$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: 91Ycuj1PVPSDBH6FQgB/P/Nu95dECpsEEhltvm9ID6E= Subject key identifier: D9:78:F7:14:E0:4D:1B:1E:17:F5:B1:0D:BE:3B:47:7F:95:3C:14:59 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 11C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 1197 Signing time: Fri 22 Aug 2025 17:21:24 +0000 Manifest this update: Fri 22 Aug 2025 17:21:24 +0000 Manifest next update: Fri 29 Aug 2025 17:21:24 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: rZryUFuUaRP97F/XS5TgxvnRBB10ctNQwcla/Za1vD0=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: jh4/v+GyjU9Au0Vxs0XDzRjJtWql8kiBFNvqkmZsApQ=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4553 (0x11c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Aug 22 17:21:24 2025 GMT Not After : Aug 29 17:21:24 2025 GMT Subject: CN=68a8a714-cee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6e:8a:81:e9:ff:86:b9:ca:d0:38:4b:66:3b: 0e:23:9a:30:93:c3:ae:12:8d:4f:88:f1:35:ce:c2: eb:f7:71:f9:31:82:8b:d3:36:89:f2:c6:8a:cb:de: 05:e3:61:af:d2:ab:c8:25:02:1f:c3:0b:e0:af:5d: a5:60:c2:2b:a4:86:b3:83:be:a5:f7:34:f3:09:24: e7:27:7c:b9:ae:ed:ad:fa:15:7a:2b:bb:9f:0c:12: e0:f7:bc:87:4e:c7:42:e9:03:15:4d:b5:73:c3:e8: 27:d4:00:bc:ac:af:e7:d2:f7:b6:27:69:54:53:4f: cb:55:b8:8e:ba:f4:a1:43:9b:86:06:e1:d6:d9:b6: e7:cd:c9:34:5b:fe:5d:07:b0:4d:cd:b3:11:04:6c: d7:95:91:37:72:d4:09:99:cd:b6:5d:8f:dc:f4:26: 5d:51:f6:d4:9c:8b:fc:49:8b:3d:ab:4e:9c:40:fe: ad:bf:a3:02:5b:7c:eb:26:6b:cb:7a:6e:f2:0d:88: 11:ee:03:22:12:ea:fc:f3:47:70:33:f7:c0:2b:f5: c1:d7:f6:03:51:c8:07:15:09:72:78:b6:2a:27:ba: bd:e2:f3:f3:4b:5b:c3:08:aa:7a:0f:10:1e:74:03: 78:cb:21:eb:2f:0c:db:af:48:b8:df:00:62:63:04: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:78:F7:14:E0:4D:1B:1E:17:F5:B1:0D:BE:3B:47:7F:95:3C:14:59 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ee:48:80:ad:ed:2b:ea:18:99:73:5f:a2:15:15:c3:d5:f1: 03:fe:35:87:73:e5:56:75:9e:38:18:80:58:ad:3c:50:4c:e8: 81:58:7b:1a:32:cf:c1:68:7e:15:de:66:b0:82:98:56:5c:e3: d6:84:06:a0:c0:ce:da:cc:f4:fd:d9:46:bb:c5:ce:88:d3:97: fb:87:c8:81:fd:ba:a1:59:a3:e8:42:7c:d7:66:13:08:02:75: c3:96:85:d6:b1:bd:0e:bd:2a:12:5a:a9:a8:9c:78:38:7e:32: 2b:1d:c7:14:05:74:e9:5f:1a:e5:0d:5d:00:94:09:b6:f9:98: c1:f4:96:a5:fe:ae:d8:52:30:32:bd:cb:ff:0a:68:27:aa:de: 8f:17:a8:7f:f5:6e:d0:39:62:7d:dd:90:ed:d8:0e:60:49:d2: cd:bd:ca:21:87:0c:a5:db:21:91:26:53:cd:c8:ca:88:2f:70: a8:2f:90:09:3f:d0:99:c2:06:32:ae:81:ae:44:ea:4a:62:0c: cb:51:25:c1:de:48:99:df:47:5e:8d:5c:a4:fc:f7:31:65:24: 9d:21:e8:a4:52:96:52:15:79:69:61:e1:b3:a0:61:31:f4:2a: 06:f5:00:c5:a9:65:27:c1:4e:c8:ac:f3:c7:7f:42:f9:fd:03: ab:4d:79:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUwODIyMTcyMTI0WhcNMjUwODI5MTcyMTI0WjAYMRYwFAYD VQQDEw02OGE4YTcxNC1jZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6W6Kgen/hrnK0DhLZjsOI5owk8OuEo1PiPE1zsLr93H5MYKL0zaJ8saKy94F 42Gv0qvIJQIfwwvgr12lYMIrpIazg76l9zTzCSTnJ3y5ru2t+hV6K7ufDBLg97yH TsdC6QMVTbVzw+gn1AC8rK/n0ve2J2lUU0/LVbiOuvShQ5uGBuHW2bbnzck0W/5d B7BNzbMRBGzXlZE3ctQJmc22XY/c9CZdUfbUnIv8SYs9q06cQP6tv6MCW3zrJmvL em7yDYgR7gMiEur880dwM/fAK/XB1/YDUcgHFQlyeLYqJ7q94vPzS1vDCKp6DxAe dAN4yyHrLwzbr0i43wBiYwRmPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNl49xTg TRseF/WxDb47R3+VPBRZMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ7kiAre0r6hiZc1+iFRXD1fED/jWHc+VWdZ44GIBYrTxQTOiBWHsa Ms/BaH4V3mawgphWXOPWhAagwM7azPT92Ua7xc6I05f7h8iB/bqhWaPoQnzXZhMI AnXDloXWsb0OvSoSWqmonHg4fjIrHccUBXTpXxrlDV0AlAm2+ZjB9Jal/q7YUjAy vcv/Cmgnqt6PF6h/9W7QOWJ93ZDt2A5gSdLNvcohhwyl2yGRJlPNyMqIL3CoL5AJ P9CZwgYyroGuROpKYgzLUSXB3kiZ30dejVyk/PcxZSSdIeikUpZSFXlpYeGzoGEx 9CoG9QDFqWUnwU7IrPPHf0L5/QOrTXnZ -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:38 2025 by rpki-client