$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: S2cK4gx2/HcP3MhFExwyBHC7mzMjnZNyiAD/i5b5RZE= Subject key identifier: 39:30:9D:38:98:04:37:09:5E:1F:13:F8:67:D6:BF:E7:A0:A3:D2:AF Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 128D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 124C Signing time: Fri 24 Jul 2026 17:18:27 +0000 Manifest this update: Fri 24 Jul 2026 17:18:26 +0000 Manifest next update: Fri 31 Jul 2026 17:18:26 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: 1cm9kzQbCd2j9GRu/lG0O1+asP7NRd7/VDGC8ZjZzO4=) 2: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: BXGE/iZvvWL+dWAxPX7NLNenWS6dQrMTwGLNphzL3Ik=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: cjMy4xbcc0iF8UGid1RrwsR5uCyoVa/GUkRSBBNBNwU=) 4: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: xGiIPlMqdMQ/AkBHGhYb6Ef9QmEy6xUaWuUDzw5uJV4=) 5: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: cQrRnhokY0nhbBJt3bSGZ86zJIUfmyJNDbVOoL1xxrY=) 6: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: GhuUSpOGOhzvETrGv1dHX21uJs7ntpLxSC2vf2RVN+U=) 7: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: O4GHZYhhhQeQ6LqkXDZz5RCZWlPH2Yu/syycOtJ+aIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 17:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4749 (0x128d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jul 24 17:18:26 2026 GMT Not After : Jul 31 17:18:26 2026 GMT Subject: CN=6a639e62-d9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:d0:60:d3:16:6a:3e:1f:11:3b:e5:8c:51: ba:bf:b9:6d:dc:ad:c3:a1:25:68:e6:3f:00:6b:28: a2:ca:62:a3:d2:98:43:c4:72:f9:a2:3f:7f:6f:56: 3c:fc:30:88:f4:aa:f5:a5:15:a0:b5:f0:f9:96:5c: d6:82:b1:7c:eb:72:2b:d1:0b:4a:39:54:5f:cf:c8: 24:e2:d7:a8:92:7e:80:cf:b2:93:6e:85:4c:2f:a4: 47:e9:4c:6d:50:a7:4b:35:3e:32:eb:b2:ac:24:a0: dc:99:6a:72:3d:38:fc:39:74:1e:30:98:73:e6:55: 53:11:fb:41:f5:05:85:9e:2d:e7:8f:61:8f:e7:41: 25:b6:d7:7e:b5:4b:5e:1b:cd:ae:14:28:e3:5d:d9: 5d:50:66:bd:4c:2d:ca:d3:cf:b9:56:54:97:31:12: 3f:b4:74:54:da:59:1e:98:86:2c:ef:62:02:0d:8a: 81:26:20:9a:db:ea:48:89:50:28:e0:b2:cd:c0:92: 3c:e7:77:23:a9:1c:df:dc:44:3b:ae:b4:22:90:21: dc:8c:f2:f7:2e:c1:30:46:23:66:28:84:87:6c:88: 0b:ba:24:9b:5b:13:3e:d9:ea:eb:d4:53:ed:0e:57: 35:a3:e7:63:8e:f9:90:eb:14:d3:a0:aa:53:2b:5e: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:30:9D:38:98:04:37:09:5E:1F:13:F8:67:D6:BF:E7:A0:A3:D2:AF X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:16:56:15:4f:ba:42:ea:2b:26:33:3c:e0:2c:9f:d3:9e:6b: 33:1b:fd:5e:77:6b:21:d5:09:f9:e7:45:ce:c0:33:cc:13:c6: 56:f6:ac:44:73:e2:32:6e:c5:c0:8d:d6:b3:52:bc:db:00:79: f6:43:7a:54:36:ae:01:5e:fe:83:eb:f2:e9:7e:f3:98:ec:fc: ba:f9:34:dc:a9:fa:05:29:ee:48:2c:9c:25:51:5a:79:8f:e7: ac:e0:30:63:79:a5:86:bb:63:d2:9a:b3:a4:88:db:8a:be:23: 97:f4:ef:cf:85:14:47:cd:e2:ad:6c:78:6e:dc:a6:c6:1f:3c: 3a:84:e3:42:d6:20:a8:6d:ad:1b:66:ed:aa:db:94:9e:9d:74: fb:85:d0:cc:7e:a4:a8:06:8f:29:38:9a:2f:56:01:72:7f:31: 0e:b8:46:52:cf:88:84:ae:aa:ab:05:7d:4b:c1:bb:f3:66:6f: 13:3b:be:56:d1:08:3a:02:c6:04:c7:26:d5:82:0e:97:fc:ed: d1:8e:59:96:65:e7:73:ea:22:a8:2f:22:68:68:42:29:88:bf: 7e:4f:1d:aa:31:57:d4:db:38:c6:96:0f:3b:dc:4f:c2:32:94: df:2a:b2:4d:8f:96:45:51:13:8b:2f:80:10:04:60:2e:d6:48: 7d:36:77:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwNzI0MTcxODI2WhcNMjYwNzMxMTcxODI2WjAYMRYwFAYD VQQDEw02YTYzOWU2Mi1kOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vzQYNMWaj4fETvljFG6v7lt3K3DoSVo5j8AayiiymKj0phDxHL5oj9/b1Y8 /DCI9Kr1pRWgtfD5llzWgrF863Ir0QtKOVRfz8gk4teokn6Az7KTboVML6RH6Uxt UKdLNT4y67KsJKDcmWpyPTj8OXQeMJhz5lVTEftB9QWFni3nj2GP50Elttd+tUte G82uFCjjXdldUGa9TC3K08+5VlSXMRI/tHRU2lkemIYs72ICDYqBJiCa2+pIiVAo 4LLNwJI853cjqRzf3EQ7rrQikCHcjPL3LsEwRiNmKISHbIgLuiSbWxM+2err1FPt Dlc1o+djjvmQ6xTToKpTK15rDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkwnTiY BDcJXh8T+GfWv+ego9KvMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvhZWFU+6QuorJjM84Cyf055rMxv9XndrIdUJ+edFzsAzzBPGVvasRHPiMm7F wI3Ws1K82wB59kN6VDauAV7+g+vy6X7zmOz8uvk03Kn6BSnuSCycJVFaeY/nrOAw Y3mlhrtj0pqzpIjbir4jl/Tvz4UUR83irWx4btymxh88OoTjQtYgqG2tG2btqtuU np10+4XQzH6kqAaPKTiaL1YBcn8xDrhGUs+IhK6qqwV9S8G782ZvEzu+VtEIOgLG BMcm1YIOl/zt0Y5ZlmXnc+oiqC8iaGhCKYi/fk8dqjFX1Ns4xpYPO9xPwjKU3yqy TY+WRVETiy+AEARgLtZIfTZ3PQ== -----END CERTIFICATE-----Generated at Fri Jul 24 20:10:45 2026 by rpki-client