$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft File: BKM4-nsSbgfA74urj33BycGsMiE.mft (raw, json) Hash identifier: V6K9yRSAALoXqW6Ygdpp7cdzXoM1NXk+t8RCRUu48lQ= Subject key identifier: 4F:D2:57:6D:3F:A4:11:1B:07:27:04:11:A5:4C:30:44:3B:3D:F7:6C Authority key identifier: 04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 Certificate issuer: /CN=A91C146D/serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft Manifest number: 79 Signing time: Wed 05 Nov 2025 06:59:51 +0000 Manifest this update: Wed 05 Nov 2025 06:59:51 +0000 Manifest next update: Wed 12 Nov 2025 06:59:50 +0000 Files and hashes: 1: BKM4-nsSbgfA74urj33BycGsMiE.crl (hash: dCppmQQIhW4PVJpDXLUsLTfi0ed8UPs3hg6tBqGR8C0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C146D, serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Validity Not Before: Nov 5 06:59:51 2025 GMT Not After : Nov 12 06:59:50 2025 GMT Subject: CN=690af5e7-b266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:c1:b2:65:c1:15:f7:ca:5c:a9:d2:c6:51: bb:1d:94:ed:ee:5e:8d:90:43:41:dd:88:df:5c:d0: fc:05:17:78:38:8b:61:d6:e7:d3:04:17:19:7d:57: 2c:7f:17:33:40:aa:d1:57:4f:5a:3f:0a:8d:0c:25: 51:cb:81:97:0e:c5:59:73:02:78:75:43:06:f3:c1: 66:5b:52:64:61:ab:8c:16:e5:f0:47:e5:4f:2d:e0: b3:e6:b9:2b:fa:f5:29:5b:4a:03:18:36:42:2b:85: a9:c6:18:01:b7:95:b9:b7:d8:ab:06:03:5f:8b:48: eb:db:1a:31:7f:1b:44:ae:f6:46:48:9b:5a:76:7b: b4:dd:93:ce:d4:6e:29:5f:5f:f7:f8:1c:88:43:6a: 44:db:65:72:7d:a5:34:f8:44:d9:6d:a8:ad:67:db: 8f:96:cd:e0:43:0c:1d:6f:21:85:ad:6b:48:e8:b7: 55:5e:2a:d2:9f:46:49:35:72:1a:76:0a:4e:eb:dc: b3:1b:1f:65:97:bf:39:51:6d:79:35:74:85:c2:f4: f3:b3:d3:f7:b8:fa:5a:f7:d2:47:63:45:a6:84:4c: c3:a4:5e:7d:42:23:09:1d:2f:90:9b:10:85:6e:88: 69:70:54:b4:57:89:53:93:6b:df:11:d3:02:92:82: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D2:57:6D:3F:A4:11:1B:07:27:04:11:A5:4C:30:44:3B:3D:F7:6C X509v3 Authority Key Identifier: keyid:04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:1e:a4:20:8a:65:e4:7c:1c:32:90:20:95:6b:82:6a:51:3f: 5d:6e:a6:07:f0:04:df:2c:6c:c1:96:1d:eb:c0:4b:07:dd:0c: 25:b6:71:2e:6d:3c:c9:25:26:87:c6:6b:8e:20:f7:46:4d:9e: 8d:c5:9d:94:ce:94:9f:b1:b4:fe:54:92:1a:aa:0a:f1:e9:78: b8:b1:60:78:eb:b0:e2:c7:bf:73:4c:ae:82:b6:ca:07:78:88: 8e:c2:58:9f:c1:9f:87:3c:a8:73:47:9e:ac:15:33:66:d6:ec: b3:11:9b:f7:dd:e9:8f:11:c2:09:8f:29:2b:87:51:50:37:74: e3:4f:e1:94:a8:a9:44:cf:52:6d:7b:ac:b3:cb:e9:c8:18:13: 21:34:d6:83:aa:8d:7e:71:20:80:77:4f:f4:fc:41:23:2c:66: 6b:48:8a:fb:77:4d:ac:1f:bc:f7:58:44:46:8d:7b:82:3e:ee: c7:df:4c:b1:50:07:dd:17:16:b0:ed:c8:26:d7:da:2f:32:6b: a1:e0:08:79:99:05:8d:12:40:71:2b:63:49:00:56:b2:f1:2d: b7:f9:2b:8a:2a:69:bf:5e:8a:ac:c5:d0:e5:bb:c7:2e:e6:79: 26:41:1a:40:c5:a9:c8:7b:f7:a7:be:d3:48:95:e0:0f:40:74: df:91:a7:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTQ2RDExMC8GA1UEBRMoMDRBMzM4RkE3QjEyNkUwN0MwRUY4QkFCOEY3REMxQzlD MUFDMzIyMTAeFw0yNTExMDUwNjU5NTFaFw0yNTExMTIwNjU5NTBaMBgxFjAUBgNV BAMTDTY5MGFmNWU3LWIyNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4p8GyZcEV98pcqdLGUbsdlO3uXo2QQ0HdiN9c0PwFF3g4i2HW59MEFxl9Vyx/ FzNAqtFXT1o/Co0MJVHLgZcOxVlzAnh1QwbzwWZbUmRhq4wW5fBH5U8t4LPmuSv6 9SlbSgMYNkIrhanGGAG3lbm32KsGA1+LSOvbGjF/G0Su9kZIm1p2e7Tdk87Ubilf X/f4HIhDakTbZXJ9pTT4RNltqK1n24+WzeBDDB1vIYWta0jot1VeKtKfRkk1chp2 Ck7r3LMbH2WXvzlRbXk1dIXC9POz0/e4+lr30kdjRaaETMOkXn1CIwkdL5CbEIVu iGlwVLRXiVOTa98R0wKSgu33AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT9JXbT+k ERsHJwQRpUwwRDs992wwHwYDVR0jBBgwFoAUBKM4+nsSbgfA74urj33BycGsMiEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxNDZEL0Y0RDVBNjdFMDAz NzExRjBCQkQ3MjQ3NUM0RjlBRTAyL0JLTTQtbnNTYmdmQTc0dXJqMzNCeWNHc01p RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQktNNC1uc1NiZ2ZBNzR1cmozM0J5Y0dzTWlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx NDZEL0Y0RDVBNjdFMDAzNzExRjBCQkQ3MjQ3NUM0RjlBRTAyL0JLTTQtbnNTYmdm QTc0dXJqMzNCeWNHc01pRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK0epCCKZeR8HDKQIJVrgmpRP11upgfwBN8sbMGWHevASwfdDCW2cS5t PMklJofGa44g90ZNno3FnZTOlJ+xtP5UkhqqCvHpeLixYHjrsOLHv3NMroK2ygd4 iI7CWJ/Bn4c8qHNHnqwVM2bW7LMRm/fd6Y8RwgmPKSuHUVA3dONP4ZSoqUTPUm17 rLPL6cgYEyE01oOqjX5xIIB3T/T8QSMsZmtIivt3TawfvPdYREaNe4I+7sffTLFQ B90XFrDtyCbX2i8ya6HgCHmZBY0SQHErY0kAVrLxLbf5K4oqab9eiqzF0OW7xy7m eSZBGkDFqch796e+00iV4A9AdN+Rp+I= -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:51 2025 by rpki-client