$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft File: BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json) Hash identifier: cxpkT8h7waHXkZZUFN5DZQHb6Y0zPoLGWWIABoTMXlI= Subject key identifier: AC:88:BE:70:DB:F1:EF:AA:AE:80:72:F7:A6:C6:D9:CC:E5:2B:2A:A9 Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Certificate serial: 1126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft Manifest number: 111B Signing time: Sun 20 Jul 2025 17:18:36 +0000 Manifest this update: Sun 20 Jul 2025 17:18:36 +0000 Manifest next update: Sun 27 Jul 2025 17:18:36 +0000 Files and hashes: 1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: /AQR3E4z0OEiGhiQLJPm9cOqrv2+nQFSPtRyZODCHns=) 2: 2B2B06B2401E11EBB0588F5FC4F9AE02.roa (hash: njXqnLM6vnU07txVMRRTX8IPNMY9z1UdckP2aMY3pBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4390 (0x1126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Validity Not Before: Jul 20 17:18:36 2025 GMT Not After : Jul 27 17:18:36 2025 GMT Subject: CN=687d24ec-b0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:ad:1e:39:02:71:38:73:ed:da:eb:2a:d7: 77:cc:34:2b:f6:e2:4f:e2:17:e3:8f:ff:dd:36:d5: 11:ec:f7:84:c3:68:78:30:44:d2:89:1e:98:d9:06: a4:35:59:45:4a:b0:8f:6f:16:c3:b8:66:33:7e:b0: ff:70:5e:e6:4c:14:42:34:ba:da:81:28:e0:71:88: 05:0b:31:24:e4:74:66:e2:3b:5e:7f:f0:c9:bb:b2: 0f:28:35:78:9a:f2:c3:7e:cc:89:e2:01:de:f2:1c: 84:84:3e:ae:d1:e6:69:9e:6a:57:6c:4a:79:2a:54: 15:84:66:b3:b3:f2:ac:de:37:1d:0e:3b:04:1b:fa: 13:42:53:84:86:c5:e6:cf:96:0a:9d:cf:a8:14:23: 91:04:44:4e:f4:7e:e8:62:b4:ce:4c:84:99:6d:04: 5f:0e:dd:5b:4e:0f:4f:04:3b:d3:e8:59:a2:fd:a9: 65:a3:ab:39:eb:40:d6:e5:b8:93:17:07:9e:92:46: 13:e6:78:a7:62:6b:6e:29:37:69:b6:7a:01:23:a7: 2b:a7:5d:34:f5:70:5f:c1:fd:c2:71:d0:35:0b:55: 10:13:f7:05:f4:ee:ce:32:9b:d2:61:79:b1:c0:2c: 73:75:ec:c9:b6:45:a3:6b:a8:db:28:91:65:27:3b: 94:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:88:BE:70:DB:F1:EF:AA:AE:80:72:F7:A6:C6:D9:CC:E5:2B:2A:A9 X509v3 Authority Key Identifier: keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:14:3b:e4:83:06:9e:80:e6:22:19:88:96:02:6c:d8:16:fc: 5e:b6:37:e8:da:df:82:a3:77:05:63:ae:f6:cb:00:d2:9d:9b: fb:a6:bd:9f:05:73:15:c4:0f:3b:a8:63:fd:60:ae:2c:09:2c: 22:fe:b7:92:bd:3f:79:bd:c7:9b:23:f9:c8:86:e6:62:aa:8f: 5a:e9:6e:e0:92:ec:3d:d2:5d:5a:ae:55:49:ca:ae:bd:da:44: fe:88:11:ae:fe:93:30:1e:f3:e8:d3:35:92:31:ef:de:8e:e6: e3:21:39:3a:26:48:17:d7:ac:a6:30:f1:57:0b:2a:ad:f1:bb: d8:84:6a:bb:af:c1:c3:77:7b:fb:a9:ab:89:3e:60:ae:7c:84: 4b:2c:b0:d2:85:c0:96:3d:2e:7c:86:fb:e2:3b:3d:81:b0:01: f5:b3:30:ba:59:ae:23:0a:53:8a:6e:b6:90:f0:c7:d2:03:1a: 18:86:35:56:ae:27:e1:74:6e:4b:86:11:19:5d:4f:8b:d6:81: 61:3a:ec:74:23:bf:af:e5:dc:35:c9:51:8b:06:e3:d8:d4:6a: d3:0f:a6:a4:d2:4d:14:a2:a4:4f:c8:73:cd:ef:59:07:5e:70: 58:6b:91:72:25:4f:8d:43:01:21:3f:e7:a6:f9:9e:7b:f2:c8: 2f:2f:3c:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1NjMxMTAvBgNVBAUTKDA0QTAyNzVGNUIyQjVDMTgwRTdFMEQxMjk2RUVENjBC QzBDRjYzNDcwHhcNMjUwNzIwMTcxODM2WhcNMjUwNzI3MTcxODM2WjAYMRYwFAYD VQQDEw02ODdkMjRlYy1iMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/2tHjkCcThz7drrKtd3zDQr9uJP4hfjj//dNtUR7PeEw2h4METSiR6Y2Qak NVlFSrCPbxbDuGYzfrD/cF7mTBRCNLragSjgcYgFCzEk5HRm4jtef/DJu7IPKDV4 mvLDfsyJ4gHe8hyEhD6u0eZpnmpXbEp5KlQVhGazs/Ks3jcdDjsEG/oTQlOEhsXm z5YKnc+oFCORBERO9H7oYrTOTISZbQRfDt1bTg9PBDvT6Fmi/allo6s560DW5biT FweekkYT5ninYmtuKTdptnoBI6crp1009XBfwf3CcdA1C1UQE/cF9O7OMpvSYXmx wCxzdezJtkWja6jbKJFlJzuUSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyIvnDb 8e+qroBy96bG2czlKyqpMB8GA1UdIwQYMBaAFASgJ19bK1wYDn4NEpbu1gvAz2NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzU2My8xMUI2MzM2NDE3 QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhCZ09mZzBTbHU3V0M4RFBZ MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLQW5YMXNyWEJnT2ZnMFNsdTdXQzhEUFkwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzU2My8xMUI2MzM2NDE3QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhC Z09mZzBTbHU3V0M4RFBZMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABFDvkgwaegOYiGYiWAmzYFvxetjfo2t+Co3cFY672ywDSnZv7pr2f BXMVxA87qGP9YK4sCSwi/reSvT95vcebI/nIhuZiqo9a6W7gkuw90l1arlVJyq69 2kT+iBGu/pMwHvPo0zWSMe/ejubjITk6JkgX16ymMPFXCyqt8bvYhGq7r8HDd3v7 qauJPmCufIRLLLDShcCWPS58hvviOz2BsAH1szC6Wa4jClOKbraQ8MfSAxoYhjVW rifhdG5LhhEZXU+L1oFhOux0I7+v5dw1yVGLBuPY1GrTD6ak0k0UoqRPyHPN71kH XnBYa5FyJU+NQwEhP+em+Z578sgvLzzb -----END CERTIFICATE-----Generated at Mon Jul 21 12:38:28 2025 by rpki-client