$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json) Hash identifier: svTEz91ZTf/j0VEsqVtlQUT6W7HN2H2WEccN7XkZ/Xo= Subject key identifier: E8:64:D0:8C:14:42:E4:20:04:6F:A5:CA:E2:11:EF:36:C7:48:B7:42 Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Certificate serial: 0BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft Manifest number: 0BCB Signing time: Sun 24 Aug 2025 18:54:48 +0000 Manifest this update: Sun 24 Aug 2025 18:54:47 +0000 Manifest next update: Sun 31 Aug 2025 18:54:47 +0000 Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: by0EqhxUvXBxld7Mc8hoMEp5d2o1s61ISrQeq7bvvkg=) 2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: 3edR8k68PlyDLwSNioDrZi097Di1Z0qsLBIpivE7sS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3029 (0xbd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Validity Not Before: Aug 24 18:54:47 2025 GMT Not After : Aug 31 18:54:47 2025 GMT Subject: CN=68ab5ff7-4897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:e9:2b:93:14:63:cc:c2:65:8d:cd:b2:14: 2f:57:83:ed:c8:1e:d7:83:4f:eb:33:69:1f:44:6c: 0f:a9:de:85:c9:5f:84:cc:a4:46:3a:84:79:fe:d5: 68:18:4a:ac:a3:1b:a6:1c:56:f8:61:f8:8a:b5:bd: cf:ba:84:85:98:90:35:d6:dd:ba:cb:39:8c:30:7c: 75:98:ac:15:d6:72:a8:8e:11:45:b4:56:67:e2:4a: fe:59:f8:6a:bf:c0:37:b3:3a:96:80:e3:d0:e0:de: e5:31:5a:6a:8a:84:26:be:0c:a0:f4:88:1b:ec:88: 9a:3d:c0:a5:42:f3:46:83:63:03:b2:e0:d8:d7:d1: 5f:52:a0:2b:64:76:bd:b6:90:d4:72:d7:45:cb:45: 7d:70:ec:5c:f7:62:fb:76:2b:e6:1f:4d:08:68:c3: 48:ed:b2:2e:58:65:cf:d3:e6:d2:ee:99:7c:99:ec: dd:8c:f8:3b:2c:1c:aa:94:53:bd:d6:e0:79:8f:2a: 06:43:7f:0b:bc:34:91:29:c5:59:bc:19:01:9c:7b: a7:7b:fc:d4:9d:30:23:b4:64:e9:ef:cc:ec:9a:6b: bb:74:d2:0c:03:5e:56:35:d8:b6:cc:d3:73:0f:e2: a1:c8:43:b1:91:8c:64:17:ec:38:b4:67:56:09:fc: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:64:D0:8C:14:42:E4:20:04:6F:A5:CA:E2:11:EF:36:C7:48:B7:42 X509v3 Authority Key Identifier: keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:77:c8:03:b3:a5:aa:d4:39:ee:1c:45:4c:78:b4:92:bf:6b: 71:89:a9:c0:aa:63:d0:23:92:e3:78:75:20:6d:2d:ed:0a:1d: d9:07:1a:07:4a:aa:27:ce:06:3a:80:86:c3:7c:ba:b6:2c:7a: bd:ce:7c:7e:a4:f5:b2:b2:31:ed:c0:7d:17:7c:48:3e:95:59: 21:e4:79:29:f3:f8:76:a6:af:bc:10:0b:73:b3:fe:6a:33:2b: 41:0d:aa:2d:2b:4d:76:ca:c5:40:48:1b:7a:e4:1c:99:f2:92: bf:cb:1e:06:31:6a:0b:d7:3b:bd:85:76:e4:1b:f2:1d:80:19: 7a:02:ca:15:9f:e5:57:ab:a4:cf:52:94:2f:90:8b:7a:44:c0: 13:d4:7f:bc:c5:52:d1:8e:ac:21:8b:99:47:30:ff:39:cd:c0: 59:05:b6:d5:7e:34:d9:32:82:05:db:97:a8:04:00:cd:55:d4: 75:78:75:90:85:1a:98:e7:f2:48:6c:af:95:b7:d7:2a:7e:f4: d7:45:db:c0:e1:e2:9d:16:46:3d:d1:ee:ad:7e:71:c3:34:58: a1:b4:2d:b8:0a:f5:53:65:ba:70:f7:9c:b1:d0:66:ac:52:b9: 2c:dd:ba:4e:c4:33:bb:cb:42:44:39:d9:5d:ca:64:89:2c:45: 95:11:8a:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFENzMxMTAvBgNVBAUTKEY5Qjk3NTE2MUZFMkVBMzdFMEU0NjJBRDVGNUI4QTc0 MjgwMTM0RTYwHhcNMjUwODI0MTg1NDQ3WhcNMjUwODMxMTg1NDQ3WjAYMRYwFAYD VQQDEw02OGFiNWZmNy00ODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw97pK5MUY8zCZY3NshQvV4PtyB7Xg0/rM2kfRGwPqd6FyV+EzKRGOoR5/tVo GEqsoxumHFb4YfiKtb3PuoSFmJA11t26yzmMMHx1mKwV1nKojhFFtFZn4kr+Wfhq v8A3szqWgOPQ4N7lMVpqioQmvgyg9Igb7IiaPcClQvNGg2MDsuDY19FfUqArZHa9 tpDUctdFy0V9cOxc92L7divmH00IaMNI7bIuWGXP0+bS7pl8mezdjPg7LByqlFO9 1uB5jyoGQ38LvDSRKcVZvBkBnHune/zUnTAjtGTp78zsmmu7dNIMA15WNdi2zNNz D+KhyEOxkYxkF+w4tGdWCfw2QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhk0IwU QuQgBG+lyuIR7zbHSLdCMB8GA1UdIwQYMBaAFPm5dRYf4uo34ORirV9binQoATTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQ3My81Q0M2NkJENDI2 MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZqZmc1R0t0WDF1S2RDZ0JO T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ibDFGaF9pNmpmZzVHS3RYMXVLZENnQk5PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUQ3My81Q0M2NkJENDI2MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZq Zmc1R0t0WDF1S2RDZ0JOT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBed8gDs6Wq1DnuHEVMeLSSv2txianAqmPQI5LjeHUgbS3tCh3ZBxoH SqonzgY6gIbDfLq2LHq9znx+pPWysjHtwH0XfEg+lVkh5Hkp8/h2pq+8EAtzs/5q MytBDaotK012ysVASBt65ByZ8pK/yx4GMWoL1zu9hXbkG/IdgBl6AsoVn+VXq6TP UpQvkIt6RMAT1H+8xVLRjqwhi5lHMP85zcBZBbbVfjTZMoIF25eoBADNVdR1eHWQ hRqY5/JIbK+Vt9cqfvTXRdvA4eKdFkY90e6tfnHDNFihtC24CvVTZbpw95yx0Gas Urks3bpOxDO7y0JEOdldymSJLEWVEYoI -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:14 2025 by rpki-client