$ rpki-client -vvvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: DVrvPFo6x6ZkvrMsk8Bcq1VgOI6sMM1RcV9X/cq990Y= Subject key identifier: 72:27:91:06:26:D3:0D:DE:D6:B1:68:06:03:DC:D3:81:B9:67:C8:42 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 12B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 126F Signing time: Wed 30 Sep 2026 17:15:55 +0000 Manifest this update: Wed 30 Sep 2026 17:15:55 +0000 Manifest next update: Wed 07 Oct 2026 17:15:55 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: asjhrofuLbgxQQCyruUfXHxQpkpsXrGQH/sbKji8hF4=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: O4GHZYhhhQeQ6LqkXDZz5RCZWlPH2Yu/syycOtJ+aIo=) 3: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: BXGE/iZvvWL+dWAxPX7NLNenWS6dQrMTwGLNphzL3Ik=) 4: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: cQrRnhokY0nhbBJt3bSGZ86zJIUfmyJNDbVOoL1xxrY=) 5: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: GhuUSpOGOhzvETrGv1dHX21uJs7ntpLxSC2vf2RVN+U=) 6: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: xGiIPlMqdMQ/AkBHGhYb6Ef9QmEy6xUaWuUDzw5uJV4=) 7: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: cjMy4xbcc0iF8UGid1RrwsR5uCyoVa/GUkRSBBNBNwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 17:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4784 (0x12b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Sep 30 17:15:55 2026 GMT Not After : Oct 7 17:15:55 2026 GMT Subject: CN=6abd43cb-1e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:d6:e9:a9:6d:05:54:3e:d7:00:f1:0a:8f: 25:1f:3f:6b:27:58:60:c1:88:c1:13:1d:d5:9e:7c: 0c:4a:17:9a:9f:49:b9:48:fb:48:59:92:51:49:6f: 90:af:57:25:e2:9d:57:33:f9:11:3e:e6:d1:00:74: fe:21:fa:d2:8a:8d:7c:51:dc:44:5e:85:19:32:e2: df:3f:90:43:59:18:8b:2d:b6:b2:34:0d:41:bc:ff: f1:6d:b0:93:38:3a:c8:be:e6:b7:33:76:c1:65:ef: a9:bc:08:b3:aa:05:9e:e5:0d:65:96:35:3e:c5:f9: 81:a9:e9:d9:88:c2:4f:fe:cc:35:56:67:af:ac:54: bf:d9:99:7c:66:7f:20:c0:2c:a7:c1:71:58:55:da: 83:09:28:65:98:7b:45:f1:a4:bb:d3:1f:81:8d:2a: a6:8a:af:19:3f:ca:b6:fa:9c:17:af:b3:8c:e9:c5: 64:59:e7:8c:f6:56:66:77:45:12:ff:21:17:fb:68: 1c:cb:09:49:a4:5d:61:16:78:93:81:99:b8:0b:37: a7:81:11:9f:08:60:6a:11:1c:aa:fd:07:db:45:ef: 01:0e:dc:5e:8d:e7:da:cf:0f:b5:cf:c4:da:c1:a1: 01:22:22:db:eb:51:51:1d:87:77:72:c8:d0:0f:3e: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:27:91:06:26:D3:0D:DE:D6:B1:68:06:03:DC:D3:81:B9:67:C8:42 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c7:6e:84:73:2d:ce:2a:94:23:07:e1:9e:b5:02:ce:76:f5: b9:63:67:4f:bb:5a:32:e7:7e:73:f7:35:3f:c4:31:49:ee:b5: f2:f0:b0:a9:c4:91:d7:22:bc:37:b2:fc:fb:e2:26:fe:90:59: 0c:c2:59:fc:38:a5:bf:40:d6:5a:d0:08:6a:de:f8:7a:60:83: 3f:16:15:c6:86:3d:cb:1b:92:92:cc:6b:b2:90:0a:aa:ef:bc: d9:66:89:3c:7a:8c:6d:43:82:ca:9c:23:e8:48:ed:d4:57:86: 87:89:cc:74:ae:83:cb:8c:68:cf:0d:cc:7e:3d:2b:3e:79:98: ee:26:30:b6:1a:b6:26:ce:32:bc:69:cc:42:71:12:18:f8:88: 34:a6:04:bb:68:83:4b:65:0c:62:c3:96:b4:91:76:ab:66:8b: 20:db:23:e2:28:d4:c9:39:b0:c7:20:63:d3:1e:55:cb:39:40: 71:45:26:37:5f:1f:ab:7e:4e:7b:1a:f9:78:d6:fb:14:69:02: 5a:4b:5d:e4:24:37:ee:35:b8:69:52:a0:5d:45:f4:83:55:2b: fa:0e:b5:e7:c2:f3:e3:ff:c2:b6:23:f2:ce:1c:9d:83:9e:5e: b5:11:7a:91:60:c9:d6:05:bf:3b:d1:81:05:e1:d1:53:f8:9a: 11:71:8e:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICErAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwOTMwMTcxNTU1WhcNMjYxMDA3MTcxNTU1WjAYMRYwFAYD VQQDEw02YWJkNDNjYi0xZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqnW6altBVQ+1wDxCo8lHz9rJ1hgwYjBEx3VnnwMShean0m5SPtIWZJRSW+Q r1cl4p1XM/kRPubRAHT+IfrSio18UdxEXoUZMuLfP5BDWRiLLbayNA1BvP/xbbCT ODrIvua3M3bBZe+pvAizqgWe5Q1lljU+xfmBqenZiMJP/sw1VmevrFS/2Zl8Zn8g wCynwXFYVdqDCShlmHtF8aS70x+BjSqmiq8ZP8q2+pwXr7OM6cVkWeeM9lZmd0US /yEX+2gcywlJpF1hFniTgZm4CzengRGfCGBqERyq/QfbRe8BDtxejefazw+1z8Ta waEBIiLb61FRHYd3csjQDz7INQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHInkQYm 0w3e1rFoBgPc04G5Z8hCMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOsduhHMtziqUIwfhnrUCznb1uWNnT7taMud+c/c1P8QxSe618vCwqcSR1yK8 N7L8++Im/pBZDMJZ/Dilv0DWWtAIat74emCDPxYVxoY9yxuSksxrspAKqu+82WaJ PHqMbUOCypwj6Ejt1FeGh4nMdK6Dy4xozw3Mfj0rPnmY7iYwthq2Js4yvGnMQnES GPiINKYEu2iDS2UMYsOWtJF2q2aLINsj4ijUyTmwxyBj0x5VyzlAcUUmN18fq35O exr5eNb7FGkCWktd5CQ37jW4aVKgXUX0g1Ur+g6158Lz4//CtiPyzhydg55etRF6 kWDJ1gW/O9GBBeHRU/iaEXGOBQ== -----END CERTIFICATE-----Generated at Thu Oct 1 10:42:32 2026 by rpki-client