$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: I52dBfCDxO+aJM+m0UVWPCXSmbWnq6OGOIb/s46UNj0= Subject key identifier: 90:10:A9:7A:0B:0C:35:3C:C1:BE:87:20:15:76:AE:9D:45:CB:61:41 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 120C Signing time: Tue 24 Mar 2026 17:03:10 +0000 Manifest this update: Tue 24 Mar 2026 17:03:10 +0000 Manifest next update: Tue 31 Mar 2026 17:03:10 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: 3s7I9dHnstZskNbxYiyjv9yv5y0JlujEuEgfsmJPA9s=) 2: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: wz+94DPGZY+ZVglM8IK7IgXcRuSuHNYaIile9ykwYR8=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: 2qtY5lfg53Rk8hRdrCMMLg539ABuDCFqGZzS8SsVJYE=) 4: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: tNQn0WKojlyhAAQEIQhVJrKL+oc/0+G9M4t9TtIfX+U=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: Fe2jtCiFFPEU4Eih7VWkH9T2KOD4JxYUQyg14It7yuc=) 6: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: K98cIqiuSa8IfjyPXf2A+GJbU6KyRboIixIlZoFKYCw=) 7: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: M3CRfzSqlNZRhVkkEGGHOD14V7utL58bvWye54E532E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4679 (0x1247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Mar 24 17:03:10 2026 GMT Not After : Mar 31 17:03:10 2026 GMT Subject: CN=69c2c3ce-578b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:51:f6:a8:85:a5:1f:89:61:06:e2:df:07: 38:a4:78:ca:a2:a5:03:d3:4e:7a:b7:76:d6:11:c7: 0c:16:15:c8:68:b8:a8:22:92:ec:1d:79:3c:45:96: 37:12:8b:d6:b1:18:6f:9f:6b:9e:97:76:4f:83:d4: 0c:c2:80:f8:ea:02:a1:4a:cf:10:00:5c:da:c5:71: 18:58:48:22:93:b9:27:bc:cc:39:aa:0f:64:e5:22: 8e:d3:d0:97:1b:3e:1c:47:de:f9:f7:0f:53:f1:62: d0:9b:b0:7f:e0:e1:f5:82:cb:5d:61:0f:45:a8:f1: ca:2d:65:3f:fd:18:63:16:04:5c:42:80:fa:85:b5: 9c:aa:78:d5:f8:da:6f:06:85:f6:65:8c:39:ad:6f: 32:19:c2:fd:e7:5d:de:d1:f7:4e:e4:45:af:ea:41: 18:7d:20:c9:d1:18:25:cc:46:4c:b6:ab:5f:9f:1d: 30:2a:2e:e2:cf:17:1d:8e:76:1c:cf:f1:71:45:d5: f1:db:70:8e:32:81:e5:df:20:a5:ef:f2:c6:17:20: 4f:dd:4d:3d:ac:4e:a3:39:36:3d:66:10:f0:af:cd: e3:25:95:12:8c:66:37:58:c3:1d:2d:a9:a7:10:f6: 06:7d:d0:50:d4:9e:e1:e5:e1:c8:74:9d:e3:a7:05: 27:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:10:A9:7A:0B:0C:35:3C:C1:BE:87:20:15:76:AE:9D:45:CB:61:41 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f3:c3:73:e1:d9:c7:93:22:aa:56:0c:96:74:6b:e1:8d:38: 40:2a:de:95:5e:6c:96:5c:7a:1d:26:b1:48:ac:44:53:a0:81: 84:0f:dc:36:ad:14:67:32:b9:c2:30:32:da:3f:fd:93:9a:bf: c3:48:0f:03:7e:17:30:ba:01:8a:97:2a:77:31:0d:20:ae:c8: e6:f7:af:e7:00:41:cf:60:10:43:25:a6:c6:34:29:a6:f8:3e: ae:85:36:07:7b:a3:86:e0:ad:00:22:44:bc:36:6b:c7:52:84: 29:e6:0c:37:3e:d6:33:c7:cb:b4:aa:90:73:90:d4:70:27:22: 06:25:73:6f:d4:4c:75:d7:1a:0d:b1:69:d3:7b:f6:7d:6b:4d: 27:9d:18:8f:88:a6:24:43:bb:af:f1:cf:93:70:1e:1d:cd:7b: 50:41:29:32:20:20:0e:23:96:30:e4:74:d8:ef:c7:23:86:40: cc:4f:bb:50:28:d3:63:b1:66:ed:7a:2a:51:a5:79:6c:3b:fc: 5e:59:2a:9e:d6:dd:a5:d8:bc:32:af:1a:02:2e:7a:d7:cc:5f: 8c:61:3f:b7:18:bc:bf:3d:1c:0c:a5:06:b8:90:18:b9:7d:e4: 8f:5a:32:1b:fc:33:31:13:3e:3f:6d:76:fe:9e:5b:65:4f:1e: 23:0f:22:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwMzI0MTcwMzEwWhcNMjYwMzMxMTcwMzEwWjAYMRYwFAYD VQQDEw02OWMyYzNjZS01NzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1pR9qiFpR+JYQbi3wc4pHjKoqUD0056t3bWEccMFhXIaLioIpLsHXk8RZY3 EovWsRhvn2uel3ZPg9QMwoD46gKhSs8QAFzaxXEYWEgik7knvMw5qg9k5SKO09CX Gz4cR9759w9T8WLQm7B/4OH1gstdYQ9FqPHKLWU//RhjFgRcQoD6hbWcqnjV+Npv BoX2ZYw5rW8yGcL9513e0fdO5EWv6kEYfSDJ0RglzEZMtqtfnx0wKi7izxcdjnYc z/FxRdXx23COMoHl3yCl7/LGFyBP3U09rE6jOTY9ZhDwr83jJZUSjGY3WMMdLamn EPYGfdBQ1J7h5eHIdJ3jpwUn1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJAQqXoL DDU8wb6HIBV2rp1Fy2FBMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABPPDc+HZx5MiqlYMlnRr4Y04QCrelV5sllx6HSaxSKxEU6CBhA/cNq0UZzK5 wjAy2j/9k5q/w0gPA34XMLoBipcqdzENIK7I5vev5wBBz2AQQyWmxjQppvg+roU2 B3ujhuCtACJEvDZrx1KEKeYMNz7WM8fLtKqQc5DUcCciBiVzb9RMddcaDbFp03v2 fWtNJ50Yj4imJEO7r/HPk3AeHc17UEEpMiAgDiOWMOR02O/HI4ZAzE+7UCjTY7Fm 7XoqUaV5bDv8Xlkqntbdpdi8Mq8aAi5618xfjGE/txi8vz0cDKUGuJAYuX3kj1oy G/wzMRM+P212/p5bZU8eIw8i9w== -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:49 2026 by rpki-client