$ rpki-client -vvvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: Z5uMzvRKpkKnsXd94pVj+11GNhjvkqf2p+3ugGqb/i4= Subject key identifier: CE:29:C1:F4:D5:A5:DF:BE:8D:5C:58:29:E8:CB:22:58:A7:B5:BB:22 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 12AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 1269 Signing time: Fri 18 Sep 2026 17:05:40 +0000 Manifest this update: Fri 18 Sep 2026 17:05:39 +0000 Manifest next update: Fri 25 Sep 2026 17:05:39 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: eAw5DfoZpFcKIs6EsKL996ib/OahXtaG+MMDQACFOao=) 2: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: xGiIPlMqdMQ/AkBHGhYb6Ef9QmEy6xUaWuUDzw5uJV4=) 3: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: GhuUSpOGOhzvETrGv1dHX21uJs7ntpLxSC2vf2RVN+U=) 4: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: cQrRnhokY0nhbBJt3bSGZ86zJIUfmyJNDbVOoL1xxrY=) 5: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: cjMy4xbcc0iF8UGid1RrwsR5uCyoVa/GUkRSBBNBNwU=) 6: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: O4GHZYhhhQeQ6LqkXDZz5RCZWlPH2Yu/syycOtJ+aIo=) 7: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: BXGE/iZvvWL+dWAxPX7NLNenWS6dQrMTwGLNphzL3Ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4778 (0x12aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Sep 18 17:05:39 2026 GMT Not After : Sep 25 17:05:39 2026 GMT Subject: CN=6aad6f64-5fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:87:77:8e:73:d9:92:55:d3:52:b4:b9:5e: c1:bd:a5:22:86:79:ae:85:00:8f:2e:25:1c:1e:1f: 5e:a6:37:e7:a4:00:ef:78:38:bc:de:43:52:19:60: de:24:5d:37:fa:ec:18:4e:e4:08:da:1f:3e:67:e8: 42:de:73:1d:69:0e:79:4f:6b:90:51:03:13:eb:f5: b9:0a:60:82:07:20:a5:60:69:00:06:6e:b9:5a:2c: f1:9e:80:be:d7:c0:e3:d5:d9:11:dc:1a:bd:7c:66: ea:17:71:c4:7d:7b:10:30:b9:d2:43:48:64:48:90: 13:a0:07:49:98:8c:a7:a0:d0:7c:f9:fc:11:31:1b: 5e:34:80:2a:5c:cb:c7:99:97:0a:a4:f9:a9:8b:c0: df:39:aa:14:21:e2:68:05:12:72:88:3a:f9:58:2e: 53:8b:bb:ea:ea:99:6f:dd:e5:03:3f:c4:ee:3a:15: e4:32:78:93:f7:9f:15:33:ee:ae:22:0d:36:e4:fb: cf:4b:b8:f6:3e:45:76:9f:30:95:6e:fa:41:7a:42: 69:de:49:20:c4:2f:e9:d0:d4:f9:f1:44:87:83:fc: 69:a5:33:d4:02:3a:e8:6e:a6:2d:70:72:dd:0c:5c: 50:db:c0:f3:e5:98:f7:4c:f2:6c:ad:da:6b:60:61: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:29:C1:F4:D5:A5:DF:BE:8D:5C:58:29:E8:CB:22:58:A7:B5:BB:22 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f0:3b:6e:85:6b:91:11:7e:65:ac:9e:4d:b1:21:81:0c:83: 8f:7d:de:e8:89:13:e3:8b:ca:ff:f7:e6:10:dd:b1:bf:0c:46: dd:61:15:7a:39:72:c4:ad:36:c6:da:3a:bd:96:44:e4:c7:73: 65:d4:89:6b:8d:dc:b3:f4:49:08:c5:89:d5:b0:7b:4e:92:05: 90:47:0e:fc:a9:56:87:b2:f0:2c:40:cb:65:5b:0d:26:02:39: 72:a3:57:b2:1e:3d:a0:2e:22:f6:d0:87:b6:3d:c5:29:ef:ea: a2:0f:ff:d7:57:75:f5:a1:99:0c:f3:c6:32:77:af:06:9e:9d: 63:42:9c:76:51:b2:e4:c8:34:e9:e3:e5:16:a1:84:77:9e:4c: 13:c5:79:9a:05:e4:32:c5:0f:89:3e:aa:d7:54:01:bd:33:29: 19:e5:30:85:29:da:64:3a:0b:47:1e:3a:40:61:9a:31:b3:d7: 22:a9:14:e1:f3:21:62:57:98:7f:3c:9a:c2:7a:4f:8b:94:fe: 4b:8a:4d:e2:6c:b9:ff:9a:88:f1:d8:7b:c0:2f:75:40:0a:ac: e5:51:d6:0f:b9:37:58:f5:8f:94:ef:c5:e2:28:bf:f9:46:52: 0f:11:b5:56:e4:a8:2d:f1:ca:5a:db:9a:0a:ca:8c:78:03:7b: bc:0d:07:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwOTE4MTcwNTM5WhcNMjYwOTI1MTcwNTM5WjAYMRYwFAYD VQQDEw02YWFkNmY2NC01ZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcqHd45z2ZJV01K0uV7BvaUihnmuhQCPLiUcHh9epjfnpADveDi83kNSGWDe JF03+uwYTuQI2h8+Z+hC3nMdaQ55T2uQUQMT6/W5CmCCByClYGkABm65WizxnoC+ 18Dj1dkR3Bq9fGbqF3HEfXsQMLnSQ0hkSJAToAdJmIynoNB8+fwRMRteNIAqXMvH mZcKpPmpi8DfOaoUIeJoBRJyiDr5WC5Ti7vq6plv3eUDP8TuOhXkMniT958VM+6u Ig025PvPS7j2PkV2nzCVbvpBekJp3kkgxC/p0NT58USHg/xppTPUAjrobqYtcHLd DFxQ28Dz5Zj3TPJsrdprYGGdqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4pwfTV pd++jVxYKejLIlintbsiMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASfA7boVrkRF+ZayeTbEhgQyDj33e6IkT44vK//fmEN2xvwxG3WEVejlyxK02 xto6vZZE5MdzZdSJa43cs/RJCMWJ1bB7TpIFkEcO/KlWh7LwLEDLZVsNJgI5cqNX sh49oC4i9tCHtj3FKe/qog//11d19aGZDPPGMnevBp6dY0KcdlGy5Mg06ePlFqGE d55ME8V5mgXkMsUPiT6q11QBvTMpGeUwhSnaZDoLRx46QGGaMbPXIqkU4fMhYleY fzyawnpPi5T+S4pN4my5/5qI8dh7wC91QAqs5VHWD7k3WPWPlO/F4ii/+UZSDxG1 VuSoLfHKWtuaCsqMeAN7vA0Hsg== -----END CERTIFICATE-----Generated at Sun Sep 20 01:05:16 2026 by rpki-client