$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: 6trLhgRxrefeHZWTVZ6/vT/pXH3fOHhIxMtdLaQ/q6I= Subject key identifier: 59:CD:A4:34:18:96:3B:AE:B0:E7:4E:56:A9:7A:3D:C9:12:84:BC:CE Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 118F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 1163 Signing time: Wed 14 May 2025 17:22:42 +0000 Manifest this update: Wed 14 May 2025 17:22:42 +0000 Manifest next update: Wed 21 May 2025 17:22:42 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: NulAfoO7NguRSTM0XNbA0dSPL7lAw3v5tMCpAvGHlMs=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: eq/Jdt+R7/hZ4YW911X1nuNYUDsfy1mJ/nRJ7y06DWU=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: AKBOJFiK0CGzPrk1VjRavIF25nDnN6CV5txK6KFEoQM=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: mTC+0v+tu7i1qyU8oj/k9Utbi2nUrKBfJp5EbQJr3jw=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: z4Zna+X57y726pmGPGMeS7qfbOq2Xmw5XRAkrcvpEs8=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: HiYjj0p3JXRse1uC7XLEGyug0M30GyJfvcEMlo7b1CI=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: Tc4kPNK+2PBhLQIxN1GXPm3IRuhcOCLKA9GmTtF5VIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4495 (0x118f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: May 14 17:22:42 2025 GMT Not After : May 21 17:22:42 2025 GMT Subject: CN=6824d162-5c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:74:8c:22:b4:17:8f:e6:84:e8:c0:2f:9a: 48:4a:eb:d8:d5:fa:70:a8:8e:06:e1:59:03:ea:82: 39:91:80:bc:04:1a:d2:3a:82:fc:3a:bd:44:3c:96: ad:0a:a4:78:5c:1e:e3:46:7e:a7:71:b0:e1:96:96: b7:b8:c1:5f:12:4d:41:a7:85:d8:28:fc:d2:fc:7b: 12:63:e7:db:de:71:43:d7:5e:fe:c4:59:fd:79:93: 97:42:9d:bf:45:ba:ff:1d:c9:7b:eb:30:8a:c1:14: 8f:bf:89:95:89:ca:64:48:0d:33:32:9a:b0:94:e3: fe:8d:0c:64:5d:81:b8:67:47:67:4c:66:40:6e:02: 46:79:c3:a8:29:24:6a:f0:fd:f8:d7:fb:51:eb:9a: 44:9b:69:bc:3d:b3:dd:f3:6a:6f:09:f5:33:ee:18: 31:47:ec:0a:03:3c:f8:e9:9d:25:fd:25:b8:5d:6c: 96:cb:32:7d:86:d7:39:a9:94:e5:f3:8d:ed:bc:32: 3f:19:06:fd:7a:c5:24:61:9f:3d:6f:5f:65:18:98: 97:ad:80:ae:6a:43:c9:ed:30:d9:ba:50:41:be:94: fe:b4:ec:56:ea:99:e5:0a:e2:7a:47:3a:5b:16:12: 8c:f7:00:70:19:f7:31:98:cd:83:8a:17:66:a9:b1: b8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CD:A4:34:18:96:3B:AE:B0:E7:4E:56:A9:7A:3D:C9:12:84:BC:CE X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:53:ef:e0:61:09:0e:f2:0c:0c:14:46:a0:74:44:28:62:2b: 39:2d:bb:64:fd:3e:77:7d:59:c9:6f:f4:8d:44:76:8f:da:69: 4d:2b:c7:fe:02:9b:72:69:98:0f:1b:79:90:a6:be:cc:e0:22: 7e:65:9b:58:c2:7d:19:19:9b:1b:da:23:b7:d5:34:ae:89:fd: d7:c8:2b:2b:6f:82:14:40:7d:b3:6d:3b:a4:19:b7:7e:bf:c3: 39:ce:10:60:d5:cc:5e:27:5a:d1:4f:13:64:72:10:26:cb:d8: 5c:cb:32:e6:43:e6:7a:38:8a:14:16:74:58:8e:3b:c2:cf:a8: 00:57:0c:95:1c:29:29:20:46:06:80:0d:af:a1:d7:27:25:03: 04:1d:7a:a1:e0:28:6c:27:3b:4c:2d:ab:d7:54:84:b9:25:f9: fe:27:4d:b5:04:3a:72:7e:74:7e:c5:03:58:ba:1b:ed:50:49: bd:5f:8b:c5:b9:78:7e:35:0e:5f:41:ff:3f:8b:c1:ce:e8:ed: f8:4a:59:cb:4f:95:c0:84:50:2a:64:c9:47:74:d1:11:2c:32: 21:91:0a:88:40:48:50:dd:ea:c1:71:b7:b8:2d:a6:43:97:46: d2:81:2b:b5:bb:ea:2c:bd:e8:03:68:46:6d:44:4b:13:be:0b: 2d:12:c0:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUwNTE0MTcyMjQyWhcNMjUwNTIxMTcyMjQyWjAYMRYwFAYD VQQDEw02ODI0ZDE2Mi01YzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkx0jCK0F4/mhOjAL5pISuvY1fpwqI4G4VkD6oI5kYC8BBrSOoL8Or1EPJat CqR4XB7jRn6ncbDhlpa3uMFfEk1Bp4XYKPzS/HsSY+fb3nFD117+xFn9eZOXQp2/ Rbr/Hcl76zCKwRSPv4mVicpkSA0zMpqwlOP+jQxkXYG4Z0dnTGZAbgJGecOoKSRq 8P341/tR65pEm2m8PbPd82pvCfUz7hgxR+wKAzz46Z0l/SW4XWyWyzJ9htc5qZTl 843tvDI/GQb9esUkYZ89b19lGJiXrYCuakPJ7TDZulBBvpT+tOxW6pnlCuJ6Rzpb FhKM9wBwGfcxmM2DihdmqbG4bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnNpDQY ljuusOdOVql6PckShLzOMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQU+/gYQkO8gwMFEagdEQoYis5Lbtk/T53fVnJb/SNRHaP2mlNK8f+ AptyaZgPG3mQpr7M4CJ+ZZtYwn0ZGZsb2iO31TSuif3XyCsrb4IUQH2zbTukGbd+ v8M5zhBg1cxeJ1rRTxNkchAmy9hcyzLmQ+Z6OIoUFnRYjjvCz6gAVwyVHCkpIEYG gA2vodcnJQMEHXqh4ChsJztMLavXVIS5Jfn+J021BDpyfnR+xQNYuhvtUEm9X4vF uXh+NQ5fQf8/i8HO6O34SlnLT5XAhFAqZMlHdNERLDIhkQqIQEhQ3erBcbe4LaZD l0bSgSu1u+osvegDaEZtREsTvgstEsCs -----END CERTIFICATE-----Generated at Wed May 14 19:44:21 2025 by rpki-client