$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft File: BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json) Hash identifier: zd8uEiw/HVw/He4nqzDO4WrNg83COmbjp0pjrXEiEKQ= Subject key identifier: EB:4D:BC:27:D4:26:B7:41:84:4D:40:0F:06:AA:1C:EF:30:A9:41:84 Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft Manifest number: 89 Signing time: Sun 29 Jun 2025 05:33:11 +0000 Manifest this update: Sun 29 Jun 2025 05:33:10 +0000 Manifest next update: Sun 06 Jul 2025 05:33:10 +0000 Files and hashes: 1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: vTV033MbnFBeNq8xdiyI4MTTQqprcwct3n8ZnpYMGKE=) 2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: y9ssG+Nlchy0jWaCyzN61HTdb2V4wt1xqBdScX6Lwak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Validity Not Before: Jun 29 05:33:10 2025 GMT Not After : Jul 6 05:33:10 2025 GMT Subject: CN=6860d016-ad71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bb:c9:0a:84:9c:6a:9e:29:85:31:65:99:e7: 65:a9:e2:ef:98:fc:b4:b8:4b:5e:30:b0:1d:19:15: 9a:27:48:3b:88:42:d1:e6:a9:d1:14:3c:e5:b7:45: 30:9e:3a:f8:3d:4c:30:9b:54:95:18:7d:8c:7d:25: d0:71:4c:4e:a6:ac:9c:ec:1f:b4:1c:18:1a:a0:4d: 4d:71:82:5c:bd:6b:12:a5:33:15:6b:ee:1c:8c:8b: f1:9d:e8:4b:23:a2:e4:71:57:8a:9e:04:39:e7:6e: a2:0c:80:fe:5a:ee:cf:09:39:e2:be:60:3b:69:33: ac:c0:5d:8d:1d:c2:0d:55:1a:fe:08:6a:1f:af:68: 48:7a:61:de:d4:02:26:5a:11:5b:13:52:c0:49:b6: 6c:c7:9d:01:e4:37:8f:f0:53:37:68:a1:21:36:02: 40:97:09:4e:ea:3d:5b:59:64:ec:31:fa:1f:8e:55: db:9c:bd:35:dc:28:b6:63:8d:3a:a9:16:f9:f8:19: 4e:be:03:e6:0e:32:1e:ae:26:97:49:10:d3:14:f8: fb:33:36:c7:29:a2:d8:62:3e:70:91:dd:13:8b:35: 13:21:4a:eb:16:eb:b1:a4:cd:40:50:6b:cc:cf:ab: 65:97:09:46:dd:ea:dc:80:54:1f:fa:6f:1c:23:6c: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4D:BC:27:D4:26:B7:41:84:4D:40:0F:06:AA:1C:EF:30:A9:41:84 X509v3 Authority Key Identifier: keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:b3:61:fe:8a:09:43:83:d2:d2:6d:e4:b7:bc:20:70:5b:85: d3:d1:98:ff:1b:74:f5:fb:ab:1f:bd:d4:1d:5f:43:b3:6c:d2: 35:fe:50:9a:c7:2f:26:e1:74:31:59:9b:6a:1e:07:7b:bc:2f: 5c:df:68:51:fb:38:0f:8a:6a:f5:b0:5c:a6:c5:b7:97:9f:bc: c7:96:ea:c5:27:8f:0c:bd:20:2f:f2:f7:2b:96:76:85:c4:53: ef:8b:3f:75:fe:a6:7b:eb:1f:6b:81:8f:fc:2e:07:64:d9:57: 22:ca:d6:c6:93:e6:c3:04:c9:a8:d3:a0:0f:28:80:27:9b:6c: 1d:e7:10:61:1b:4a:41:45:ac:a5:3f:f8:28:d1:ec:a4:02:52: 04:95:c1:7a:20:b9:e2:a8:0a:1d:4e:22:14:c2:00:9b:79:0f: 01:cd:54:25:d9:b5:a2:26:a1:3d:47:07:be:f2:66:6f:29:44: b2:ed:23:3c:e4:2a:2d:02:85:7c:89:aa:57:fb:ce:b9:62:ad: 94:02:de:4d:90:26:89:42:9a:97:4c:d9:33:21:67:53:98:c2: 0a:97:60:6a:ef:de:7d:06:db:e5:ce:5a:c8:b9:8c:f3:d0:99: 21:2f:71:56:2b:dd:bd:7c:fd:b4:3e:bb:7c:9a:a6:47:9c:8b: 74:f9:d5:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBENUMxMTAvBgNVBAUTKDA2NTVCRDUyNEU4N0QwNzlFNjVCRTMxNjFBQTY1QkU2 OEY5RTgyN0UwHhcNMjUwNjI5MDUzMzEwWhcNMjUwNzA2MDUzMzEwWjAYMRYwFAYD VQQDEw02ODYwZDAxNi1hZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rvJCoScap4phTFlmedlqeLvmPy0uEteMLAdGRWaJ0g7iELR5qnRFDzlt0Uw njr4PUwwm1SVGH2MfSXQcUxOpqyc7B+0HBgaoE1NcYJcvWsSpTMVa+4cjIvxnehL I6LkcVeKngQ5526iDID+Wu7PCTnivmA7aTOswF2NHcINVRr+CGofr2hIemHe1AIm WhFbE1LASbZsx50B5DeP8FM3aKEhNgJAlwlO6j1bWWTsMfofjlXbnL013Ci2Y406 qRb5+BlOvgPmDjIeriaXSRDTFPj7MzbHKaLYYj5wkd0TizUTIUrrFuuxpM1AUGvM z6tllwlG3ercgFQf+m8cI2wBMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtNvCfU JrdBhE1ADwaqHO8wqUGEMB8GA1UdIwQYMBaAFAZVvVJOh9B55lvjFhqmW+aPnoJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEQ1Qy9DQkU2REIwQTgy NzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBIbm1XLU1XR3FaYjVvLWVn bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JsVzlVazZIMEhubVctTVdHcVpiNW8tZWduNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEQ1Qy9DQkU2REIwQTgyNzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBI bm1XLU1XR3FaYjVvLWVnbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCis2H+iglDg9LSbeS3vCBwW4XT0Zj/G3T1+6sfvdQdX0OzbNI1/lCa xy8m4XQxWZtqHgd7vC9c32hR+zgPimr1sFymxbeXn7zHlurFJ48MvSAv8vcrlnaF xFPviz91/qZ76x9rgY/8Lgdk2VciytbGk+bDBMmo06APKIAnm2wd5xBhG0pBRayl P/go0eykAlIElcF6ILniqAodTiIUwgCbeQ8BzVQl2bWiJqE9Rwe+8mZvKUSy7SM8 5CotAoV8iapX+865Yq2UAt5NkCaJQpqXTNkzIWdTmMIKl2Bq7959BtvlzlrIuYzz 0JkhL3FWK929fP20Prt8mqZHnIt0+dUH -----END CERTIFICATE-----Generated at Sun Jun 29 13:53:46 2025 by rpki-client