$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft File: mBpus4OnlllRIB38cbLqDUSWGxQ.mft (raw, json) Hash identifier: aI/5Q/GccMH5RnLfzj4p2QHBLXRRP5KidO1K7Q6lnjg= Subject key identifier: 60:95:B5:75:06:1C:A6:D6:DC:DF:40:3C:72:75:1D:2A:CD:5F:4F:A3 Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 Certificate issuer: /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Certificate serial: 05B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft Manifest number: 05AA Signing time: Sun 02 Nov 2025 23:08:28 +0000 Manifest this update: Sun 02 Nov 2025 23:08:28 +0000 Manifest next update: Sun 09 Nov 2025 23:08:28 +0000 Files and hashes: 1: mBpus4OnlllRIB38cbLqDUSWGxQ.crl (hash: urFMUFiQG7iZOP3Du/SSh0H5E6Yzw2sC6Qbp7gD3/zA=) 2: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (hash: 9s+ytbSfZP14tsCh3SQ3yDAVSot/0B8wxn8RGQZH8yM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1456 (0x5b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110888, serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Validity Not Before: Nov 2 23:08:28 2025 GMT Not After : Nov 9 23:08:28 2025 GMT Subject: CN=6907e46c-3ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:7b:85:7c:6b:ef:ad:8c:b0:38:35:ba:ad: 51:21:8b:97:bc:8a:e5:de:54:2d:d9:da:4d:3d:4e: a1:39:5f:d8:40:65:73:bc:5c:ce:8e:31:46:6d:5a: c6:b3:24:cd:9b:6b:e5:88:b4:1f:62:4d:58:fa:27: 25:fe:d2:3f:98:b1:23:89:2c:eb:1d:54:d5:0d:88: 73:bf:61:37:17:f4:b5:a2:05:e9:76:20:7b:79:0e: 89:7a:c4:9e:ff:7f:ed:98:03:d4:f5:75:6a:5f:db: 81:19:5d:ee:19:f7:cc:48:92:f7:41:73:b7:06:8d: af:30:3a:4c:68:69:14:88:a0:bc:bf:ec:ae:6d:08: 3b:75:a2:00:cf:07:99:2e:cb:a9:1d:79:25:b5:6a: 46:53:e3:75:89:ea:e7:be:2e:de:49:86:3d:d5:bd: 14:3b:e7:3d:71:06:4e:aa:c5:25:72:a7:86:3e:f7: 9d:dd:ec:27:cd:d0:11:d1:8c:af:5c:a6:f3:78:aa: 82:af:ea:6b:b4:cf:df:d7:be:5e:af:d4:2f:d2:85: c9:d5:d7:ea:8b:2c:7d:44:a1:d4:bf:b6:9a:7b:cf: 6d:82:de:b6:e8:e4:0e:6c:cd:b4:48:37:7a:57:f8: 6d:74:c2:ec:ee:bb:91:6c:71:dc:8b:1b:3e:c4:99: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:95:B5:75:06:1C:A6:D6:DC:DF:40:3C:72:75:1D:2A:CD:5F:4F:A3 X509v3 Authority Key Identifier: keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a6:b2:ff:96:1b:50:7b:72:f8:51:bd:91:aa:84:60:79:da: 14:ba:d1:e8:bd:cc:d1:5a:c5:3e:03:aa:70:36:fc:d4:8e:5d: 14:94:92:3b:9f:f9:47:ec:15:c2:3a:b7:bd:3f:44:cd:52:5e: 6d:60:eb:32:dc:c2:b9:95:82:c0:6f:cf:7a:12:fb:8d:50:69: 7f:32:65:48:5a:58:97:82:83:2f:a9:cb:6e:ef:98:a6:09:b0: 70:f1:77:89:2d:4e:71:07:b7:1e:bf:ca:96:f2:9d:39:bb:f0: c9:78:90:b4:bd:5a:51:5e:e1:c6:05:aa:10:3e:95:69:40:51: 50:ae:71:e0:c2:c1:46:75:95:4c:94:1b:88:4c:72:8f:d9:09: 91:a2:ac:ef:6d:06:6d:07:04:eb:c2:58:3e:5c:23:a1:14:59: bf:8a:bf:c6:95:4a:19:60:61:ad:a1:93:be:63:d2:66:fa:c3: 8b:21:83:98:5e:fc:4d:01:e0:94:fa:5c:6d:da:24:cc:16:77: d6:b5:e1:92:42:e1:4e:21:e3:12:f6:b3:07:db:16:8b:82:f6: 42:e5:ec:22:01:b4:0b:a9:3c:cd:f8:46:50:d3:b7:cc:f8:4c: 45:05:9c:b3:9e:90:24:62:ec:71:df:a9:9a:93:d6:03:70:a5: 73:7a:2c:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA4ODgxMTAvBgNVBAUTKDk4MUE2RUIzODNBNzk2NTk1MTIwMURGQzcxQjJFQTBE NDQ5NjFCMTQwHhcNMjUxMTAyMjMwODI4WhcNMjUxMTA5MjMwODI4WjAYMRYwFAYD VQQDEw02OTA3ZTQ2Yy0zZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ex7hXxr762MsDg1uq1RIYuXvIrl3lQt2dpNPU6hOV/YQGVzvFzOjjFGbVrG syTNm2vliLQfYk1Y+icl/tI/mLEjiSzrHVTVDYhzv2E3F/S1ogXpdiB7eQ6JesSe /3/tmAPU9XVqX9uBGV3uGffMSJL3QXO3Bo2vMDpMaGkUiKC8v+yubQg7daIAzweZ LsupHXkltWpGU+N1iernvi7eSYY91b0UO+c9cQZOqsUlcqeGPved3ewnzdAR0Yyv XKbzeKqCr+prtM/f175er9Qv0oXJ1dfqiyx9RKHUv7aae89tgt626OQObM20SDd6 V/htdMLs7ruRbHHcixs+xJlWdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCVtXUG HKbW3N9APHJ1HSrNX0+jMB8GA1UdIwQYMBaAFJgabrODp5ZZUSAd/HGy6g1ElhsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDg4OC82QzhFM0FBNkVC MTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxsbFJJQjM4Y2JMcURVU1dH eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CcHVzNE9ubGxsUklCMzhjYkxxRFVTV0d4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDg4OC82QzhFM0FBNkVCMTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxs bFJJQjM4Y2JMcURVU1dHeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOprL/lhtQe3L4Ub2RqoRgedoUutHovczRWsU+A6pwNvzUjl0UlJI7 n/lH7BXCOre9P0TNUl5tYOsy3MK5lYLAb896EvuNUGl/MmVIWliXgoMvqctu75im CbBw8XeJLU5xB7cev8qW8p05u/DJeJC0vVpRXuHGBaoQPpVpQFFQrnHgwsFGdZVM lBuITHKP2QmRoqzvbQZtBwTrwlg+XCOhFFm/ir/GlUoZYGGtoZO+Y9Jm+sOLIYOY XvxNAeCU+lxt2iTMFnfWteGSQuFOIeMS9rMH2xaLgvZC5ewiAbQLqTzN+EZQ07fM +ExFBZyznpAkYuxx36mak9YDcKVzeiz0 -----END CERTIFICATE-----Generated at Tue Nov 4 12:37:02 2025 by rpki-client