjN9G4cBJx8K/n+4LFG80m/6gfvc+i2uaFn4 aGG1hs6lMISR2EMOaf24rcb0wP1cupq6FeMibTpka4xeiaDEUzLU4NPp2IiCigXz DiRV13OUitsFsfCPnuxzsHkyalDLSZ0xTx0I3Lv6FsZkkdB5q3uRxe65/9NamyvD AQTuGul+VQXUlvE3HzFOg+Pqnl/HLbEE -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:47 2025 by rpki-client