$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft File: BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json) Hash identifier: RagDrnJAen4fp2cfJCx9s1p3K8m3ZGRrxZwb6jiFoL8= Subject key identifier: 4C:77:B2:DB:B9:99:17:8B:DE:A1:23:33:01:4F:AB:15:66:52:C2:61 Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C Certificate issuer: /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft Manifest number: 0112 Signing time: Fri 13 Jun 2025 03:55:53 +0000 Manifest this update: Fri 13 Jun 2025 03:55:52 +0000 Manifest next update: Fri 20 Jun 2025 03:55:52 +0000 Files and hashes: 1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: iwdctUUibLMvxL2EBZ5yfP8zqmjXP1xpvCrmsFSS2lg=) 2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: K1vHSv3K4UpAg/heoh8ddgfPtcSWtBerkM6jq/2Qdbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916002E, serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C Validity Not Before: Jun 13 03:55:52 2025 GMT Not After : Jun 20 03:55:52 2025 GMT Subject: CN=684ba148-1eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:39:cd:f4:4e:83:4d:76:e5:0a:dd:33:5e: 90:cc:51:86:5b:47:4e:ac:59:8c:b0:8b:17:f1:37: 9e:39:30:e3:65:0c:24:54:37:c1:1d:ab:2e:12:34: e6:63:8d:0d:9c:ae:66:f3:b4:cb:31:7e:5c:0a:3d: cd:1f:ea:6a:76:b7:15:df:31:db:2e:60:ef:42:d7: c8:3e:c8:db:d4:18:b9:50:ac:4d:d2:6b:b1:7b:51: 24:2b:41:67:47:df:2e:9a:97:9a:ea:09:97:36:37: f2:6b:3c:66:6d:46:ee:b4:34:0e:ab:35:ff:0e:94: 24:64:44:6d:ce:99:ff:77:d9:35:8e:ea:cc:0f:a8: 1f:d3:60:80:c2:4b:f3:dd:a7:3c:98:d7:fa:bb:b3: 23:91:2d:8d:e7:3b:f9:b9:b6:bb:38:5f:6f:7c:a1: c8:29:e7:cb:78:ce:23:71:53:03:81:b3:46:76:6e: ea:5f:cc:de:10:78:a7:8a:5b:c5:69:96:bd:c3:e8: d1:c5:c1:a7:fa:ef:d1:33:8b:e9:6b:28:d7:32:92: a6:37:08:dc:25:97:29:8e:28:b8:01:c9:07:bc:c8: b3:63:51:70:c1:1e:33:9a:b0:c4:7a:67:ae:dc:b4: ab:8d:dd:e2:5c:f4:51:57:d0:33:44:cd:95:5d:17: be:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:77:B2:DB:B9:99:17:8B:DE:A1:23:33:01:4F:AB:15:66:52:C2:61 X509v3 Authority Key Identifier: keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c8:67:fa:e6:a1:95:98:98:a0:f8:36:e2:b2:c2:46:6c:47: 01:92:e2:ec:ad:1b:4e:f8:63:f5:55:15:24:87:3c:1f:f8:37: 27:6c:eb:18:c9:57:a9:4a:59:f5:eb:ed:66:db:0d:56:f2:75: 25:3f:28:96:80:98:27:c2:c5:93:3e:04:47:0e:25:63:54:9c: 89:6d:4a:5c:68:d2:bf:f7:55:82:54:e9:88:2d:b2:a9:fe:6f: 41:86:30:71:12:29:f9:ef:5a:03:c7:65:27:a0:b4:9b:48:a7: 44:24:3d:32:6a:70:e5:ce:1d:4a:07:48:b0:47:6c:50:b8:85: f8:f3:0e:87:11:35:a8:0c:1c:9e:26:45:22:49:72:09:40:ce: 44:d3:ba:56:7e:ba:d4:e4:38:c6:85:aa:71:26:f3:81:f3:b8: 66:1e:b4:70:43:b7:48:4c:04:7a:d5:4a:76:c4:1a:0b:62:d0: 71:f8:48:2d:05:2d:01:86:af:a1:20:71:ed:8b:24:2d:56:1f: 16:09:98:f3:b0:f9:e3:8b:2c:ee:cf:1b:f7:5e:db:10:ac:8d: 42:76:2c:23:36:2e:5f:48:29:c3:94:f7:64:35:b5:e2:84:60: 17:f3:5b:df:f3:94:de:53:70:12:75:24:ee:32:17:4a:45:dc: f2:1c:94:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAwMkUxMTAvBgNVBAUTKDA0QTU1RjdBQjNBRTM5OUQ0RjI1N0Q0RkQyODlCMTA1 ODA4RTVDM0MwHhcNMjUwNjEzMDM1NTUyWhcNMjUwNjIwMDM1NTUyWjAYMRYwFAYD VQQDEw02ODRiYTE0OC0xZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2js5zfROg0125QrdM16QzFGGW0dOrFmMsIsX8TeeOTDjZQwkVDfBHasuEjTm Y40NnK5m87TLMX5cCj3NH+pqdrcV3zHbLmDvQtfIPsjb1Bi5UKxN0muxe1EkK0Fn R98umpea6gmXNjfyazxmbUbutDQOqzX/DpQkZERtzpn/d9k1jurMD6gf02CAwkvz 3ac8mNf6u7MjkS2N5zv5uba7OF9vfKHIKefLeM4jcVMDgbNGdm7qX8zeEHinilvF aZa9w+jRxcGn+u/RM4vpayjXMpKmNwjcJZcpjii4AckHvMizY1FwwR4zmrDEemeu 3LSrjd3iXPRRV9AzRM2VXRe+kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEx3stu5 mReL3qEjMwFPqxVmUsJhMB8GA1UdIwQYMBaAFASlX3qzrjmdTyV9T9KJsQWAjlw8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDAyRS9GMjg3RDMwQUIw MTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9aMVBKWDFQMG9teEJZQ09Y RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLVmZlck91T1oxUEpYMVAwb214QllDT1hEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDAyRS9GMjg3RDMwQUIwMTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9a MVBKWDFQMG9teEJZQ09YRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZyGf65qGVmJig+DbissJGbEcBkuLsrRtO+GP1VRUkhzwf+DcnbOsY yVepSln16+1m2w1W8nUlPyiWgJgnwsWTPgRHDiVjVJyJbUpcaNK/91WCVOmILbKp /m9BhjBxEin571oDx2UnoLSbSKdEJD0yanDlzh1KB0iwR2xQuIX48w6HETWoDBye JkUiSXIJQM5E07pWfrrU5DjGhapxJvOB87hmHrRwQ7dITAR61Up2xBoLYtBx+Egt BS0Bhq+hIHHtiyQtVh8WCZjzsPnjiyzuzxv3XtsQrI1CdiwjNi5fSCnDlPdkNbXi hGAX81vf85TeU3ASdSTuMhdKRdzyHJTi -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:42 2025 by rpki-client