$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft File: BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json) Hash identifier: uIz5adOyoLfhl/ErVpyt7sRomytvaTrHNwNHYyzBsCQ= Subject key identifier: F7:26:D4:99:AA:AE:0D:27:D2:DE:C1:29:4F:AB:AE:6E:7F:A8:91:22 Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Certificate serial: 1103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft Manifest number: 10F8 Signing time: Sat 10 May 2025 17:11:30 +0000 Manifest this update: Sat 10 May 2025 17:11:29 +0000 Manifest next update: Sat 17 May 2025 17:11:29 +0000 Files and hashes: 1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: LgLfYLIehvadIpTDxRAwzSnXiNN2KGaKP/88GzQE05c=) 2: 2B2B06B2401E11EBB0588F5FC4F9AE02.roa (hash: njXqnLM6vnU07txVMRRTX8IPNMY9z1UdckP2aMY3pBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4355 (0x1103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Validity Not Before: May 10 17:11:29 2025 GMT Not After : May 17 17:11:29 2025 GMT Subject: CN=681f88c1-f6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:37:26:21:5b:1d:99:86:6e:14:39:66:00: bb:84:c7:0d:54:05:b2:48:a2:19:d4:37:8a:f8:1a: 15:f1:7c:71:06:8c:40:5c:30:7d:90:45:8b:a3:30: c1:c4:28:9f:7d:20:f9:19:29:32:87:84:a9:fb:57: d5:08:85:f7:a8:3b:ae:99:e3:85:c5:23:df:04:fc: 6d:35:f6:2f:49:33:ca:19:a6:cb:64:88:24:ff:4f: de:59:b8:04:55:e3:45:32:00:38:03:dc:ce:6d:bb: d7:2d:7a:44:0d:2e:86:8a:fb:0a:46:c2:90:0c:1a: dd:d1:41:3a:47:66:67:a2:b1:1a:90:1b:5c:29:81: 90:80:43:33:88:22:7e:12:5e:7f:c2:d3:1c:0d:37: 37:78:40:d5:bd:a7:19:13:9d:24:6d:02:50:2a:a3: ab:7f:ba:7e:29:0b:1c:dd:a6:6d:79:f6:82:91:7b: 3b:58:70:79:68:8c:cb:50:69:4e:6d:0d:59:26:a7: dd:a6:5a:42:90:ec:9c:c7:a8:34:ee:9e:32:fc:a5: 50:24:18:87:fd:8d:51:fa:d1:75:a8:85:85:05:2d: 8a:81:6c:86:e6:27:1c:e1:9a:bf:e1:b6:69:99:05: d4:80:8d:da:bf:2e:c2:c0:0b:c1:6a:1a:c2:c3:4e: ba:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:26:D4:99:AA:AE:0D:27:D2:DE:C1:29:4F:AB:AE:6E:7F:A8:91:22 X509v3 Authority Key Identifier: keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:64:d6:52:91:fb:ea:b6:43:8f:93:5c:11:20:bb:a9:b1:28: fb:a3:04:05:5b:61:9f:c3:f0:eb:0c:c8:07:58:01:27:9e:9c: 0d:ae:1b:06:cf:db:29:ee:e1:86:73:d1:54:e4:0b:6a:b1:ce: 59:b4:bd:bb:7a:39:d9:14:b2:c3:d2:fd:1e:fa:52:a5:92:e6: e5:c1:f2:86:fc:65:22:0e:31:63:47:92:11:aa:94:76:37:d4: 02:44:0b:e7:8c:36:51:97:dd:20:84:c0:54:ef:be:5f:aa:2a: 52:af:c9:c2:1e:99:6b:f7:00:01:0d:c8:39:5c:1d:b1:fa:48: e2:88:54:32:5d:6a:15:5b:a3:e6:18:cf:d2:0a:58:2f:3e:27: 47:bf:50:44:7a:46:15:b9:2b:ff:ed:d8:de:14:52:91:b4:77: 78:6c:ef:28:92:e4:92:7b:8e:ef:84:7b:47:fa:58:3e:a0:b1: f2:6b:55:1b:58:22:a4:f2:f4:81:c4:a0:87:e2:82:fd:e6:27: 81:64:14:29:0c:c2:a6:a5:a2:b8:e8:96:c1:98:06:5f:c8:0d: b2:a0:9b:81:41:b0:93:fa:44:bc:1a:29:49:dc:4c:a3:49:15: bd:92:0b:89:7c:bf:1e:b1:7b:47:15:6a:b0:f4:a0:c5:58:ce: 18:cb:06:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1NjMxMTAvBgNVBAUTKDA0QTAyNzVGNUIyQjVDMTgwRTdFMEQxMjk2RUVENjBC QzBDRjYzNDcwHhcNMjUwNTEwMTcxMTI5WhcNMjUwNTE3MTcxMTI5WjAYMRYwFAYD VQQDEw02ODFmODhjMS1mNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya43JiFbHZmGbhQ5ZgC7hMcNVAWySKIZ1DeK+BoV8XxxBoxAXDB9kEWLozDB xCiffSD5GSkyh4Sp+1fVCIX3qDuumeOFxSPfBPxtNfYvSTPKGabLZIgk/0/eWbgE VeNFMgA4A9zObbvXLXpEDS6GivsKRsKQDBrd0UE6R2ZnorEakBtcKYGQgEMziCJ+ El5/wtMcDTc3eEDVvacZE50kbQJQKqOrf7p+KQsc3aZtefaCkXs7WHB5aIzLUGlO bQ1ZJqfdplpCkOycx6g07p4y/KVQJBiH/Y1R+tF1qIWFBS2KgWyG5icc4Zq/4bZp mQXUgI3avy7CwAvBahrCw0662QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcm1Jmq rg0n0t7BKU+rrm5/qJEiMB8GA1UdIwQYMBaAFASgJ19bK1wYDn4NEpbu1gvAz2NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzU2My8xMUI2MzM2NDE3 QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhCZ09mZzBTbHU3V0M4RFBZ MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLQW5YMXNyWEJnT2ZnMFNsdTdXQzhEUFkwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzU2My8xMUI2MzM2NDE3QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhC Z09mZzBTbHU3V0M4RFBZMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPZNZSkfvqtkOPk1wRILupsSj7owQFW2Gfw/DrDMgHWAEnnpwNrhsG z9sp7uGGc9FU5Atqsc5ZtL27ejnZFLLD0v0e+lKlkublwfKG/GUiDjFjR5IRqpR2 N9QCRAvnjDZRl90ghMBU775fqipSr8nCHplr9wABDcg5XB2x+kjiiFQyXWoVW6Pm GM/SClgvPidHv1BEekYVuSv/7djeFFKRtHd4bO8okuSSe47vhHtH+lg+oLHya1Ub WCKk8vSBxKCH4oL95ieBZBQpDMKmpaK46JbBmAZfyA2yoJuBQbCT+kS8GilJ3Eyj SRW9kguJfL8esXtHFWqw9KDFWM4YywYb -----END CERTIFICATE-----Generated at Mon May 12 04:46:53 2025 by rpki-client