$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft File: BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json) Hash identifier: eD/x8q27BuZviJ/+CXLM41CS/I2gJkYtpRt36ZB979w= Subject key identifier: 7E:1D:BA:EE:DB:4E:C1:BA:EC:38:BB:83:BE:27:3D:A4:AA:87:E0:DB Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft Manifest number: BF Signing time: Thu 09 Oct 2025 06:48:08 +0000 Manifest this update: Thu 09 Oct 2025 06:48:08 +0000 Manifest next update: Thu 16 Oct 2025 06:48:08 +0000 Files and hashes: 1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: 026hd06UezS4rPw2rDuEKzZ6rqzSpyy0vVyYlkP3svk=) 2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: 8S+MnfPAwwqJ4EDo87RkT/K1LmOYDK5SfddRm32GGQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 Oct 2025 06:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Validity Not Before: Oct 9 06:48:08 2025 GMT Not After : Oct 16 06:48:08 2025 GMT Subject: CN=68e75aa8-35fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:27:20:74:57:55:74:7b:15:ae:19:05:e9: 0a:30:79:f1:7f:6b:62:c6:f6:82:87:75:07:d9:be: 40:8b:40:89:4e:00:a8:5f:29:f9:c5:c0:ef:36:c8: ee:7c:da:b6:12:7c:d4:67:44:86:7d:0f:5e:99:da: 92:c4:e7:91:fe:44:30:3d:f1:92:7a:50:0f:29:01: 2f:f1:95:e3:0c:8d:0c:2f:a7:aa:a8:45:cf:b2:bd: 84:95:a8:60:c9:ed:82:3f:3c:99:b6:8a:9b:ed:77: 69:86:41:3c:6e:fc:69:b5:8b:f4:b0:a9:f2:b2:c5: 24:18:0f:1b:af:3a:1d:f5:a2:22:6a:2c:61:23:66: 4c:83:47:e4:cd:b9:4e:83:07:f7:e6:f6:20:38:c9: 17:bb:73:fc:e5:4d:be:10:cd:64:48:6f:d4:4e:bc: 22:ee:56:ae:ef:1f:40:ce:08:51:40:22:d0:75:34: 6f:bf:5b:e8:b0:d4:32:48:63:3a:db:3f:43:cc:0e: 36:ab:54:8b:6a:b7:14:d1:70:60:56:55:b4:2f:1a: a6:47:d4:96:8a:c3:b2:d6:06:54:4b:de:e4:4d:94: c7:14:de:66:c0:bc:78:89:37:65:cf:3a:17:ee:09: 2f:e6:c0:bc:5b:c4:92:3b:7e:63:95:a0:98:de:05: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1D:BA:EE:DB:4E:C1:BA:EC:38:BB:83:BE:27:3D:A4:AA:87:E0:DB X509v3 Authority Key Identifier: keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:70:c5:ad:54:45:a6:c7:f0:16:a3:2f:a4:5b:bc:c1:01:f0: 1c:1b:5a:3f:ab:67:b5:37:f7:03:1c:80:03:2c:d7:81:b0:99: 35:ba:58:23:9b:32:11:1e:7d:c3:00:91:c5:f6:06:b1:0c:57: c8:b6:81:7f:cf:62:6e:27:2f:a9:9c:73:2c:7e:65:18:3c:1a: cd:60:74:04:92:2b:5a:23:7f:bc:4e:2a:48:cf:e8:6d:57:18: 10:9b:2d:41:bc:b9:4c:0f:5b:51:1c:41:09:d4:6c:6b:48:bb: 5c:d5:ec:e0:cb:ea:23:ff:77:d9:4d:b7:26:a8:22:7a:0e:b7: 8e:eb:f1:f0:e5:0a:53:a9:2d:3f:bb:37:bd:8c:b6:95:11:bb: c1:31:ec:cd:14:cf:c5:ef:05:5c:b2:84:41:f6:0e:68:63:e7: 64:17:ce:e5:8a:e6:29:b8:fe:6f:62:ca:d1:ad:da:8b:93:78: 7d:29:93:49:ba:d0:85:b4:0e:ef:c1:a3:3b:de:ad:b3:f3:98: 28:9e:18:66:0b:04:99:cc:cb:4e:72:25:42:50:4e:b9:0f:8b: 71:f5:30:16:22:a5:77:1b:c0:d9:44:3f:6c:04:d1:1c:42:52: ed:26:31:9e:c5:d7:c7:45:00:84:2d:06:41:e7:31:a8:cc:25: 2e:d0:c7:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBENUMxMTAvBgNVBAUTKDA2NTVCRDUyNEU4N0QwNzlFNjVCRTMxNjFBQTY1QkU2 OEY5RTgyN0UwHhcNMjUxMDA5MDY0ODA4WhcNMjUxMDE2MDY0ODA4WjAYMRYwFAYD VQQDEw02OGU3NWFhOC0zNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArO4nIHRXVXR7Fa4ZBekKMHnxf2tixvaCh3UH2b5Ai0CJTgCoXyn5xcDvNsju fNq2EnzUZ0SGfQ9emdqSxOeR/kQwPfGSelAPKQEv8ZXjDI0ML6eqqEXPsr2Elahg ye2CPzyZtoqb7XdphkE8bvxptYv0sKnyssUkGA8brzod9aIiaixhI2ZMg0fkzblO gwf35vYgOMkXu3P85U2+EM1kSG/UTrwi7lau7x9AzghRQCLQdTRvv1vosNQySGM6 2z9DzA42q1SLarcU0XBgVlW0LxqmR9SWisOy1gZUS97kTZTHFN5mwLx4iTdlzzoX 7gkv5sC8W8SSO35jlaCY3gVKHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4duu7b TsG67Di7g74nPaSqh+DbMB8GA1UdIwQYMBaAFAZVvVJOh9B55lvjFhqmW+aPnoJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEQ1Qy9DQkU2REIwQTgy NzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBIbm1XLU1XR3FaYjVvLWVn bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JsVzlVazZIMEhubVctTVdHcVpiNW8tZWduNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEQ1Qy9DQkU2REIwQTgyNzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBI bm1XLU1XR3FaYjVvLWVnbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1cMWtVEWmx/AWoy+kW7zBAfAcG1o/q2e1N/cDHIADLNeBsJk1ulgj mzIRHn3DAJHF9gaxDFfItoF/z2JuJy+pnHMsfmUYPBrNYHQEkitaI3+8TipIz+ht VxgQmy1BvLlMD1tRHEEJ1GxrSLtc1ezgy+oj/3fZTbcmqCJ6DreO6/Hw5QpTqS0/ uze9jLaVEbvBMezNFM/F7wVcsoRB9g5oY+dkF87liuYpuP5vYsrRrdqLk3h9KZNJ utCFtA7vwaM73q2z85gonhhmCwSZzMtOciVCUE65D4tx9TAWIqV3G8DZRD9sBNEc QlLtJjGexdfHRQCELQZB5zGozCUu0MeX -----END CERTIFICATE-----Generated at Sat Oct 11 09:37:56 2025 by rpki-client