$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json) Hash identifier: r5MKlrvf5v9b1gsBI/EKitdAsI+OBa1YzapaPV4tGck= Subject key identifier: C5:37:2F:B6:EA:5D:82:0B:BF:D6:CB:DE:E8:F6:14:46:0D:4E:36:C4 Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft Manifest number: C0 Signing time: Mon 27 Jul 2026 09:07:59 +0000 Manifest this update: Mon 27 Jul 2026 09:07:59 +0000 Manifest next update: Mon 03 Aug 2026 09:07:59 +0000 Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: zltLe5cFV8D59jtqQgckMzkyga6z5dnQhZkE9iJjUGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Validity Not Before: Jul 27 09:07:59 2026 GMT Not After : Aug 3 09:07:59 2026 GMT Subject: CN=6a671fef-8926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:75:ab:58:7b:ad:7c:aa:a3:cf:f4:f7:84:f9: 86:86:94:2e:02:0e:19:85:56:4e:db:84:e6:76:88: 87:64:d4:55:96:2b:fa:11:a9:0e:cf:aa:b4:4f:9b: ab:f4:85:e5:7f:ed:75:33:60:08:65:f5:6a:34:26: ca:77:b7:68:38:51:61:b6:71:aa:65:2e:cb:7f:b0: ed:0e:9f:29:75:b3:73:03:9c:06:36:c4:ca:2d:3f: f6:45:ad:73:10:e2:99:a0:ef:db:7d:34:17:fc:94: 09:83:bf:3d:f2:fa:3c:d6:fb:5d:15:af:3d:97:9c: 56:78:22:48:d0:9d:3b:d7:5a:b9:ec:a3:e2:4d:b4: 87:21:cd:77:4d:45:e9:85:e2:df:65:c2:57:d0:f4: e6:a6:c8:f8:23:57:2a:20:bb:0e:66:34:69:75:8a: d3:43:c7:e9:d9:01:e7:aa:89:7a:a4:99:bc:0b:a7: 3d:6b:33:33:11:f2:39:b9:a7:46:d7:06:68:22:b0: 5c:70:10:d3:f0:8a:07:da:a9:7b:73:d6:a4:8e:da: 1e:e9:fa:b4:3a:16:d5:f3:1d:18:45:bc:20:b1:5f: b0:07:36:ba:46:58:89:9c:96:d4:5e:1a:ab:ad:e2: 8a:3a:cc:63:f8:3c:8d:33:5d:b1:02:04:51:2a:f1: ea:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:37:2F:B6:EA:5D:82:0B:BF:D6:CB:DE:E8:F6:14:46:0D:4E:36:C4 X509v3 Authority Key Identifier: keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:34:21:27:85:a9:02:8f:2e:b1:e0:f9:0a:f6:98:2f:84:e0: 65:f5:f0:14:87:85:f0:6e:76:7c:6a:5d:c7:db:b0:b9:3b:62: af:7c:5b:b0:a6:10:11:9b:0c:e4:6b:ef:07:f0:d4:4c:4e:26: 97:53:e5:d6:d8:13:f0:64:21:3b:9b:36:3a:e8:2e:cf:39:3b: 86:2b:93:06:9e:a5:39:37:1a:4d:9c:a1:3c:ff:13:8d:2c:34: 82:3a:fd:31:00:4a:2a:65:d8:17:35:79:d0:63:50:f8:a7:f4: cf:fd:cf:7e:dd:b5:4a:de:97:b4:0a:10:da:a1:d1:01:8a:ee: 7b:bd:d3:d4:c7:6e:09:53:bb:8a:4b:d3:65:71:45:0c:ea:e0: eb:86:ff:44:02:53:b6:9d:1f:6a:3f:d5:9f:d1:2d:46:93:2e: 7e:80:7d:83:8d:cd:40:68:bb:f7:34:c9:72:e5:ff:29:72:74: 85:13:06:d1:ea:3a:d9:89:4a:f8:b2:2d:60:ed:ac:72:91:5b: 9d:54:b9:72:ef:4c:19:d5:06:85:8b:08:5b:37:d9:62:09:d5: ae:93:f9:fc:c7:12:20:43:c6:c5:e1:f6:18:3c:44:61:0e:e0: f4:44:d2:10:df:12:24:e9:8b:e0:43:0e:dc:82:2f:3b:3a:73: b0:a5:78:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMDExMTAvBgNVBAUTKDk0MzM0OUZEQjZEQzBBRjE1Q0Q1NzREQTQyRjhFQzdC NDlEQzBEQjcwHhcNMjYwNzI3MDkwNzU5WhcNMjYwODAzMDkwNzU5WjAYMRYwFAYD VQQDEw02YTY3MWZlZi04OTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XWrWHutfKqjz/T3hPmGhpQuAg4ZhVZO24TmdoiHZNRVliv6EakOz6q0T5ur 9IXlf+11M2AIZfVqNCbKd7doOFFhtnGqZS7Lf7DtDp8pdbNzA5wGNsTKLT/2Ra1z EOKZoO/bfTQX/JQJg7898vo81vtdFa89l5xWeCJI0J0711q57KPiTbSHIc13TUXp heLfZcJX0PTmpsj4I1cqILsOZjRpdYrTQ8fp2QHnqol6pJm8C6c9azMzEfI5uadG 1wZoIrBccBDT8IoH2ql7c9akjtoe6fq0OhbV8x0YRbwgsV+wBza6RliJnJbUXhqr reKKOsxj+DyNM12xAgRRKvHq7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMU3L7bq XYILv9bL3uj2FEYNTjbEMB8GA1UdIwQYMBaAFJQzSf223ArxXNV02kL47HtJ3A23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIwMS9GNkE2NDVENjY3 QTExMUYwQkJFQkRGMDlDNEY5QUUwMi9sRE5KX2JiY0N2RmMxWFRhUXZqc2UwbmNE YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xETkpfYmJjQ3ZGYzFYVGFRdmpzZTBuY0RiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIwMS9GNkE2NDVENjY3QTExMUYwQkJFQkRGMDlDNEY5QUUwMi9sRE5KX2JiY0N2 RmMxWFRhUXZqc2UwbmNEYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtTQhJ4WpAo8useD5CvaYL4TgZfXwFIeF8G52fGpdx9uwuTtir3xbsKYQEZsM 5GvvB/DUTE4ml1Pl1tgT8GQhO5s2Ouguzzk7hiuTBp6lOTcaTZyhPP8TjSw0gjr9 MQBKKmXYFzV50GNQ+Kf0z/3Pft21St6XtAoQ2qHRAYrue73T1MduCVO7ikvTZXFF DOrg64b/RAJTtp0faj/Vn9EtRpMufoB9g43NQGi79zTJcuX/KXJ0hRMG0eo62YlK +LItYO2scpFbnVS5cu9MGdUGhYsIWzfZYgnVrpP5/McSIEPGxeH2GDxEYQ7g9ETS EN8SJOmL4EMO3IIvOzpzsKV4rg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:05:45 2026 by rpki-client