$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: uDTKcNnqZNUqETcSCA/7PbhkreGtLmijJ5vFMxa7DZ4= Subject key identifier: 58:78:FE:4B:F8:E7:04:A0:22:3E:EF:31:48:E2:A1:E1:16:54:71:BA Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 128C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 124B Signing time: Wed 22 Jul 2026 17:14:57 +0000 Manifest this update: Wed 22 Jul 2026 17:14:56 +0000 Manifest next update: Wed 29 Jul 2026 17:14:56 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: HBWszSpf+/DPK/ChyoNB7scA/LY/a8rJ31kyLncdAWQ=) 2: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: GhuUSpOGOhzvETrGv1dHX21uJs7ntpLxSC2vf2RVN+U=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: cjMy4xbcc0iF8UGid1RrwsR5uCyoVa/GUkRSBBNBNwU=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: BXGE/iZvvWL+dWAxPX7NLNenWS6dQrMTwGLNphzL3Ik=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: xGiIPlMqdMQ/AkBHGhYb6Ef9QmEy6xUaWuUDzw5uJV4=) 6: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: O4GHZYhhhQeQ6LqkXDZz5RCZWlPH2Yu/syycOtJ+aIo=) 7: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: cQrRnhokY0nhbBJt3bSGZ86zJIUfmyJNDbVOoL1xxrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4748 (0x128c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jul 22 17:14:56 2026 GMT Not After : Jul 29 17:14:56 2026 GMT Subject: CN=6a60fa91-f6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:8f:44:7d:37:bf:3e:5f:79:f0:43:a0:2f: 01:98:12:75:fe:a7:77:2b:aa:82:36:3d:d2:4a:aa: 2b:ac:6c:42:06:59:c0:8e:5a:ee:7d:99:bd:5e:bb: 46:df:9c:99:e8:05:79:4c:8f:b9:5c:ac:3d:29:bf: 3e:bc:84:8e:12:c1:cc:da:04:c3:01:01:5b:90:b1: 82:71:b0:ae:0c:ac:7f:2d:71:62:57:29:0b:89:b6: 30:dc:3a:a1:ed:be:d9:4f:81:84:bb:ef:bb:ee:2e: 85:f1:72:4a:20:ba:3f:d1:ab:0e:9e:2c:b8:bb:c4: a9:9b:18:cf:ba:5e:95:a7:5f:7f:cf:4e:77:55:19: c1:31:01:9d:2c:90:11:8d:dc:4c:00:94:88:09:ab: be:7d:ab:2e:25:11:e3:8d:59:01:9c:f3:af:32:77: fa:e6:74:34:49:bb:72:95:5b:cd:87:1b:bf:f7:1c: ae:4c:4f:db:a4:8f:6b:93:c3:34:ef:27:48:1b:24: 45:98:ff:cf:f7:af:28:15:8e:dd:41:3f:c5:c4:6a: 3c:95:37:16:13:a5:b4:09:f1:7c:42:64:fe:96:c2: 0e:b5:1a:c7:db:ce:77:06:b7:8b:27:87:51:59:c5: 01:0d:f9:fd:ea:a1:5c:a0:4d:a3:9f:c9:3a:4f:13: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:78:FE:4B:F8:E7:04:A0:22:3E:EF:31:48:E2:A1:E1:16:54:71:BA X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:62:be:ea:b1:21:67:d4:6b:96:30:b0:3b:e8:59:12:45:29: 84:11:e0:57:c7:0e:5c:86:09:fe:ef:f5:80:b0:fc:60:2c:ac: 59:62:88:da:cb:f8:a1:fd:8b:08:58:3b:48:ca:bb:a9:e7:1d: cc:d1:d0:b0:f5:d4:8e:1b:22:9f:a0:dd:39:14:03:71:1a:5c: e2:14:02:ab:9a:b4:b4:2b:fc:c7:51:ef:26:5e:1c:17:fb:f2: 1b:da:21:6f:d8:fa:eb:94:5f:fe:d2:9a:d9:2d:0d:58:d5:a4: 04:9a:32:ae:12:22:b5:87:4a:4d:79:54:43:bf:45:ba:1b:88: cc:f2:7c:93:8f:87:22:bb:15:7f:fb:ef:ed:77:61:44:a5:70: bb:e3:f9:34:ff:e3:36:d4:72:ca:68:c9:42:4b:82:d5:55:69: 63:32:65:4d:56:8a:a2:ad:7b:49:4a:25:a7:48:af:66:7b:67: 83:67:ff:13:f9:3f:6a:29:19:21:c8:37:f6:0a:70:65:20:b1: 31:d3:87:f6:e5:75:f9:7f:a5:cf:9a:6d:fe:00:97:cd:1f:65: 9c:4b:41:23:95:e5:1b:98:93:7f:bc:b8:13:b8:41:76:e0:5c: 7e:57:b3:cd:67:a5:4d:04:c4:6f:3b:04:65:cf:a9:f9:54:03: 27:41:f0:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwNzIyMTcxNDU2WhcNMjYwNzI5MTcxNDU2WjAYMRYwFAYD VQQDEw02YTYwZmE5MS1mNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOqPRH03vz5fefBDoC8BmBJ1/qd3K6qCNj3SSqorrGxCBlnAjlrufZm9XrtG 35yZ6AV5TI+5XKw9Kb8+vISOEsHM2gTDAQFbkLGCcbCuDKx/LXFiVykLibYw3Dqh 7b7ZT4GEu++77i6F8XJKILo/0asOniy4u8SpmxjPul6Vp19/z053VRnBMQGdLJAR jdxMAJSICau+fasuJRHjjVkBnPOvMnf65nQ0SbtylVvNhxu/9xyuTE/bpI9rk8M0 7ydIGyRFmP/P968oFY7dQT/FxGo8lTcWE6W0CfF8QmT+lsIOtRrH2853BreLJ4dR WcUBDfn96qFcoE2jn8k6TxN3QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFh4/kv4 5wSgIj7vMUjioeEWVHG6MB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY2K+6rEhZ9RrljCwO+hZEkUphBHgV8cOXIYJ/u/1gLD8YCysWWKI2sv4of2L CFg7SMq7qecdzNHQsPXUjhsin6DdORQDcRpc4hQCq5q0tCv8x1HvJl4cF/vyG9oh b9j665Rf/tKa2S0NWNWkBJoyrhIitYdKTXlUQ79FuhuIzPJ8k4+HIrsVf/vv7Xdh RKVwu+P5NP/jNtRyymjJQkuC1VVpYzJlTVaKoq17SUolp0ivZntng2f/E/k/aikZ Icg39gpwZSCxMdOH9uV1+X+lz5pt/gCXzR9lnEtBI5XlG5iTf7y4E7hBduBcflez zWelTQTEbzsEZc+p+VQDJ0Hwtw== -----END CERTIFICATE-----Generated at Fri Jul 24 13:55:54 2026 by rpki-client