$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft File: mBpus4OnlllRIB38cbLqDUSWGxQ.mft (raw, json) Hash identifier: bBVqZhpb96jBbV29yoqnQUxU6aDWvdLMPio6hLedpIg= Subject key identifier: D3:3D:25:03:D4:46:E7:31:74:52:6E:3A:C2:EE:3E:5C:DD:E8:A4:93 Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 Certificate issuer: /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Certificate serial: 056F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft Manifest number: 056A Signing time: Fri 04 Jul 2025 23:46:58 +0000 Manifest this update: Fri 04 Jul 2025 23:46:57 +0000 Manifest next update: Fri 11 Jul 2025 23:46:57 +0000 Files and hashes: 1: mBpus4OnlllRIB38cbLqDUSWGxQ.crl (hash: 1YNiUEeVqNXhMa+QF9DvkzgksRYk50r5LwMRlIeSXRE=) 2: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (hash: q+L5tLTqjDOQUKLHpaKDvKoXYe9C7le5sZCMKuytaU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1391 (0x56f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110888, serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Validity Not Before: Jul 4 23:46:57 2025 GMT Not After : Jul 11 23:46:57 2025 GMT Subject: CN=686867f1-7983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f9:e9:1c:1c:03:34:35:ae:e8:20:48:f3:c8: 73:a9:33:c4:b0:02:1a:b2:e4:d6:04:a8:8d:7a:de: f3:7a:52:5d:74:96:77:f8:86:44:ee:ae:30:fa:77: 86:8a:5c:58:3f:9f:05:43:e0:32:c7:f0:e8:cc:55: 55:f6:8d:3b:ff:8c:f3:b3:45:83:d9:80:69:bf:42: ca:7f:b3:3d:21:70:09:9b:3f:78:d9:eb:14:30:c7: af:ee:3e:87:6f:de:2f:5b:a1:fd:b0:1b:0d:cb:99: 8a:66:89:26:31:ba:89:4b:ec:7e:79:03:0e:0f:b6: e7:0b:af:b1:9a:5d:e3:01:eb:ca:55:c2:0f:32:b1: 90:6f:42:7d:8f:96:bc:25:a8:e4:97:59:bf:bc:ea: 0d:d0:8d:f7:62:85:85:f6:6d:79:35:0b:f5:ed:22: b2:d5:76:55:93:0f:ce:60:79:fd:d0:80:32:e6:00: d8:45:b7:51:86:9d:74:ea:16:b5:c4:0e:df:71:ee: 60:a0:5c:96:67:7d:de:8c:a4:4d:38:e6:15:23:12: f1:26:0e:af:06:d9:1c:04:a0:7a:8c:58:96:1d:87: f5:a1:b5:02:56:3d:16:67:34:76:18:19:93:51:d8: a1:b8:b3:c7:d0:10:30:48:a7:a7:e7:96:13:fc:f2: b8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3D:25:03:D4:46:E7:31:74:52:6E:3A:C2:EE:3E:5C:DD:E8:A4:93 X509v3 Authority Key Identifier: keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a5:ef:79:ef:c3:a9:1e:1f:43:29:c8:e1:15:b0:53:2c:b8: 2e:9e:b9:5f:19:39:3d:10:eb:b5:15:0d:3a:69:09:51:9f:7c: 9e:01:8d:1a:b4:c3:c5:45:99:0c:13:ea:da:f1:28:59:39:b0: e3:e3:45:54:45:30:f5:a9:bc:00:aa:79:59:b8:5e:18:7e:40: f0:26:f0:1c:d7:bf:aa:57:30:2b:e5:41:6e:24:42:3f:bb:c2: 2d:58:82:3d:4a:0f:93:63:6d:8c:91:5b:6d:18:b2:c5:aa:46: 7b:1a:2f:7c:8a:f2:e9:78:be:6e:af:1b:04:4d:c4:ef:e2:e2: e0:88:f5:1a:fc:ce:d5:e7:49:0d:9d:c2:d8:0d:83:0b:fb:19: 45:17:7a:4e:21:2a:b7:17:4b:34:f1:d1:c4:0c:e8:d6:7c:42: 07:d1:1b:c1:ee:83:aa:22:e0:be:78:e4:05:f9:2c:ba:50:3d: 33:b1:5b:cc:44:46:5e:ba:63:89:d4:e1:e9:71:f6:b7:f0:d7: 7d:00:a7:30:e6:20:5f:0e:ea:79:1a:c7:52:9d:27:b6:17:ab: 7c:fa:20:37:1a:04:53:16:ad:e7:c1:d6:3f:26:ac:e8:f9:55: 0b:d1:2c:5b:8b:8f:9b:3e:aa:8d:29:c9:9f:2b:9d:7d:1b:88: 89:6a:ba:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA4ODgxMTAvBgNVBAUTKDk4MUE2RUIzODNBNzk2NTk1MTIwMURGQzcxQjJFQTBE NDQ5NjFCMTQwHhcNMjUwNzA0MjM0NjU3WhcNMjUwNzExMjM0NjU3WjAYMRYwFAYD VQQDEw02ODY4NjdmMS03OTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/npHBwDNDWu6CBI88hzqTPEsAIasuTWBKiNet7zelJddJZ3+IZE7q4w+neG ilxYP58FQ+Ayx/DozFVV9o07/4zzs0WD2YBpv0LKf7M9IXAJmz942esUMMev7j6H b94vW6H9sBsNy5mKZokmMbqJS+x+eQMOD7bnC6+xml3jAevKVcIPMrGQb0J9j5a8 Jajkl1m/vOoN0I33YoWF9m15NQv17SKy1XZVkw/OYHn90IAy5gDYRbdRhp106ha1 xA7fce5goFyWZ33ejKRNOOYVIxLxJg6vBtkcBKB6jFiWHYf1obUCVj0WZzR2GBmT UdihuLPH0BAwSKen55YT/PK4swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM9JQPU RucxdFJuOsLuPlzd6KSTMB8GA1UdIwQYMBaAFJgabrODp5ZZUSAd/HGy6g1ElhsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDg4OC82QzhFM0FBNkVC MTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxsbFJJQjM4Y2JMcURVU1dH eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CcHVzNE9ubGxsUklCMzhjYkxxRFVTV0d4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDg4OC82QzhFM0FBNkVCMTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxs bFJJQjM4Y2JMcURVU1dHeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBape9578OpHh9DKcjhFbBTLLgunrlfGTk9EOu1FQ06aQlRn3yeAY0a tMPFRZkME+ra8ShZObDj40VURTD1qbwAqnlZuF4YfkDwJvAc17+qVzAr5UFuJEI/ u8ItWII9Sg+TY22MkVttGLLFqkZ7Gi98ivLpeL5urxsETcTv4uLgiPUa/M7V50kN ncLYDYML+xlFF3pOISq3F0s08dHEDOjWfEIH0RvB7oOqIuC+eOQF+Sy6UD0zsVvM REZeumOJ1OHpcfa38Nd9AKcw5iBfDup5GsdSnSe2F6t8+iA3GgRTFq3nwdY/Jqzo +VUL0Sxbi4+bPqqNKcmfK519G4iJarp9 -----END CERTIFICATE-----Generated at Sat Jul 5 15:06:23 2025 by rpki-client