$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: iOpChsHWXU+WqyB8lykO8tAlcil3ls9FGSV/m//YqqI= Subject key identifier: 24:61:81:F3:16:DE:73:4B:69:A6:3F:0E:E3:CF:46:A3:91:EC:75:ED Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 116A Signing time: Fri 30 May 2025 17:25:44 +0000 Manifest this update: Fri 30 May 2025 17:25:44 +0000 Manifest next update: Fri 06 Jun 2025 17:25:44 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: qidmy1BBMSrJZKORYIpf0KDAOyUdZKKDaXyIpoytU0Y=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: eq/Jdt+R7/hZ4YW911X1nuNYUDsfy1mJ/nRJ7y06DWU=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: AKBOJFiK0CGzPrk1VjRavIF25nDnN6CV5txK6KFEoQM=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: mTC+0v+tu7i1qyU8oj/k9Utbi2nUrKBfJp5EbQJr3jw=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: z4Zna+X57y726pmGPGMeS7qfbOq2Xmw5XRAkrcvpEs8=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: HiYjj0p3JXRse1uC7XLEGyug0M30GyJfvcEMlo7b1CI=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: Tc4kPNK+2PBhLQIxN1GXPm3IRuhcOCLKA9GmTtF5VIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4502 (0x1196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: May 30 17:25:44 2025 GMT Not After : Jun 6 17:25:44 2025 GMT Subject: CN=6839ea18-4b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:42:f8:cd:2b:b0:2c:a0:03:f6:46:dc:b9: 82:71:1e:3d:83:2f:6f:6b:9e:93:79:9b:32:cc:73: 48:61:19:97:d1:62:ef:bf:02:49:70:6a:60:8c:cc: 7a:9b:1b:bd:fa:3b:a4:ed:af:15:e5:b4:d9:1a:d0: fb:cf:55:4c:70:0c:39:52:69:18:03:54:d2:86:40: 68:6e:42:62:cb:36:08:50:a4:bc:f9:82:9d:60:65: 77:38:95:52:67:fb:e0:48:36:87:f9:96:af:b5:56: 5a:d3:d1:a3:97:ed:79:82:00:a1:45:de:13:3e:64: 92:46:c7:a9:57:19:9b:1f:03:59:59:d9:4a:26:fa: 2a:de:90:b6:51:4f:ae:0a:ee:5f:64:4d:57:8e:e6: 39:d9:82:5b:06:7a:1b:c4:79:27:41:5c:68:03:11: 88:0d:6f:40:33:75:ca:fd:f8:92:ea:ba:b9:af:67: 1c:4b:3e:23:60:21:2b:28:6e:66:ab:e0:1f:25:b0: b3:7c:05:ab:3e:67:a5:e2:54:31:56:aa:13:63:44: d9:32:a9:1c:85:35:18:c4:d8:7b:a4:0e:75:5c:32: e0:de:2c:97:92:1e:28:e0:20:c3:bb:51:10:af:5d: 0c:8b:83:56:ef:eb:a0:36:26:4d:5f:96:1c:b5:29: 88:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:61:81:F3:16:DE:73:4B:69:A6:3F:0E:E3:CF:46:A3:91:EC:75:ED X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:b5:e7:1a:d4:cd:eb:56:48:87:a7:c1:f1:77:0b:76:cb:b8: 7a:aa:97:f9:83:42:8c:1b:af:d3:95:6b:ba:4d:da:97:17:c4: 92:67:a5:da:99:a4:36:a3:a7:0a:c6:98:79:b4:fb:81:b4:d0: f0:95:55:00:59:ba:ec:c9:a7:9a:0c:51:5d:05:75:34:31:8f: ee:88:70:cb:50:98:c0:42:62:c0:7e:ce:8d:f2:ae:fb:58:ac: df:ed:93:16:68:01:9b:02:84:f2:32:40:db:44:75:46:61:fd: 4d:00:97:4c:9b:8e:db:ea:1c:41:39:0d:d8:3d:35:06:cb:69: 25:05:1d:68:3a:a2:62:00:fa:cf:7d:33:66:2f:ce:7e:8f:26: a1:ac:66:d8:9d:d7:bb:11:bb:69:09:f5:34:38:31:66:cc:56: 81:d6:6e:90:29:a2:66:2b:ff:b1:36:c2:69:21:56:1e:4a:2d: 7b:8b:2f:ed:d4:0e:56:ba:e1:ea:e3:ac:f0:f6:f6:67:34:33: eb:78:cc:e4:cf:7e:e8:12:32:1a:f2:96:b6:88:ea:b1:55:05: 2b:13:42:c2:b7:a0:60:5c:2a:db:8f:a5:3a:dc:ad:c8:37:ef: 4f:59:09:25:c5:9a:2a:cc:49:f6:ed:8c:a9:f8:64:7b:c7:80: eb:89:b6:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUwNTMwMTcyNTQ0WhcNMjUwNjA2MTcyNTQ0WjAYMRYwFAYD VQQDEw02ODM5ZWExOC00YjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPNC+M0rsCygA/ZG3LmCcR49gy9va56TeZsyzHNIYRmX0WLvvwJJcGpgjMx6 mxu9+juk7a8V5bTZGtD7z1VMcAw5UmkYA1TShkBobkJiyzYIUKS8+YKdYGV3OJVS Z/vgSDaH+ZavtVZa09Gjl+15ggChRd4TPmSSRsepVxmbHwNZWdlKJvoq3pC2UU+u Cu5fZE1XjuY52YJbBnobxHknQVxoAxGIDW9AM3XK/fiS6rq5r2ccSz4jYCErKG5m q+AfJbCzfAWrPmel4lQxVqoTY0TZMqkchTUYxNh7pA51XDLg3iyXkh4o4CDDu1EQ r10Mi4NW7+ugNiZNX5YctSmIhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRhgfMW 3nNLaaY/DuPPRqOR7HXtMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBteca1M3rVkiHp8Hxdwt2y7h6qpf5g0KMG6/TlWu6TdqXF8SSZ6Xa maQ2o6cKxph5tPuBtNDwlVUAWbrsyaeaDFFdBXU0MY/uiHDLUJjAQmLAfs6N8q77 WKzf7ZMWaAGbAoTyMkDbRHVGYf1NAJdMm47b6hxBOQ3YPTUGy2klBR1oOqJiAPrP fTNmL85+jyahrGbYnde7EbtpCfU0ODFmzFaB1m6QKaJmK/+xNsJpIVYeSi17iy/t 1A5WuuHq46zw9vZnNDPreMzkz37oEjIa8pa2iOqxVQUrE0LCt6BgXCrbj6U63K3I N+9PWQklxZoqzEn27Yyp+GR7x4Dribbx -----END CERTIFICATE-----Generated at Sat May 31 17:24:46 2025 by rpki-client