$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft File: BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json) Hash identifier: bLKCR9QDNMFQ4orVFWxEXf9JWVoqXQOxIFlwiWQ6CS4= Subject key identifier: FD:61:7F:69:AF:7D:46:F2:FC:3E:A6:0A:E3:9B:38:28:10:43:8F:13 Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C Certificate issuer: /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft Manifest number: F6 Signing time: Fri 25 Apr 2025 04:18:48 +0000 Manifest this update: Fri 25 Apr 2025 04:18:47 +0000 Manifest next update: Fri 02 May 2025 04:18:47 +0000 Files and hashes: 1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: a4Wu6zNb5L/26C190SdgsWacHcmP0R7VRwTXyuICy7E=) 2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: 6nhFCqUXqKqSoCa+j+Sz88JngdLOIlW2MSoV2XpyvzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916002E, serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C Validity Not Before: Apr 25 04:18:47 2025 GMT Not After : May 2 04:18:47 2025 GMT Subject: CN=680b0d27-9ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:03:bf:7e:3b:31:31:4b:e6:e8:26:d3:08: 20:22:7a:50:e0:d4:a2:4d:e7:29:01:99:2d:08:50: b7:52:4a:54:67:c4:ef:1d:1e:23:47:65:4e:1f:6a: bc:6d:84:f0:a2:d0:1e:d4:e7:e7:e7:d4:e8:fb:f5: 3a:50:99:46:5a:bd:97:8b:e5:91:43:27:dc:fc:5d: e8:be:f3:70:8d:94:e1:85:43:b5:5a:5b:c3:24:f1: 9c:56:9f:e8:e0:04:5a:a5:ce:42:64:1b:09:37:09: 1c:15:48:73:19:20:29:24:fb:2e:df:ed:b9:17:c7: 3c:0f:39:09:52:23:78:71:fa:eb:4b:2d:a5:a4:97: 59:1d:8f:1d:af:a5:19:32:6b:56:2c:00:fd:f7:01: 40:a2:c3:64:97:18:c7:25:36:3c:0d:f6:93:03:97: 63:40:d5:a2:4b:e9:3a:6c:6b:a2:46:c8:79:d4:dd: 61:62:37:c4:df:d1:14:12:4c:35:fb:f5:63:98:ac: 66:81:c9:74:f8:3d:f4:d8:79:5c:a5:91:6b:8a:d5: 23:96:8a:69:d9:3f:37:97:78:96:93:ae:9c:d8:ab: e2:1b:08:45:d0:1e:a0:e7:0d:e3:a2:39:2d:b2:26: 1d:93:52:56:15:2a:6d:a2:fd:59:fe:a5:c8:ff:46: 10:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:61:7F:69:AF:7D:46:F2:FC:3E:A6:0A:E3:9B:38:28:10:43:8F:13 X509v3 Authority Key Identifier: keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c2:f2:ed:15:e2:5d:a6:c0:53:8f:c3:7c:da:84:a6:05:2f: 9e:e2:43:ec:b3:8b:58:fb:2f:78:f4:b4:fc:81:ba:84:a7:3c: da:3f:9f:e1:d2:85:e7:7f:3e:14:e7:c2:79:11:ca:f2:1a:66: ef:1c:b3:d2:91:a6:8e:c8:e4:ea:97:64:cb:52:50:27:b7:e8: 67:34:4c:e6:f5:51:44:9e:a4:d2:9e:26:91:e2:2d:1d:17:ee: b9:61:96:7d:2e:ed:05:48:c5:43:39:fb:21:75:ad:c2:1c:f9: 8c:3d:a8:66:6f:d9:2d:e3:1c:65:4f:2e:96:a1:8f:34:7b:2b: 86:b9:89:84:4b:a7:a6:34:e8:36:cf:c2:c1:ab:bd:62:67:dc: bb:6a:69:89:f6:99:a6:43:73:93:53:6a:25:6c:b4:5c:74:af: d6:fd:19:c4:5d:53:2d:82:a7:6f:aa:4e:06:4e:46:20:2f:be: 8f:83:40:73:22:29:5b:99:a4:8b:5a:95:eb:06:9a:9f:93:03: 6c:83:d6:38:e8:ef:27:77:f0:69:68:ac:25:c3:ca:cf:76:67: 0b:14:4e:6f:b5:c4:1d:7b:c3:d3:18:59:b5:cc:58:dc:28:08: 35:54:38:66:de:48:a6:cc:fa:01:cd:c7:41:2d:da:53:c6:13: 64:f6:7e:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAwMkUxMTAvBgNVBAUTKDA0QTU1RjdBQjNBRTM5OUQ0RjI1N0Q0RkQyODlCMTA1 ODA4RTVDM0MwHhcNMjUwNDI1MDQxODQ3WhcNMjUwNTAyMDQxODQ3WjAYMRYwFAYD VQQDEw02ODBiMGQyNy05Y2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1IDv347MTFL5ugm0wggInpQ4NSiTecpAZktCFC3UkpUZ8TvHR4jR2VOH2q8 bYTwotAe1Ofn59To+/U6UJlGWr2Xi+WRQyfc/F3ovvNwjZThhUO1WlvDJPGcVp/o 4ARapc5CZBsJNwkcFUhzGSApJPsu3+25F8c8DzkJUiN4cfrrSy2lpJdZHY8dr6UZ MmtWLAD99wFAosNklxjHJTY8DfaTA5djQNWiS+k6bGuiRsh51N1hYjfE39EUEkw1 +/VjmKxmgcl0+D302HlcpZFritUjlopp2T83l3iWk66c2KviGwhF0B6g5w3jojkt siYdk1JWFSptov1Z/qXI/0YQMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1hf2mv fUby/D6mCuObOCgQQ48TMB8GA1UdIwQYMBaAFASlX3qzrjmdTyV9T9KJsQWAjlw8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDAyRS9GMjg3RDMwQUIw MTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9aMVBKWDFQMG9teEJZQ09Y RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLVmZlck91T1oxUEpYMVAwb214QllDT1hEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDAyRS9GMjg3RDMwQUIwMTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9a MVBKWDFQMG9teEJZQ09YRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwwvLtFeJdpsBTj8N82oSmBS+e4kPss4tY+y949LT8gbqEpzzaP5/h 0oXnfz4U58J5EcryGmbvHLPSkaaOyOTql2TLUlAnt+hnNEzm9VFEnqTSniaR4i0d F+65YZZ9Lu0FSMVDOfshda3CHPmMPahmb9kt4xxlTy6WoY80eyuGuYmES6emNOg2 z8LBq71iZ9y7ammJ9pmmQ3OTU2olbLRcdK/W/RnEXVMtgqdvqk4GTkYgL76Pg0Bz IilbmaSLWpXrBpqfkwNsg9Y46O8nd/BpaKwlw8rPdmcLFE5vtcQde8PTGFm1zFjc KAg1VDhm3kimzPoBzcdBLdpTxhNk9n4o -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:43 2025 by rpki-client