$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json) Hash identifier: tzazfJrgj6GTa6+MjkLdyIYrfNFjMPjIp+BPKrOBMWg= Subject key identifier: 58:55:A7:02:3A:BF:1C:08:F0:41:B8:48:93:D1:75:33:2C:D4:86:10 Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft Manifest number: 011A Signing time: Sat 09 Aug 2025 01:54:34 +0000 Manifest this update: Sat 09 Aug 2025 01:54:34 +0000 Manifest next update: Sat 16 Aug 2025 01:54:34 +0000 Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: dPvJjQ1SfE+K5J6mlgl6P81+uUMvuVWnrVOZ86FKus8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Validity Not Before: Aug 9 01:54:34 2025 GMT Not After : Aug 16 01:54:34 2025 GMT Subject: CN=6896aa5a-9356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:36:d2:72:6a:5e:b9:ee:4e:e4:12:7f:bd:d7: 84:ec:99:65:c8:0f:0b:5a:a1:63:0f:8a:20:5b:8e: 1e:c2:fe:71:36:fa:9d:2b:a0:9c:87:ed:ba:e9:1b: 7b:7d:cc:6f:86:9a:b1:6c:70:c2:98:e5:12:e7:8b: 27:5f:b2:ec:3a:96:7d:97:33:c0:da:06:7a:ea:07: ac:23:3d:01:02:f7:bf:c8:86:29:24:f3:11:57:93: df:69:e2:51:97:22:b6:76:e8:24:ec:09:1f:84:4b: 02:66:3e:cc:e1:27:40:1c:18:39:90:93:9a:4d:00: bd:36:02:05:f2:2f:39:db:6d:29:96:16:9e:e6:cf: c8:8e:8f:3b:e4:40:10:de:80:19:f2:b0:ca:2f:77: e3:64:f2:af:c1:d9:81:6f:75:50:b2:42:cd:17:c4: d5:25:e5:3c:0a:7c:60:78:5d:3a:b1:0a:48:c1:c2: 3f:64:ce:ee:fc:29:09:c9:41:b4:18:3a:cf:59:31: db:fe:35:6b:88:74:1a:6f:95:13:37:44:42:0e:03: 25:5c:03:e4:9a:c1:fb:f2:70:8c:d0:99:a3:c9:0f: 7e:a5:54:dc:d6:5a:71:f1:14:b5:03:be:08:c9:8e: 4c:4f:d3:e3:5c:f5:78:70:26:95:df:9d:35:2a:f4: a2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:55:A7:02:3A:BF:1C:08:F0:41:B8:48:93:D1:75:33:2C:D4:86:10 X509v3 Authority Key Identifier: keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e1:9e:40:43:01:9b:2f:6f:29:c7:60:f6:e3:32:ab:6d:a8: 94:5c:38:c1:11:9c:a1:6f:68:7e:6e:3f:09:ac:1c:16:d9:b9: 95:5c:55:9a:e8:32:93:8b:21:8f:f8:38:66:e5:26:9f:a7:53: 4e:a9:dc:f3:a2:14:bc:3e:13:c2:e8:96:ea:8f:70:1f:3c:ab: ac:d5:8e:11:2b:2f:be:56:a2:7f:22:1c:db:38:ea:bb:00:82: d2:c3:cd:c6:6c:7b:0c:4b:b0:10:a4:64:e9:82:07:c4:35:ab: 13:67:ef:84:7a:f3:2c:e4:1b:b2:e1:73:4d:05:39:9a:3a:52: cb:73:79:76:d5:cc:d8:ce:cd:74:a9:ab:79:f5:85:15:be:ac: 97:51:37:1f:fe:f3:8c:34:96:43:e0:15:d5:07:eb:36:1b:40: b8:33:9f:21:75:6b:8e:15:11:82:8b:fc:92:a6:e1:4e:4b:0e: 3e:b5:36:19:cd:48:c6:2d:85:23:74:b9:13:dc:ca:89:77:b5: 2b:ec:04:36:ec:94:60:c6:09:40:96:47:a6:b0:61:c3:dc:5e: f0:de:d4:c9:be:ce:74:7c:83:b1:1f:17:91:dc:61:b7:90:97: 05:14:e1:ce:09:b2:72:41:df:41:53:7a:54:df:aa:72:20:7b: 30:55:58:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG OTREOURDMjkwHhcNMjUwODA5MDE1NDM0WhcNMjUwODE2MDE1NDM0WjAYMRYwFAYD VQQDEw02ODk2YWE1YS05MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zbScmpeue5O5BJ/vdeE7JllyA8LWqFjD4ogW44ewv5xNvqdK6Cch+266Rt7 fcxvhpqxbHDCmOUS54snX7LsOpZ9lzPA2gZ66gesIz0BAve/yIYpJPMRV5PfaeJR lyK2dugk7AkfhEsCZj7M4SdAHBg5kJOaTQC9NgIF8i85220plhae5s/Ijo875EAQ 3oAZ8rDKL3fjZPKvwdmBb3VQskLNF8TVJeU8CnxgeF06sQpIwcI/ZM7u/CkJyUG0 GDrPWTHb/jVriHQab5UTN0RCDgMlXAPkmsH78nCM0JmjyQ9+pVTc1lpx8RS1A74I yY5MT9PjXPV4cCaV3501KvSiSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhVpwI6 vxwI8EG4SJPRdTMs1IYQMB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2 MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6 ZUp0cTU4a2djcmY1VFozQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB94Z5AQwGbL28px2D24zKrbaiUXDjBEZyhb2h+bj8JrBwW2bmVXFWa 6DKTiyGP+Dhm5Safp1NOqdzzohS8PhPC6Jbqj3AfPKus1Y4RKy++VqJ/IhzbOOq7 AILSw83GbHsMS7AQpGTpggfENasTZ++EevMs5Buy4XNNBTmaOlLLc3l21czYzs10 qat59YUVvqyXUTcf/vOMNJZD4BXVB+s2G0C4M58hdWuOFRGCi/ySpuFOSw4+tTYZ zUjGLYUjdLkT3MqJd7Ur7AQ27JRgxglAlkemsGHD3F7w3tTJvs50fIOxHxeR3GG3 kJcFFOHOCbJyQd9BU3pU36pyIHswVVim -----END CERTIFICATE-----Generated at Sun Aug 10 18:56:28 2025 by rpki-client