$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: gXWDEYPwu8PMIa7qJhAhMuOK9YGvw5o1XEPhfvQwp1g= Subject key identifier: 29:29:4C:42:67:62:E5:5A:D5:72:43:62:CD:F5:6C:B6:1B:E2:71:67 Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0DD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0DAE Signing time: Wed 20 May 2026 17:57:37 +0000 Manifest this update: Wed 20 May 2026 17:57:36 +0000 Manifest next update: Wed 27 May 2026 17:57:36 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: b8AgdhZ0XEJ0y9ERcU97xYKrTjnszE4wqU5/yCmBcIk=) 2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: AfD5HxA5Aq0yoBWic1AreIDVnB+IzK6gGah8YdarTYM=) 3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: rqH3evVe4RRzDIoqiHRSRZUenT8VbTWiFy0YpHu4G6w=) 4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: E6xKBwdXXk6plBWpWlytPRfzZulatDVFNhrKKgIrSig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3540 (0xdd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: May 20 17:57:36 2026 GMT Not After : May 27 17:57:36 2026 GMT Subject: CN=6a0df611-38e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:80:60:3c:94:0b:dc:7b:78:55:7a:a5:a0: da:41:2e:7c:bf:4b:e1:e8:d7:ce:af:b1:b9:41:a9: 3f:0b:c9:2d:22:fb:4e:67:a9:b5:38:a0:2c:5d:53: 80:65:07:c6:4c:eb:63:57:c6:e0:2c:cc:f0:48:cb: 0a:88:41:59:a8:e9:c8:fd:05:20:2a:ab:f0:f5:7d: da:c9:97:02:60:47:42:0a:23:ee:ea:11:85:90:39: 03:d7:f4:a1:de:6d:5e:12:c7:ef:07:e7:4c:3f:b9: 3d:98:20:f7:2d:87:1f:34:63:97:02:8b:ac:6b:e9: 2a:ac:91:0d:6a:09:cb:93:68:04:99:24:ac:8d:8c: 7e:80:f9:d4:cb:56:c5:08:91:11:1b:b1:e0:95:64: 11:6c:3f:ca:f9:12:2d:e8:07:5b:f4:b2:6f:f7:74: ea:6c:86:29:ca:5a:40:02:4b:e3:5d:b6:86:51:64: 07:30:37:34:a8:da:e9:66:48:03:49:53:f0:6c:e9: bf:53:e0:6b:cb:8e:25:0c:f1:e4:66:c3:08:15:c7: f1:dd:a5:51:5a:19:ff:4b:3f:8d:c8:61:22:de:0e: d3:5f:8c:a2:70:40:d2:2e:15:26:f8:7d:08:42:54: 86:82:03:4e:01:55:6f:50:79:02:f6:ef:60:a9:43: cd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:29:4C:42:67:62:E5:5A:D5:72:43:62:CD:F5:6C:B6:1B:E2:71:67 X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:83:01:89:69:84:9a:3f:c8:fd:d8:8a:25:70:34:8f:be:3e: 4b:6f:42:f3:cb:e7:93:1c:79:13:be:29:c1:4b:ed:97:ee:2b: 71:09:cc:0a:5f:bf:12:00:7d:a8:e2:b1:15:ff:ea:a2:4e:17: 13:62:92:9e:67:db:d6:67:d0:3d:7b:e4:08:7d:eb:23:4a:95: 01:88:7e:d5:e0:0e:45:28:b5:fa:57:a5:f2:a0:6b:a2:21:d3: 51:f3:79:5c:36:b5:e5:16:f4:5e:13:f9:b4:68:e5:f4:bb:5a: bf:0f:de:0f:8a:f7:5b:7a:30:80:04:cf:16:82:3e:dc:51:38: 3e:0a:bd:2a:e2:e9:9f:42:55:82:d4:14:ac:a5:be:90:f2:13: f8:d5:b8:df:d1:23:27:15:03:31:57:05:54:53:29:6a:40:25: aa:28:d6:ed:1f:62:88:6e:1e:eb:25:6e:4e:bc:5c:30:32:51: 6d:96:77:aa:aa:fa:b5:a2:19:ae:a2:06:e1:db:64:33:34:28: 0c:2c:5b:62:c2:6e:29:7b:15:a3:fc:09:90:0d:f5:be:34:73: 95:d1:b7:67:eb:fc:b4:fb:a6:7f:50:c4:1e:35:d4:6b:77:0d: 4b:e0:4e:10:3f:fa:09:cf:87:53:a5:a8:93:1f:82:d2:e0:27: 90:3c:5a:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjYwNTIwMTc1NzM2WhcNMjYwNTI3MTc1NzM2WjAYMRYwFAYD VQQDEw02YTBkZjYxMS0zOGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMuAYDyUC9x7eFV6paDaQS58v0vh6NfOr7G5Qak/C8ktIvtOZ6m1OKAsXVOA ZQfGTOtjV8bgLMzwSMsKiEFZqOnI/QUgKqvw9X3ayZcCYEdCCiPu6hGFkDkD1/Sh 3m1eEsfvB+dMP7k9mCD3LYcfNGOXAousa+kqrJENagnLk2gEmSSsjYx+gPnUy1bF CJERG7HglWQRbD/K+RIt6Adb9LJv93TqbIYpylpAAkvjXbaGUWQHMDc0qNrpZkgD SVPwbOm/U+Bry44lDPHkZsMIFcfx3aVRWhn/Sz+NyGEi3g7TX4yicEDSLhUm+H0I QlSGggNOAVVvUHkC9u9gqUPNlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkpTEJn YuVa1XJDYs31bLYb4nFnMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb4MBiWmEmj/I/diKJXA0j74+S29C88vnkxx5E74pwUvtl+4rcQnMCl+/EgB9 qOKxFf/qok4XE2KSnmfb1mfQPXvkCH3rI0qVAYh+1eAORSi1+lel8qBroiHTUfN5 XDa15Rb0XhP5tGjl9Ltavw/eD4r3W3owgATPFoI+3FE4Pgq9KuLpn0JVgtQUrKW+ kPIT+NW439EjJxUDMVcFVFMpakAlqijW7R9iiG4e6yVuTrxcMDJRbZZ3qqr6taIZ rqIG4dtkMzQoDCxbYsJuKXsVo/wJkA31vjRzldG3Z+v8tPumf1DEHjXUa3cNS+BO ED/6Cc+HU6Wokx+C0uAnkDxaWg== -----END CERTIFICATE-----Generated at Thu May 21 09:29:42 2026 by rpki-client