$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: 9iOj8fPIfwxfcpKf5WQlvZ0M6PNqc+jSHcy1AooJlWI= Subject key identifier: 51:7C:8D:F4:8C:9A:C9:9D:72:46:08:9F:49:5C:FB:BD:AA:F7:14:6A Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 11BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 1188 Signing time: Thu 24 Jul 2025 17:23:12 +0000 Manifest this update: Thu 24 Jul 2025 17:23:12 +0000 Manifest next update: Thu 31 Jul 2025 17:23:12 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: ty19QFQufGimKmM/Nwdn8uejtj4v+Jg0UZGarPV0cCQ=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: jh4/v+GyjU9Au0Vxs0XDzRjJtWql8kiBFNvqkmZsApQ=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 17:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4538 (0x11ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jul 24 17:23:12 2025 GMT Not After : Jul 31 17:23:12 2025 GMT Subject: CN=68826c00-3802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:f6:e5:c4:4f:56:75:7c:9c:2e:ac:5f:89: c0:24:32:ac:54:7a:ae:6e:83:91:d0:94:0a:f7:e7: e2:b3:4a:00:ae:e7:64:6e:2b:87:75:96:6e:49:df: df:ad:94:e4:5e:1a:71:92:f5:12:2b:c6:42:de:29: 20:52:6f:d3:73:73:18:02:51:02:fb:00:98:df:3a: 0c:85:42:52:79:4a:00:ca:d8:74:e5:4d:3a:fd:e5: 03:ee:2e:0d:95:4b:48:86:ae:7b:7a:fb:00:79:46: 99:33:6f:62:21:a8:bb:3e:58:a0:c8:7a:58:0a:8b: 95:cc:50:53:70:2e:97:b7:32:ed:46:1e:89:04:fc: ac:2c:82:7a:f6:87:3e:c2:95:5a:65:59:64:c0:d5: 31:76:43:96:33:e3:e6:4e:f2:c3:96:b4:a0:b8:fb: 6c:91:27:f1:9f:55:42:a0:90:a9:f0:72:59:56:e5: 3d:ab:ab:b3:94:2b:ab:dc:31:e4:87:0a:e9:81:3b: 48:86:e1:25:91:b0:3e:a7:9d:1c:fc:c3:df:df:1f: 73:4c:29:09:1c:64:76:9a:eb:d0:5e:82:6e:56:8c: 3e:a6:5e:11:03:2d:79:19:91:38:15:42:a2:16:cb: ec:66:bc:03:bd:be:23:b5:10:b0:1f:b2:fc:dc:c1: 46:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7C:8D:F4:8C:9A:C9:9D:72:46:08:9F:49:5C:FB:BD:AA:F7:14:6A X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:6e:36:19:38:17:b3:5e:00:55:ef:0c:fb:eb:c3:0a:63:12: f5:95:ae:55:a1:35:26:33:b6:d6:ed:21:81:d9:9a:50:01:04: 4b:a1:20:51:83:a5:4f:73:a6:39:45:fa:e5:a9:91:7c:20:c1: 12:52:f7:17:0c:bd:8c:23:74:1a:6a:d8:aa:72:17:f5:95:d6: 63:89:c8:60:03:9a:33:b0:93:ec:a9:af:9c:25:dc:cc:cf:ad: cf:d8:d9:dd:c1:94:4a:5a:87:2b:56:19:f1:5c:e8:06:8d:ce: 1e:1a:6c:82:97:0c:04:20:7e:23:4e:c4:fe:c3:a7:23:86:0b: 3a:77:2a:3f:1f:2e:ee:5a:84:c7:4c:db:ca:b0:b4:23:a3:6c: ba:9e:6a:92:21:c3:04:ea:ba:4c:d5:ad:ac:c2:f2:70:60:63: 0a:1d:ac:7d:ee:c2:1e:e9:26:1d:4b:fa:e6:10:4c:b5:27:5b: b5:bd:dc:e3:b9:28:b0:3a:cd:98:9e:59:76:2a:6f:da:b0:90: 21:2b:0b:45:09:54:23:2e:b9:6d:7e:ce:39:61:24:40:1e:9a: c2:17:56:52:b9:de:c1:57:d6:93:51:17:e3:ed:0e:e2:19:b7: e0:1b:58:69:12:2a:58:8a:20:92:5f:aa:51:0a:5d:03:67:a8: cf:dc:70:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUwNzI0MTcyMzEyWhcNMjUwNzMxMTcyMzEyWjAYMRYwFAYD VQQDEw02ODgyNmMwMC0zODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujz25cRPVnV8nC6sX4nAJDKsVHquboOR0JQK9+fis0oArudkbiuHdZZuSd/f rZTkXhpxkvUSK8ZC3ikgUm/Tc3MYAlEC+wCY3zoMhUJSeUoAyth05U06/eUD7i4N lUtIhq57evsAeUaZM29iIai7PligyHpYCouVzFBTcC6XtzLtRh6JBPysLIJ69oc+ wpVaZVlkwNUxdkOWM+PmTvLDlrSguPtskSfxn1VCoJCp8HJZVuU9q6uzlCur3DHk hwrpgTtIhuElkbA+p50c/MPf3x9zTCkJHGR2muvQXoJuVow+pl4RAy15GZE4FUKi FsvsZrwDvb4jtRCwH7L83MFGOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF8jfSM msmdckYIn0lc+72q9xRqMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3bjYZOBezXgBV7wz768MKYxL1la5VoTUmM7bW7SGB2ZpQAQRLoSBR g6VPc6Y5RfrlqZF8IMESUvcXDL2MI3Qaatiqchf1ldZjichgA5ozsJPsqa+cJdzM z63P2NndwZRKWocrVhnxXOgGjc4eGmyClwwEIH4jTsT+w6cjhgs6dyo/Hy7uWoTH TNvKsLQjo2y6nmqSIcME6rpM1a2swvJwYGMKHax97sIe6SYdS/rmEEy1J1u1vdzj uSiwOs2Ynll2Km/asJAhKwtFCVQjLrltfs45YSRAHprCF1ZSud7BV9aTURfj7Q7i GbfgG1hpEipYiiCSX6pRCl0DZ6jP3HBs -----END CERTIFICATE-----Generated at Sat Jul 26 01:58:08 2025 by rpki-client