$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: Nfo6Lxoltoh+s1YgACNdskSKPfGbS5oP0I8qSAm0TDY= Subject key identifier: 62:8B:A2:E4:65:D3:DD:69:A5:EA:40:E0:52:D7:CA:D5:24:2B:69:14 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 11E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 11B7 Signing time: Fri 24 Oct 2025 17:38:50 +0000 Manifest this update: Fri 24 Oct 2025 17:38:49 +0000 Manifest next update: Fri 31 Oct 2025 17:38:49 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: ZNjD+T04xkv3Czyd7HJLASfG69UIKrjirChYOxgkAVI=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: jh4/v+GyjU9Au0Vxs0XDzRjJtWql8kiBFNvqkmZsApQ=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4585 (0x11e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Oct 24 17:38:49 2025 GMT Not After : Oct 31 17:38:49 2025 GMT Subject: CN=68fbb9a9-11e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:91:1f:a0:16:96:34:56:e4:82:72:00:d7:31: df:bf:dd:cb:8d:b0:cd:85:8c:95:f3:5d:17:f4:b9: 7a:aa:bc:34:28:81:64:ef:62:dd:f2:0d:69:e3:89: 0d:3d:27:83:55:63:79:4b:21:8c:1c:87:68:c3:61: cc:48:e8:e8:d9:5b:3e:9c:ba:b2:17:f0:53:ad:13: 72:e6:66:e2:bb:72:9e:06:d7:fc:3e:1a:20:84:b1: bf:5a:97:2e:99:6a:15:3e:25:3a:3a:eb:79:81:2d: e1:2b:11:3c:17:91:ce:84:4f:03:e9:8d:85:e2:ff: 3f:04:01:88:98:28:74:6b:81:9e:00:a8:11:b5:da: b5:82:c0:f0:48:40:27:c8:97:ac:23:08:90:92:e0: be:65:02:ce:98:ea:26:23:ad:0c:1a:d4:f5:8b:f6: 33:35:6e:07:5a:3e:16:30:94:fd:32:44:e0:16:8f: 9e:66:aa:79:36:5e:9c:0d:eb:92:83:d7:2b:c4:a8: 77:d6:ca:9c:0e:54:ca:ef:fe:cc:cd:84:61:ed:99: 60:d0:43:d5:0a:71:f4:a1:e4:9e:a9:fc:b2:23:03: c5:17:96:c0:03:ca:d9:a5:c2:f1:7f:fc:76:c3:be: cb:37:40:57:93:44:d3:36:cd:7f:c3:35:dc:23:a0: 8d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8B:A2:E4:65:D3:DD:69:A5:EA:40:E0:52:D7:CA:D5:24:2B:69:14 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:5f:d9:39:39:36:42:ad:46:f4:b1:52:1c:38:21:99:8d:37: db:61:9b:6b:95:6e:ac:35:08:d2:7f:4e:25:c5:2f:1f:4f:de: 21:e7:8d:0c:20:41:88:44:ce:89:61:69:10:cc:55:27:62:0b: 33:25:d6:ed:be:7b:b6:67:71:17:9b:bf:3a:75:17:1f:fa:c7: 17:27:84:70:56:10:1c:24:a2:fc:2d:4f:47:aa:fd:c0:b7:f1: 42:a9:c6:c0:cc:12:61:28:93:7e:9b:a9:32:ef:40:20:d7:38: 69:87:1b:f5:90:6f:20:0f:97:be:df:c1:e5:e0:b5:c3:7b:84: ab:54:b1:52:35:1b:52:60:fa:c2:16:b0:ec:bc:5f:9b:ce:ad: a1:dd:c9:a4:96:b7:65:9e:1d:50:97:ed:78:dd:04:3e:be:12: 2a:3a:6b:23:05:60:86:0e:c1:6f:55:67:c9:93:22:72:06:67: 99:ff:96:3c:bd:d6:13:d0:09:07:cb:6f:7a:c2:7f:c5:92:07: 13:08:bc:7d:db:d0:bc:81:1f:e6:e6:e8:d2:fc:14:7d:58:dd: 7f:b1:fd:ff:e6:26:3c:fc:0e:0c:31:61:18:b2:30:cf:1d:f0: 47:a0:53:70:7f:b5:5e:ff:67:bc:e3:f7:ef:d6:63:88:b8:80: 63:9d:a3:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUxMDI0MTczODQ5WhcNMjUxMDMxMTczODQ5WjAYMRYwFAYD VQQDEw02OGZiYjlhOS0xMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75EfoBaWNFbkgnIA1zHfv93LjbDNhYyV810X9Ll6qrw0KIFk72Ld8g1p44kN PSeDVWN5SyGMHIdow2HMSOjo2Vs+nLqyF/BTrRNy5mbiu3KeBtf8PhoghLG/Wpcu mWoVPiU6Out5gS3hKxE8F5HOhE8D6Y2F4v8/BAGImCh0a4GeAKgRtdq1gsDwSEAn yJesIwiQkuC+ZQLOmOomI60MGtT1i/YzNW4HWj4WMJT9MkTgFo+eZqp5Nl6cDeuS g9crxKh31sqcDlTK7/7MzYRh7Zlg0EPVCnH0oeSeqfyyIwPFF5bAA8rZpcLxf/x2 w77LN0BXk0TTNs1/wzXcI6CNvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKLouRl 091ppepA4FLXytUkK2kUMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZX9k5OTZCrUb0sVIcOCGZjTfbYZtrlW6sNQjSf04lxS8fT94h540M IEGIRM6JYWkQzFUnYgszJdbtvnu2Z3EXm786dRcf+scXJ4RwVhAcJKL8LU9Hqv3A t/FCqcbAzBJhKJN+m6ky70Ag1zhphxv1kG8gD5e+38Hl4LXDe4SrVLFSNRtSYPrC FrDsvF+bzq2h3cmklrdlnh1Ql+143QQ+vhIqOmsjBWCGDsFvVWfJkyJyBmeZ/5Y8 vdYT0AkHy296wn/FkgcTCLx929C8gR/m5ujS/BR9WN1/sf3/5iY8/A4MMWEYsjDP HfBHoFNwf7Ve/2e84/fv1mOIuIBjnaP/ -----END CERTIFICATE-----Generated at Sun Oct 26 09:36:52 2025 by rpki-client