$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft File: BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json) Hash identifier: Ok3G58CZHXkMCW39rA9dbp6YbHhb2ZHKnnA5AOyDIl0= Subject key identifier: A6:E9:B9:80:29:2E:C9:62:A2:95:7C:4F:13:B2:70:C1:F4:FD:EF:C2 Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft Manifest number: 7A Signing time: Sat 31 May 2025 06:16:17 +0000 Manifest this update: Sat 31 May 2025 06:16:16 +0000 Manifest next update: Sat 07 Jun 2025 06:16:16 +0000 Files and hashes: 1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: sJ2AcX64+K2LMngcKSXej3wScLgxMjskk+qBJ0qYlh8=) 2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: y9ssG+Nlchy0jWaCyzN61HTdb2V4wt1xqBdScX6Lwak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Validity Not Before: May 31 06:16:16 2025 GMT Not After : Jun 7 06:16:16 2025 GMT Subject: CN=683a9eb0-646c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bb:b1:d3:4d:2b:47:47:a1:f3:34:db:f1:a9: c9:5c:4d:10:ff:f1:dc:3c:2c:4a:db:f1:c8:ac:c6: 09:18:77:f3:14:a4:21:f5:bf:ed:3b:74:83:f0:89: 56:09:a4:98:b9:fb:f7:35:6d:e4:5e:83:26:50:ae: 27:dd:db:a7:b8:19:5e:35:a5:51:14:85:0f:02:c6: 61:02:6f:f8:cf:fe:31:27:c4:92:2c:3e:dc:a9:9c: 66:a4:7f:20:d8:db:cb:18:3a:9a:92:60:a5:93:16: 30:f9:3d:a2:7d:12:79:a2:44:ad:cc:0b:12:a3:2a: 12:6d:27:62:d2:5b:ef:1b:89:54:5d:24:36:28:e7: a2:f2:45:f9:e0:13:65:d1:fc:60:8a:32:55:86:42: ad:ab:93:21:18:c0:5f:1c:e4:d8:25:81:ba:d3:16: fd:40:9f:5b:fe:0d:6e:e6:60:2d:d7:47:82:ea:d9: a3:4c:ab:e2:fd:8d:30:2f:7c:1f:f3:3e:ea:92:7b: e0:f0:b3:06:42:f1:b4:f6:39:c4:a7:0d:ac:a5:ca: 2b:6a:2c:57:e1:eb:17:f1:d8:80:7c:f6:27:e5:c7: 02:24:88:27:f6:29:64:6d:8a:a6:09:2e:d2:d7:98: 2d:52:12:ed:c1:3d:92:09:af:25:a1:a0:13:8a:1d: 66:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E9:B9:80:29:2E:C9:62:A2:95:7C:4F:13:B2:70:C1:F4:FD:EF:C2 X509v3 Authority Key Identifier: keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ae:25:39:13:2d:2a:56:b5:56:15:a6:90:95:94:c2:54:8f: 5f:4c:3c:06:06:ec:85:43:d6:22:00:bd:e1:f6:73:63:09:c6: 47:71:10:17:5c:06:2d:c5:21:fe:db:02:8c:6d:3c:88:b1:72: 68:0f:3e:d2:6a:db:46:21:6e:52:1a:5a:31:19:c7:29:f9:44: 9a:f7:49:b0:00:74:48:fe:77:d7:39:ee:2d:71:36:98:bd:ed: 30:44:c7:64:eb:50:65:39:e7:ae:ad:f2:41:9a:bf:b5:77:4b: cb:c5:92:ce:9c:b0:e6:8c:87:bd:84:c4:2d:c1:7a:ed:5f:2b: ff:53:47:e7:90:09:08:f7:72:d3:c3:09:d9:bd:b6:7d:35:8a: 3f:61:bb:ef:ad:52:54:95:0d:e0:be:20:b5:9a:d3:8a:d3:0b: 14:51:1c:c0:e3:40:64:8f:60:b4:5b:11:8c:15:f1:aa:cc:7e: 5d:b6:9f:24:4e:af:04:3f:1f:91:eb:21:ea:09:cb:df:81:9d: 34:9f:e9:ae:2a:29:a0:4f:28:fb:e5:64:67:5a:44:d1:a6:5c: 6f:97:2e:41:de:fa:a6:06:a6:db:88:03:05:83:68:0d:73:a3: 22:d7:9e:ab:59:f4:d4:3c:71:f1:0f:a5:62:27:f9:d7:cd:70: fb:e6:db:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MEQ1QzExMC8GA1UEBRMoMDY1NUJENTI0RTg3RDA3OUU2NUJFMzE2MUFBNjVCRTY4 RjlFODI3RTAeFw0yNTA1MzEwNjE2MTZaFw0yNTA2MDcwNjE2MTZaMBgxFjAUBgNV BAMTDTY4M2E5ZWIwLTY0NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnu7HTTStHR6HzNNvxqclcTRD/8dw8LErb8cisxgkYd/MUpCH1v+07dIPwiVYJ pJi5+/c1beRegyZQrifd26e4GV41pVEUhQ8CxmECb/jP/jEnxJIsPtypnGakfyDY 28sYOpqSYKWTFjD5PaJ9EnmiRK3MCxKjKhJtJ2LSW+8biVRdJDYo56LyRfngE2XR /GCKMlWGQq2rkyEYwF8c5NglgbrTFv1An1v+DW7mYC3XR4Lq2aNMq+L9jTAvfB/z PuqSe+DwswZC8bT2OcSnDaylyitqLFfh6xfx2IB89iflxwIkiCf2KWRtiqYJLtLX mC1SEu3BPZIJryWhoBOKHWZPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpum5gCku yWKilXxPE7JwwfT978IwHwYDVR0jBBgwFoAUBlW9Uk6H0HnmW+MWGqZb5o+egn4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwRDVDL0NCRTZEQjBBODI3 NjExRUY4RTgzRUQwREM0RjlBRTAyL0JsVzlVazZIMEhubVctTVdHcVpiNW8tZWdu NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQmxXOVVrNkgwSG5tVy1NV0dxWmI1by1lZ240LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw RDVDL0NCRTZEQjBBODI3NjExRUY4RTgzRUQwREM0RjlBRTAyL0JsVzlVazZIMEhu bVctTVdHcVpiNW8tZWduNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGiuJTkTLSpWtVYVppCVlMJUj19MPAYG7IVD1iIAveH2c2MJxkdxEBdc Bi3FIf7bAoxtPIixcmgPPtJq20YhblIaWjEZxyn5RJr3SbAAdEj+d9c57i1xNpi9 7TBEx2TrUGU5566t8kGav7V3S8vFks6csOaMh72ExC3Beu1fK/9TR+eQCQj3ctPD Cdm9tn01ij9hu++tUlSVDeC+ILWa04rTCxRRHMDjQGSPYLRbEYwV8arMfl22nyRO rwQ/H5HrIeoJy9+BnTSf6a4qKaBPKPvlZGdaRNGmXG+XLkHe+qYGptuIAwWDaA1z oyLXnqtZ9NQ8cfEPpWIn+dfNcPvm2+k= -----END CERTIFICATE-----Generated at Sat May 31 16:27:43 2025 by rpki-client