$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: wwRpXd381Odv4+TDsjfam8fBYku0skrtUrPSwbgK5l4= Subject key identifier: B2:7E:83:09:AF:BA:99:5C:E2:7F:DA:85:07:09:C8:F4:1F:96:95:A5 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 11D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 11A0 Signing time: Mon 08 Sep 2025 17:15:16 +0000 Manifest this update: Mon 08 Sep 2025 17:15:16 +0000 Manifest next update: Mon 15 Sep 2025 17:15:16 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: PX5Hr4kCcKjHlZRQD5Txr1urLDzBfarovOWF0VUUags=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: jh4/v+GyjU9Au0Vxs0XDzRjJtWql8kiBFNvqkmZsApQ=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4562 (0x11d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Sep 8 17:15:16 2025 GMT Not After : Sep 15 17:15:16 2025 GMT Subject: CN=68bf0f24-cd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:cc:17:bf:be:17:fe:58:68:59:ba:0c:e7: 67:68:bd:ae:40:28:3f:c6:2e:ad:0c:9a:83:97:43: 49:a9:5b:3f:85:ab:63:ff:03:65:1b:98:d0:7b:ef: c7:78:26:a8:df:5f:5a:d3:40:27:fa:7b:d1:ea:6f: 77:90:89:55:0b:5d:14:2d:91:1b:c5:7a:3f:5c:9b: 5c:a4:b1:52:e7:b2:ab:f2:f8:c8:f2:d7:49:03:99: 33:b5:74:88:3f:d8:68:3c:b5:ff:1c:cd:0d:62:d4: b9:a1:8f:e6:1d:1a:a9:cd:88:2e:50:4e:14:05:8e: 89:06:e1:07:c0:92:d7:80:a3:70:36:0a:9c:8d:4d: 45:36:4d:ad:ce:b3:ab:7c:f8:df:49:c2:40:3f:1e: 4e:07:ab:06:7b:4f:81:56:b8:69:c4:1c:20:29:b5: 9f:7b:e9:01:3a:8e:06:ed:33:c8:22:a3:b2:80:5a: a5:32:85:d9:4f:40:36:a8:01:7c:8d:49:22:ab:86: 13:f1:89:79:b5:31:63:aa:b4:4a:4e:3f:6d:53:01: 43:54:48:03:c4:2b:64:54:48:23:cf:72:4c:af:8c: a9:8a:c2:ff:49:ef:c1:2d:ba:c2:a7:96:74:95:14: ef:cd:90:cb:d4:b0:1f:ae:93:f1:9c:31:3e:be:95: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7E:83:09:AF:BA:99:5C:E2:7F:DA:85:07:09:C8:F4:1F:96:95:A5 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:74:0e:42:2c:bd:d8:fe:4f:19:b0:f7:98:a8:71:fb:41:79: 1c:8b:29:39:f7:37:67:fd:e4:9a:dc:19:0d:1b:f0:fd:f2:62: b0:94:f5:ec:72:38:58:b8:c5:c9:1b:ce:8f:9d:30:6c:31:13: c4:7a:3b:e1:f3:77:cc:5f:84:81:55:f0:0e:d7:07:8a:db:68: e7:67:78:73:fb:ff:d2:3d:77:8c:32:e0:59:ed:bc:c2:64:6a: 49:80:a7:b5:6b:ba:c7:2e:2f:97:c9:2c:a9:b4:6c:28:c1:bd: d5:5d:c1:71:cc:20:54:ad:44:27:aa:d7:63:b6:b8:f9:61:1e: e1:28:94:7b:0d:b3:79:ae:11:3c:de:9b:1a:cf:8f:53:b2:df: 37:66:97:78:d4:32:88:66:0f:da:f5:7a:3f:e2:2e:5e:04:9d: 0b:97:34:ac:03:e3:6b:78:35:0b:5f:03:d7:8d:9a:d4:cd:07: b3:f5:da:62:25:eb:1e:2c:87:1f:3a:81:96:e7:5f:aa:9e:27: c2:4c:a9:61:e6:ff:ea:03:ce:6e:03:4a:75:c6:6d:f0:37:46: d3:5f:bb:c9:39:61:9c:3f:c1:6b:c3:63:ac:fd:41:21:24:e1: 14:8f:d4:4e:ef:8e:fe:2d:ca:e7:e6:37:0e:fa:2f:3c:de:68: 8d:01:e9:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUwOTA4MTcxNTE2WhcNMjUwOTE1MTcxNTE2WjAYMRYwFAYD VQQDEw02OGJmMGYyNC1jZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+bMF7++F/5YaFm6DOdnaL2uQCg/xi6tDJqDl0NJqVs/hatj/wNlG5jQe+/H eCao319a00An+nvR6m93kIlVC10ULZEbxXo/XJtcpLFS57Kr8vjI8tdJA5kztXSI P9hoPLX/HM0NYtS5oY/mHRqpzYguUE4UBY6JBuEHwJLXgKNwNgqcjU1FNk2tzrOr fPjfScJAPx5OB6sGe0+BVrhpxBwgKbWfe+kBOo4G7TPIIqOygFqlMoXZT0A2qAF8 jUkiq4YT8Yl5tTFjqrRKTj9tUwFDVEgDxCtkVEgjz3JMr4ypisL/Se/BLbrCp5Z0 lRTvzZDL1LAfrpPxnDE+vpVARwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJ+gwmv uplc4n/ahQcJyPQflpWlMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4dA5CLL3Y/k8ZsPeYqHH7QXkciyk59zdn/eSa3BkNG/D98mKwlPXs cjhYuMXJG86PnTBsMRPEejvh83fMX4SBVfAO1weK22jnZ3hz+//SPXeMMuBZ7bzC ZGpJgKe1a7rHLi+XySyptGwowb3VXcFxzCBUrUQnqtdjtrj5YR7hKJR7DbN5rhE8 3psaz49Tst83Zpd41DKIZg/a9Xo/4i5eBJ0LlzSsA+NreDULXwPXjZrUzQez9dpi JeseLIcfOoGW51+qnifCTKlh5v/qA85uA0p1xm3wN0bTX7vJOWGcP8Frw2Os/UEh JOEUj9RO747+Lcrn5jcO+i883miNAele -----END CERTIFICATE-----Generated at Tue Sep 9 12:00:19 2025 by rpki-client