$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft File: mBpus4OnlllRIB38cbLqDUSWGxQ.mft (raw, json) Hash identifier: s37uQbsD4ZtozcMd95zkTnOBbZCx4/caNnClaDzY72U= Subject key identifier: D7:5F:3B:EB:80:64:C1:2E:A4:D5:A1:66:99:FE:D5:40:BB:57:AC:F5 Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 Certificate issuer: /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Certificate serial: 058B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft Manifest number: 0585 Signing time: Fri 22 Aug 2025 23:26:58 +0000 Manifest this update: Fri 22 Aug 2025 23:26:58 +0000 Manifest next update: Fri 29 Aug 2025 23:26:58 +0000 Files and hashes: 1: mBpus4OnlllRIB38cbLqDUSWGxQ.crl (hash: s58pCkhNl9dTkaOvyOAzSJUP1ROUyDuQ9LEEZpFH3Fw=) 2: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (hash: 9s+ytbSfZP14tsCh3SQ3yDAVSot/0B8wxn8RGQZH8yM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110888, serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Validity Not Before: Aug 22 23:26:58 2025 GMT Not After : Aug 29 23:26:58 2025 GMT Subject: CN=68a8fcc2-97a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:54:12:0e:33:59:5c:12:4c:1e:7d:7c:c1: 07:7c:19:37:4f:88:8e:d0:61:a8:00:3d:45:03:dc: 90:72:4f:b9:16:c5:08:50:37:66:03:78:c4:bb:31: a6:ac:fd:23:cc:c9:7a:e1:fc:43:a4:fd:04:75:8c: a9:c3:4f:d0:40:b8:04:2a:2a:64:71:c2:24:a8:a7: 39:4f:46:16:74:01:71:b5:a3:4a:5d:ff:41:55:22: 29:3f:04:28:aa:8a:ba:0a:37:98:e7:28:06:49:a2: 9c:9b:d2:14:0e:14:f5:a6:ca:65:5f:6f:ed:c3:13: f1:81:f7:0c:f1:91:52:74:54:f7:04:5d:69:13:eb: 16:ae:d2:22:73:63:80:26:8c:0c:92:73:85:2f:dd: f8:fa:2b:28:dd:d4:d2:ef:32:00:fc:b6:01:ce:89: b6:79:ce:73:1e:6b:04:23:39:0c:ac:dd:4c:85:f0: cd:62:3c:b8:4b:b5:29:92:c1:41:f2:06:12:a9:96: 24:57:ad:79:4b:5f:70:00:a0:09:33:80:0b:65:60: 3d:48:df:7d:14:64:1b:4c:c0:a0:ef:41:a5:e8:e3: bd:d5:66:61:5f:40:6f:6c:a0:b5:40:16:b1:4b:44: 76:c0:9c:d2:37:07:fa:e5:61:61:5d:cb:78:3b:c1: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5F:3B:EB:80:64:C1:2E:A4:D5:A1:66:99:FE:D5:40:BB:57:AC:F5 X509v3 Authority Key Identifier: keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:d3:9e:bc:fe:98:b2:68:a9:16:ad:39:07:17:2b:18:eb:21: f0:50:8a:33:d7:14:7a:e0:34:0a:f8:ef:de:ba:36:02:b0:7f: f0:64:f0:3a:b7:90:0b:9d:4b:44:1f:a9:64:47:64:39:7a:1f: e3:0c:69:84:00:a4:d2:f0:97:1a:8f:6f:87:44:98:f8:96:54: 4a:79:b3:77:74:22:52:c7:cb:96:f7:c4:01:08:8f:d7:af:b5: 4f:9a:66:78:57:f5:1f:0a:bd:db:97:be:73:be:9a:38:c1:1a: 57:38:2f:8d:f7:e7:e3:42:95:85:18:03:03:4b:e7:3a:ee:87: a8:a6:71:51:30:40:29:0d:b8:94:7c:9c:7d:8f:7f:e7:34:98: 9d:69:30:da:b1:de:d1:d6:ff:81:ec:37:ae:a0:24:45:a3:4e: 58:7b:99:84:94:9f:6f:d2:cb:fb:27:83:3e:8c:78:7f:b5:48: 62:30:04:ac:e8:3b:86:fd:78:d0:5b:17:32:bc:2e:86:b6:df: ac:dc:4d:51:31:da:e3:47:4a:a8:75:f5:2d:56:56:ce:b1:18: 1e:e8:56:13:a6:2b:10:25:ec:65:23:10:31:4a:4c:b0:4a:dd: 46:ed:08:c7:47:9b:84:c9:ad:94:19:cd:9b:c1:fc:1c:0b:98: 2e:f5:8c:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA4ODgxMTAvBgNVBAUTKDk4MUE2RUIzODNBNzk2NTk1MTIwMURGQzcxQjJFQTBE NDQ5NjFCMTQwHhcNMjUwODIyMjMyNjU4WhcNMjUwODI5MjMyNjU4WjAYMRYwFAYD VQQDEw02OGE4ZmNjMi05N2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HxUEg4zWVwSTB59fMEHfBk3T4iO0GGoAD1FA9yQck+5FsUIUDdmA3jEuzGm rP0jzMl64fxDpP0EdYypw0/QQLgEKipkccIkqKc5T0YWdAFxtaNKXf9BVSIpPwQo qoq6CjeY5ygGSaKcm9IUDhT1psplX2/twxPxgfcM8ZFSdFT3BF1pE+sWrtIic2OA JowMknOFL934+iso3dTS7zIA/LYBzom2ec5zHmsEIzkMrN1MhfDNYjy4S7UpksFB 8gYSqZYkV615S19wAKAJM4ALZWA9SN99FGQbTMCg70Gl6OO91WZhX0BvbKC1QBax S0R2wJzSNwf65WFhXct4O8HdkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdfO+uA ZMEupNWhZpn+1UC7V6z1MB8GA1UdIwQYMBaAFJgabrODp5ZZUSAd/HGy6g1ElhsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDg4OC82QzhFM0FBNkVC MTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxsbFJJQjM4Y2JMcURVU1dH eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CcHVzNE9ubGxsUklCMzhjYkxxRFVTV0d4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDg4OC82QzhFM0FBNkVCMTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxs bFJJQjM4Y2JMcURVU1dHeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+0568/piyaKkWrTkHFysY6yHwUIoz1xR64DQK+O/eujYCsH/wZPA6 t5ALnUtEH6lkR2Q5eh/jDGmEAKTS8Jcaj2+HRJj4llRKebN3dCJSx8uW98QBCI/X r7VPmmZ4V/UfCr3bl75zvpo4wRpXOC+N9+fjQpWFGAMDS+c67oeopnFRMEApDbiU fJx9j3/nNJidaTDasd7R1v+B7DeuoCRFo05Ye5mElJ9v0sv7J4M+jHh/tUhiMASs 6DuG/XjQWxcyvC6Gtt+s3E1RMdrjR0qodfUtVlbOsRge6FYTpisQJexlIxAxSkyw St1G7QjHR5uEya2UGc2bwfwcC5gu9Yxr -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:33 2025 by rpki-client