$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json) Hash identifier: LAxy2jOOM+BhT1yiM92iNhkcylH2S0+Qr0KwYOzk0GM= Subject key identifier: 20:6D:CE:20:51:F4:50:66:E0:E5:C1:9A:EE:17:2C:6E:C6:34:0C:A1 Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft Manifest number: 0100 Signing time: Thu 19 Jun 2025 01:17:37 +0000 Manifest this update: Thu 19 Jun 2025 01:17:36 +0000 Manifest next update: Thu 26 Jun 2025 01:17:36 +0000 Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: ri6qRyKgL1uYMc0NlXwRc1e61diaEQPSks9SS/O18ZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Validity Not Before: Jun 19 01:17:36 2025 GMT Not After : Jun 26 01:17:36 2025 GMT Subject: CN=68536531-d514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:f0:9d:25:bf:8a:64:bf:f5:10:bc:ed:8a: e6:92:49:43:51:ac:9a:1d:a4:a4:b7:d7:0f:6e:c6: cc:8b:6e:60:6d:82:8e:9e:ae:80:9e:de:33:e4:39: a5:ee:bb:ed:fd:2c:49:96:c7:a0:d8:bd:69:91:57: b0:12:8b:11:ad:60:1e:a5:8e:87:99:09:84:e8:ef: 8f:2a:22:2d:bf:8e:20:70:6d:6b:e7:4a:ff:28:54: a6:ce:a6:0e:43:9d:b7:9c:d8:90:c7:5a:2c:e0:f8: ec:d4:ae:57:e5:59:83:70:b3:56:c8:84:0d:27:2a: 1c:7a:d7:14:ba:c2:43:25:59:a8:59:a4:d9:17:2e: da:c7:a4:8a:33:ab:97:6d:96:0f:17:cb:c7:73:0c: ca:d2:9a:9c:6e:bc:3a:4c:57:16:f7:2e:e3:4a:1b: 84:c0:35:8d:4d:5c:7b:94:da:c2:37:ad:0e:1a:3c: 22:51:34:34:8a:3a:c9:d6:b8:90:b3:c9:4c:19:ce: e0:8e:7c:c7:fc:4a:70:c8:5e:ba:40:c4:86:c7:50: b1:5d:07:a4:be:68:3d:d3:41:cd:db:d3:01:7e:60: 06:21:b1:9f:3c:ab:94:5b:ca:66:4a:01:f4:a2:31: 76:74:a4:db:a0:6e:5f:7a:58:db:06:87:db:9d:d9: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6D:CE:20:51:F4:50:66:E0:E5:C1:9A:EE:17:2C:6E:C6:34:0C:A1 X509v3 Authority Key Identifier: keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:87:dc:2b:d5:06:34:6f:3d:f6:78:11:f0:0a:e0:ec:21:10: d1:23:5c:79:2b:f6:f5:8f:3a:f9:7c:1d:81:f9:18:40:3c:d5: d5:53:ba:88:23:9b:f6:56:9c:f9:55:30:6e:f4:a9:f3:8b:d9: c5:4e:f9:ab:1d:77:9e:fd:be:00:dd:7b:bd:40:05:90:a7:10: 73:b5:e8:90:44:ec:e5:65:45:31:f7:2a:2d:56:71:7b:2c:a1: d5:33:f9:84:90:1d:38:24:94:7f:17:18:75:cc:89:f5:da:73: 98:de:ca:7f:af:e6:30:2a:3f:2b:16:90:52:4e:dd:f7:57:f9: 2a:a6:10:6e:a8:ea:9b:fa:e3:31:1d:38:94:cd:53:a3:46:cc: f1:31:35:78:66:b9:88:53:b4:e1:d1:c1:31:dd:61:15:81:9a: c4:3e:d4:58:e8:8e:a4:2b:9b:d4:cf:36:aa:e4:8b:98:4f:5c: bd:24:f5:56:6d:14:e8:e0:d4:20:6b:6c:ef:1a:75:59:03:80: 16:24:6d:af:f7:8e:b2:54:a0:46:6e:fd:f5:d9:7a:eb:c0:fa: 21:c4:80:e2:b9:78:3f:b1:75:fe:58:9f:5b:66:ab:05:2d:d4: b4:94:e9:12:3b:0c:14:10:f9:87:58:4d:aa:f1:1d:31:d7:3d: 73:42:55:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG OTREOURDMjkwHhcNMjUwNjE5MDExNzM2WhcNMjUwNjI2MDExNzM2WjAYMRYwFAYD VQQDEw02ODUzNjUzMS1kNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSDwnSW/imS/9RC87YrmkklDUayaHaSkt9cPbsbMi25gbYKOnq6Ant4z5Dml 7rvt/SxJlseg2L1pkVewEosRrWAepY6HmQmE6O+PKiItv44gcG1r50r/KFSmzqYO Q523nNiQx1os4Pjs1K5X5VmDcLNWyIQNJyocetcUusJDJVmoWaTZFy7ax6SKM6uX bZYPF8vHcwzK0pqcbrw6TFcW9y7jShuEwDWNTVx7lNrCN60OGjwiUTQ0ijrJ1riQ s8lMGc7gjnzH/EpwyF66QMSGx1CxXQekvmg900HN29MBfmAGIbGfPKuUW8pmSgH0 ojF2dKTboG5feljbBofbndlYZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBtziBR 9FBm4OXBmu4XLG7GNAyhMB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2 MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6 ZUp0cTU4a2djcmY1VFozQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/h9wr1QY0bz32eBHwCuDsIRDRI1x5K/b1jzr5fB2B+RhAPNXVU7qI I5v2Vpz5VTBu9Knzi9nFTvmrHXee/b4A3Xu9QAWQpxBzteiQROzlZUUx9yotVnF7 LKHVM/mEkB04JJR/Fxh1zIn12nOY3sp/r+YwKj8rFpBSTt33V/kqphBuqOqb+uMx HTiUzVOjRszxMTV4ZrmIU7Th0cEx3WEVgZrEPtRY6I6kK5vUzzaq5IuYT1y9JPVW bRTo4NQga2zvGnVZA4AWJG2v946yVKBGbv312XrrwPohxIDiuXg/sXX+WJ9bZqsF LdS0lOkSOwwUEPmHWE2q8R0x1z1zQlUo -----END CERTIFICATE-----Generated at Fri Jun 20 08:27:55 2025 by rpki-client