$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: ToePi9iHURZzeZcMKzF5LKLUu2Z8XNUme3PxMzY6rDY= Subject key identifier: 9C:9A:44:9F:28:4A:39:A1:2B:B4:4B:74:D0:BB:31:45:47:45:77:73 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 1206 Signing time: Thu 12 Mar 2026 17:01:30 +0000 Manifest this update: Thu 12 Mar 2026 17:01:29 +0000 Manifest next update: Thu 19 Mar 2026 17:01:29 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: XQCW0PUU9FEaEorcnqmXAH33V1LhBEKItm1Acqz2ezU=) 2: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: M3CRfzSqlNZRhVkkEGGHOD14V7utL58bvWye54E532E=) 3: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: tNQn0WKojlyhAAQEIQhVJrKL+oc/0+G9M4t9TtIfX+U=) 4: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: 2qtY5lfg53Rk8hRdrCMMLg539ABuDCFqGZzS8SsVJYE=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: Fe2jtCiFFPEU4Eih7VWkH9T2KOD4JxYUQyg14It7yuc=) 6: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: K98cIqiuSa8IfjyPXf2A+GJbU6KyRboIixIlZoFKYCw=) 7: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: wz+94DPGZY+ZVglM8IK7IgXcRuSuHNYaIile9ykwYR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 17:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4673 (0x1241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Mar 12 17:01:29 2026 GMT Not After : Mar 19 17:01:29 2026 GMT Subject: CN=69b2f169-d741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:33:3d:c3:62:10:90:21:5d:9c:ed:4f:5b: f2:c4:fe:91:c5:9d:2f:ae:cc:16:80:76:f2:be:d2: f4:a2:0e:77:c8:a0:3f:98:5f:2c:56:47:a4:80:7f: 79:eb:59:ee:92:89:9e:c5:2e:57:04:63:31:12:09: 9b:64:90:02:21:19:b5:94:47:d6:0c:5c:f0:f7:25: 85:13:65:64:fd:45:d6:12:e7:7e:a9:cc:90:b9:00: 30:bd:0f:92:26:c6:eb:97:20:9e:66:e4:1b:e2:13: 24:5c:d4:da:b6:bc:a1:fe:62:be:86:db:65:1f:f7: 15:61:26:ec:38:67:ba:88:4f:79:85:a8:85:c5:4c: ae:ba:ae:84:6d:c8:77:3b:f3:c5:ca:11:b5:d5:2d: 15:c5:55:ad:7a:0f:c7:03:33:56:1f:f3:1f:09:95: c1:f0:db:d3:f5:48:8c:38:6b:fc:f1:cf:58:97:8e: bc:b9:3c:40:9f:e0:d5:fb:e6:1a:31:d2:9c:db:f1: 59:5d:1d:2b:11:d0:0e:ce:15:d4:9c:a1:6a:e2:e3: c3:4d:8f:8a:32:e9:11:c4:07:e4:f9:bb:e7:d1:4b: e6:1c:76:91:bb:6e:41:05:f9:10:f0:bd:83:0d:cb: 78:27:8d:d7:9a:f1:1f:90:be:dd:27:5a:48:c4:de: 53:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9A:44:9F:28:4A:39:A1:2B:B4:4B:74:D0:BB:31:45:47:45:77:73 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ee:9b:f1:5e:e2:2c:67:1a:9e:59:c0:14:5f:ab:c6:f9:e3: 08:0d:7a:d3:44:11:59:6e:34:c3:b2:57:2a:9e:42:8c:6e:b5: 6d:70:55:90:3e:6f:31:d0:f3:0c:3e:ee:cb:b9:15:1b:e7:c3: f5:59:02:2b:6b:b6:42:f3:c1:4c:8a:aa:5d:9f:5c:40:88:52: c4:2a:2f:26:47:c0:50:51:ce:68:8b:11:05:57:02:24:4e:7b: ce:89:bc:7b:6e:d5:10:dd:a8:03:29:cc:74:eb:60:eb:4c:cf: 50:c7:85:c4:86:89:93:b4:4e:64:34:cd:48:c1:04:06:b8:59: 19:54:55:44:28:ca:d2:cf:10:d0:2f:08:5c:c0:57:d5:2a:cf: 16:04:3a:b0:59:d0:16:44:0e:e8:5a:3c:e4:4e:e4:1b:7b:e1: 45:1a:25:b8:b7:61:ef:52:27:a6:80:a7:6e:f3:62:83:3b:8b: fe:50:0f:5a:77:33:dc:71:e2:e8:ed:f3:0c:5d:fc:6f:df:5c: b1:03:4f:61:de:6a:25:a0:fa:87:5f:4f:6d:fb:e0:ea:cf:40: 48:1f:20:36:3b:a5:f4:00:c7:3f:23:43:43:67:5c:f8:32:06: 06:84:be:ed:09:63:b2:dd:48:be:e7:b3:ce:f4:18:9c:a6:ad: 1a:b1:a2:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwMzEyMTcwMTI5WhcNMjYwMzE5MTcwMTI5WjAYMRYwFAYD VQQDEw02OWIyZjE2OS1kNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6ozPcNiEJAhXZztT1vyxP6RxZ0vrswWgHbyvtL0og53yKA/mF8sVkekgH95 61nukomexS5XBGMxEgmbZJACIRm1lEfWDFzw9yWFE2Vk/UXWEud+qcyQuQAwvQ+S JsbrlyCeZuQb4hMkXNTatryh/mK+httlH/cVYSbsOGe6iE95haiFxUyuuq6Ebch3 O/PFyhG11S0VxVWteg/HAzNWH/MfCZXB8NvT9UiMOGv88c9Yl468uTxAn+DV++Ya MdKc2/FZXR0rEdAOzhXUnKFq4uPDTY+KMukRxAfk+bvn0UvmHHaRu25BBfkQ8L2D Dct4J43XmvEfkL7dJ1pIxN5TOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJyaRJ8o SjmhK7RLdNC7MUVHRXdzMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ+6b8V7iLGcanlnAFF+rxvnjCA1600QRWW40w7JXKp5CjG61bXBVkD5vMdDz DD7uy7kVG+fD9VkCK2u2QvPBTIqqXZ9cQIhSxCovJkfAUFHOaIsRBVcCJE57zom8 e27VEN2oAynMdOtg60zPUMeFxIaJk7ROZDTNSMEEBrhZGVRVRCjK0s8Q0C8IXMBX 1SrPFgQ6sFnQFkQO6Fo85E7kG3vhRRoluLdh71InpoCnbvNigzuL/lAPWncz3HHi 6O3zDF38b99csQNPYd5qJaD6h19Pbfvg6s9ASB8gNjul9ADHPyNDQ2dc+DIGBoS+ 7Qljst1IvuezzvQYnKatGrGiSA== -----END CERTIFICATE-----Generated at Fri Mar 13 03:48:09 2026 by rpki-client