$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft File: MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft (raw, json) Hash identifier: FJbYVpCs7I3+s6XFUZ09tM3R1QwY/CTzbOED6b7QSmQ= Subject key identifier: BE:14:B2:0B:6A:32:C0:DA:18:70:33:8F:26:68:66:CF:75:91:3F:F7 Authority key identifier: 32:70:F3:AC:D9:71:EE:DF:84:61:75:48:F7:2E:51:E2:2A:50:3C:F8 Certificate issuer: /CN=A91DA023/serialNumber=3270F3ACD971EEDF84617548F72E51E22A503CF8 Certificate serial: 355C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft Manifest number: 355C Signing time: Tue 28 Jul 2026 15:06:52 +0000 Manifest this update: Tue 28 Jul 2026 15:06:51 +0000 Manifest next update: Tue 04 Aug 2026 15:06:51 +0000 Files and hashes: 1: MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl (hash: jE3SbkgPx8gxuOlc6T+TUH20CFmmJF3ah34Hw6w2Pag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13660 (0x355c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA023, serialNumber=3270F3ACD971EEDF84617548F72E51E22A503CF8 Validity Not Before: Jul 28 15:06:51 2026 GMT Not After : Aug 4 15:06:51 2026 GMT Subject: CN=6a68c58c-14ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a6:e8:3f:77:d1:c0:00:75:aa:17:ac:1b:57: 6f:9e:bd:0b:46:df:30:22:eb:23:ee:1d:31:f7:ba: 70:c1:41:68:30:7b:99:64:ce:94:25:fb:49:9a:72: 07:cc:09:3c:2e:61:1e:a4:f1:13:db:c7:0d:08:31: 0e:11:99:82:fa:50:75:3b:c5:d4:98:02:d8:76:b6: 5d:ca:ce:63:9c:4d:0a:08:3b:e9:66:19:ef:58:da: d1:52:23:4d:11:bb:01:2d:16:6b:9c:3d:d1:cd:ff: 1c:b1:cc:63:a4:53:9c:0b:7b:07:4d:70:07:4b:6f: b3:d7:b8:d3:06:57:52:8a:2a:92:9f:2e:c2:9b:a4: 46:e0:c1:ec:f8:83:60:ec:08:88:4b:1a:c6:55:15: 24:bd:bc:1b:df:4c:a8:df:9d:50:48:c1:6f:63:ba: b8:a9:82:cb:28:6c:a6:bd:84:db:65:ef:93:8d:1f: 07:9c:cf:35:bb:fc:23:2c:9a:7d:b3:74:be:a0:b2: 04:5a:76:96:00:24:2f:e7:ee:c9:31:e9:04:8c:7e: 16:b2:fc:9e:97:05:c5:fb:66:b7:00:a8:e1:d1:4b: 54:ee:75:fd:5c:04:82:f4:1b:62:5e:95:ba:d3:5b: ac:81:a3:1c:84:48:77:88:d0:99:25:36:16:83:ee: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:B2:0B:6A:32:C0:DA:18:70:33:8F:26:68:66:CF:75:91:3F:F7 X509v3 Authority Key Identifier: keyid:32:70:F3:AC:D9:71:EE:DF:84:61:75:48:F7:2E:51:E2:2A:50:3C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fe:dc:25:03:b2:e6:39:82:f1:99:5f:cb:fa:61:c3:b9:d8: 75:16:59:85:49:ad:4b:c8:64:d8:6d:aa:9b:79:9f:2b:46:92: 34:c6:90:50:96:6c:9a:aa:db:85:cb:0e:b5:36:6e:fb:06:08: 75:5d:2d:63:84:ab:82:f2:1f:34:dd:13:4a:bf:6b:e6:4e:cf: fc:07:e8:04:8b:60:cf:95:b7:1a:f6:80:6a:0d:d5:18:b0:f9: 8f:d9:2c:5e:83:3e:a3:5a:d0:8c:d3:f8:7f:cf:d9:c9:0c:a0: 9c:fd:70:57:df:4e:eb:d3:5d:6c:8a:90:a4:bf:b6:97:92:c2: 4f:79:5b:1a:4e:a2:81:70:2e:6d:19:82:fd:4a:67:8c:4d:48: 1b:f7:e6:a0:01:7a:91:8d:49:e9:30:d4:8b:97:c7:e2:ae:57: d0:a9:f8:d0:8d:54:dc:26:8e:2a:2e:47:72:f6:43:74:9c:c5: 8a:86:e3:44:c7:e7:12:77:a0:f4:02:08:63:0b:19:16:0e:51: 79:ab:52:39:e8:fc:fe:98:e2:22:b7:1d:5d:83:31:00:ba:de: bc:4c:6e:bb:63:98:d0:34:d7:c0:cb:5d:ea:c7:cd:7d:a5:62: 98:4b:ed:d2:8f:32:4e:0e:a7:b1:e8:00:e0:3b:71:ff:f3:b7: c2:f1:81:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjMxMTAvBgNVBAUTKDMyNzBGM0FDRDk3MUVFREY4NDYxNzU0OEY3MkU1MUUy MkE1MDNDRjgwHhcNMjYwNzI4MTUwNjUxWhcNMjYwODA0MTUwNjUxWjAYMRYwFAYD VQQDEw02YTY4YzU4Yy0xNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk6boP3fRwAB1qhesG1dvnr0LRt8wIusj7h0x97pwwUFoMHuZZM6UJftJmnIH zAk8LmEepPET28cNCDEOEZmC+lB1O8XUmALYdrZdys5jnE0KCDvpZhnvWNrRUiNN EbsBLRZrnD3Rzf8cscxjpFOcC3sHTXAHS2+z17jTBldSiiqSny7Cm6RG4MHs+INg 7AiISxrGVRUkvbwb30yo351QSMFvY7q4qYLLKGymvYTbZe+TjR8HnM81u/wjLJp9 s3S+oLIEWnaWACQv5+7JMekEjH4WsvyelwXF+2a3AKjh0UtU7nX9XASC9BtiXpW6 01usgaMchEh3iNCZJTYWg+6mXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL4Usgtq MsDaGHAzjyZoZs91kT/3MB8GA1UdIwQYMBaAFDJw86zZce7fhGF1SPcuUeIqUDz4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMy82RjE3MkRGMDFE QTAxMUUyQTFDM0E2OTEwOEIwMkNEMi9NbkR6ck5seDd0LUVZWFZJOXk1UjRpcFFQ UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01uRHpyTmx4N3QtRVlYVkk5eTVSNGlwUVBQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMy82RjE3MkRGMDFEQTAxMUUyQTFDM0E2OTEwOEIwMkNEMi9NbkR6ck5seDd0 LUVZWFZJOXk1UjRpcFFQUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHP7cJQOy5jmC8Zlfy/phw7nYdRZZhUmtS8hk2G2qm3mfK0aSNMaQUJZsmqrb hcsOtTZu+wYIdV0tY4SrgvIfNN0TSr9r5k7P/AfoBItgz5W3GvaAag3VGLD5j9ks XoM+o1rQjNP4f8/ZyQygnP1wV99O69NdbIqQpL+2l5LCT3lbGk6igXAubRmC/Upn jE1IG/fmoAF6kY1J6TDUi5fH4q5X0Kn40I1U3CaOKi5HcvZDdJzFiobjRMfnEneg 9AIIYwsZFg5ReatSOej8/pjiIrcdXYMxALrevExuu2OY0DTXwMtd6sfNfaVimEvt 0o8yTg6nsegA4Dtx//O3wvGBNg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:04 2026 by rpki-client