$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft File: BKM4-nsSbgfA74urj33BycGsMiE.mft (raw, json) Hash identifier: kuiNkNEaQprXTryEpAtWzWF0ZW2t2aDyFq6BxjI8uM0= Subject key identifier: 0F:A6:AF:DF:79:A2:25:B6:FC:CA:EE:D8:B2:1D:F4:92:A5:4C:07:19 Authority key identifier: 04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 Certificate issuer: /CN=A91C146D/serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft Manifest number: 4D Signing time: Sat 09 Aug 2025 07:49:57 +0000 Manifest this update: Sat 09 Aug 2025 07:49:56 +0000 Manifest next update: Sat 16 Aug 2025 07:49:56 +0000 Files and hashes: 1: BKM4-nsSbgfA74urj33BycGsMiE.crl (hash: 3KIlTJzLljBtOeA1qKWV/hpq2/Wk+shR7BXGKbt18yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C146D, serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Validity Not Before: Aug 9 07:49:56 2025 GMT Not After : Aug 16 07:49:56 2025 GMT Subject: CN=6896fda5-d8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:73:cc:b7:f4:ab:21:90:02:08:9d:69:e0: f8:e5:cd:47:5f:ab:c4:ef:59:e4:33:82:18:53:c0: fa:a2:00:28:56:38:81:1c:8b:a0:03:db:8a:6f:0c: 55:27:d1:c9:b0:9a:69:12:fb:c6:b0:ad:18:2e:61: 8a:69:d0:53:0f:a9:b3:0c:91:65:db:f5:e3:57:fc: 11:bf:80:44:a9:bb:1d:80:9b:5d:29:5b:65:0f:7c: 07:16:82:f2:3b:24:b8:e2:a8:7e:50:32:a9:ca:11: 64:5b:6c:c1:47:77:ab:6d:21:3f:f4:17:ee:0c:89: 1e:95:3f:c3:bc:12:10:13:a8:5d:3b:75:b0:78:f1: 37:67:f4:1e:5b:8c:80:4e:b7:ec:10:a3:db:75:59: f9:90:31:37:08:41:52:03:dc:87:4e:4e:a2:2a:5b: 88:94:9d:29:b3:15:2d:db:6e:b5:11:41:7a:e2:81: a4:65:6c:3f:2a:8e:61:42:cd:f3:9b:f0:5c:80:db: e8:58:6d:a0:3f:71:39:f5:92:9c:f0:26:ce:91:12: 19:1c:bc:e7:ed:d5:62:fc:d8:50:9c:72:8c:4e:89: 7b:49:72:73:a1:7f:20:40:bd:df:fa:b4:b3:f2:b9: 87:10:ee:34:63:7a:97:ba:9b:bd:98:0e:d2:25:c7: 9b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A6:AF:DF:79:A2:25:B6:FC:CA:EE:D8:B2:1D:F4:92:A5:4C:07:19 X509v3 Authority Key Identifier: keyid:04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:dc:ea:a4:75:ce:10:5a:84:58:83:56:79:cd:1e:4b:10:ef: e7:87:db:21:b9:a9:34:c6:ed:03:44:3a:3f:85:bd:23:a3:64: 4e:f6:7f:b8:e8:29:20:15:11:e7:98:62:14:b8:f5:d3:1e:45: 37:58:2d:33:a5:d1:19:c3:6c:35:92:12:86:f5:0f:92:94:37: 7b:aa:7c:be:95:02:27:df:0a:7e:45:60:3d:53:e7:9b:95:b2: 6d:38:c2:9a:77:8b:f0:31:c8:80:10:a1:2e:35:f1:39:7b:5e: 2d:44:5f:b1:a7:1f:a6:c3:7e:97:6c:e1:2c:55:44:f3:b4:7d: eb:28:89:62:98:cc:65:b1:4b:c5:d9:f9:2d:d1:9b:c1:ea:db: f1:fa:17:01:9d:00:da:e2:a4:18:1e:3e:a2:92:7e:30:5e:f7: 09:9e:db:5f:4d:e7:10:e6:09:6d:c7:fc:c7:6c:b3:d8:f6:80: 47:4e:be:40:c9:a2:eb:aa:f4:fe:06:7b:c7:f7:88:0c:1f:bb: f9:84:8d:85:ce:ca:cd:85:2b:7f:28:da:d6:87:63:c2:54:5f: 3c:62:cc:f3:ca:6d:07:d0:70:d9:65:14:12:30:b2:44:e6:d0: ed:17:2d:6d:88:77:08:42:4e:e7:06:6f:8a:33:44:fa:55:15: cf:2f:33:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTQ2RDExMC8GA1UEBRMoMDRBMzM4RkE3QjEyNkUwN0MwRUY4QkFCOEY3REMxQzlD MUFDMzIyMTAeFw0yNTA4MDkwNzQ5NTZaFw0yNTA4MTYwNzQ5NTZaMBgxFjAUBgNV BAMTDTY4OTZmZGE1LWQ4YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCotXPMt/SrIZACCJ1p4PjlzUdfq8TvWeQzghhTwPqiAChWOIEci6AD24pvDFUn 0cmwmmkS+8awrRguYYpp0FMPqbMMkWXb9eNX/BG/gESpux2Am10pW2UPfAcWgvI7 JLjiqH5QMqnKEWRbbMFHd6ttIT/0F+4MiR6VP8O8EhATqF07dbB48Tdn9B5bjIBO t+wQo9t1WfmQMTcIQVID3IdOTqIqW4iUnSmzFS3bbrURQXrigaRlbD8qjmFCzfOb 8FyA2+hYbaA/cTn1kpzwJs6REhkcvOft1WL82FCccoxOiXtJcnOhfyBAvd/6tLPy uYcQ7jRjepe6m72YDtIlx5tFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD6av33mi Jbb8yu7Ysh30kqVMBxkwHwYDVR0jBBgwFoAUBKM4+nsSbgfA74urj33BycGsMiEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxNDZEL0Y0RDVBNjdFMDAz NzExRjBCQkQ3MjQ3NUM0RjlBRTAyL0JLTTQtbnNTYmdmQTc0dXJqMzNCeWNHc01p RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQktNNC1uc1NiZ2ZBNzR1cmozM0J5Y0dzTWlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx NDZEL0Y0RDVBNjdFMDAzNzExRjBCQkQ3MjQ3NUM0RjlBRTAyL0JLTTQtbnNTYmdm QTc0dXJqMzNCeWNHc01pRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAILc6qR1zhBahFiDVnnNHksQ7+eH2yG5qTTG7QNEOj+FvSOjZE72f7jo KSAVEeeYYhS49dMeRTdYLTOl0RnDbDWSEob1D5KUN3uqfL6VAiffCn5FYD1T55uV sm04wpp3i/AxyIAQoS418Tl7Xi1EX7GnH6bDfpds4SxVRPO0fesoiWKYzGWxS8XZ +S3Rm8Hq2/H6FwGdANripBgePqKSfjBe9wme219N5xDmCW3H/Mdss9j2gEdOvkDJ ouuq9P4Ge8f3iAwfu/mEjYXOys2FK38o2taHY8JUXzxizPPKbQfQcNllFBIwskTm 0O0XLW2IdwhCTucGb4ozRPpVFc8vM2E= -----END CERTIFICATE-----Generated at Mon Aug 11 04:17:06 2025 by rpki-client