$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: 9S7SEnafyHrCQtrwXj+2iSq6WyI3PRzo3li+rTIcOyk= Subject key identifier: 76:AA:63:7F:E0:4D:E9:32:F5:7F:B2:CC:5D:C2:EB:AC:51:96:2F:F3 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 11E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 11B4 Signing time: Sat 18 Oct 2025 17:44:45 +0000 Manifest this update: Sat 18 Oct 2025 17:44:45 +0000 Manifest next update: Sat 25 Oct 2025 17:44:44 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: bmc24oXr8fwVVRaUjXqrGDH9kb/TrmxJslfOjn9/veE=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: jh4/v+GyjU9Au0Vxs0XDzRjJtWql8kiBFNvqkmZsApQ=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4582 (0x11e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Oct 18 17:44:45 2025 GMT Not After : Oct 25 17:44:44 2025 GMT Subject: CN=68f3d20d-a331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:d4:fe:85:84:50:2e:4d:1f:a0:df:2d:35: 05:cb:28:7b:d1:ab:bd:e0:07:1e:eb:38:16:03:07: 63:a2:b6:90:05:c6:ed:fa:ce:ad:14:b8:62:d3:e0: 09:ec:d3:f8:ea:11:c6:65:65:5a:d7:77:c6:78:f9: 65:a4:c1:a7:27:25:35:fb:c0:14:3c:c1:1a:f8:7d: e2:e7:95:0d:1b:72:ca:f1:4d:56:24:7d:dd:73:2a: af:c6:8a:b9:87:bf:80:cd:cc:8a:fc:30:9d:cd:bd: 05:bf:18:d9:cb:5b:02:55:31:3a:3f:72:47:0d:af: 60:2e:68:fb:54:1e:00:f5:07:c5:04:ba:3e:d0:53: 83:c6:11:e7:bf:f2:04:14:7c:33:3b:09:a5:29:84: e0:d5:e3:93:00:8c:d2:6a:b4:6a:37:9c:d1:06:00: 38:68:a7:50:20:61:a4:03:13:b1:25:99:33:7c:b5: 81:39:67:63:8d:81:28:15:44:a2:07:77:91:a3:8a: e8:b0:9e:56:aa:e4:48:52:53:8d:27:71:f9:c4:86: be:95:46:b0:80:05:45:43:bb:a5:8a:a8:f1:5e:d8: 27:f3:c9:80:ba:44:2e:88:29:02:13:3c:ee:46:62: 2c:86:3f:87:a9:ed:11:6d:ec:b3:72:4f:ab:fb:12: c2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AA:63:7F:E0:4D:E9:32:F5:7F:B2:CC:5D:C2:EB:AC:51:96:2F:F3 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6f:c9:36:1d:eb:0c:89:b7:b2:2b:4a:6c:6e:88:69:32:c8: b2:9d:87:34:f4:2f:ff:83:fa:b2:ec:86:cb:7e:6b:2b:73:71: c3:e7:28:b2:6a:3a:58:03:8d:35:66:b9:b8:d5:51:bd:0e:1b: 11:d2:4c:77:91:32:3f:38:c4:d0:9d:07:30:cd:06:f4:76:e7: 52:70:3e:c9:ba:ca:bf:6f:a4:99:82:4e:22:8d:58:5e:a0:ae: 9c:b3:c0:e6:b7:29:0c:28:66:48:3d:97:65:16:ea:19:9f:ea: 3b:a9:cf:4c:35:b3:19:e9:e7:ad:c4:3a:10:01:1c:cf:01:6a: 20:46:75:52:d7:92:14:30:a5:e0:7f:c1:23:a4:1c:6c:45:6f: 8a:64:37:b8:d5:e7:9f:93:e8:7d:a4:83:35:33:f1:c0:3b:37: 1d:bb:42:0f:83:87:d8:05:48:3b:89:3c:fa:12:78:c3:1a:eb: 90:f4:3f:e2:20:68:91:00:38:39:10:bd:f4:c6:f3:3b:ef:68: 67:b8:17:73:20:d2:f3:75:53:db:67:a8:53:9f:ce:f3:05:2f: e6:b0:42:0f:e5:70:6c:f6:6b:7b:d2:46:f0:df:a6:58:7e:b5: 94:40:72:e3:80:5d:75:17:28:a6:91:0b:39:88:16:b7:23:b2: d4:70:cd:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUxMDE4MTc0NDQ1WhcNMjUxMDI1MTc0NDQ0WjAYMRYwFAYD VQQDEw02OGYzZDIwZC1hMzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq27U/oWEUC5NH6DfLTUFyyh70au94Ace6zgWAwdjoraQBcbt+s6tFLhi0+AJ 7NP46hHGZWVa13fGePllpMGnJyU1+8AUPMEa+H3i55UNG3LK8U1WJH3dcyqvxoq5 h7+AzcyK/DCdzb0FvxjZy1sCVTE6P3JHDa9gLmj7VB4A9QfFBLo+0FODxhHnv/IE FHwzOwmlKYTg1eOTAIzSarRqN5zRBgA4aKdQIGGkAxOxJZkzfLWBOWdjjYEoFUSi B3eRo4rosJ5WquRIUlONJ3H5xIa+lUawgAVFQ7uliqjxXtgn88mAukQuiCkCEzzu RmIshj+Hqe0Rbeyzck+r+xLCIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHaqY3/g Teky9X+yzF3C66xRli/zMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcb8k2HesMibeyK0psbohpMsiynYc09C//g/qy7IbLfmsrc3HD5yiy ajpYA401Zrm41VG9DhsR0kx3kTI/OMTQnQcwzQb0dudScD7Jusq/b6SZgk4ijVhe oK6cs8DmtykMKGZIPZdlFuoZn+o7qc9MNbMZ6eetxDoQARzPAWogRnVS15IUMKXg f8EjpBxsRW+KZDe41eefk+h9pIM1M/HAOzcdu0IPg4fYBUg7iTz6EnjDGuuQ9D/i IGiRADg5EL30xvM772hnuBdzINLzdVPbZ6hTn87zBS/msEIP5XBs9mt70kbw36ZY frWUQHLjgF11FyimkQs5iBa3I7LUcM1b -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:36 2025 by rpki-client