$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: Y1S1EsFX8KOvRRcbU4u25Qnawwp6ztlbnKs0Ru99ELg= Subject key identifier: C7:20:E1:0D:C1:DA:D9:30:D4:BB:62:16:B1:86:4F:55:46:F6:DD:8E Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 11B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 1187 Signing time: Tue 22 Jul 2025 17:23:08 +0000 Manifest this update: Tue 22 Jul 2025 17:23:08 +0000 Manifest next update: Tue 29 Jul 2025 17:23:08 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: Rl5li/3t7h4v5cQQ5qkXM06Ns50dgXhgw2Ph9zLb1dg=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: jh4/v+GyjU9Au0Vxs0XDzRjJtWql8kiBFNvqkmZsApQ=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4537 (0x11b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jul 22 17:23:08 2025 GMT Not After : Jul 29 17:23:08 2025 GMT Subject: CN=687fc8fc-7293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:aa:ab:a4:27:86:a9:bb:21:f6:73:60:4d: 2a:37:52:a9:4e:4b:c4:27:f9:48:e5:bb:a0:66:da: 74:00:2b:a3:75:47:cf:06:56:16:86:54:cb:b8:1e: 35:06:41:82:f0:9e:0c:1f:f8:ce:ff:cb:8c:63:24: 5a:22:af:d5:bd:27:28:2f:65:48:f7:d5:f5:25:18: 3b:c2:b5:b1:0d:ae:92:85:85:ce:51:b9:73:69:60: 2b:de:be:45:b5:60:6e:55:5c:31:41:d9:cf:56:8d: 58:7b:be:76:fd:97:ea:29:9b:54:6e:45:22:b9:a2: 94:45:81:08:30:12:47:28:6a:de:70:1a:0e:71:f1: 92:a7:6f:f9:04:f9:2f:8c:bf:4c:4d:a9:61:18:35: 52:75:0b:f7:34:c9:8f:31:6b:8e:5b:53:6e:97:a4: 58:39:15:50:71:21:23:aa:f3:98:1a:27:b2:fb:8a: 16:2d:89:74:d3:62:3c:84:e0:78:cf:87:c6:6e:1b: 0d:56:0a:45:2c:aa:df:7b:01:5b:59:f0:8a:fb:9b: b5:e3:5e:cf:c7:0f:f5:a5:a6:81:0c:2f:45:a4:0b: 73:c9:50:7e:31:44:fa:ce:8b:f7:11:91:18:7e:0f: 50:e2:e0:70:cf:df:2d:15:0c:8e:f1:9d:cd:6a:52: a0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:20:E1:0D:C1:DA:D9:30:D4:BB:62:16:B1:86:4F:55:46:F6:DD:8E X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4f:06:63:27:66:54:11:0a:2e:8a:03:17:48:ac:b5:5f:fc: 93:45:c9:67:b6:d0:9b:44:63:a4:17:cc:1a:ea:b1:95:ee:4f: 31:43:52:d2:32:d2:9a:52:99:ad:e2:c6:b8:79:cd:c9:2b:45: 2d:bb:84:e8:4b:b0:26:24:f0:98:24:ce:d5:3b:39:54:36:34: 47:63:2c:1a:c1:1d:ac:ce:1b:5a:05:dd:ad:85:da:0f:c2:a4: 8f:ee:71:6c:38:29:d3:ed:0a:bc:3e:7f:61:81:54:1b:7d:0e: 0e:cf:19:dc:a9:59:1b:94:69:07:58:c8:fa:79:30:8b:f5:e8: 04:0e:d5:68:07:c0:83:36:3a:60:ea:ca:29:89:7e:7b:b4:44: 95:99:6a:09:59:5a:2d:64:03:0c:7e:f2:69:ce:36:7a:da:5b: ab:6b:1e:f3:72:09:02:90:48:3c:22:82:a3:f3:7f:ec:33:1f: 59:79:35:f5:28:99:43:9e:7e:14:1e:b4:80:2e:85:34:80:df: a4:b6:23:c4:cd:d3:92:5e:cd:56:13:4e:fd:40:35:1a:b3:ee: 1a:33:a5:36:bd:ce:c7:7f:4d:6d:3e:e8:1a:b2:a8:cd:52:c4: ff:45:13:cb:3e:66:d6:bf:78:59:a4:ec:2c:47:d7:fb:26:98: 11:c9:38:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUwNzIyMTcyMzA4WhcNMjUwNzI5MTcyMzA4WjAYMRYwFAYD VQQDEw02ODdmYzhmYy03MjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hiqq6Qnhqm7IfZzYE0qN1KpTkvEJ/lI5bugZtp0ACujdUfPBlYWhlTLuB41 BkGC8J4MH/jO/8uMYyRaIq/VvScoL2VI99X1JRg7wrWxDa6ShYXOUblzaWAr3r5F tWBuVVwxQdnPVo1Ye752/ZfqKZtUbkUiuaKURYEIMBJHKGrecBoOcfGSp2/5BPkv jL9MTalhGDVSdQv3NMmPMWuOW1Nul6RYORVQcSEjqvOYGiey+4oWLYl002I8hOB4 z4fGbhsNVgpFLKrfewFbWfCK+5u1417Pxw/1paaBDC9FpAtzyVB+MUT6zov3EZEY fg9Q4uBwz98tFQyO8Z3NalKgEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcg4Q3B 2tkw1LtiFrGGT1VG9t2OMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMTwZjJ2ZUEQouigMXSKy1X/yTRclnttCbRGOkF8wa6rGV7k8xQ1LS MtKaUpmt4sa4ec3JK0Utu4ToS7AmJPCYJM7VOzlUNjRHYywawR2szhtaBd2thdoP wqSP7nFsOCnT7Qq8Pn9hgVQbfQ4OzxncqVkblGkHWMj6eTCL9egEDtVoB8CDNjpg 6sopiX57tESVmWoJWVotZAMMfvJpzjZ62lurax7zcgkCkEg8IoKj83/sMx9ZeTX1 KJlDnn4UHrSALoU0gN+ktiPEzdOSXs1WE079QDUas+4aM6U2vc7Hf01tPugasqjN UsT/RRPLPmbWv3hZpOwsR9f7JpgRyThX -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:03 2025 by rpki-client