$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: Rjk0JDok0p7Az1v3Zqm4HjGSVhJb0QOORnVCvr0WSrM= Subject key identifier: 65:46:C1:B4:F7:C5:1E:30:96:CC:6A:97:5F:79:F6:40:CF:77:B4:5D Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 121D Signing time: Sun 26 Apr 2026 17:04:22 +0000 Manifest this update: Sun 26 Apr 2026 17:04:21 +0000 Manifest next update: Sun 03 May 2026 17:04:21 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: pygfrrUzZljv6rTw9VfwRjJRXAyxNFX82Gs3QtxPbQY=) 2: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: K98cIqiuSa8IfjyPXf2A+GJbU6KyRboIixIlZoFKYCw=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: 2qtY5lfg53Rk8hRdrCMMLg539ABuDCFqGZzS8SsVJYE=) 4: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: Fe2jtCiFFPEU4Eih7VWkH9T2KOD4JxYUQyg14It7yuc=) 5: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: wz+94DPGZY+ZVglM8IK7IgXcRuSuHNYaIile9ykwYR8=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: M3CRfzSqlNZRhVkkEGGHOD14V7utL58bvWye54E532E=) 7: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: tNQn0WKojlyhAAQEIQhVJrKL+oc/0+G9M4t9TtIfX+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 17:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4696 (0x1258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Apr 26 17:04:21 2026 GMT Not After : May 3 17:04:21 2026 GMT Subject: CN=69ee4596-7834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:29:c5:b1:b2:ac:d1:09:73:0b:59:cc:94: d0:4e:cb:ee:23:7d:f2:a7:51:88:3c:1d:ed:23:85: 5b:7f:5a:c1:6f:f0:26:fb:51:8e:09:20:e9:b8:f2: 31:0d:85:9f:eb:b4:3a:1d:f8:81:07:fb:ae:98:43: d7:26:04:ab:88:43:b4:a1:bc:a8:2a:58:28:94:9f: e4:f4:91:c8:73:59:30:4b:d3:a1:60:dd:9d:de:ca: 25:04:a4:48:f8:12:b1:77:52:95:54:75:5a:70:a9: 5a:dc:ac:dd:de:5b:93:76:c7:f6:6c:6f:46:8b:64: 7b:93:ab:73:32:4a:25:43:98:15:f2:fd:54:e1:4f: 60:0b:8a:64:86:cc:5f:19:13:e8:7b:63:16:7a:09: fb:e5:f5:d1:2a:14:8b:81:d0:f7:44:38:28:b3:db: e3:9e:37:c6:1e:1a:6f:43:6e:3f:1b:54:00:1f:3e: 78:3a:f7:02:3a:f4:66:54:c7:6a:65:7e:56:17:d2: df:0f:6f:4c:af:6c:e6:f7:66:1d:8b:14:d5:3c:bb: d7:4c:03:ac:c2:70:b1:fc:26:72:ff:aa:37:c7:d4: 30:21:cd:0d:ec:30:43:ee:7e:26:f6:51:e7:5b:41: 29:35:03:70:cb:1e:54:38:d1:e2:41:ef:88:72:68: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:46:C1:B4:F7:C5:1E:30:96:CC:6A:97:5F:79:F6:40:CF:77:B4:5D X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:df:6e:69:7e:26:44:4f:be:85:ac:1c:9b:16:f2:20:26:d9: 7d:08:26:77:a6:c1:81:e1:43:b7:f6:c2:1a:2f:c4:5a:c0:4d: ca:f7:d6:bb:df:c8:3b:60:9d:73:8e:c1:2e:23:db:5d:64:2b: c4:18:4e:73:41:34:70:ec:4f:52:3c:4e:32:10:2c:0f:9a:b9: 6f:95:4a:b0:60:5b:0c:66:ef:5c:61:b8:1c:6f:86:ee:a3:e6: 27:4f:19:ef:e1:f7:6d:b6:e7:f3:bf:6d:45:c7:27:0e:d7:2f: 6a:b8:da:50:d7:40:3f:09:a7:d6:4f:ef:03:29:a1:29:5b:22: 85:db:1a:fa:af:12:31:7c:7e:50:67:f2:e2:c0:94:ce:45:b3: 8f:8b:61:27:49:e5:e5:50:65:3d:69:47:c8:39:b0:ef:68:ab: 79:3a:58:d5:14:7d:16:9b:43:2e:37:a0:83:b5:88:61:11:e3: ff:13:bf:6a:8d:7f:fc:25:ad:87:32:5d:c3:0b:25:b0:1b:10: 8b:2a:46:7e:6a:a3:01:44:9b:97:2e:3b:67:ce:35:93:67:d6: fd:bd:a0:ce:40:25:6f:74:4c:43:9b:82:c4:87:e6:7f:3a:12: 23:a4:55:81:1e:80:54:65:8f:ae:9f:59:b6:09:77:44:ac:e1: d7:2b:98:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICElgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwNDI2MTcwNDIxWhcNMjYwNTAzMTcwNDIxWjAYMRYwFAYD VQQDEw02OWVlNDU5Ni03ODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EUpxbGyrNEJcwtZzJTQTsvuI33yp1GIPB3tI4Vbf1rBb/Am+1GOCSDpuPIx DYWf67Q6HfiBB/uumEPXJgSriEO0obyoKlgolJ/k9JHIc1kwS9OhYN2d3solBKRI +BKxd1KVVHVacKla3Kzd3luTdsf2bG9Gi2R7k6tzMkolQ5gV8v1U4U9gC4pkhsxf GRPoe2MWegn75fXRKhSLgdD3RDgos9vjnjfGHhpvQ24/G1QAHz54OvcCOvRmVMdq ZX5WF9LfD29Mr2zm92YdixTVPLvXTAOswnCx/CZy/6o3x9QwIc0N7DBD7n4m9lHn W0EpNQNwyx5UONHiQe+IcmgSTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVGwbT3 xR4wlsxql1959kDPd7RdMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXt9uaX4mRE++hawcmxbyICbZfQgmd6bBgeFDt/bCGi/EWsBNyvfWu9/IO2Cd c47BLiPbXWQrxBhOc0E0cOxPUjxOMhAsD5q5b5VKsGBbDGbvXGG4HG+G7qPmJ08Z 7+H3bbbn879tRccnDtcvarjaUNdAPwmn1k/vAymhKVsihdsa+q8SMXx+UGfy4sCU zkWzj4thJ0nl5VBlPWlHyDmw72ireTpY1RR9FptDLjegg7WIYRHj/xO/ao1//CWt hzJdwwslsBsQiypGfmqjAUSbly47Z841k2fW/b2gzkAlb3RMQ5uCxIfmfzoSI6RV gR6AVGWPrp9Ztgl3RKzh1yuYgA== -----END CERTIFICATE-----Generated at Mon Apr 27 16:17:46 2026 by rpki-client