$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft File: mBpus4OnlllRIB38cbLqDUSWGxQ.mft (raw, json) Hash identifier: lA5NWkUfGNrZR4+ljtPncCgMHtluX2HEnv/H0nduX1Q= Subject key identifier: 6B:F6:51:4E:94:82:3F:BC:AF:59:B9:EC:91:AE:8E:9A:36:D9:9F:EF Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 Certificate issuer: /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Certificate serial: 0585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft Manifest number: 057F Signing time: Sun 10 Aug 2025 23:23:07 +0000 Manifest this update: Sun 10 Aug 2025 23:23:07 +0000 Manifest next update: Sun 17 Aug 2025 23:23:07 +0000 Files and hashes: 1: mBpus4OnlllRIB38cbLqDUSWGxQ.crl (hash: umQ9Whd1nDwqjgRwriIFv7PCrPJowcWUG29xpBHNtQY=) 2: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (hash: 9s+ytbSfZP14tsCh3SQ3yDAVSot/0B8wxn8RGQZH8yM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110888, serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Validity Not Before: Aug 10 23:23:07 2025 GMT Not After : Aug 17 23:23:07 2025 GMT Subject: CN=689929db-8c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:09:aa:ea:04:3d:9a:89:38:7f:23:b2:82: 00:0a:38:15:11:c8:be:bf:b1:98:2b:bf:8d:0e:5c: 94:6b:ea:18:42:06:3c:0e:6c:d7:ba:06:f3:b1:70: 01:2b:93:7e:f3:3c:68:cb:c6:ea:e6:9e:5b:ed:66: 1a:85:a8:ee:2e:02:81:eb:c0:38:20:79:ad:1d:5c: a2:aa:18:8b:3c:96:df:68:05:e4:e2:b5:37:cb:1b: 41:9b:44:47:3b:88:a1:a6:56:ec:25:7d:1d:42:04: 75:37:e7:f5:40:6a:47:69:df:62:e0:d7:02:81:67: 52:fa:a3:cf:2f:e0:6b:52:dc:23:17:bd:3a:16:cc: 62:db:cb:0c:c2:db:4c:77:4f:4d:8f:47:9e:4f:bd: 29:8a:54:75:8d:64:15:8f:6f:bb:9a:af:51:93:67: 26:03:83:3a:a7:c8:f9:33:d7:20:4d:60:8a:87:ab: 0a:a1:01:3c:57:9d:29:1e:4c:4a:3b:68:fe:84:b5: 82:b1:05:b1:3b:f5:5c:ed:dd:74:a3:f9:55:a2:d7: 14:2a:5a:1b:32:78:13:b9:81:31:ef:84:ea:73:b1: 23:6f:0d:fb:00:2a:97:2a:72:bb:53:8d:6c:69:af: e7:48:39:ae:a9:7f:65:4b:d6:c3:4f:c8:09:ae:54: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F6:51:4E:94:82:3F:BC:AF:59:B9:EC:91:AE:8E:9A:36:D9:9F:EF X509v3 Authority Key Identifier: keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5a:fb:73:9b:80:b2:18:ab:34:0d:63:5a:26:c1:30:65:98: b8:26:08:96:68:94:5f:36:fe:37:a4:43:25:98:a0:fe:04:b7: d4:e9:03:61:04:d2:d7:99:dc:4d:ab:fe:cc:e4:fb:68:1a:40: df:25:34:d4:71:e8:48:0c:a1:26:3b:e2:be:39:e1:d9:3f:5d: 8a:52:9b:99:d4:4e:16:92:26:a4:9f:6a:20:fc:9f:8d:d5:99: 93:af:6b:2b:e9:cf:b5:5b:7c:51:6a:e4:28:af:80:66:31:5f: d6:9b:7c:fb:83:9a:0c:69:58:15:46:72:5f:22:8d:5a:e9:00: c2:e7:15:d7:b3:cd:52:ac:7a:de:64:d1:b0:b2:b5:22:9e:cb: de:9b:41:02:bf:37:fd:9c:9e:e9:6a:d3:1c:a8:fe:7b:03:48: 53:55:bf:cb:f0:0b:c5:c4:49:19:25:c3:49:4b:61:2a:ba:fb: 79:a1:53:b5:74:37:ad:e0:7e:66:66:a3:61:f5:b7:3d:1a:db: 3d:43:91:64:be:5f:8e:31:a8:02:15:61:4e:40:2c:82:48:ac: 73:02:a3:ff:06:17:a8:63:7e:ae:28:5c:d3:c2:7b:11:86:b3: 63:9e:a8:e8:57:b6:23:47:ba:e8:3d:b0:c6:e1:f2:3f:d6:46: 04:17:8a:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA4ODgxMTAvBgNVBAUTKDk4MUE2RUIzODNBNzk2NTk1MTIwMURGQzcxQjJFQTBE NDQ5NjFCMTQwHhcNMjUwODEwMjMyMzA3WhcNMjUwODE3MjMyMzA3WjAYMRYwFAYD VQQDEw02ODk5MjlkYi04YzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOQJquoEPZqJOH8jsoIACjgVEci+v7GYK7+NDlyUa+oYQgY8DmzXugbzsXAB K5N+8zxoy8bq5p5b7WYahajuLgKB68A4IHmtHVyiqhiLPJbfaAXk4rU3yxtBm0RH O4ihplbsJX0dQgR1N+f1QGpHad9i4NcCgWdS+qPPL+BrUtwjF706Fsxi28sMwttM d09Nj0eeT70pilR1jWQVj2+7mq9Rk2cmA4M6p8j5M9cgTWCKh6sKoQE8V50pHkxK O2j+hLWCsQWxO/Vc7d10o/lVotcUKlobMngTuYEx74Tqc7Ejbw37ACqXKnK7U41s aa/nSDmuqX9lS9bDT8gJrlTH4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGv2UU6U gj+8r1m57JGujpo22Z/vMB8GA1UdIwQYMBaAFJgabrODp5ZZUSAd/HGy6g1ElhsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDg4OC82QzhFM0FBNkVC MTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxsbFJJQjM4Y2JMcURVU1dH eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CcHVzNE9ubGxsUklCMzhjYkxxRFVTV0d4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDg4OC82QzhFM0FBNkVCMTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxs bFJJQjM4Y2JMcURVU1dHeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjWvtzm4CyGKs0DWNaJsEwZZi4JgiWaJRfNv43pEMlmKD+BLfU6QNh BNLXmdxNq/7M5PtoGkDfJTTUcehIDKEmO+K+OeHZP12KUpuZ1E4Wkiakn2og/J+N 1ZmTr2sr6c+1W3xRauQor4BmMV/Wm3z7g5oMaVgVRnJfIo1a6QDC5xXXs81SrHre ZNGwsrUinsvem0ECvzf9nJ7patMcqP57A0hTVb/L8AvFxEkZJcNJS2Equvt5oVO1 dDet4H5mZqNh9bc9Gts9Q5Fkvl+OMagCFWFOQCyCSKxzAqP/BheoY36uKFzTwnsR hrNjnqjoV7YjR7roPbDG4fI/1kYEF4pq -----END CERTIFICATE-----Generated at Mon Aug 11 01:53:33 2025 by rpki-client