$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: QrW4qUqCZaU27CLJyeZGBJM4Qok4soIi3TywA9uWu5o= Subject key identifier: 26:0A:72:D5:D4:21:B2:A7:F9:D4:D1:DA:CF:67:BE:1B:BD:ED:A9:55 Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0E06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0DE0 Signing time: Wed 26 Aug 2026 17:50:58 +0000 Manifest this update: Wed 26 Aug 2026 17:50:58 +0000 Manifest next update: Wed 02 Sep 2026 17:50:58 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: a7ihZbEoGKgUTkYt0jMcCVgTMomI/HGrh3cmbMbyozM=) 2: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: E6xKBwdXXk6plBWpWlytPRfzZulatDVFNhrKKgIrSig=) 3: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: AfD5HxA5Aq0yoBWic1AreIDVnB+IzK6gGah8YdarTYM=) 4: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: rqH3evVe4RRzDIoqiHRSRZUenT8VbTWiFy0YpHu4G6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 17:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3590 (0xe06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: Aug 26 17:50:58 2026 GMT Not After : Sep 2 17:50:58 2026 GMT Subject: CN=6a8f2782-0a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8f:fd:3d:6b:11:45:37:e7:4d:33:bf:bc:86: c0:24:c1:33:32:78:ed:8b:e0:73:99:01:47:8f:80: f5:4d:29:c4:76:62:13:22:04:ae:87:20:13:64:d4: 57:9c:ef:68:7a:c0:f7:86:47:51:3c:cb:01:ff:1f: 55:83:d6:9e:39:30:09:30:9a:0a:91:41:ba:5c:1c: 46:3b:8e:57:87:2f:d7:3d:d5:5c:e7:60:36:e9:d1: 38:4a:e2:04:16:b8:83:b2:0b:45:77:59:47:71:61: 26:aa:de:e8:12:bb:69:45:19:11:ba:89:8a:ce:1b: e2:5b:18:ef:75:48:b2:58:9e:0e:03:22:ab:5a:60: 2d:81:a7:ca:0e:51:38:bb:39:9f:ed:86:12:f4:68: 60:79:7e:79:85:0b:ef:13:dc:84:f3:69:16:1f:e5: 0b:66:5d:15:0f:da:fc:6d:4e:f5:71:f4:fd:69:dd: 1f:94:9e:9d:3e:66:87:a6:4f:b2:27:e5:80:16:1f: dc:54:33:ee:66:8a:56:e8:99:76:18:9a:34:06:63: 26:b6:4b:e6:26:2a:8a:ec:c6:a0:b8:98:71:df:8a: 61:af:91:df:91:ac:4d:cf:20:58:8f:d1:70:9a:2a: 7a:30:dc:bb:d9:41:1a:d1:93:c4:bc:17:f1:e7:fa: 46:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0A:72:D5:D4:21:B2:A7:F9:D4:D1:DA:CF:67:BE:1B:BD:ED:A9:55 X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:1c:e2:eb:b0:0a:c7:07:82:53:ea:4a:f3:95:87:d0:47:4c: cd:7b:04:e5:2c:46:e0:a8:3a:d1:ee:fa:da:1e:96:5f:59:50: 1c:8c:f2:74:dc:c1:b3:98:de:ae:b5:c8:cf:56:64:d1:38:fd: 1d:81:83:57:aa:e4:43:6a:18:d8:3b:5d:52:47:54:56:88:b3: 59:87:82:23:ea:08:4b:b2:0f:df:14:36:d3:35:b1:bb:db:2d: 2b:67:2f:81:72:b2:e0:ac:32:d6:a2:7b:c8:af:72:12:02:c4: ff:69:41:1c:cb:12:c4:d8:4e:3e:58:13:4a:5a:95:95:2f:4a: ee:10:94:5b:b9:44:11:76:4d:60:41:80:89:be:80:e4:06:44: 28:54:b8:d6:66:62:6b:0c:f5:86:ef:20:f7:28:f6:db:68:28: a3:de:dd:37:f8:20:02:f0:4b:07:0c:3b:61:59:ed:4d:2a:a4: 59:a0:d3:0e:54:7c:81:79:03:43:9c:ca:d8:ce:01:55:b9:39: 48:de:db:80:34:6a:65:ba:74:a3:f3:96:e1:f5:a7:4a:e0:af: 6d:81:d9:24:79:3a:f4:03:da:19:93:fa:8c:e3:c5:18:9c:dd: e1:3e:1c:94:3d:dd:31:6d:17:b1:bf:d3:8d:33:66:98:f3:1c: 06:ac:7d:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjYwODI2MTc1MDU4WhcNMjYwOTAyMTc1MDU4WjAYMRYwFAYD VQQDEw02YThmMjc4Mi0wYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzo/9PWsRRTfnTTO/vIbAJMEzMnjti+BzmQFHj4D1TSnEdmITIgSuhyATZNRX nO9oesD3hkdRPMsB/x9Vg9aeOTAJMJoKkUG6XBxGO45Xhy/XPdVc52A26dE4SuIE FriDsgtFd1lHcWEmqt7oErtpRRkRuomKzhviWxjvdUiyWJ4OAyKrWmAtgafKDlE4 uzmf7YYS9GhgeX55hQvvE9yE82kWH+ULZl0VD9r8bU71cfT9ad0flJ6dPmaHpk+y J+WAFh/cVDPuZopW6Jl2GJo0BmMmtkvmJiqK7MaguJhx34phr5HfkaxNzyBYj9Fw mip6MNy72UEa0ZPEvBfx5/pGNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYKctXU IbKn+dTR2s9nvhu97alVMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaBzi67AKxweCU+pK85WH0EdMzXsE5SxG4Kg60e762h6WX1lQHIzydNzBs5je rrXIz1Zk0Tj9HYGDV6rkQ2oY2DtdUkdUVoizWYeCI+oIS7IP3xQ20zWxu9stK2cv gXKy4Kwy1qJ7yK9yEgLE/2lBHMsSxNhOPlgTSlqVlS9K7hCUW7lEEXZNYEGAib6A 5AZEKFS41mZiawz1hu8g9yj222goo97dN/ggAvBLBww7YVntTSqkWaDTDlR8gXkD Q5zK2M4BVbk5SN7bgDRqZbp0o/OW4fWnSuCvbYHZJHk69APaGZP6jOPFGJzd4T4c lD3dMW0Xsb/TjTNmmPMcBqx97g== -----END CERTIFICATE-----Generated at Thu Aug 27 11:28:43 2026 by rpki-client