$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft File: BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json) Hash identifier: siEk2ZYYs2U0dfjEtWmgkaNrDIoO5mNhje9hxcvoaho= Subject key identifier: 3D:7F:9A:42:49:0A:87:7C:06:B6:01:32:F3:1A:5D:80:D4:F6:A7:72 Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C Certificate issuer: /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft Manifest number: 0137 Signing time: Thu 21 Aug 2025 04:43:00 +0000 Manifest this update: Thu 21 Aug 2025 04:43:00 +0000 Manifest next update: Thu 28 Aug 2025 04:43:00 +0000 Files and hashes: 1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: wJCV+vX0N82yiUSBjsSLKYHOEEwe6b/0IN2VHL/qMTo=) 2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: SZ9uoMEMlq4iFEPfCrqpoW/pO5RpEBqkp89YOfJH9e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916002E, serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C Validity Not Before: Aug 21 04:43:00 2025 GMT Not After : Aug 28 04:43:00 2025 GMT Subject: CN=68a6a3d4-2ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:89:87:3d:18:d0:97:d3:89:3d:d8:42:92: b2:11:03:06:0e:60:75:60:75:59:e9:34:b5:33:9b: 5f:b5:5c:74:91:26:f6:7f:9d:b9:97:6d:20:d7:1f: 7c:a8:4e:98:6e:64:c8:70:da:e5:90:2d:b5:db:b9: 9b:c4:ec:f0:8d:62:9e:fc:43:4c:7a:f2:65:74:57: 74:93:80:ce:9f:cd:f5:30:52:b8:74:e1:f2:ae:8b: 64:aa:b1:c3:ee:01:05:cd:00:c2:b5:10:cc:1f:df: 0f:47:fa:6a:66:80:d3:9c:9f:11:42:b8:48:b8:53: 99:44:89:f6:16:15:3e:d8:d0:0e:a2:f0:7e:81:19: c8:79:86:3f:93:bc:df:13:97:65:6f:57:00:77:f4: 56:d6:35:1b:44:11:45:0e:fd:d7:d5:1c:82:4b:fd: 34:64:cb:6f:c3:59:b9:94:76:76:4e:c8:a2:31:6a: 4c:5f:d8:9e:07:46:9d:a5:e2:59:8c:d6:e8:90:89: 03:d4:fa:e4:b0:1e:c5:dd:ad:33:fb:7a:eb:fb:1d: 3f:90:9a:64:99:f0:12:50:71:4b:71:fc:a4:24:28: 01:b7:f2:01:2b:c7:30:ba:c9:88:f3:02:ba:29:5a: 20:d5:86:16:0d:7b:bb:e8:df:51:1b:4b:09:34:ea: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7F:9A:42:49:0A:87:7C:06:B6:01:32:F3:1A:5D:80:D4:F6:A7:72 X509v3 Authority Key Identifier: keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:19:4b:f9:a9:09:b5:b9:e5:d5:2c:43:8e:70:a5:ff:36:3e: 9d:5c:c8:81:97:41:f3:c5:7d:90:ee:fe:aa:7b:10:a6:ab:c3: 64:97:2f:33:4c:41:f4:a9:a6:e5:78:df:f2:14:8d:10:2e:49: b5:ed:37:ec:86:ee:c0:3d:73:37:10:8f:2f:cb:11:0a:3d:c1: f7:b2:36:17:15:01:47:1e:8c:32:61:c2:85:d2:90:4c:5a:72: 34:d0:87:47:d9:b6:a9:a9:9f:b4:2f:71:4a:d0:16:98:b3:7b: af:2d:6e:2a:65:12:3a:af:13:a6:6c:ac:62:89:42:43:d9:5e: 48:5e:1d:70:cc:41:85:f1:82:2a:cc:39:9b:af:49:89:ff:f1: 0e:bc:f9:be:47:2c:c2:92:ae:ff:7f:ec:83:70:07:8c:a6:69: 55:bb:5f:c8:bb:c1:0f:52:23:9c:f6:5e:cb:cd:8f:bc:d7:0d: 69:ca:22:0d:b9:7f:59:4d:15:2b:9c:10:50:dc:a5:aa:8d:aa: ac:13:d7:1d:02:7e:30:c0:80:b1:4a:8f:ef:1d:4e:f8:ca:de: ba:0f:47:88:18:40:06:68:18:31:fe:4e:a9:c2:51:b2:b2:65: 73:3b:5f:56:11:97:39:b2:c8:07:7e:24:50:af:b3:44:cd:a1: 88:4c:e9:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAwMkUxMTAvBgNVBAUTKDA0QTU1RjdBQjNBRTM5OUQ0RjI1N0Q0RkQyODlCMTA1 ODA4RTVDM0MwHhcNMjUwODIxMDQ0MzAwWhcNMjUwODI4MDQ0MzAwWjAYMRYwFAYD VQQDEw02OGE2YTNkNC0yYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDiJhz0Y0JfTiT3YQpKyEQMGDmB1YHVZ6TS1M5tftVx0kSb2f525l20g1x98 qE6YbmTIcNrlkC2127mbxOzwjWKe/ENMevJldFd0k4DOn831MFK4dOHyrotkqrHD 7gEFzQDCtRDMH98PR/pqZoDTnJ8RQrhIuFOZRIn2FhU+2NAOovB+gRnIeYY/k7zf E5dlb1cAd/RW1jUbRBFFDv3X1RyCS/00ZMtvw1m5lHZ2TsiiMWpMX9ieB0adpeJZ jNbokIkD1PrksB7F3a0z+3rr+x0/kJpkmfASUHFLcfykJCgBt/IBK8cwusmI8wK6 KVog1YYWDXu76N9RG0sJNOo+DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1/mkJJ Cod8BrYBMvMaXYDU9qdyMB8GA1UdIwQYMBaAFASlX3qzrjmdTyV9T9KJsQWAjlw8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDAyRS9GMjg3RDMwQUIw MTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9aMVBKWDFQMG9teEJZQ09Y RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLVmZlck91T1oxUEpYMVAwb214QllDT1hEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDAyRS9GMjg3RDMwQUIwMTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9a MVBKWDFQMG9teEJZQ09YRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxGUv5qQm1ueXVLEOOcKX/Nj6dXMiBl0HzxX2Q7v6qexCmq8Nkly8z TEH0qableN/yFI0QLkm17Tfshu7APXM3EI8vyxEKPcH3sjYXFQFHHowyYcKF0pBM WnI00IdH2bapqZ+0L3FK0BaYs3uvLW4qZRI6rxOmbKxiiUJD2V5IXh1wzEGF8YIq zDmbr0mJ//EOvPm+RyzCkq7/f+yDcAeMpmlVu1/Iu8EPUiOc9l7LzY+81w1pyiIN uX9ZTRUrnBBQ3KWqjaqsE9cdAn4wwICxSo/vHU74yt66D0eIGEAGaBgx/k6pwlGy smVzO19WEZc5ssgHfiRQr7NEzaGITOk5 -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:00 2025 by rpki-client