$ rpki-client -vvvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: 6iFnTAghIQDwVEHdSg1+9GreLBV3G8soxsSOb3GkWsA= Subject key identifier: 8F:2B:49:EA:CC:5D:A0:68:EE:27:03:C0:39:A7:01:1C:28:AE:C7:8D Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 12AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 126C Signing time: Thu 24 Sep 2026 17:04:45 +0000 Manifest this update: Thu 24 Sep 2026 17:04:44 +0000 Manifest next update: Thu 01 Oct 2026 17:04:44 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: Hmtf4plETurV65zE8zNR8ZN/Y73ezoiHr8bl9b78a8k=) 2: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: BXGE/iZvvWL+dWAxPX7NLNenWS6dQrMTwGLNphzL3Ik=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: cjMy4xbcc0iF8UGid1RrwsR5uCyoVa/GUkRSBBNBNwU=) 4: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: cQrRnhokY0nhbBJt3bSGZ86zJIUfmyJNDbVOoL1xxrY=) 5: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: GhuUSpOGOhzvETrGv1dHX21uJs7ntpLxSC2vf2RVN+U=) 6: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: xGiIPlMqdMQ/AkBHGhYb6Ef9QmEy6xUaWuUDzw5uJV4=) 7: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: O4GHZYhhhQeQ6LqkXDZz5RCZWlPH2Yu/syycOtJ+aIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4781 (0x12ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Sep 24 17:04:44 2026 GMT Not After : Oct 1 17:04:44 2026 GMT Subject: CN=6ab5582d-45d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:e9:94:20:8b:a3:cc:37:f0:94:d4:64:f4: 51:e6:95:f4:bd:cc:05:6a:71:23:8d:ac:8a:17:b5: 2b:d5:f3:02:0e:20:5d:d1:4f:a0:e1:2b:e3:ff:00: 82:a8:e2:56:74:4d:1a:00:60:e9:04:0b:0f:f7:29: 1f:88:14:73:b9:07:ce:70:97:c0:fb:cc:49:d3:63: f9:33:20:b4:96:21:8f:a9:e0:3a:e8:8b:03:09:58: 95:bc:01:98:2b:9e:a9:89:f8:20:ae:11:28:c1:90: 73:8c:b2:3c:c9:fb:8a:14:84:63:c1:ad:a9:12:1a: 56:7a:12:22:5a:4e:66:06:bf:7c:15:e3:12:39:5f: 87:1a:6f:78:f1:10:db:f7:b7:f5:0b:51:43:40:10: b3:38:1a:54:9a:a6:6a:af:70:eb:9c:cc:d3:ea:5f: b9:d5:9a:a0:49:08:c4:8c:69:30:8d:53:ab:ae:68: 03:6d:e1:0a:7f:27:61:43:c3:92:2f:38:c3:a9:a6: 05:05:79:39:46:80:2f:12:8a:a3:90:2f:76:87:08: 1b:40:bc:42:98:34:7f:ce:50:82:8c:90:38:e7:c4: 38:fd:a7:e1:9c:2a:31:ac:ac:2e:e5:42:bc:ea:4f: 3c:0e:6b:23:e6:05:57:f8:36:57:7e:d6:11:1c:6d: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2B:49:EA:CC:5D:A0:68:EE:27:03:C0:39:A7:01:1C:28:AE:C7:8D X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:c5:4e:4b:7a:b3:9a:ae:17:a6:3e:07:a6:ea:0d:d9:60:2f: 5b:2d:de:b9:1a:51:09:59:06:85:8d:8b:60:5a:55:da:b1:12: 54:da:b9:e8:00:ea:19:37:ef:b8:47:ce:e6:fd:25:d6:4a:8b: d9:36:e2:cc:30:dd:84:57:0e:04:58:4f:c0:0c:0b:7d:e4:46: 5f:fa:2d:12:23:58:88:3d:65:8e:cd:f0:07:4a:e7:30:6f:e8: c5:df:74:fa:d2:9d:6f:78:53:49:9d:3e:5d:4f:e0:17:53:c8: c4:e9:5f:fa:b8:9d:0f:8c:72:39:b1:d0:3c:c1:99:8b:fe:06: 2d:e7:89:c6:44:57:4c:b3:98:14:ec:df:32:f1:9c:b2:83:82: 90:a4:88:4b:92:e0:40:66:5b:1f:39:33:c6:45:11:79:4d:1a: e9:6c:75:fb:28:dd:77:9b:60:8a:49:2d:52:20:74:61:b1:72: ab:8b:33:3f:ce:4c:91:3c:c4:da:7b:cd:c1:1c:03:95:0c:68: 16:00:25:78:aa:b9:64:03:9c:f4:d8:70:6f:a8:0d:c2:6b:f3: 0b:79:b0:76:0e:b8:67:88:0a:a4:98:5f:4e:b5:69:95:54:38: 16:64:d2:30:2c:73:f0:f4:dc:81:d3:ac:a5:74:94:09:19:47: 76:10:95:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwOTI0MTcwNDQ0WhcNMjYxMDAxMTcwNDQ0WjAYMRYwFAYD VQQDEw02YWI1NTgyZC00NWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWTplCCLo8w38JTUZPRR5pX0vcwFanEjjayKF7Ur1fMCDiBd0U+g4Svj/wCC qOJWdE0aAGDpBAsP9ykfiBRzuQfOcJfA+8xJ02P5MyC0liGPqeA66IsDCViVvAGY K56pifggrhEowZBzjLI8yfuKFIRjwa2pEhpWehIiWk5mBr98FeMSOV+HGm948RDb 97f1C1FDQBCzOBpUmqZqr3DrnMzT6l+51ZqgSQjEjGkwjVOrrmgDbeEKfydhQ8OS LzjDqaYFBXk5RoAvEoqjkC92hwgbQLxCmDR/zlCCjJA458Q4/afhnCoxrKwu5UK8 6k88Dmsj5gVX+DZXftYRHG3LpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8rSerM XaBo7icDwDmnARworseNMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApsVOS3qzmq4Xpj4HpuoN2WAvWy3euRpRCVkGhY2LYFpV2rESVNq56ADqGTfv uEfO5v0l1kqL2TbizDDdhFcOBFhPwAwLfeRGX/otEiNYiD1ljs3wB0rnMG/oxd90 +tKdb3hTSZ0+XU/gF1PIxOlf+ridD4xyObHQPMGZi/4GLeeJxkRXTLOYFOzfMvGc soOCkKSIS5LgQGZbHzkzxkUReU0a6Wx1+yjdd5tgikktUiB0YbFyq4szP85MkTzE 2nvNwRwDlQxoFgAleKq5ZAOc9Nhwb6gNwmvzC3mwdg64Z4gKpJhfTrVplVQ4FmTS MCxz8PTcgdOspXSUCRlHdhCVkw== -----END CERTIFICATE-----Generated at Fri Sep 25 02:21:46 2026 by rpki-client