$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft File: BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json) Hash identifier: JOc7kUeQ5VWGJwdhFYORokp63d7oa6BISF6T3D2DLag= Subject key identifier: 31:46:29:C1:8B:6F:3A:E5:C0:85:7F:27:E5:E6:E6:C8:EC:FE:53:29 Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C Certificate issuer: /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft Manifest number: 010B Signing time: Sat 31 May 2025 04:40:17 +0000 Manifest this update: Sat 31 May 2025 04:40:17 +0000 Manifest next update: Sat 07 Jun 2025 04:40:17 +0000 Files and hashes: 1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: eGKTxNcGpPPjVKatSAt8BdyfeoANCjmUJz0ooixpXro=) 2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: K1vHSv3K4UpAg/heoh8ddgfPtcSWtBerkM6jq/2Qdbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916002E, serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C Validity Not Before: May 31 04:40:17 2025 GMT Not After : Jun 7 04:40:17 2025 GMT Subject: CN=683a8831-0158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:a7:50:6a:4d:85:e6:aa:9a:d6:c9:9e:ff: 09:c5:ac:96:25:9b:54:3b:46:f7:9e:be:44:a3:ba: e7:56:d9:6d:e7:f8:fd:10:a3:ed:98:1a:8d:00:04: 38:9d:08:c9:c5:cd:38:5c:3c:58:f4:30:49:dc:b5: 6d:e4:cd:d0:da:b8:23:63:48:e8:5c:50:f9:cf:4a: 1b:23:df:4b:17:42:6e:e2:bd:24:a3:2f:6e:47:42: a3:d1:c3:2b:93:b5:c4:72:50:80:11:5d:cf:d2:ed: 2d:74:6b:a4:93:e4:8e:77:7f:46:ee:29:00:7b:59: 6f:db:b7:4d:31:0f:73:2f:fb:eb:42:6d:c3:d0:2d: c9:91:03:5e:f3:15:4a:11:f4:b8:91:87:26:fd:7a: 78:9c:b2:c4:46:16:4a:c7:e5:a4:52:a3:a4:f6:36: ce:c9:55:9f:aa:49:e6:40:44:c2:8c:95:1a:6a:4d: 02:50:3b:10:f6:34:ce:b1:cf:15:e2:e6:8d:e9:7d: 38:0c:87:9b:40:fe:a3:78:40:9c:a2:47:31:dc:d4: 0f:aa:e2:a9:17:2b:2f:5a:89:ef:fd:09:c0:27:8a: c1:a7:72:54:3d:61:b0:51:1b:b6:6b:92:7d:8a:b3: 48:02:7d:d0:db:b4:c6:24:a0:de:c9:dc:ba:6e:4c: b9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:46:29:C1:8B:6F:3A:E5:C0:85:7F:27:E5:E6:E6:C8:EC:FE:53:29 X509v3 Authority Key Identifier: keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:90:50:05:84:93:40:29:e9:aa:45:f9:5b:ae:a9:17:fa:b4: 58:02:bc:8f:a3:01:1b:a1:5b:7f:95:e0:5c:1c:83:dc:ba:aa: 09:f9:27:c0:24:05:9f:08:d8:d0:13:d9:5a:46:3e:c2:25:74: c0:6b:e9:d1:00:52:07:fb:ec:92:09:c3:f2:3e:61:5d:f1:e1: 0e:b0:53:da:de:68:b8:ae:d4:06:65:44:31:1f:79:00:32:81: 26:90:42:53:54:e7:be:88:37:93:79:d9:eb:8c:b5:24:c0:46: 1b:46:eb:d0:1f:cf:97:1b:9e:9a:16:6e:8b:9a:27:0c:76:42: a7:bb:32:be:0b:f2:42:6c:68:b9:f9:a3:3b:bf:77:7c:63:be: 6a:70:90:bb:8c:b4:55:68:3c:31:0f:86:e2:82:4b:fe:7e:a1: f3:b9:73:69:82:fb:2f:6d:d4:53:7c:91:8c:46:94:6c:f0:7a: b7:90:32:db:95:0e:89:e3:54:8f:ca:49:a6:50:a7:f6:ad:08: c9:24:cf:7f:1b:bb:70:49:9c:98:40:7f:ff:d8:ed:7d:77:6d: f5:eb:b8:7b:9b:91:fa:2a:43:94:3f:c7:fd:73:45:b8:cb:06: de:25:d1:f5:25:66:19:bb:5a:ba:75:e6:a6:89:3f:d1:66:85: d5:2c:e3:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAwMkUxMTAvBgNVBAUTKDA0QTU1RjdBQjNBRTM5OUQ0RjI1N0Q0RkQyODlCMTA1 ODA4RTVDM0MwHhcNMjUwNTMxMDQ0MDE3WhcNMjUwNjA3MDQ0MDE3WjAYMRYwFAYD VQQDEw02ODNhODgzMS0wMTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOmnUGpNheaqmtbJnv8JxayWJZtUO0b3nr5Eo7rnVtlt5/j9EKPtmBqNAAQ4 nQjJxc04XDxY9DBJ3LVt5M3Q2rgjY0joXFD5z0obI99LF0Ju4r0koy9uR0Kj0cMr k7XEclCAEV3P0u0tdGukk+SOd39G7ikAe1lv27dNMQ9zL/vrQm3D0C3JkQNe8xVK EfS4kYcm/Xp4nLLERhZKx+WkUqOk9jbOyVWfqknmQETCjJUaak0CUDsQ9jTOsc8V 4uaN6X04DIebQP6jeECcokcx3NQPquKpFysvWonv/QnAJ4rBp3JUPWGwURu2a5J9 irNIAn3Q27TGJKDeydy6bky5iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFGKcGL bzrlwIV/J+Xm5sjs/lMpMB8GA1UdIwQYMBaAFASlX3qzrjmdTyV9T9KJsQWAjlw8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDAyRS9GMjg3RDMwQUIw MTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9aMVBKWDFQMG9teEJZQ09Y RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLVmZlck91T1oxUEpYMVAwb214QllDT1hEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDAyRS9GMjg3RDMwQUIwMTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9a MVBKWDFQMG9teEJZQ09YRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbkFAFhJNAKemqRflbrqkX+rRYAryPowEboVt/leBcHIPcuqoJ+SfA JAWfCNjQE9laRj7CJXTAa+nRAFIH++ySCcPyPmFd8eEOsFPa3mi4rtQGZUQxH3kA MoEmkEJTVOe+iDeTednrjLUkwEYbRuvQH8+XG56aFm6LmicMdkKnuzK+C/JCbGi5 +aM7v3d8Y75qcJC7jLRVaDwxD4bigkv+fqHzuXNpgvsvbdRTfJGMRpRs8Hq3kDLb lQ6J41SPykmmUKf2rQjJJM9/G7twSZyYQH//2O19d23167h7m5H6KkOUP8f9c0W4 ywbeJdH1JWYZu1q6deamiT/RZoXVLONu -----END CERTIFICATE-----Generated at Sat May 31 17:47:25 2025 by rpki-client