$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft File: BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json) Hash identifier: jMh1g9k5V14XgQdX/H+3PHR/hDTxMGG2EtuDnCirUwo= Subject key identifier: 2A:EE:57:B6:7F:95:B1:92:12:6C:E2:63:FE:9B:17:CB:25:04:45:06 Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft Manifest number: 9C Signing time: Tue 05 Aug 2025 06:49:28 +0000 Manifest this update: Tue 05 Aug 2025 06:49:28 +0000 Manifest next update: Tue 12 Aug 2025 06:49:28 +0000 Files and hashes: 1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: MKTR/eW5zETC6GrCN0L+0xxVQpqwazYWRwDEZimoTvE=) 2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: y9ssG+Nlchy0jWaCyzN61HTdb2V4wt1xqBdScX6Lwak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Validity Not Before: Aug 5 06:49:28 2025 GMT Not After : Aug 12 06:49:28 2025 GMT Subject: CN=6891a978-36ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2b:bb:8a:d8:fd:53:a0:ad:16:49:1d:37:86: 62:b7:5a:41:34:4f:3c:fe:72:80:29:b7:0e:3e:3a: f0:0d:c9:3a:d9:18:f8:a8:54:13:af:08:b9:e9:58: 72:c8:57:98:d5:86:54:18:e1:72:df:b7:b0:99:7a: d7:9d:62:a6:af:fd:2b:93:62:cf:91:e9:fb:6b:7f: fb:14:25:18:0c:e9:b6:df:78:5e:d6:4d:c6:a1:e1: af:c1:96:42:e0:75:d0:e1:51:ee:cf:9d:80:05:66: 7c:a2:c9:de:d1:7a:11:71:76:b6:f7:44:01:a0:40: a8:45:15:e8:79:5f:44:1d:4a:4a:0b:f6:64:24:9d: 62:d1:a8:5a:02:7c:84:d2:be:2a:12:24:8c:1a:06: 40:27:c6:76:77:5f:91:5b:1d:d5:13:33:e2:e8:96: 83:2a:f8:63:70:b2:d6:0c:1f:42:c3:aa:ee:0a:fa: 53:a4:ea:5e:3c:88:35:2a:96:d9:7c:b8:3a:f2:46: 24:d6:b1:56:f4:6d:9c:82:cc:fd:fd:b9:06:34:58: 34:df:c5:77:b9:64:f9:2b:54:12:8f:ec:ed:1b:51: e5:e6:28:9e:ca:a5:32:04:e2:36:f9:69:59:8a:94: 8f:4b:1a:9d:3f:a5:08:e3:8c:4c:f3:fb:bd:8a:07: de:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EE:57:B6:7F:95:B1:92:12:6C:E2:63:FE:9B:17:CB:25:04:45:06 X509v3 Authority Key Identifier: keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1e:91:b8:85:b0:9c:68:e4:30:f5:cc:40:e8:76:d6:76:c5: f4:3b:2c:2f:27:f0:9b:79:f6:b1:82:27:4c:5c:1d:0e:a1:b6: 74:fe:10:3b:f9:46:be:a2:06:d8:46:2e:56:1b:03:d2:14:fc: c6:61:0f:f4:e9:5d:59:bd:fb:dd:9f:a3:d7:f7:1e:42:15:78: fc:fa:b4:f0:ab:2f:f9:3b:48:7f:3a:2d:33:25:e0:77:bb:52: 44:d0:27:b4:6b:ac:02:f5:86:50:5d:ce:bc:fe:23:28:77:5f: 12:b7:fb:0c:6d:f5:17:03:43:d1:96:d0:cb:d6:bd:03:f2:bb: df:98:2f:f2:9e:94:bf:7a:5f:3b:cc:15:bc:1c:04:31:f0:2c: 73:2e:48:0d:63:cd:77:07:a5:6f:ac:f3:c9:41:49:1d:e0:ab: e3:1f:33:65:cc:b5:b6:5d:43:8b:f3:f1:31:e7:66:19:1a:4e: b3:20:f3:97:2b:94:56:38:2f:17:d4:ee:2d:6c:d6:01:5a:63: cb:ad:a5:ad:55:ac:6c:9d:6c:3d:5c:2f:77:3e:5d:92:4e:71: 3e:30:53:36:6d:57:80:df:cb:8c:72:c2:5c:7c:dc:8a:6c:df: 82:d0:95:4e:4f:09:1a:ec:91:ce:4d:5c:42:c7:48:a6:10:69: d5:e9:17:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBENUMxMTAvBgNVBAUTKDA2NTVCRDUyNEU4N0QwNzlFNjVCRTMxNjFBQTY1QkU2 OEY5RTgyN0UwHhcNMjUwODA1MDY0OTI4WhcNMjUwODEyMDY0OTI4WjAYMRYwFAYD VQQDEw02ODkxYTk3OC0zNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8iu7itj9U6CtFkkdN4Zit1pBNE88/nKAKbcOPjrwDck62Rj4qFQTrwi56Vhy yFeY1YZUGOFy37ewmXrXnWKmr/0rk2LPken7a3/7FCUYDOm233he1k3GoeGvwZZC 4HXQ4VHuz52ABWZ8osne0XoRcXa290QBoECoRRXoeV9EHUpKC/ZkJJ1i0ahaAnyE 0r4qEiSMGgZAJ8Z2d1+RWx3VEzPi6JaDKvhjcLLWDB9Cw6ruCvpTpOpePIg1KpbZ fLg68kYk1rFW9G2cgsz9/bkGNFg038V3uWT5K1QSj+ztG1Hl5iieyqUyBOI2+WlZ ipSPSxqdP6UI44xM8/u9igfebwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCruV7Z/ lbGSEmziY/6bF8slBEUGMB8GA1UdIwQYMBaAFAZVvVJOh9B55lvjFhqmW+aPnoJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEQ1Qy9DQkU2REIwQTgy NzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBIbm1XLU1XR3FaYjVvLWVn bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JsVzlVazZIMEhubVctTVdHcVpiNW8tZWduNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEQ1Qy9DQkU2REIwQTgyNzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBI bm1XLU1XR3FaYjVvLWVnbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcHpG4hbCcaOQw9cxA6HbWdsX0OywvJ/CbefaxgidMXB0OobZ0/hA7 +Ua+ogbYRi5WGwPSFPzGYQ/06V1Zvfvdn6PX9x5CFXj8+rTwqy/5O0h/Oi0zJeB3 u1JE0Ce0a6wC9YZQXc68/iMod18St/sMbfUXA0PRltDL1r0D8rvfmC/ynpS/el87 zBW8HAQx8CxzLkgNY813B6VvrPPJQUkd4KvjHzNlzLW2XUOL8/Ex52YZGk6zIPOX K5RWOC8X1O4tbNYBWmPLraWtVaxsnWw9XC93Pl2STnE+MFM2bVeA38uMcsJcfNyK bN+C0JVOTwka7JHOTVxCx0imEGnV6Reu -----END CERTIFICATE-----Generated at Tue Aug 5 20:12:26 2025 by rpki-client