$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: n+RAl7d0Ed8R7gRIrccLR/Yd9TkYKkjixQT6jNvCUPQ= Subject key identifier: FC:1A:E0:3F:B0:0D:76:47:DE:84:13:8F:F1:54:B3:71:5A:BE:21:8C Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 128E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 124D Signing time: Sun 26 Jul 2026 17:17:39 +0000 Manifest this update: Sun 26 Jul 2026 17:17:39 +0000 Manifest next update: Sun 02 Aug 2026 17:17:39 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: Q18Zuix1nHgNthMnmHJYTRlwrS6Rap4HDLS/RjXZpQU=) 2: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: xGiIPlMqdMQ/AkBHGhYb6Ef9QmEy6xUaWuUDzw5uJV4=) 3: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: BXGE/iZvvWL+dWAxPX7NLNenWS6dQrMTwGLNphzL3Ik=) 4: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: cQrRnhokY0nhbBJt3bSGZ86zJIUfmyJNDbVOoL1xxrY=) 5: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: GhuUSpOGOhzvETrGv1dHX21uJs7ntpLxSC2vf2RVN+U=) 6: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: O4GHZYhhhQeQ6LqkXDZz5RCZWlPH2Yu/syycOtJ+aIo=) 7: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: cjMy4xbcc0iF8UGid1RrwsR5uCyoVa/GUkRSBBNBNwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 17:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4750 (0x128e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jul 26 17:17:39 2026 GMT Not After : Aug 2 17:17:39 2026 GMT Subject: CN=6a664133-a9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c1:b0:d5:9b:ce:64:ac:54:96:c2:71:de:7b: 37:6e:fc:0d:c2:75:2a:0a:eb:7e:46:76:6c:66:74: ad:0f:77:ca:ea:3d:84:f4:03:d7:b2:5b:4b:35:5d: 0e:4c:52:40:6b:f9:e2:0b:c4:a3:fd:a9:04:33:f9: 11:ad:be:47:9d:2c:c7:f3:c0:73:57:42:ca:58:9d: 5b:c9:20:86:55:20:0a:a9:c7:ca:7f:33:ed:23:4f: b1:00:fa:94:e1:1d:15:cd:7d:0f:91:62:df:7b:b5: 9f:d5:11:76:db:45:b7:35:44:20:ca:a8:04:22:c2: 40:bb:c4:80:2f:74:59:6e:22:14:cb:31:be:40:e9: 70:ad:b4:61:81:c0:86:33:29:12:93:c5:92:fc:9f: 98:32:9d:06:1a:17:4c:09:4d:58:09:7c:2d:99:b9: e4:7d:36:fc:0d:56:79:3f:bb:e1:81:c6:0c:57:33: c9:ec:3d:55:e6:e7:ed:a6:ee:06:73:44:0d:72:56: dc:d7:b0:72:03:23:1f:2c:d4:3d:09:d4:1e:fc:de: a7:e6:4d:98:41:a5:81:05:ea:b5:a7:17:9c:ab:bf: 56:cb:c8:b9:90:98:2c:a6:eb:76:c8:ee:c1:90:46: 57:d9:be:cd:8a:ed:40:24:e6:a0:6a:1b:e3:70:9a: 8e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1A:E0:3F:B0:0D:76:47:DE:84:13:8F:F1:54:B3:71:5A:BE:21:8C X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:74:6c:1d:57:12:95:59:b6:84:fb:f0:1c:9d:c9:61:ba:b0: bf:c7:9b:c3:73:8b:de:df:c0:29:17:ea:ea:02:c7:21:83:5c: e9:25:eb:6c:cc:52:8a:07:d2:0f:39:a2:42:48:88:79:3d:35: 43:31:aa:b9:35:70:bc:9c:0b:56:85:15:ba:c0:98:bd:e1:7b: be:35:b6:25:4f:31:21:fe:3f:4a:91:7f:27:ae:6a:3b:28:dd: 5d:3c:f2:d4:99:06:5a:91:7f:8e:e4:e8:88:60:09:8b:76:05: 55:6d:9c:e4:94:ef:37:2b:c3:cb:9c:8e:6e:35:e6:7c:c8:7a: ea:72:ef:e1:1a:d6:d3:b9:8f:ac:88:82:66:e4:97:d3:33:f7: 94:ac:59:f9:f3:21:68:48:37:de:77:12:60:7d:c1:5a:8a:6e: 5e:c7:56:71:24:d2:95:c9:85:63:75:31:26:ed:1b:06:a4:10: 83:94:0f:21:60:01:3a:0d:65:fa:e8:c8:05:fd:74:66:3b:e6: 54:98:88:70:50:a3:34:fe:59:5d:00:5b:e6:ab:66:96:19:1d: 8d:db:26:36:18:c2:2b:3b:38:af:13:f1:7c:5b:c7:c4:65:22: ba:6e:ab:32:12:aa:ae:8a:c8:f6:b2:68:b2:68:3f:4c:f5:60: e1:7d:f5:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwNzI2MTcxNzM5WhcNMjYwODAyMTcxNzM5WjAYMRYwFAYD VQQDEw02YTY2NDEzMy1hOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sGw1ZvOZKxUlsJx3ns3bvwNwnUqCut+RnZsZnStD3fK6j2E9APXsltLNV0O TFJAa/niC8Sj/akEM/kRrb5HnSzH88BzV0LKWJ1bySCGVSAKqcfKfzPtI0+xAPqU 4R0VzX0PkWLfe7Wf1RF220W3NUQgyqgEIsJAu8SAL3RZbiIUyzG+QOlwrbRhgcCG MykSk8WS/J+YMp0GGhdMCU1YCXwtmbnkfTb8DVZ5P7vhgcYMVzPJ7D1V5uftpu4G c0QNclbc17ByAyMfLNQ9CdQe/N6n5k2YQaWBBeq1pxecq79Wy8i5kJgsput2yO7B kEZX2b7Niu1AJOagahvjcJqOSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwa4D+w DXZH3oQTj/FUs3FaviGMMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYHRsHVcSlVm2hPvwHJ3JYbqwv8ebw3OL3t/AKRfq6gLHIYNc6SXrbMxSigfS DzmiQkiIeT01QzGquTVwvJwLVoUVusCYveF7vjW2JU8xIf4/SpF/J65qOyjdXTzy 1JkGWpF/juToiGAJi3YFVW2c5JTvNyvDy5yObjXmfMh66nLv4RrW07mPrIiCZuSX 0zP3lKxZ+fMhaEg33ncSYH3BWopuXsdWcSTSlcmFY3UxJu0bBqQQg5QPIWABOg1l +ujIBf10ZjvmVJiIcFCjNP5ZXQBb5qtmlhkdjdsmNhjCKzs4rxPxfFvHxGUium6r MhKqrorI9rJosmg/TPVg4X31DQ== -----END CERTIFICATE-----Generated at Mon Jul 27 10:21:12 2026 by rpki-client